-
linux-aws (4.15.0-1158.171) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1158.171 -proposed tracker (LP: #2024212)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync update-dkms-versions helper
- [Packaging] resync getabis
- [Packaging] update update.conf
[ Ubuntu: 4.15.0-213.224 ]
* bionic/linux: 4.15.0-213.224 -proposed tracker (LP: #2024234)
* Kernel warning after upgrade to 4.15.0.211.194 (LP: #2020279)
- net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
-- Ian May <email address hidden> Wed, 21 Jun 2023 16:19:33 -0500
-
linux-aws (4.15.0-1157.170) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1157.170 -proposed tracker (LP: #2019686)
[ Ubuntu: 4.15.0-212.223 ]
* bionic/linux: 4.15.0-212.223 -proposed tracker (LP: #2019708)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CVE-2023-32233
- netfilter: nf_tables: add nft_set_is_anonymous() helper
- netfilter: nf_tables: split set destruction in deactivate and destroy phase
- netfilter: nf_tables: unbind set in rule from commit path
- netfilter: nf_tables: bogus EBUSY in helper removal from transaction
- netfilter: nf_tables: fix set double-free in abort path
- netfilter: nf_tables: bogus EBUSY when deleting set after flush
- netfilter: nf_tables: use-after-free in failing rule with bound set
- netfilter: nf_tables: deactivate anonymous set from preparation phase
* CVE-2023-31436
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
* CVE-2023-1380
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
* CVE-2023-30456
- KVM: nVMX: add missing consistency checks for CR0 and CR4
-- Ian May <email address hidden> Wed, 24 May 2023 12:16:28 -0500
-
linux-aws (4.15.0-1156.169) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1156.169 -proposed tracker (LP: #2016601)
[ Ubuntu: 4.15.0-211.222 ]
* bionic/linux: 4.15.0-211.222 -proposed tracker (LP: #2016623)
* Debian autoreconstruct Fix restoration of execute permissions (LP: #2015498)
- [Debian] autoreconstruct - fix restoration of execute permissions
* kernel: fix __clear_user() inline assembly constraints (LP: #2013088)
- s390/uaccess: add missing earlyclobber annotations to __clear_user()
* Fix selftests/ftracetests/Meta-selftests (LP: #2006453)
- selftests/ftrace: Fix bash specific "==" operator
* Bionic update: upstream stable patchset 2023-04-05 (LP: #2015399)
- firewire: fix memory leak for payload of request subaction to IEC 61883-1
FCP region
- bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
- ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
- netrom: Fix use-after-free caused by accept on already connected socket
- squashfs: harden sanity check in squashfs_read_xattr_id_table
- sctp: do not check hb_timer.expires when resetting hb_timer
- net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
- scsi: target: core: Fix warning on RT kernels
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- net/x25: Fix to not accept on connected socket
- usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
- fbcon: Check font dimension limits
- watchdog: diag288_wdt: do not use stack buffers for hardware data
- watchdog: diag288_wdt: fix __diag288() inline assembly
- efi: Accept version 2 of memory attributes table
- iio: hid: fix the retval in accel_3d_capture_sample
- iio: adc: berlin2-adc: Add missing of_node_put() in error path
- iio:adc:twl6030: Enable measurements of VUSB, VBAT and others
- parisc: Fix return code of pdc_iodc_print()
- parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case
- mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
- mm/swapfile: add cond_resched() in get_swap_pages()
- Squashfs: fix handling and sanity checking of xattr_ids count
- serial: 8250_dma: Fix DMA Rx completion race
- serial: 8250_dma: Fix DMA Rx rearm race
- btrfs: limit device extents to the device size
- ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()
- ALSA: pci: lx6464es: fix a debug loop
- pinctrl: aspeed: Fix confusing types in return value
- pinctrl: single: fix potential NULL dereference
- net: USB: Fix wrong-direction WARNING in plusb.c
- usb: core: add quirk for Alcor Link AK9563 smartcard reader
- migrate: hugetlb: check for hugetlb shared PMD in node migration
- tools/virtio: fix the vringh test for virtio ring changes
- net/rose: Fix to not accept on connected socket
- nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association
- aio: fix mremap after fork null-deref
- mmc: sdio: fix possible resource leaks in some error paths
- ALSA: hda/conexant: add a new hda codec SN6180
- hugetlb: check for undefined shift on 32 bit architectures
- revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"
- i40e: add double of VLAN header when computing the max MTU
- net: bgmac: fix BCM5358 support by setting correct flags
- dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- net: stmmac: Restrict warning on disabling DMA store and fwd mode
- ipv6: Fix datagram socket connection with DSCP.
- ipv6: Fix tcp socket connection with DSCP.
- i40e: Add checking for null for nlmsg_find_attr()
- kvm: initialize all of the kvm_debugregs structure before sending it to
userspace
- nilfs2: fix underflow in second superblock position calculations
- ata: libata: Fix sata_down_spd_limit() when no link speed is reported
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- thermal: intel: int340x: Protect trip temperature from concurrent updates
- iio:adc:twl6030: Enable measurement of VAC
- IB/hfi1: Restore allocated resources on failed copyout
- net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY
- riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte
- arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive
- wifi: rtl8xxxu: gen2: Turn on the rate control
- powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G
- random: always mix cycle counter in add_latent_entropy()
- powerpc: dts: t208x: Disable 10G on MAC1 and MAC2
- alarmtimer: Prevent starvation by small intervals and SIG_IGN
- uaccess: Add speculation barrier to copy_from_user()
- wifi: mwifiex: Add missing compatible string for SD8787
- bpf: add missing header file include
- vc_screen: don't clobber return value in vcs_read
- dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
* CVE-2023-1118
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
-- Ian May <email address hidden> Thu, 27 Apr 2023 18:27:47 -0500
-
linux-aws (4.15.0-1155.168) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1155.168 -proposed tracker (LP: #2016716)
* CVE-2023-1829
- [Config]: Make sure CONFIG_NET_CLS_TCINDEX is not available
[ Ubuntu: 4.15.0-210.221 ]
* bionic/linux: 4.15.0-210.221 -proposed tracker (LP: #2016738)
* CVE-2023-1829
- net/sched: Retire tcindex classifier
- [Config]: Make sure CONFIG_NET_CLS_TCINDEX is not available
-- Thadeu Lima de Souza Cascardo <email address hidden> Tue, 25 Apr 2023 17:03:46 -0300
-
linux-aws (4.15.0-1154.167) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1154.167 -proposed tracker (LP: #2011967)
[ Ubuntu: 4.15.0-209.220 ]
* bionic/linux: 4.15.0-209.220 -proposed tracker (LP: #2011989)
* CVE-2023-26545
- net: mpls: fix stale pointer if allocation fails during device rename
* CVE-2023-1281
- rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer()
- net/sched: tcindex: update imperfect hash filters respecting rcu
* CVE-2022-3903
- USB: add usb_control_msg_send() and usb_control_msg_recv()
- USB: correct API of usb_control_msg_send/recv
- USB: move snd_usb_pipe_sanity_check into the USB core
- media: mceusb: Use new usb_control_msg_*() routines
* Bionic update: upstream stable patchset 2023-03-03 (LP: #2009237)
- pNFS/filelayout: Fix coalescing test for single DS
- net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats
- RDMA/srp: Move large values to a new enum for gcc13
- f2fs: let's avoid panic if extent_tree is not created
- nilfs2: fix general protection fault in nilfs_btree_insert()
- xhci-pci: set the dma max_seg_size
- usb: xhci: Check endpoint is valid before dereferencing it
- prlimit: do_prlimit needs to have a speculation check
- USB: serial: option: add Quectel EM05-G (GR) modem
- USB: serial: option: add Quectel EM05-G (CS) modem
- USB: serial: option: add Quectel EM05-G (RS) modem
- USB: serial: option: add Quectel EC200U modem
- USB: serial: option: add Quectel EM05CN (SG) modem
- USB: serial: option: add Quectel EM05CN modem
- USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100
- usb: core: hub: disable autosuspend for TI TUSB8041
- USB: serial: cp210x: add SCALANCE LPE-9000 device id
- usb: host: ehci-fsl: Fix module alias
- usb: gadget: g_webcam: Send color matching descriptor per frame
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210
- serial: pch_uart: Pass correct sg to dma_unmap_sg()
- serial: atmel: fix incorrect baudrate setup
- gsmi: fix null-deref in gsmi_get_variable
- comedi: adv_pci1760: Fix PWM instruction handling
- ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- EDAC/highbank: Fix memory leak in highbank_mc_probe()
- tomoyo: fix broken dependency on *.conf.default
- IB/hfi1: Reject a zero-length user expected buffer
- IB/hfi1: Reserve user expected TIDs
- affs: initialize fsdata in affs_truncate()
- amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
- phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in
rockchip_usb2phy_power_on()
- net: nfc: Fix use-after-free in local_cleanup()
- net: usb: sr9700: Handle negative len
- net: mdio: validate parameter addr in mdiobus_get_phy()
- HID: check empty report_list in hid_validate_values()
- usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
- usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
- net: mlx5: eliminate anonymous module_init & module_exit
- dmaengine: Fix double increment of client_count in dma_chan_get()
- HID: betop: check shape of output reports
- w1: fix deadloop in __w1_remove_master_device()
- w1: fix WARNING after calling w1_process()
- fs: reiserfs: remove useless new_opts in reiserfs_remount
- Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
- scsi: hpsa: Fix allocation size for scsi_host_alloc()
- module: Don't wait for GOING modules
- tracing: Make sure trace_printk() can output as soon as it can be used
- ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment
- EDAC/device: Respect any driver-supplied workqueue polling value
- netlink: annotate data races around dst_portid and dst_group
- netlink: annotate data races around sk_state
- netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
- netrom: Fix use-after-free of a listening socket.
- sctp: fail if no bound addresses can be used for a given scope
- net: ravb: Fix possible hang if RIS2_QFF1 happen
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI
mode"
- x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
- xen: Fix up build warning with xen_init_time_ops() reference
- x86/asm: Fix an assembler warning with current binutils
- x86/entry/64: Add instruction suffix to SYSRET
- sysctl: add a new register_sysctl_init() interface
- panic: unset panic_on_warn inside panic()
- exit: Add and use make_task_dead.
- objtool: Add a missing comma to avoid string concatenation
- hexagon: Fix function name in die()
- h8300: Fix build errors from do_exit() to make_task_dead() transition
- ia64: make IA64_MCA_RECOVERY bool instead of tristate
- exit: Put an upper limit on how often we can oops
- exit: Expose "oops_count" to sysfs
- exit: Allow oops_limit to be disabled
- panic: Consolidate open-coded panic_on_warn checks
- panic: Introduce warn_limit
- panic: Expose "warn_count" to sysfs
- exit: Use READ_ONCE() for all oops/warn limit reads
- mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags
- ipv6: ensure sane device mtu in tunnels
- usb: host: xhci-plat: add wakeup entry at sysfs
- amd-xgbe: Delay AN timeout during KR training
- tcp: avoid the lookup process failing to get sk in ehash table
- net: fix UaF in netns ops registration error path
- netlink: annotate data races around nlk->portid
- ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
* rtcpie in timers from ubuntu_kernel_selftests randomly failing
(LP: #1814234)
- SAUCE: selftest: rtctest: Fix force-passing unreliable subtest
[ Ubuntu: 4.15.0-208.219 ]
* bionic/linux: 4.15.0-208.219 -proposed tracker (LP: #2012097)
* NFS deathlock with last Kernel 5.4.0-144.161 and 5.15.0-67.74 (LP: #2009325)
- NFS: Correct timing for assigning access cache timestamp
-- Jacob Martin <email address hidden> Thu, 30 Mar 2023 09:58:01 -0500
-
linux-aws (4.15.0-1153.166) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1153.166 -proposed tracker (LP: #2012003)
* NFS deathlock with last Kernel 5.4.0-144.161 and 5.15.0-67.74 (LP: #2009325)
- NFS: Correct timing for assigning access cache timestamp
linux-aws (4.15.0-1152.165) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1152.165 -proposed tracker (LP: #2008397)
[ Ubuntu: 4.15.0-207.218 ]
* bionic/linux: 4.15.0-207.218 -proposed tracker (LP: #2008419)
* rtcpie in timers from ubuntu_kernel_selftests randomly failing
(LP: #1814234)
- SAUCE: selftest: rtctest: Force passing unreliable subtest
* btrfs/154: rename fails with EOVERFLOW when calculating item size during
item key collision (LP: #2004132)
- btrfs: correctly calculate item size used when item key collision happens
* CVE-2021-3669
- ipc: replace costly bailout check in sysvipc_find_ipc()
* Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403)
- libtraceevent: Fix build with binutils 2.35
- once: Fix panic when module unload
- once: add DO_ONCE_SLOW() for sleepable contexts
- mm/khugepaged: fix GUP-fast interaction by sending IPI
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- block: unhash blkdev part inode when the part is deleted
- ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()
- can: sja1000: fix size of OCR_MODE_MASK define
- can: mcba_usb: Fix termination command argument
- ASoC: ops: Correct bounds check for second channel on SX controls
- perf script python: Remove explicit shebang from tests/attr.c
- udf: Discard preallocation before extending file with a hole
- udf: Drop unused arguments of udf_delete_aext()
- udf: Fix preallocation discarding at indirect extent boundary
- udf: Do not bother looking for prealloc extents if i_lenExtents matches
i_size
- udf: Fix extending file within last block
- usb: gadget: uvc: Prevent buffer overflow in setup handler
- USB: serial: option: add Quectel EM05-G modem
- USB: serial: cp210x: add Kamstrup RF sniffer PIDs
- igb: Initialize mailbox message for VF reset
- net: loopback: use NET_NAME_PREDICTABLE for name_assign_type
- usb: musb: remove extra check in musb_gadget_vbus_draw
- ARM: dts: qcom: apq8064: fix coresight compatible
- drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static
- arm: dts: spear600: Fix clcd interrupt
- soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe
- arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name
- ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: turris-omnia: Add ethernet aliases
- ARM: dts: turris-omnia: Add switch port 6 node
- pstore/ram: Fix error return code in ramoops_probe()
- ARM: mmp: fix timer_read delay
- pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
- tpm/tpm_crb: Fix error message in __crb_relinquish_locality()
- cpuidle: dt: Return the correct numbers of parsed idle states
- alpha: fix syscall entry in !AUDUT_SYSCALL case
- PM: hibernate: Fix mistake in kerneldoc comment
- fs: don't audit the capability check in simple_xattr_list()
- perf: Fix possible memleak in pmu_dev_alloc()
- timerqueue: Use rb_entry_safe() in timerqueue_getnext()
- ocfs2: fix memory leak in ocfs2_stack_glue_init()
- MIPS: vpe-mt: fix possible memory leak while module exiting
- MIPS: vpe-cmp: fix possible memory leak while module exiting
- PNP: fix name memory leak in pnp_alloc_dev()
- irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe()
- libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value
- lib/notifier-error-inject: fix error when writing -errno to debugfs file
- rapidio: fix possible name leaks when rio_add_device() fails
- rapidio: rio: fix possible name leak in rio_register_mport()
- ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
- uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix
- x86/xen: Fix memory leak in xen_init_lock_cpu()
- platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()
- MIPS: BCM63xx: Add check for NULL for clk in clk_enable
- fs: sysv: Fix sysv_nblocks() returns wrong value
- rapidio: fix possible UAF when kfifo_alloc() fails
- eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD
- hfs: Fix OOB Write in hfs_asc2mac
- rapidio: devices: fix missing put_device in mport_cdev_open
- wifi: ath9k: hif_usb: fix memory leak of urbs in
ath9k_hif_usb_dealloc_tx_urbs()
- wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()
- media: i2c: ad5820: Fix error path
- spi: Update reference to struct spi_controller
- media: vivid: fix compose size exceed boundary
- mtd: Fix device name leak when register device failed in add_mtd_device()
- media: camss: Clean up received buffers on failed start of streaming
- drm/radeon: Add the missed acpi_put_table() to fix memory leak
- ASoC: pxa: fix null-pointer dereference in filter()
- regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()
- ima: Fix misuse of dereference of pointer in template_desc_init_fields()
- wifi: ath10k: Fix return value in ath10k_pci_init()
- mtd: lpddr2_nvm: Fix possible null-ptr-deref
- Input: elants_i2c - properly handle the reset GPIO when power is off
- media: solo6x10: fix possible memory leak in solo_sysfs_init()
- media: platform: exynos4-is: Fix error handling in fimc_md_init()
- HID: hid-sensor-custom: set fixed size for custom attributes
- ALSA: seq: fix undefined behavior in bit shift for
SNDRV_SEQ_FILTER_USE_EVENT
- clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
- mtd: maps: pxa2xx-flash: fix memory leak in probe
- media: imon: fix a race condition in send_packet()
- pinctrl: pinconf-generic: add missing of_node_put()
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC
- NFSv4.2: Fix a memory stomp in decode_attr_security_label
- NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn
- ALSA: asihpi: fix missing pci_disable_device()
- drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
- drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()
- ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe
- bonding: uninitialized variable in bond_miimon_inspect()
- regulator: core: fix module refcount leak in set_supply()
- media: saa7164: fix missing pci_disable_device()
- ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt
- SUNRPC: Fix missing release socket in rpc_sockname()
- NFSv4.x: Fail client initialisation if state manager thread can't run
- mmc: moxart: fix return value check of mmc_add_host()
- mmc: mxcmmc: fix return value check of mmc_add_host()
- mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()
- mmc: toshsd: fix return value check of mmc_add_host()
- mmc: vub300: fix return value check of mmc_add_host()
- mmc: wmt-sdmmc: fix return value check of mmc_add_host()
- mmc: via-sdmmc: fix return value check of mmc_add_host()
- mmc: wbsd: fix return value check of mmc_add_host()
- mmc: mmci: fix return value check of mmc_add_host()
- media: c8sectpfe: Add of_node_put() when breaking out of loop
- media: coda: Add check for dcoda_iram_alloc
- media: coda: Add check for kmalloc
- clk: samsung: Fix memory leak in _samsung_clk_register_pll()
- wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h
- wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware()
- blktrace: Fix output non-blktrace event when blk_classic option enabled
- net: vmw_vsock: vmci: Check memcpy_from_msg()
- net: defxx: Fix missing err handling in dfx_init()
- drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()
- ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: farsync: Fix kmemleak when rmmods farsync
- net/tunnel: wait until all sk_user_data reader finish before releasing the
sock
- net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave()
- hamradio: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: amd-xgbe: Check only the minimum speed for active/passive cables
- net: lan9303: Fix read error execution path
- ntb_netdev: Use dev_kfree_skb_any() in interrupt context
- Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()
- stmmac: fix potential division by 0
- apparmor: fix a memleak in multi_transaction_new()
- PCI: Check for alloc failure in pci_request_irq()
- RDMA/hfi: Decrease PCI device reference count in error path
- RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create
failed
- scsi: hpsa: Fix error handling in hpsa_add_sas_host()
- scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()
- scsi: fcoe: Fix possible name leak when device_register() fails
- scsi: ipr: Fix WARNING in ipr_init()
- scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails
- scsi: snic: Fix possible UAF in snic_tgt_create()
- RDMA/hfi1: Fix error return code in parse_platform_config()
- orangefs: Fix sysfs not cleanup when dev init failed
- crypto: img-hash - Fix variable dereferenced before check 'hdev->req'
- hwrng: amd - Fix PCI device refcount leak
- hwrng: geode - Fix PCI device refcount leak
- IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces
- drivers: dio: fix possible memory leak in dio_init()
- class: fix possible memory leak in __class_register()
- vfio: platform: Do not pass return buffer to ACPI _RST method
- uio: uio_dmem_genirq: Fix missing unlock in irq configuration
- uio: uio_dmem_genirq: Fix deadlock between irq config and handling
- usb: fotg210-udc: Fix ages old endianness issues
- staging: vme_user: Fix possible UAF in tsi148_dma_list_add
- serial: amba-pl011: avoid SBSA UART accessing DMACR register
- serial: pch: Fix PCI device refcount leak in pch_request_dma()
- serial: sunsab: Fix error handling in sunsab_init()
- test_firmware: fix memory leak in test_firmware_init()
- misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault
and gru_handle_user_call_os
- cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()
- cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()
- drivers: mcb: fix resource leak in mcb_probe()
- mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
- chardev: fix error handling in cdev_device_add()
- i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe
- staging: rtl8192u: Fix use after free in ieee80211_rx()
- staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor()
- vme: Fix error not catched in fake_init()
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- usb: storage: Add check for kcalloc
- fbdev: ssd1307fb: Drop optional dependency
- fbdev: pm2fb: fix missing pci_disable_device()
- fbdev: via: Fix error in via_core_init()
- fbdev: vermilion: decrease reference count in error path
- fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()
- HSI: omap_ssi_core: fix unbalanced pm_runtime_disable()
- HSI: omap_ssi_core: fix possible memory leak in ssi_probe()
- power: supply: fix residue sysfs file in error handle route of
__power_supply_register()
- HSI: omap_ssi_core: Fix error handling in ssi_init()
- include/uapi/linux/swab: Fix potentially missing __always_inline
- rtc: snvs: Allow a time difference on clock register read
- iommu/amd: Fix pci device refcount leak in ppr_notifier()
- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
- macintosh: fix possible memory leak in macio_add_one_device()
- macintosh/macio-adb: check the return value of ioremap()
- powerpc/52xx: Fix a resource leak in an error handling path
- cxl: Fix refcount leak in cxl_calc_capp_routing
- powerpc/xive: add missing iounmap() in error path in
xive_spapr_populate_irq_data()
- powerpc/perf: callchain validate kernel stack pointer bounds
- powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in
of_fsl_spi_probe()
- powerpc/hv-gpci: Fix hv_gpci event list
- selftests/powerpc: Fix resource leaks
- rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe()
- nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure
- mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under
spin_lock_irqsave()
- mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under
spin_lock_irqsave()
- mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under
spin_lock_irqsave()
- nfc: pn533: Clear nfc_target before being used
- r6040: Fix kmemleak in probe and remove
- openvswitch: Fix flow lookup to use unmasked key
- skbuff: Account for tail adjustment during pull operations
- net_sched: reject TCF_EM_SIMPLE case for complex ematch module
- myri10ge: Fix an error handling path in myri10ge_probe()
- net: stream: purge sk_error_queue in sk_stream_kill_queues()
- binfmt_misc: fix shift-out-of-bounds in check_special_flags
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- udf: Avoid double brelse() in udf_rename()
- fs: jfs: fix shift-out-of-bounds in dbDiscardAG
- ACPICA: Fix error code path in acpi_ds_call_control_method()
- nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
- acct: fix potential integer overflow in encode_comp_t()
- hfs: fix OOB Read in __hfs_brec_find
- wifi: ath9k: verify the expected usb_endpoints are present
- wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
- ASoC: codecs: rt298: Add quirk for KBL-R RVP platform
- ipmi: fix memleak when unload ipmi driver
- bpf: make sure skb->len != 0 when redirecting to a tunneling device
- net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()
- hamradio: baycom_epp: Fix return type of baycom_send_packet()
- wifi: brcmfmac: Fix potential shift-out-of-bounds in
brcmf_fw_alloc_request()
- igb: Do not free q_vector unless new one was allocated
- s390/ctcm: Fix return type of ctc{mp,}m_tx()
- s390/netiucv: Fix return type of netiucv_tx()
- s390/lcs: Fix return type of lcs_start_xmit()
- drm/sti: Use drm_mode_copy()
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- mrp: introduce active flags to prevent UAF when applicant uninit
- ppp: associate skb with a device at tx
- media: dvb-frontends: fix leak of memory fw
- media: dvbdev: adopts refcnt to avoid UAF
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
- blk-mq: fix possible memleak when register 'hctx' failed
- mmc: f-sdh30: Add quirks for broken timeout clock capability
- media: si470x: Fix use-after-free in si470x_int_in_callback()
- clk: st: Fix memory leak in st_of_quadfs_setup()
- drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid()
- drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()
- orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()
- ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in
mt8173_rt5650_rt5514_dev_probe()
- ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in
rockchip_pdm_runtime_resume()
- ASoC: wm8994: Fix potential deadlock
- ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in
rk_spdif_runtime_resume()
- ASoC: rt5670: Remove unbalanced pm_runtime_put()
- pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion
- pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES
- usb: dwc3: core: defer probe on ulpi_read_id timeout
- HID: wacom: Ensure bootloader PID is usable in hidraw mode
- reiserfs: Add missing calls to reiserfs_security_free()
- iio: adc: ad_sigma_delta: do not use internal iio_dev lock
- gcov: add support for checksum field
- media: dvbdev: fix refcnt bug
- powerpc/rtas: avoid device tree lookups in rtas_os_term()
- powerpc/rtas: avoid scheduling in rtas_os_term()
- HID: plantronics: Additional PIDs for double volume key presses quirk
- hfsplus: fix bug causing custom uid and gid being unable to be assigned with
mount
- ALSA: line6: correct midi status byte when receiving data from podxt
- ALSA: line6: fix stack overflow in line6_midi_transmit
- pnode: terminate at peers of source
- md: fix a crash in mempool_free
- mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
- tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
- tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
- media: stv0288: use explicitly signed char
- ktest.pl minconfig: Unset configs instead of just removing them
- ARM: ux500: do not directly dereference __iomem
- selftests: Use optional USERCFLAGS and USERLDFLAGS
- dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort
- dm thin: Use last transaction's pmd->root when commit failed
- dm thin: Fix UAF in run_timer_softirq()
- dm cache: Fix UAF in destroy()
- dm cache: set needs_check flag after aborting metadata
- x86/microcode/intel: Do not retry microcode reloading on the APs
- tracing: Fix infinite loop in tracing_read_pipe on overflowed
print_trace_line
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
- media: dvb-core: Fix double free in dvb_register_device()
- cifs: fix confusing debug message
- ima: Fix a potential NULL pointer access in ima_restore_measurement_list
- PCI: Fix pci_device_is_present() for VFs by checking PF
- PCI/sysfs: Fix double free in error path
- crypto: n2 - add missing hash statesize
- iommu/amd: Fix ivrs_acpihid cmdline parsing code
- parisc: led: Fix potential null-ptr-deref in start_task()
- device_cgroup: Roll back to original exceptions after copy failure
- drm/connector: send hotplug uevent on connector cleanup
- drm/vmwgfx: Validate the box size for the snooped cursor
- ext4: add inode table check in __ext4_get_inode_loc to aovid possible
infinite loop
- ext4: fix undefined behavior in bit shift for ext4_check_flag_values
- ext4: fix bug_on in __es_tree_search caused by bad boot loader inode
- ext4: init quota for 'old.inode' in 'ext4_rename'
- ext4: fix error code return to user-space in ext4_get_branch()
- ext4: avoid BUG_ON when creating xattrs
- ext4: fix inode leak in ext4_xattr_inode_create() on an error path
- ext4: initialize quota before expanding inode in setproject ioctl
- ext4: avoid unaccounted block allocation when expanding inode
- ext4: allocate extended attribute value in vmalloc area
- SUNRPC: ensure the matching upcall is in-flight upon downcall
- bpf: pull before calling skb_postpull_rcsum()
- qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
- nfc: Fix potential resource leaks
- net: amd-xgbe: add missed tasklet_kill
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
- net: sched: atm: dont intepret cls results when asked to drop
- usb: rndis_host: Secure rndis_query check against int overflow
- caif: fix memory leak in cfctrl_linkup_request()
- udf: Fix extension of the last extent in the file
- nfsd: fix handling of readdir in v4root vs. mount upcall timeout
- hfs/hfsplus: use WARN_ON for sanity check
- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
- parisc: Align parisc MADV_XXX constants with all other architectures
- driver core: Fix bus_type.match() error handling in __driver_attach()
- ravb: Fix "failed to switch device to config mode" message during unbind
- net: sched: disallow noqueue for qdisc classes
- docs: Fix the docs build with Sphinx 6.0
- perf auxtrace: Fix address filter duplicate symbol selection
- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()
- platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during
probe
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- netfilter: ipset: Fix overflow before widen in the bitmap_ip_create()
function.
- x86/boot: Avoid using Intel mnemonics in AT&T syntax asm
- EDAC/device: Fix period calculation in edac_device_reset_delay_period()
- regulator: da9211: Use irq handler when ready
- hvc/xen: lock console list traversal
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
- selftests/ftrace: event_triggers: wait longer for test_event_enable
- debugfs: fix error when writing negative value to atomic_t debugfs file
- x86/xen: Fix memory leak in xen_smp_intr_init{_pv}()
- relay: fix type mismatch when allocating memory in relay_create_buf()
- wifi: rtl8xxxu: Fix reading the vendor of combo chips
- media: dvb-core: Fix ignored return value in dvb_register_frontend()
- wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys()
fails
- mmc: atmel-mci: fix return value check of mmc_add_host()
- mmc: meson-gx: fix return value check of mmc_add_host()
- net: amd-xgbe: Fix logic around active and passive cables
- apparmor: fix lockdep warning when removing a namespace
- scsi: hpsa: Fix possible memory leak in hpsa_init_one()
- serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
- serial: altera_uart: fix locking in polling mode
- usb: gadget: f_hid: fix refcount leak on error path
- perf symbol: correction while adjusting symbol
- rxrpc: Fix missing unlock in rxrpc_do_sendmsg()
- media: dvbdev: fix build warning due to comments
- ata: ahci: Fix PCS quirk application for suspend
- SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
- binfmt: Fix error return code in load_elf_fdpic_binary()
- ext4: fix corruption when online resizing a 1K bigalloc fs
- media: s5p-mfc: Fix to handle reference queue during finishing
- media: s5p-mfc: Clear workbit to handle error condition
- media: s5p-mfc: Fix in register read and write for H264
- dm thin: resume even if in FAIL mode
- mbcache: don't reclaim used entries
- ext4: remove EA inode entry from mbcache on inode eviction
- usb: ulpi: defer ulpi_register on ulpi_read_id timeout
- net/mlx5: Fix ptp max frequency adjustment range
- drm/virtio: Fix GEM handle creation UAF
- arm64: cmpxchg_double*: hazard against entire exchange variable
* Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) //
CVE-2023-0266 was assigned for this issue.
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
* Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) //
CVE-2022-41218 is assigned to those bugs above.
- media: dvb-core: Fix UAF due to refcount races at releasing
* CVE-2023-23559
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid
* CVE-2023-0045
- x86/bugs: Flush IBP in ib_prctl_set()
-- Roxana Nicolescu <email address hidden> Fri, 17 Mar 2023 15:11:02 +0100
-
linux-aws (4.15.0-1152.165) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1152.165 -proposed tracker (LP: #2008397)
[ Ubuntu: 4.15.0-207.218 ]
* bionic/linux: 4.15.0-207.218 -proposed tracker (LP: #2008419)
* rtcpie in timers from ubuntu_kernel_selftests randomly failing
(LP: #1814234)
- SAUCE: selftest: rtctest: Force passing unreliable subtest
* btrfs/154: rename fails with EOVERFLOW when calculating item size during
item key collision (LP: #2004132)
- btrfs: correctly calculate item size used when item key collision happens
* CVE-2021-3669
- ipc: replace costly bailout check in sysvipc_find_ipc()
* Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403)
- libtraceevent: Fix build with binutils 2.35
- once: Fix panic when module unload
- once: add DO_ONCE_SLOW() for sleepable contexts
- mm/khugepaged: fix GUP-fast interaction by sending IPI
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- block: unhash blkdev part inode when the part is deleted
- ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()
- can: sja1000: fix size of OCR_MODE_MASK define
- can: mcba_usb: Fix termination command argument
- ASoC: ops: Correct bounds check for second channel on SX controls
- perf script python: Remove explicit shebang from tests/attr.c
- udf: Discard preallocation before extending file with a hole
- udf: Drop unused arguments of udf_delete_aext()
- udf: Fix preallocation discarding at indirect extent boundary
- udf: Do not bother looking for prealloc extents if i_lenExtents matches
i_size
- udf: Fix extending file within last block
- usb: gadget: uvc: Prevent buffer overflow in setup handler
- USB: serial: option: add Quectel EM05-G modem
- USB: serial: cp210x: add Kamstrup RF sniffer PIDs
- igb: Initialize mailbox message for VF reset
- net: loopback: use NET_NAME_PREDICTABLE for name_assign_type
- usb: musb: remove extra check in musb_gadget_vbus_draw
- ARM: dts: qcom: apq8064: fix coresight compatible
- drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static
- arm: dts: spear600: Fix clcd interrupt
- soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe
- arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name
- ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: turris-omnia: Add ethernet aliases
- ARM: dts: turris-omnia: Add switch port 6 node
- pstore/ram: Fix error return code in ramoops_probe()
- ARM: mmp: fix timer_read delay
- pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
- tpm/tpm_crb: Fix error message in __crb_relinquish_locality()
- cpuidle: dt: Return the correct numbers of parsed idle states
- alpha: fix syscall entry in !AUDUT_SYSCALL case
- PM: hibernate: Fix mistake in kerneldoc comment
- fs: don't audit the capability check in simple_xattr_list()
- perf: Fix possible memleak in pmu_dev_alloc()
- timerqueue: Use rb_entry_safe() in timerqueue_getnext()
- ocfs2: fix memory leak in ocfs2_stack_glue_init()
- MIPS: vpe-mt: fix possible memory leak while module exiting
- MIPS: vpe-cmp: fix possible memory leak while module exiting
- PNP: fix name memory leak in pnp_alloc_dev()
- irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe()
- libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value
- lib/notifier-error-inject: fix error when writing -errno to debugfs file
- rapidio: fix possible name leaks when rio_add_device() fails
- rapidio: rio: fix possible name leak in rio_register_mport()
- ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
- uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix
- x86/xen: Fix memory leak in xen_init_lock_cpu()
- platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()
- MIPS: BCM63xx: Add check for NULL for clk in clk_enable
- fs: sysv: Fix sysv_nblocks() returns wrong value
- rapidio: fix possible UAF when kfifo_alloc() fails
- eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD
- hfs: Fix OOB Write in hfs_asc2mac
- rapidio: devices: fix missing put_device in mport_cdev_open
- wifi: ath9k: hif_usb: fix memory leak of urbs in
ath9k_hif_usb_dealloc_tx_urbs()
- wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()
- media: i2c: ad5820: Fix error path
- spi: Update reference to struct spi_controller
- media: vivid: fix compose size exceed boundary
- mtd: Fix device name leak when register device failed in add_mtd_device()
- media: camss: Clean up received buffers on failed start of streaming
- drm/radeon: Add the missed acpi_put_table() to fix memory leak
- ASoC: pxa: fix null-pointer dereference in filter()
- regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()
- ima: Fix misuse of dereference of pointer in template_desc_init_fields()
- wifi: ath10k: Fix return value in ath10k_pci_init()
- mtd: lpddr2_nvm: Fix possible null-ptr-deref
- Input: elants_i2c - properly handle the reset GPIO when power is off
- media: solo6x10: fix possible memory leak in solo_sysfs_init()
- media: platform: exynos4-is: Fix error handling in fimc_md_init()
- HID: hid-sensor-custom: set fixed size for custom attributes
- ALSA: seq: fix undefined behavior in bit shift for
SNDRV_SEQ_FILTER_USE_EVENT
- clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
- mtd: maps: pxa2xx-flash: fix memory leak in probe
- media: imon: fix a race condition in send_packet()
- pinctrl: pinconf-generic: add missing of_node_put()
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC
- NFSv4.2: Fix a memory stomp in decode_attr_security_label
- NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn
- ALSA: asihpi: fix missing pci_disable_device()
- drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
- drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()
- ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe
- bonding: uninitialized variable in bond_miimon_inspect()
- regulator: core: fix module refcount leak in set_supply()
- media: saa7164: fix missing pci_disable_device()
- ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt
- SUNRPC: Fix missing release socket in rpc_sockname()
- NFSv4.x: Fail client initialisation if state manager thread can't run
- mmc: moxart: fix return value check of mmc_add_host()
- mmc: mxcmmc: fix return value check of mmc_add_host()
- mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()
- mmc: toshsd: fix return value check of mmc_add_host()
- mmc: vub300: fix return value check of mmc_add_host()
- mmc: wmt-sdmmc: fix return value check of mmc_add_host()
- mmc: via-sdmmc: fix return value check of mmc_add_host()
- mmc: wbsd: fix return value check of mmc_add_host()
- mmc: mmci: fix return value check of mmc_add_host()
- media: c8sectpfe: Add of_node_put() when breaking out of loop
- media: coda: Add check for dcoda_iram_alloc
- media: coda: Add check for kmalloc
- clk: samsung: Fix memory leak in _samsung_clk_register_pll()
- wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h
- wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware()
- blktrace: Fix output non-blktrace event when blk_classic option enabled
- net: vmw_vsock: vmci: Check memcpy_from_msg()
- net: defxx: Fix missing err handling in dfx_init()
- drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()
- ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: farsync: Fix kmemleak when rmmods farsync
- net/tunnel: wait until all sk_user_data reader finish before releasing the
sock
- net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave()
- hamradio: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: amd-xgbe: Check only the minimum speed for active/passive cables
- net: lan9303: Fix read error execution path
- ntb_netdev: Use dev_kfree_skb_any() in interrupt context
- Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()
- stmmac: fix potential division by 0
- apparmor: fix a memleak in multi_transaction_new()
- PCI: Check for alloc failure in pci_request_irq()
- RDMA/hfi: Decrease PCI device reference count in error path
- RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create
failed
- scsi: hpsa: Fix error handling in hpsa_add_sas_host()
- scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()
- scsi: fcoe: Fix possible name leak when device_register() fails
- scsi: ipr: Fix WARNING in ipr_init()
- scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails
- scsi: snic: Fix possible UAF in snic_tgt_create()
- RDMA/hfi1: Fix error return code in parse_platform_config()
- orangefs: Fix sysfs not cleanup when dev init failed
- crypto: img-hash - Fix variable dereferenced before check 'hdev->req'
- hwrng: amd - Fix PCI device refcount leak
- hwrng: geode - Fix PCI device refcount leak
- IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces
- drivers: dio: fix possible memory leak in dio_init()
- class: fix possible memory leak in __class_register()
- vfio: platform: Do not pass return buffer to ACPI _RST method
- uio: uio_dmem_genirq: Fix missing unlock in irq configuration
- uio: uio_dmem_genirq: Fix deadlock between irq config and handling
- usb: fotg210-udc: Fix ages old endianness issues
- staging: vme_user: Fix possible UAF in tsi148_dma_list_add
- serial: amba-pl011: avoid SBSA UART accessing DMACR register
- serial: pch: Fix PCI device refcount leak in pch_request_dma()
- serial: sunsab: Fix error handling in sunsab_init()
- test_firmware: fix memory leak in test_firmware_init()
- misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault
and gru_handle_user_call_os
- cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()
- cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()
- drivers: mcb: fix resource leak in mcb_probe()
- mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
- chardev: fix error handling in cdev_device_add()
- i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe
- staging: rtl8192u: Fix use after free in ieee80211_rx()
- staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor()
- vme: Fix error not catched in fake_init()
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- usb: storage: Add check for kcalloc
- fbdev: ssd1307fb: Drop optional dependency
- fbdev: pm2fb: fix missing pci_disable_device()
- fbdev: via: Fix error in via_core_init()
- fbdev: vermilion: decrease reference count in error path
- fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()
- HSI: omap_ssi_core: fix unbalanced pm_runtime_disable()
- HSI: omap_ssi_core: fix possible memory leak in ssi_probe()
- power: supply: fix residue sysfs file in error handle route of
__power_supply_register()
- HSI: omap_ssi_core: Fix error handling in ssi_init()
- include/uapi/linux/swab: Fix potentially missing __always_inline
- rtc: snvs: Allow a time difference on clock register read
- iommu/amd: Fix pci device refcount leak in ppr_notifier()
- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
- macintosh: fix possible memory leak in macio_add_one_device()
- macintosh/macio-adb: check the return value of ioremap()
- powerpc/52xx: Fix a resource leak in an error handling path
- cxl: Fix refcount leak in cxl_calc_capp_routing
- powerpc/xive: add missing iounmap() in error path in
xive_spapr_populate_irq_data()
- powerpc/perf: callchain validate kernel stack pointer bounds
- powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in
of_fsl_spi_probe()
- powerpc/hv-gpci: Fix hv_gpci event list
- selftests/powerpc: Fix resource leaks
- rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe()
- nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure
- mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under
spin_lock_irqsave()
- mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under
spin_lock_irqsave()
- mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under
spin_lock_irqsave()
- nfc: pn533: Clear nfc_target before being used
- r6040: Fix kmemleak in probe and remove
- openvswitch: Fix flow lookup to use unmasked key
- skbuff: Account for tail adjustment during pull operations
- net_sched: reject TCF_EM_SIMPLE case for complex ematch module
- myri10ge: Fix an error handling path in myri10ge_probe()
- net: stream: purge sk_error_queue in sk_stream_kill_queues()
- binfmt_misc: fix shift-out-of-bounds in check_special_flags
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- udf: Avoid double brelse() in udf_rename()
- fs: jfs: fix shift-out-of-bounds in dbDiscardAG
- ACPICA: Fix error code path in acpi_ds_call_control_method()
- nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
- acct: fix potential integer overflow in encode_comp_t()
- hfs: fix OOB Read in __hfs_brec_find
- wifi: ath9k: verify the expected usb_endpoints are present
- wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
- ASoC: codecs: rt298: Add quirk for KBL-R RVP platform
- ipmi: fix memleak when unload ipmi driver
- bpf: make sure skb->len != 0 when redirecting to a tunneling device
- net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()
- hamradio: baycom_epp: Fix return type of baycom_send_packet()
- wifi: brcmfmac: Fix potential shift-out-of-bounds in
brcmf_fw_alloc_request()
- igb: Do not free q_vector unless new one was allocated
- s390/ctcm: Fix return type of ctc{mp,}m_tx()
- s390/netiucv: Fix return type of netiucv_tx()
- s390/lcs: Fix return type of lcs_start_xmit()
- drm/sti: Use drm_mode_copy()
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- mrp: introduce active flags to prevent UAF when applicant uninit
- ppp: associate skb with a device at tx
- media: dvb-frontends: fix leak of memory fw
- media: dvbdev: adopts refcnt to avoid UAF
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
- blk-mq: fix possible memleak when register 'hctx' failed
- mmc: f-sdh30: Add quirks for broken timeout clock capability
- media: si470x: Fix use-after-free in si470x_int_in_callback()
- clk: st: Fix memory leak in st_of_quadfs_setup()
- drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid()
- drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()
- orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()
- ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in
mt8173_rt5650_rt5514_dev_probe()
- ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in
rockchip_pdm_runtime_resume()
- ASoC: wm8994: Fix potential deadlock
- ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in
rk_spdif_runtime_resume()
- ASoC: rt5670: Remove unbalanced pm_runtime_put()
- pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion
- pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES
- usb: dwc3: core: defer probe on ulpi_read_id timeout
- HID: wacom: Ensure bootloader PID is usable in hidraw mode
- reiserfs: Add missing calls to reiserfs_security_free()
- iio: adc: ad_sigma_delta: do not use internal iio_dev lock
- gcov: add support for checksum field
- media: dvbdev: fix refcnt bug
- powerpc/rtas: avoid device tree lookups in rtas_os_term()
- powerpc/rtas: avoid scheduling in rtas_os_term()
- HID: plantronics: Additional PIDs for double volume key presses quirk
- hfsplus: fix bug causing custom uid and gid being unable to be assigned with
mount
- ALSA: line6: correct midi status byte when receiving data from podxt
- ALSA: line6: fix stack overflow in line6_midi_transmit
- pnode: terminate at peers of source
- md: fix a crash in mempool_free
- mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
- tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
- tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
- media: stv0288: use explicitly signed char
- ktest.pl minconfig: Unset configs instead of just removing them
- ARM: ux500: do not directly dereference __iomem
- selftests: Use optional USERCFLAGS and USERLDFLAGS
- dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort
- dm thin: Use last transaction's pmd->root when commit failed
- dm thin: Fix UAF in run_timer_softirq()
- dm cache: Fix UAF in destroy()
- dm cache: set needs_check flag after aborting metadata
- x86/microcode/intel: Do not retry microcode reloading on the APs
- tracing: Fix infinite loop in tracing_read_pipe on overflowed
print_trace_line
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
- media: dvb-core: Fix double free in dvb_register_device()
- cifs: fix confusing debug message
- ima: Fix a potential NULL pointer access in ima_restore_measurement_list
- PCI: Fix pci_device_is_present() for VFs by checking PF
- PCI/sysfs: Fix double free in error path
- crypto: n2 - add missing hash statesize
- iommu/amd: Fix ivrs_acpihid cmdline parsing code
- parisc: led: Fix potential null-ptr-deref in start_task()
- device_cgroup: Roll back to original exceptions after copy failure
- drm/connector: send hotplug uevent on connector cleanup
- drm/vmwgfx: Validate the box size for the snooped cursor
- ext4: add inode table check in __ext4_get_inode_loc to aovid possible
infinite loop
- ext4: fix undefined behavior in bit shift for ext4_check_flag_values
- ext4: fix bug_on in __es_tree_search caused by bad boot loader inode
- ext4: init quota for 'old.inode' in 'ext4_rename'
- ext4: fix error code return to user-space in ext4_get_branch()
- ext4: avoid BUG_ON when creating xattrs
- ext4: fix inode leak in ext4_xattr_inode_create() on an error path
- ext4: initialize quota before expanding inode in setproject ioctl
- ext4: avoid unaccounted block allocation when expanding inode
- ext4: allocate extended attribute value in vmalloc area
- SUNRPC: ensure the matching upcall is in-flight upon downcall
- bpf: pull before calling skb_postpull_rcsum()
- qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
- nfc: Fix potential resource leaks
- net: amd-xgbe: add missed tasklet_kill
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
- net: sched: atm: dont intepret cls results when asked to drop
- usb: rndis_host: Secure rndis_query check against int overflow
- caif: fix memory leak in cfctrl_linkup_request()
- udf: Fix extension of the last extent in the file
- nfsd: fix handling of readdir in v4root vs. mount upcall timeout
- hfs/hfsplus: use WARN_ON for sanity check
- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
- parisc: Align parisc MADV_XXX constants with all other architectures
- driver core: Fix bus_type.match() error handling in __driver_attach()
- ravb: Fix "failed to switch device to config mode" message during unbind
- net: sched: disallow noqueue for qdisc classes
- docs: Fix the docs build with Sphinx 6.0
- perf auxtrace: Fix address filter duplicate symbol selection
- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()
- platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during
probe
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- netfilter: ipset: Fix overflow before widen in the bitmap_ip_create()
function.
- x86/boot: Avoid using Intel mnemonics in AT&T syntax asm
- EDAC/device: Fix period calculation in edac_device_reset_delay_period()
- regulator: da9211: Use irq handler when ready
- hvc/xen: lock console list traversal
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
- selftests/ftrace: event_triggers: wait longer for test_event_enable
- debugfs: fix error when writing negative value to atomic_t debugfs file
- x86/xen: Fix memory leak in xen_smp_intr_init{_pv}()
- relay: fix type mismatch when allocating memory in relay_create_buf()
- wifi: rtl8xxxu: Fix reading the vendor of combo chips
- media: dvb-core: Fix ignored return value in dvb_register_frontend()
- wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys()
fails
- mmc: atmel-mci: fix return value check of mmc_add_host()
- mmc: meson-gx: fix return value check of mmc_add_host()
- net: amd-xgbe: Fix logic around active and passive cables
- apparmor: fix lockdep warning when removing a namespace
- scsi: hpsa: Fix possible memory leak in hpsa_init_one()
- serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
- serial: altera_uart: fix locking in polling mode
- usb: gadget: f_hid: fix refcount leak on error path
- perf symbol: correction while adjusting symbol
- rxrpc: Fix missing unlock in rxrpc_do_sendmsg()
- media: dvbdev: fix build warning due to comments
- ata: ahci: Fix PCS quirk application for suspend
- SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
- binfmt: Fix error return code in load_elf_fdpic_binary()
- ext4: fix corruption when online resizing a 1K bigalloc fs
- media: s5p-mfc: Fix to handle reference queue during finishing
- media: s5p-mfc: Clear workbit to handle error condition
- media: s5p-mfc: Fix in register read and write for H264
- dm thin: resume even if in FAIL mode
- mbcache: don't reclaim used entries
- ext4: remove EA inode entry from mbcache on inode eviction
- usb: ulpi: defer ulpi_register on ulpi_read_id timeout
- net/mlx5: Fix ptp max frequency adjustment range
- drm/virtio: Fix GEM handle creation UAF
- arm64: cmpxchg_double*: hazard against entire exchange variable
* Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) //
CVE-2023-0266 was assigned for this issue.
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
* Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) //
CVE-2022-41218 is assigned to those bugs above.
- media: dvb-core: Fix UAF due to refcount races at releasing
* CVE-2023-23559
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid
* CVE-2023-0045
- x86/bugs: Flush IBP in ib_prctl_set()
-- Jacob Martin <email address hidden> Thu, 02 Mar 2023 07:50:26 -0600
-
linux-aws (4.15.0-1151.164) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1151.164 -proposed tracker (LP: #2004392)
[ Ubuntu: 4.15.0-206.217 ]
* bionic/linux: 4.15.0-206.217 -proposed tracker (LP: #2004655)
* CVE-2023-0461
- SAUCE: Fix inet_csk_listen_start after CVE-2023-0461
[ Ubuntu: 4.15.0-205.216 ]
* bionic/linux: 4.15.0-205.216 -proposed tracker (LP: #2004414)
* Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596)
- NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
- NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
- nfs4: Fix kmemleak when allocate slot failed
- net: dsa: Fix possible memory leaks in dsa_loop_init()
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
- nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
- net: fec: fix improper use of NETDEV_TX_BUSY
- ata: pata_legacy: fix pdc20230_set_piomode()
- net: sched: Fix use after free in red_enqueue()
- ipvs: use explicitly signed chars
- rose: Fix NULL pointer dereference in rose_send_frame()
- mISDN: fix possible memory leak in mISDN_register_device()
- isdn: mISDN: netjet: fix wrong check of device registration
- btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
- btrfs: fix ulist leaks in error paths of qgroup self tests
- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- net: mdio: fix undefined behavior in bit shift for __mdiobus_register
- net, neigh: Fix null-ptr-deref in neigh_table_clear()
- media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
- media: dvb-frontends/drxk: initialize err to 0
- i2c: xiic: Add platform module alias
- Bluetooth: L2CAP: Fix attempting to access uninitialized memory
- block, bfq: protect 'bfqd->queued' by 'bfqd->lock'
- btrfs: fix type of parameter generation in btrfs_get_dentry
- tcp/udp: Make early_demux back namespacified.
- capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
- ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices
- efi: random: reduce seed size to 32 bytes
- parisc: Make 8250_gsc driver dependend on CONFIG_PARISC
- parisc: Export iosapic_serial_irq() symbol for serial port driver
- ext4: fix warning in 'ext4_da_release_space'
- KVM: x86: Mask off reserved bits in CPUID.80000008H
- KVM: x86: emulator: em_sysexit should update ctxt->mode
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode
- KVM: x86: emulator: update the emulation mode after CR0 write
- linux/const.h: prefix include guard of uapi/linux/const.h with _UAPI
- linux/const.h: move UL() macro to include/linux/const.h
- linux/bits.h: make BIT(), GENMASK(), and friends available in assembly
- RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
- net: tun: fix bugs for oversize packet when napi frags enabled
- ipvs: fix WARNING in __ip_vs_cleanup_batch()
- ipvs: fix WARNING in ip_vs_app_net_cleanup()
- ipv6: fix WARNING in ip6_route_net_exit_late()
- parisc: Avoid printing the hardware path twice
- HID: hyperv: fix possible memory leak in mousevsc_probe()
- net: gso: fix panic on frag_list with mixed head alloc types
- bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer
- net: fman: Unregister ethernet device on removal
- capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
- net: lapbether: fix issue of dev reference count leakage in
lapbeth_device_event()
- hamradio: fix issue of dev reference count leakage in bpq_device_event()
- drm/vc4: Fix missing platform_unregister_drivers() call in
vc4_drm_register()
- ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
- tipc: fix the msg->req tlv len check in
tipc_nl_compat_name_table_dump_header
- dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
- drivers: net: xgene: disable napi when register irq failed in
xgene_enet_open()
- net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()
- ethernet: s2io: disable napi when start nic failed in s2io_card_up()
- net: mv643xx_eth: disable napi when init rxq or txq failed in
mv643xx_eth_open()
- net: macvlan: fix memory leaks of macvlan_common_newlink
- arm64: efi: Fix handling of misaligned runtime regions and drop warning
- ALSA: hda: fix potential memleak in 'add_widget_node'
- ALSA: usb-audio: Add quirk entry for M-Audio Micro
- nilfs2: fix deadlock in nilfs_count_free_blocks()
- drm/i915/dmabuf: fix sg_table handling in map_dma_buf
- platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
- btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
- cert host tools: Stop complaining about deprecated OpenSSL functions
- dmaengine: at_hdmac: Fix at_lli struct definition
- dmaengine: at_hdmac: Don't start transactions at tx_submit level
- dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors
- dmaengine: at_hdmac: Don't allow CPU to reorder channel enable
- dmaengine: at_hdmac: Fix impossible condition
- dmaengine: at_hdmac: Check return code of dma_async_device_register
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- selftests/futex: fix build for clang
- drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid
- ASoC: core: Fix use-after-free in snd_soc_exit()
- serial: 8250_omap: remove wait loop from Errata i202 workaround
- serial: 8250: omap: Flush PM QOS work on remove
- tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send
- ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
- block: sed-opal: kmalloc the cmd/resp buffers
- parport_pc: Avoid FIFO port location truncation
- pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
- net: bgmac: Drop free_netdev() from bgmac_enet_remove()
- mISDN: fix possible memory leak in mISDN_dsp_element_register()
- mISDN: fix misuse of put_device() in mISDN_register_device()
- net: caif: fix double disconnect client in chnl_net_open()
- xen/pcpu: fix possible memory leak in register_pcpu()
- drbd: use after free in drbd_create_device()
- net/x25: Fix skb leak in x25_lapb_receive_frame()
- cifs: Fix wrong return value checking when GETFLAGS
- ftrace: Fix the possible incorrect kernel message
- ftrace: Optimize the allocation for mcount entries
- ftrace: Fix null pointer dereference in ftrace_add_mod()
- ring_buffer: Do not deactivate non-existant pages
- ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
- USB: serial: option: add Sierra Wireless EM9191
- USB: serial: option: remove old LARA-R6 PID
- USB: serial: option: add u-blox LARA-R6 00B modem
- USB: serial: option: add u-blox LARA-L6 modem
- USB: serial: option: add Fibocom FM160 0x0111 composition
- usb: add NO_LPM quirk for Realforce 87U Keyboard
- usb: chipidea: fix deadlock in ci_otg_del_timer
- iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()
- iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()
- iio: pressure: ms5611: changed hardcoded SPI speed to value limited
- dm ioctl: fix misbehavior if list_versions races with module loading
- serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
- serial: 8250_lpss: Configure DMA also w/o DMA filter
- mmc: core: properly select voltage range without power cycle
- mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
- nilfs2: fix use-after-free bug of ns_writer on remount
- serial: 8250: Flush DMA Rx on RLSI
- macvlan: enforce a consistent minimal mtu
- tcp: cdg: allow tcp_cdg_release() to be called multiple times
- kcm: avoid potential race in kcm_tx_work
- bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
- kcm: close race conditions on sk_receive_queue
- 9p: trans_fd/p9_conn_cancel: drop client lock earlier
- gfs2: Check sb_bsize_shift after reading superblock
- gfs2: Switch from strlcpy to strscpy
- 9p/trans_fd: always use O_NONBLOCK read/write
- mm: fs: initialize fsdata passed to write_begin/write_end interface
- ntfs: fix use-after-free in ntfs_attr_find()
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- ntfs: check overflow when iterating ATTR_RECORDs
- wifi: cfg80211: fix memory leak in query_regdb_file()
- net: tun: Fix memory leaks of napi_get_frags
- riscv: process: fix kernel info leakage
- vmlinux.lds.h: Fix placement of '.data..decrypted' section
- net: thunderbolt: Fix error handling in tbnet_init()
- scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
- Input: i8042 - fix leaking of platform device on module removal
- wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support
- audit: fix undefined behavior in bit shift for AUDIT_BIT
- wifi: mac80211: Fix ack frame idr leak when mesh has no route
- spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run
- MIPS: pic32: treat port as signed integer
- af_key: Fix send_acquire race with pfkey_register
- ARM: dts: am335x-pcm-953: Define fixed regulators in root node
- bus: sunxi-rsb: Support atomic transfers
- ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl
- nfc/nci: fix race with opening and closing
- net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()
- 9p/fd: fix issue of list_del corruption in p9_fd_cancel()
- ARM: mxs: fix memory leak in mxs_machine_init()
- net/mlx4: Check retval of mlx4_bitmap_init
- net/qla3xxx: fix potential memleak in ql3xxx_send()
- xfrm: Fix ignored return value in xfrm6_init()
- NFC: nci: fix memory leak in nci_rx_data_packet()
- dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
- s390/dasd: fix no record found for raw_track_access
- nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION
- nfc: st-nci: fix memory leaks in EVT_TRANSACTION
- net: thunderx: Fix the ACPI memory leak
- s390/crashdump: fix TOD programmable field size
- nios2: add FORCE for vmlinuz.gz
- arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency
- iio: light: apds9960: fix wrong register for gesture gain
- iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails
- kconfig: display recursive dependency resolution hint just once
- nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
- Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode
- serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios()
- xen/platform-pci: add missing free_irq() in error path
- platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr()
- platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017)
- platform/x86: hp-wmi: Ignore Smart Experience App event
- [Config] updateconfigs for INET_TABLE_PERTURB_ORDER
- tcp: configurable source port perturb table size
- net: usb: qmi_wwan: add Telit 0x103a composition
- drm/amdgpu: always register an MMU notifier for userptr
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- iio: light: rpr0521: add missing Kconfig dependencies
- hwmon: (i5500_temp) fix missing pci_disable_device()
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- of: property: decrement node refcount in of_fwnode_get_reference_args()
- net/mlx5: Fix uninitialized variable bug in outlen_write()
- can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
- can: cc770: cc770_isa_probe(): add missing free_cc770dev()
- qlcnic: fix sleep-in-atomic-context bugs caused by msleep
- net: phy: fix null-ptr-deref while probe() failed
- net: net_netdev: Fix error handling in ntb_netdev_init_module()
- net/9p: Fix a potential socket leak in p9_socket_open
- dsa: lan9303: Correct stat name
- net: hsr: Fix potential use-after-free
- packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
- net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed
- hwmon: (coretemp) Check for null before removing sysfs attrs
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
- perf: Add sample_flags to indicate the PMU-filled sample data
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
- arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM
vectors
- arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72
- efi: random: Properly limit the size of the random seed
- ASoC: ops: Fix bounds check for _sx controls
- pinctrl: single: Fix potential division by zero
- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
- nvme: restrict management ioctls to admin
- x86/tsx: Add a feature bit for TSX control MSR support
- x86/pm: Add enumeration check before spec MSRs save/restore setup
- x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
- mmc: sdhci: use FIELD_GET for preset value bit masks
- mmc: sdhci: Fix voltage switch delay
- proc: avoid integer type confusion in get_proc_long
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
- ipc/sem: Fix dangling sem_array access in semtimedop race
- x86/nospec: Fix i386 RSB stuffing
- Revert "x86/speculation: Change FILL_RETURN_BUFFER to work with objtool"
- ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove
- net: pch_gbe: fix pci device refcount leak while module exiting
- Drivers: hv: vmbus: fix double free in the error path of
vmbus_add_channel_work()
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
- bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()
- iio: pressure: ms5611: fixed value compensation bug
- arm: dts: rockchip: fix node name for hym8563 rtc
- ARM: dts: rockchip: fix ir-receiver node names
- ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels
- ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
- ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- ASoC: soc-pcm: Add NULL check in BE reparenting
- regulator: twl6030: fix get status of twl6032 regulators
- net: usb: qmi_wwan: add u-blox 0x1342 composition
- xen/netback: do some code cleanup
- xen/netback: don't call kfree_skb() with interrupts disabled
- rcutorture: Automatically create initrd directory
- media: v4l2-dv-timings.c: fix too strict blanking sanity checks
- memcg: fix possible use-after-free in memcg_write_event_control()
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field
- HID: hid-lg4ff: Add check for empty lbuf
- HID: core: fix shift-out-of-bounds in hid_report_raw_event
- ieee802154: cc2520: Fix error return code in cc2520_hw_init()
- ca8210: Fix crash by zero initializing data
- gpio: amd8111: Fix PCI device reference count leak
- e1000e: Fix TX dispatch condition
- igb: Allocate MSI-X vector when testing
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- net: encx24j600: Add parentheses to fix precedence
- net: encx24j600: Fix invalid logic in reading of MISTAT register
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- NFC: nci: Bounds check struct nfc_target arrays
- net: stmmac: fix "snps,axi-config" node property parsing
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- tipc: Fix potential OOB in tipc_link_proto_rcv()
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()
- ipv6: avoid use-after-free in ip6_fragment()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- i40e: Fix not setting default xps_cpus after reset
- i40e: Fix for VF MAC address 0
- i40e: Disallow ip4 and ip6 l4_4_bytes
- nvme initialize core quirks before calling nvme_init_subsystem
- can: esd_usb: Allow REC and TEC to return to zero
* CVE-2022-3628
- wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
* rdpru in ubuntu_kvm_unit_tests failed on B-4.15 node riccioli with FAIL:
RDPRU raises #UD (LP: #1968681)
- x86/cpufeatures: Add feature bit RDPRU on AMD
- kvm: svm: Intercept RDPRU
* NFS: client permission error after adding user to permissible group
(LP: #2003053)
- cred: add cred_fscmp() for comparing creds.
- NFS: Clear the file access cache upon login
- NFS: Judge the file access cache's timestamp in rcu path
- NFS: Fix up a sparse warning
* 5.15.0-58.64 breaks xen bridge networking (pvh domU) (LP: #2002889)
- xen/netback: fix build warning
* CVE-2023-0461
- net/ulp: prevent ULP without clone op from entering the LISTEN status
* CVE-2022-3545
- nfp: fix use-after-free in area_cache_get()
-- Ian May <email address hidden> Wed, 15 Feb 2023 12:12:58 -0600
-
linux-aws (4.15.0-1150.163) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1150.163 -proposed tracker (LP: #2003505)
[ Ubuntu: 4.15.0-204.215 ]
* bionic/linux: 4.15.0-204.215 -proposed tracker (LP: #2003522)
* Revoke & rotate to new signing key (LP: #2002812)
- [Packaging] Revoke and rotate to new signing key
linux-aws (4.15.0-1149.162) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1149.162 -proposed tracker (LP: #2001851)
* Miscellaneous Ubuntu changes
- [Config] aws: updateconfigs for ARM64_ERRATUM_1742098
[ Ubuntu: 4.15.0-203.214 ]
* bionic/linux: 4.15.0-203.214 -proposed tracker (LP: #2001876)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* Bionic update: upstream stable patchset 2022-12-01 (LP: #1998542)
- Revert "x86/cpu: Add a steppings field to struct x86_cpu_id"
- x86/cpufeature: Add facility to check for min microcode revisions
- x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h>
header
- x86/devicetable: Move x86 specific macro out of generic code
- x86/cpu: Add consistent CPU match macros
- x86/cpu: Add a steppings field to struct x86_cpu_id
- x86/entry: Remove skip_r11rcx
- x86/cpufeatures: Move RETPOLINE flags to word 11
- x86/bugs: Report AMD retbleed vulnerability
- x86/bugs: Add AMD retbleed= boot parameter
- x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value
- x86/entry: Add kernel IBRS implementation
- x86/bugs: Optimize SPEC_CTRL MSR writes
- x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS
- x86/bugs: Split spectre_v2_select_mitigation() and
spectre_v2_user_select_mitigation()
- x86/bugs: Report Intel retbleed vulnerability
- entel_idle: Disable IBRS during long idle
- x86/speculation: Change FILL_RETURN_BUFFER to work with objtool
- x86/speculation: Add LFENCE to RSB fill sequence
- x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n
- x86/speculation: Fix firmware entry SPEC_CTRL handling
- x86/speculation: Fix SPEC_CTRL write on SMT state change
- x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit
- x86/speculation: Remove x86_spec_ctrl_mask
- KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
- KVM: VMX: Fix IBRS handling after vmexit
- x86/speculation: Fill RSB on vmexit for IBRS
- x86/common: Stamp out the stepping madness
- x86/cpu/amd: Enumerate BTC_NO
- x86/bugs: Add Cannon lake to RETBleed affected CPU list
- x86/speculation: Disable RRSBA behavior
- x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current
- x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts
- x86/speculation: Add RSB VM Exit protections
- ocfs2: clear dinode links count in case of error
- ocfs2: fix BUG when iput after ocfs2_mknod fails
- x86/microcode/AMD: Apply the patch early on every logical thread
- ata: ahci-imx: Fix MODULE_ALIAS
- ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS
- KVM: arm64: vgic: Fix exit condition in scan_its_table()
- [Config] updateconfigs for ARM64_ERRATUM_1742098
- arm64: errata: Remove AES hwcap for COMPAT tasks
- r8152: add PID for the Lenovo OneLink+ Dock
- btrfs: fix processing of delayed data refs during backref walking
- ACPI: extlog: Handle multiple records
- HID: magicmouse: Do not set BTN_MOUSE on double report
- net/atm: fix proc_mpc_write incorrect return value
- net: hns: fix possible memory leak in hnae_ae_register()
- iommu/vt-d: Clean up si_domain in the init_dmars() error path
- media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls
- ACPI: video: Force backlight native for more TongFang devices
- ALSA: Use del_timer_sync() before freeing timer
- ALSA: au88x0: use explicitly signed char
- USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM
- usb: dwc3: gadget: Don't set IMI for no_interrupt
- usb: bdc: change state when port disconnected
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96
controller
- xhci: Remove device endpoints from bandwidth list when freeing the device
- tools: iio: iio_utils: fix digit calculation
- iio: light: tsl2583: Fix module unloading
- fbdev: smscufx: Fix several use-after-free bugs
- mac802154: Fix LQI recording
- drm/msm/hdmi: fix memory corruption with too many bridges
- mmc: core: Fix kernel panic when remove non-standard SDIO card
- kernfs: fix use-after-free in __kernfs_remove
- s390/futex: add missing EX_TABLE entry to __futex_atomic_op()
- Xen/gntdev: don't ignore kernel unmapping error
- xen/gntdev: Prevent leaking grants
- mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
- net: ieee802154: fix error return code in dgram_bind()
- drm/msm: Fix return type of mdp4_lvds_connector_mode_valid
- arc: iounmap() arg is volatile
- ALSA: ac97: fix possible memory leak in snd_ac97_dev_register()
- x86/unwind/orc: Fix unreliable stack dump with gcov
- amd-xgbe: fix the SFP compliance codes check for DAC cables
- amd-xgbe: add the bit rate quirk for Molex cables
- kcm: annotate data-races around kcm->rx_psock
- kcm: annotate data-races around kcm->rx_wait
- net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY
- tcp: fix indefinite deferral of RTO with SACK reneging
- can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error
path
- PM: hibernate: Allow hybrid sleep to work with s2idle
- media: vivid: s_fbuf: add more sanity checks
- media: vivid: dev->bitmap_cap wasn't freed in all cases
- media: v4l2-dv-timings: add sanity checks for blanking values
- media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced'
- i40e: Fix ethtool rx-flow-hash setting for X722
- i40e: Fix flow-type by setting GL_HASH_INSET registers
- net: ksz884x: fix missing pci_disable_device() on error in pcidev_init()
- PM: domains: Fix handling of unavailable/disabled idle states
- ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()
- ALSA: aoa: Fix I2S device accounting
- openvswitch: switch from WARN to pr_warn
- net: ehea: fix possible memory leak in ehea_register_port()
- can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global
FIFO receive
- media: venus: dec: Handle the case where find_format fails
- Makefile.debug: re-enable debug info for .S files
- drm/msm/dsi: fix memory corruption with too many bridges
- perf auxtrace: Fix address filter symbol name match for modules
- net: netsec: fix error handling in netsec_register_mdio()
- net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
- i40e: Fix VF hang when reset is triggered on another VF
* Bionic update: upstream stable patchset 2022-11-15 (LP: #1996650)
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- drm/meson: Correct OSD1 global alpha value
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- ASoC: nau8824: Fix semaphore unbalance at error paths
- regulator: pfuze100: Fix the global-out-of-bounds access in
pfuze100_regulator_probe()
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- net: usb: qmi_wwan: add Quectel RM520N
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- USB: core: Fix RST error in hub.c
- USB: serial: option: add Quectel BG95 0x0203 composition
- USB: serial: option: add Quectel RM520N
- ALSA: hda/tegra: set depop delay for tegra
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- mm/slub: fix to return errno if kmalloc() fails
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- netfilter: nf_conntrack_irc: Tighten matching on DCC message
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
- net: team: Unsync device addresses on ndo_stop
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- netfilter: ebtables: fix memory leak when blob is malformed
- can: gs_usb: gs_can_open(): fix race dev->can.state condition
- perf kcore_copy: Do not check /proc/modules is unchanged
- net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
- serial: Create uart_xmit_advance()
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer
memory region
- ext4: make directory inode spreading reflect flexbg size
- nvmet: fix a use-after-free
- i40e: Fix VF set max MTU size
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- perf jit: Include program header in ELF files
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- mm/page_alloc: fix race condition between build_all_zonelists and page
allocation
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/migrate_device.c: flush TLB while holding PTL
- soc: sunxi: sram: Actually claim SRAM regions
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in
suspend/resume time"
- Input: melfas_mip4 - fix return value check in mip4_probe()
- usbnet: Fix memory leak in usbnet_disconnect()
- selftests: Fix the if conditions of in test_extra_filter()
- uas: add no-uas quirk for Hiksemi usb_disk
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: ignore UAS for Thinkplus chips
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- nvme: add new line after variable declatation
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- clk: iproc: Minor tidy up of iproc pll data structures
- clk: iproc: Do not rely on node name for correct PLL setup
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ARM: fix function graph tracer and unwinder dependencies
- [Config] updateconfigs for UNWINDER_ARM
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API
failure
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- usb: mon: make mmapped memory read only
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Replace with already defined values for readability
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- nilfs2: fix leak of nilfs_root in case of writer thread creation failure
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ceph: don't truncate file in atomic_open
- random: clamp credited irq bits to maximum mixed
- ALSA: hda: Fix position reporting on Poulsbo
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- random: restore O_NONBLOCK support
- random: avoid reading two cache lines on irq randomness
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- Input: xpad - add supported devices as contributed on github
- Input: xpad - fix wireless 360 controller breaking after suspend
- random: use expired timer rather than wq for mixing fast pool
- ALSA: oss: Fix potential deadlock at unregistration
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: usb-audio: Fix NULL dererence at error path
- iio: dac: ad5593r: Fix i2c read protocol requirements
- fs: dlm: fix race between test_bit() and queue_work()
- fs: dlm: handle -EBUSY first in lock arg validation
- HID: multitouch: Add memory barriers
- quota: Check next/prev free block number after reading from quota file
- regulator: qcom_rpm: Fix circular deferral regression
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- fbdev: smscufx: Fix use-after-free in ufx_ops_open()
- nilfs2: fix use-after-free bug of struct nilfs_root
- ext4: fix null-ptr-deref in ext4_write_info
- ext4: make ext4_lazyinit_thread freezable
- ext4: place buffer head allocation before handle start
- livepatch: fix race between fork and KLP transition
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- ring-buffer: Allow splice to read previous partially read pages
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Fix race between reset page and reading page
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- gcov: support GCC 12.1 and newer compilers
- selinux: use "grep -E" instead of "egrep"
- sh: machvec: Use char[] for section boundaries
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- wifi: mac80211: allow bw change during channel switch in mesh
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- spi: qup: add missing clk_disable_unprepare on error in
spi_qup_pm_resume_runtime()
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- net: fs_enet: Fix wrong check in do_pd_setup
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- netfilter: nft_fib: Fix for rpath check with VRF devices
- spi: s3c64xx: Fix large transfers with DMA
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- net: rds: don't hold sock lock when cancelling work from
rds_tcp_reset_callbacks()
- bnx2x: fix potential memory leak in bnx2x_tpa_stop()
- drm/mipi-dsi: Detach devices when removing the host
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- platform/x86: msi-laptop: Fix resource cleanup
- drm/bridge: megachips: Fix a null pointer dereference bug
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- ALSA: dmaengine: increment buffer pointer atomically
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- soc: qcom: smem_state: Add refcounting for the 'state->of_node'
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- iio: inkern: only release the device node when done with it
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- HSI: omap_ssi_port: Fix dma_map_sg error check
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- tty: xilinx_uartps: Fix the ignore_status
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- RDMA/rxe: Fix the error caused by qp->sk
- dyndbg: fix module.dyndbg handling
- dyndbg: let query-modname override actual module name
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_dipm()
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- xhci: Don't show warning for reinit on known broken suspend
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- drivers: serial: jsm: fix some leaks in probe
- phy: qualcomm: call clk_disable_unprepare in the error handling
- firmware: google: Test spinlock on panic path to avoid lockups
- serial: 8250: Fix restoring termios speed after suspend
- fsi: core: Check error number after calling ida_simple_get
- mfd: intel_soc_pmic: Fix an error handling path in
intel_soc_pmic_i2c_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and
lp8788_irq_init()
- mfd: sm501: Add check for platform_driver_register()
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in
__cleanup()
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- powerpc/math_emu/efp: Include module.h
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- iommu/omap: Fix buffer overflow in debugfs
- iommu/iova: Fix module config properly
- crypto: cavium - prevent integer overflow loading firmware
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to
avoid crash
- NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- openvswitch: Fix double reporting of drops in dropwatch
- openvswitch: Fix overreporting of drops in dropwatch
- tcp: annotate data-race around tcp_md5sig_pool_populated
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- can: bcm: check the result of can_send() in bcm_can_tx()
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- Bluetooth: L2CAP: Fix user-after-free
- drm: Use size_t type for len variable in drm_copy_field()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm/vc4: vec: Fix timings for VEC modes
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module
autoloading
- drm/amdgpu: fix initial connector audio value
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- HID: roccat: Fix use-after-free in roccat_read()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: idmouse: fix an uninit-value in idmouse_open
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- net: ieee802154: return -EINVAL for unknown addr type
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- ext4: continue to expand file system when the target size doesn't reach
- md: Replace snprintf with scnprintf
- efi: libstub: drop pointless get_memory_map() call
- inet: fully convert sk->sk_rx_dst to RCU rules
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- drm: bridge: adv7511: fix CEC power down control register offset
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- clk: berlin: Add of_node_put() for of_get_parent()
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
-- Stefan Bader <email address hidden> Thu, 26 Jan 2023 10:10:51 +0100
-
linux-aws (4.15.0-1148.160) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1148.160 -proposed tracker (LP: #2001980)
[ Ubuntu: 4.15.0-202.213 ]
* bionic/linux: 4.15.0-202.213 -proposed tracker (LP: #2002005)
* CVE-2022-3643
- xen/netback: Ensure protocol headers don't fall in the non-linear area
* CVE-2022-45934
- Bluetooth: L2CAP: Fix u8 overflow
* CVE-2022-42896
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm
* CVE-2022-43945
- NFSD: Cap rsize_bop result based on send buffer size
-- Thadeu Lima de Souza Cascardo <email address hidden> Tue, 10 Jan 2023 23:16:11 -0300
-
linux-aws (4.15.0-1147.159) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1147.159 -proposed tracker (LP: #1999407)
[ Ubuntu: 4.15.0-201.212 ]
* bionic/linux: 4.15.0-201.212 -proposed tracker (LP: #1997871)
* Expose built-in trusted and revoked certificates (LP: #1996892)
- [Packaging] Expose built-in trusted and revoked certificates
* Bionic update: upstream stable patchset 2022-09-21 (LP: #1990434)
- s390/archrandom: prevent CPACF trng invocations in interrupt context
* BUG: scheduling while atomic: ip/1210/0x00000200 on xenial/hwe rumford
(LP: #1995870)
- tg3: prevent scheduling while atomic splat
* Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349)
- bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds()
- selftests/bpf: Fix test_align verifier log patterns
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- kcm: fix strp_init() order and cleanup
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- staging: rtl8712: fix use after free bugs
- vt: Clear selection before changing the font
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- binder: fix UAF of ref->proc caused by race condition
- drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
- Input: rk805-pwrkey - fix module autoloading
- hwmon: (gpio-fan) Fix array out of bounds access
- thunderbolt: Use the actual buffer in tb_async_error()
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- USB: serial: cp210x: add Decagon UCA device id
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- s390: fix nospec table alignments
- USB: core: Prevent nested device-reset calls
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- net: mac802154: Fix a condition in the receive path
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: seq: Fix data-race at module auto-loading
- efi: capsule-loader: Fix use-after-free in efi_capsule_write
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in
il4965_rs_fill_link_cmd()
- fs: only do a memory barrier for the first set_buffer_uptodate()
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/radeon: add a force flush to delay work when radeon
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: usb-audio: Fix an out-of-bounds bug in
__snd_usb_parse_audio_interface()
- kprobes: Prohibit probes in gate area
- scsi: mpt3sas: Fix use-after-free warning
- driver core: Don't probe devices after bus_type.match() probe deferral
- netfilter: br_netfilter: Drop dst references before setting.
- sch_sfb: Don't assume the skb is still around after enqueueing to child
- tipc: fix shift wrapping bug in map_get()
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- sch_sfb: Also store skb len before calling child enqueue
- usb: dwc3: fix PHY disable sequence
- USB: serial: ch341: fix lost character on LCR updates
- USB: serial: ch341: fix disabled rx timer on older devices
- MIPS: loongson32: ls1c: Fix hang during startup
- SUNRPC: use _bh spinlocking on ->transport_lock
- net: dp83822: disable false carrier interrupt
- tcp: annotate data-race around challenge_timestamp
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- i40e: Fix kernel crash during module removal
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- drm/msm/rd: Fix FIFO-full deadlock
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- ieee802154: cc2520: add rc code in cc2520_tx()
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- tracefs: Only clobber mode/uid/gid on remount if asked
- net: dp83822: disable rx error interrupt
* Bionic update: upstream stable patchset 2022-10-06 (LP: #1992112)
- audit: fix potential double free on error path from fsnotify_add_inode_mark
- parisc: Fix exception handler for fldw and fstw instructions
- pinctrl: amd: Don't save/restore interrupt status and wake status bits
- xfrm: fix refcount leak in __xfrm_policy_check()
- rose: check NULL rose_loopback_neigh->loopback
- bonding: 802.3ad: fix no transmission of LACPDUs
- net: ipvtap - add __init/__exit annotations to module init/exit funcs
- netfilter: ebtables: reject blobs that don't provide all entry points
- netfilter: nft_payload: report ERANGE for too long offset and length
- netfilter: nft_payload: do not truncate csum_offset and csum_type
- net: Fix data-races around weight_p and dev_weight_[rt]x_bias.
- ratelimit: Fix data-races in ___ratelimit().
- net: Fix a data-race around sysctl_tstamp_allow_data.
- net: Fix a data-race around sysctl_net_busy_poll.
- net: Fix a data-race around sysctl_net_busy_read.
- net: Fix a data-race around netdev_budget.
- net: Fix a data-race around netdev_budget_usecs.
- net: Fix a data-race around sysctl_somaxconn.
- ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter
- btrfs: check if root is readonly while setting security xattr
- loop: Check for overflow while configuring loop
- asm-generic: sections: refactor memory_intersects
- mm/hugetlb: fix hugetlb not supporting softdirty tracking
- md: call __md_stop_writes in md_stop
- mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
- arm64: map FDT as RW for early_init_dt_scan()
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- x86/bugs: Add "unknown" reporting for MMIO Stale Data
- kbuild: Fix include path in scripts/Makefile.modpost
- Bluetooth: L2CAP: Fix build errors in some archs
- media: pvrusb2: fix memory leak in pvr_probe
- HID: hidraw: fix memory leak in hidraw_release()
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is
dead
- neigh: fix possible DoS due to net iface start/stop loop
- s390/hypfs: avoid error message under KVM
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- kprobes: don't call disarm_kprobe() for disabled kprobes
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net: Fix data-races around netdev_tstamp_prequeue.
- x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry
- s390: fix double free of GS and RI CBs on fork() failure
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
- bpf: Fix the off-by-two error in range markings
* CVE-2022-2663
- netfilter: nf_conntrack_irc: Fix forged IP logic
* CVE-2022-3061
- video: fbdev: i740fb: Error out if 'pixclock' equals zero
-- Ian May <email address hidden> Mon, 12 Dec 2022 10:16:47 -0600
-
linux-aws (4.15.0-1146.158) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1146.158 -proposed tracker (LP: #1997440)
[ Ubuntu: 4.15.0-200.211 ]
* bionic/linux: 4.15.0-200.211 -proposed tracker (LP: #1997465)
* CVE-2022-3239
- media: em28xx: initialize refcount before kref_get
* CVE-2022-3524
- tcp/udp: Fix memory leak in ipv6_renew_options().
* CVE-2022-3564
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
* CVE-2022-3565
- mISDN: fix use-after-free bugs in l1oip timer handlers
* CVE-2022-3566
- tcp: Fix data races around icsk->icsk_af_ops.
* CVE-2022-3567
- ipv6: annotate some data-races around sk->sk_prot
- ipv6: Fix data races around sk->sk_prot.
* CVE-2022-3594
- r8152: Rate limit overflow messages
* CVE-2022-3621
- nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
* CVE-2022-42703
- mm/rmap.c: don't reuse anon_vma if we just want a copy
- mm: rmap: explicitly reset vma->anon_vma in unlink_anon_vmas()
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse
[ Ubuntu: 4.15.0-197.208 ]
* bionic/linux: 4.15.0-197.208 -proposed tracker (LP: #1994998)
* Memory leak while using NFQUEUE to delegate the decision on TCP packets to
userspace processes (LP: #1991774)
- SAUCE: netfilter: nf_queue: Fix memory leak in nf_queue_entry_get_refs
* Bionic update: upstream stable patchset 2022-09-23 (LP: #1990698)
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
- ntfs: fix use-after-free in ntfs_ucsncmp()
- ARM: crypto: comment out gcc warning that breaks clang builds
- mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle.
- ACPI: video: Force backlight native for some TongFang devices
- macintosh/adb: fix oob read in do_adb_query() function
- Makefile: link with -z noexecstack --no-warn-rwx-segments
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments
- ALSA: bcd2000: Fix a UAF bug on the error path of probing
- add barriers to buffer_uptodate and set_buffer_uptodate
- HID: wacom: Don't register pad_input for touch switch
- KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
- KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
- KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP
- ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model
- ALSA: hda/cirrus - support for iMac 12,1 model
- vfs: Check the truncate maximum size in inode_newsize_ok()
- fs: Add missing umask strip in vfs_tmpfile
- usbnet: Fix linkwatch use-after-free on disconnect
- parisc: Fix device names in /proc/iomem
- drm/nouveau: fix another off-by-one in nvbios_addr
- drm/amdgpu: Check BO's requested pinning domains against its
preferred_domains
- iio: light: isl29028: Fix the warning in isl29028_remove()
- fuse: limit nsec
- md-raid10: fix KASAN warning
- ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr()
- PCI: Add defines for normal and subtractive PCI bridges
- powerpc/fsl-pci: Fix Class Code of PCIe Root Port
- powerpc/powernv: Avoid crashing if rng is NULL
- MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- USB: HCD: Fix URB giveback issue in tasklet function
- netfilter: nf_tables: fix null deref due to zeroed list head
- arm64: Do not forget syscall when starting a new thread.
- arm64: fix oops in concurrently setting insn_emulation sysctls
- ext2: Add more validity checks for inode counts
- ARM: dts: imx6ul: add missing properties for sram
- ARM: dts: imx6ul: fix qspi node compatible
- ARM: OMAP2+: display: Fix refcount leak bug
- ACPI: PM: save NVS memory for Lenovo G40-45
- ACPI: LPSS: Fix missing check in register_device_clock()
- PM: hibernate: defer device probing when resuming from hibernation
- selinux: Add boundary check in put_entry()
- ARM: findbit: fix overflowing offset
- ARM: bcm: Fix refcount leak in bcm_kona_smc_init
- x86/pmem: Fix platform-device leak in error path
- ARM: dts: ast2500-evb: fix board compatible
- soc: fsl: guts: machine variable might be unset
- cpufreq: zynq: Fix refcount leak in zynq_get_revision
- ARM: dts: qcom: pm8841: add required thermal-sensor-cells
- arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node
- regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
- thermal/tools/tmon: Include pthread and time headers in tmon.h
- dm: return early from dm_pr_call() if DM device is suspended
- drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()
- drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function
- i2c: Fix a potential use after free
- wifi: iwlegacy: 4965: fix potential off-by-one overflow in
il4965_rs_fill_link_cmd()
- drm: bridge: adv7511: Add check for mipi_dsi_driver_register
- media: hdpvr: fix error value returns in hdpvr_read
- drm/vc4: dsi: Correct DSI divider calculations
- drm/rockchip: vop: Don't crash for invalid duplicate_state()
- drm/mediatek: dpi: Remove output format of YUV
- drm: bridge: sii8620: fix possible off-by-one
- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment
- tcp: make retransmitted SKB fit into the send window
- selftests: timers: valid-adjtimex: build fix for newer toolchains
- selftests: timers: clocksource-switch: fix passing errors from child
- fs: check FMODE_LSEEK to control internal pipe splicing
- wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
- wifi: p54: Fix an error handling path in p54spi_probe()
- wifi: p54: add missing parentheses in p54_flush()
- can: pch_can: do not report txerr and rxerr during bus-off
- can: rcar_can: do not report txerr and rxerr during bus-off
- can: sja1000: do not report txerr and rxerr during bus-off
- can: hi311x: do not report txerr and rxerr during bus-off
- can: sun4i_can: do not report txerr and rxerr during bus-off
- can: usb_8dev: do not report txerr and rxerr during bus-off
- can: error: specify the values of data[5..7] of CAN error frames
- can: pch_can: pch_can_error(): initialize errc before using it
- Bluetooth: hci_intel: Add check for platform_driver_register
- i2c: cadence: Support PEC for SMBus block read
- i2c: mux-gpmux: Add of_node_put() when breaking out of loop
- wifi: wil6210: debugfs: fix uninitialized variable use in
`wil_write_file_wmi()`
- wifi: libertas: Fix possible refcount leak in if_usb_probe()
- net: rose: fix netdev reference changes
- dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock
- mtd: maps: Fix refcount leak in of_flash_probe_versatile
- mtd: maps: Fix refcount leak in ap_flash_init
- mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release
- mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path
- fpga: altera-pr-ip: fix unsigned comparison with less than zero
- usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe
- usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe
- misc: rtsx: Fix an error handling path in rtsx_pci_probe()
- mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch
- memstick/ms_block: Fix some incorrect memory allocation
- memstick/ms_block: Fix a memory leak
- mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R
- scsi: smartpqi: Fix DMA direction for RAID requests
- usb: gadget: udc: amd5536 depends on HAS_DMA
- RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
- gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()
- mmc: cavium-octeon: Add of_node_put() when breaking out of loop
- mmc: cavium-thunderx: Add of_node_put() when breaking out of loop
- USB: serial: fix tty-port initialized comments
- platform/olpc: Fix uninitialized data in debugfs write
- mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region
- RDMA/rxe: Fix error unwind in rxe_create_qp()
- ext4: recover csum seed of tmp_inode after migrating to extents
- jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted
- ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe
- ASoC: codecs: da7210: add check for i2c_add_driver
- ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe
- profiling: fix shift too large makes kernel panic
- tty: n_gsm: fix non flow control frames during mux flow off
- tty: n_gsm: fix packet re-transmission without open control channel
- tty: n_gsm: fix race condition in gsmld_write()
- remoteproc: qcom: wcnss: Fix handling of IRQs
- vfio/ccw: Do not change FSM state in subchannel event
- tty: n_gsm: fix wrong T1 retry count handling
- tty: n_gsm: fix DM command
- iommu/exynos: Handle failed IOMMU device registration properly
- kfifo: fix kfifo_to_user() return type
- mfd: t7l66xb: Drop platform disable callback
- iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop
- s390/zcore: fix race when reading from hardware system area
- video: fbdev: amba-clcd: Fix refcount leak bugs
- video: fbdev: sis: fix typos in SiS_GetModeID()
- powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and
alias
- powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader
- powerpc/xive: Fix refcount leak in xive_get_max_prio
- powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address
- kprobes: Forbid probing on trampoline and BPF code areas
- powerpc/pci: Fix PHB numbering when using opal-phbid
- genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO
- x86/numa: Use cpumask_available instead of hardcoded NULL check
- video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()
- tools/thermal: Fix possible path truncations
- video: fbdev: vt8623fb: Check the size of screen before memset_io()
- video: fbdev: arkfb: Check the size of screen before memset_io()
- video: fbdev: s3fb: Check the size of screen before memset_io()
- scsi: zfcp: Fix missing auto port scan and thus missing target ports
- x86/olpc: fix 'logical not is only applied to the left hand side'
- spmi: trace: fix stack-out-of-bound access in SPMI tracing functions
- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
- ext4: make sure ext4_append() always allocates new block
- ext4: fix use-after-free in ext4_xattr_set_entry
- ext4: update s_overhead_clusters in the superblock during an on-line resize
- ext4: fix extent status tree race in writeback error recovery path
- ext4: correct max_inline_xattr_value_size computing
- ext4: correct the misjudgment in ext4_iget_extra_inode
- intel_th: pci: Add Raptor Lake-S CPU support
- intel_th: pci: Add Raptor Lake-S PCH support
- intel_th: pci: Add Meteor Lake-P support
- dm raid: fix address sanitizer warning in raid_resume
- dm raid: fix address sanitizer warning in raid_status
- btrfs: reject log replay if there is unsupported RO compat flag
- KVM: Add infrastructure and macro to mark VM as bugged
- KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq
- KVM: x86: Avoid theoretical NULL pointer dereference in
kvm_irq_delivery_to_apic_fast()
- tcp: fix over estimation in sk_forced_mem_schedule()
- scsi: sg: Allow waiting for commands to complete on removed device
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
- net/9p: Initialize the iounit field during fid creation
- net_sched: cls_route: disallow handle of 0
- powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E
- ALSA: info: Fix llseek return value when using callback
- rds: add missing barrier to release_refill
- ata: libata-eh: Add missing command name
- btrfs: fix lost error handling when looking up extended ref on log replay
- can: ems_usb: fix clang's -Wunaligned-access warning
- apparmor: fix quiet_denied for file rules
- apparmor: Fix failed mount permission check error message
- apparmor: fix aa_label_asxprint return check
- apparmor: fix reference count leak in aa_pivotroot()
- NFSv4: Fix races in the legacy idmapper upcall
- NFSv4.1: RECLAIM_COMPLETE must handle EACCES
- SUNRPC: Reinitialise the backchannel request buffers before reuse
- pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map
- pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed
- ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool
- geneve: do not use RT_TOS for IPv6 flowlabel
- vsock: Fix memory leak in vsock_connect()
- vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout()
- tools build: Switch to new openssl API for test-libcrypto
- xen/xenbus: fix return type in xenbus_file_read()
- atm: idt77252: fix use-after-free bugs caused by tst_timer
- nios2: page fault et.al. are *not* restartable syscalls...
- nios2: don't leave NULLs in sys_call_table[]
- nios2: traced syscall does need to check the syscall number
- nios2: fix syscall restart checks
- nios2: restarts apply only to the first sigframe we build...
- nios2: add force_successful_syscall_return()
- netfilter: nf_tables: really skip inactive sets when allocating name
- powerpc/pci: Fix get_phb_number() locking
- i40e: Fix to stop tx_timeout recovery if GLOBR fails
- fec: Fix timer capture timing in `fec_ptp_enable_pps()`
- igb: Add lock to avoid data race
- kbuild: clear LDFLAGS in the top Makefile
- btrfs: only write the sectors in the vertical stripe which has data stripes
- btrfs: raid56: don't trust any cached sector in __raid56_parity_recover()
- drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()
- PCI: Add ACS quirk for Broadcom BCM5750x NICs
- irqchip/tegra: Fix overflow implicit truncation warnings
- usb: host: ohci-ppc-of: Fix refcount leak bug
- clk: qcom: ipq8074: dont disable gcc_sleep_clk_src
- gadgetfs: ep_io - wait until IRQ finishes
- cxl: Fix a memory leak in an error handling path
- drivers:md:fix a potential use-after-free bug
- ext4: avoid remove directory when directory is corrupted
- ext4: avoid resizing to a partial cluster size
- tty: serial: Fix refcount leak bug in ucc_uart.c
- vfio: Clear the caps->buf to NULL after free
- mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start
- ALSA: core: Add async signal helpers
- ALSA: timer: Use deferred fasync helper
- smb3: check xattr value length earlier
- powerpc/64: Init jump labels before parse_early_param()
- video: fbdev: i740fb: Check the argument of i740_calc_vclk()
- MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0
- meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init
- ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init
- nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt()
- media: tw686x: Register the irq at the end of probe
- HID: cp2112: prevent a buffer overflow in cp2112_xfer()
- staging: rtl8192u: Fix sleep in atomic context bug in
dm_fsync_timer_callback
- HID: alps: Declare U1_UNICORN_LEGACY support
- tty: n_gsm: fix missing corner cases in gsmld_poll()
- rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge
- gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file
* Bionic update: upstream stable patchset 2022-09-21 (LP: #1990434)
- xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE
- xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in
xfrm_bundle_lookup()
- power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe
- perf/core: Fix data race between perf_event_set_output() and
perf_mmap_close()
- ip: Fix a data-race around sysctl_fwmark_reflect.
- tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.
- tcp: Fix a data-race around sysctl_tcp_probe_threshold.
- tcp: Fix a data-race around sysctl_tcp_probe_interval.
- i2c: cadence: Change large transfer count reset logic to be unconditional
- net: stmmac: fix dma queue left shift overflow issue
- igmp: Fix data-races around sysctl_igmp_llm_reports.
- igmp: Fix a data-race around sysctl_igmp_max_memberships.
- tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
- be2net: Fix buffer overflow in be_get_module_eeprom
- Revert "Revert "char/random: silence a lockdep splat with printk()""
- mm/mempolicy: fix uninit-value in mpol_rebind_policy()
- bpf: Make sure mac_header was set before using it
- drm/tilcdc: Remove obsolete crtc_mode_valid() hack
- tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator
- ALSA: memalloc: Align buffer allocations in page size
- Bluetooth: Add bt_skb_sendmsg helper
- Bluetooth: Add bt_skb_sendmmsg helper
- Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg
- Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg
- Bluetooth: Fix passing NULL to PTR_ERR
- Bluetooth: SCO: Fix sco_send_frame returning skb->len
- Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks
- tty: drivers/tty/, stop using tty_schedule_flip()
- tty: the rest, stop using tty_schedule_flip()
- tty: drop tty_schedule_flip()
- tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
- tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()
- PCI: hv: Fix multi-MSI to allow more than one MSI vector
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()
- PCI: hv: Fix interrupt mapping for multi-MSI
- ip: Fix data-races around sysctl_ip_fwd_use_pmtu.
- ip: Fix data-races around sysctl_ip_nonlocal_bind.
- tcp: Fix data-races around sysctl_tcp_mtu_probing.
- tcp: Fix data-races around sysctl_tcp_reordering.
- tcp: Fix data-races around some timeout sysctl knobs.
- tcp: Fix a data-race around sysctl_tcp_tw_reuse.
- tcp: Fix data-races around sysctl_tcp_fastopen.
- tcp: Fix a data-race around sysctl_tcp_early_retrans.
- tcp: Fix data-races around sysctl_tcp_recovery.
- tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.
- tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.
- tcp: Fix a data-race around sysctl_tcp_retrans_collapse.
- tcp: Fix a data-race around sysctl_tcp_stdurg.
- tcp: Fix a data-race around sysctl_tcp_rfc1337.
- tcp: Fix data-races around sysctl_tcp_max_reordering.
- ima: remove the IMA_TEMPLATE Kconfig option
- [Config] updateconfigs for IMA_TEMPLATE
- tcp: Fix data-races around sysctl_tcp_dsack.
- tcp: Fix a data-race around sysctl_tcp_app_win.
- tcp: Fix a data-race around sysctl_tcp_adv_win_scale.
- tcp: Fix a data-race around sysctl_tcp_frto.
- tcp: Fix a data-race around sysctl_tcp_nometrics_save.
- scsi: ufs: host: Hold reference returned by of_parse_phandle()
- tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit.
- net: ping6: Fix memleak in ipv6_renew_options().
- igmp: Fix data-races around sysctl_igmp_qrv.
- net: sungem_phy: Add of_node_put() for reference returned by of_get_parent()
- tcp: Fix a data-race around sysctl_tcp_min_tso_segs.
- tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen.
- tcp: Fix a data-race around sysctl_tcp_autocorking.
- tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit.
- Documentation: fix sctp_wmem in ip-sysctl.rst
- i40e: Fix interface init with MSI interrupts (no MSI-X)
- sctp: fix sleep in atomic context bug in timer handlers
- perf symbol: Correct address for bss symbols
- scsi: core: Fix race between handling STS_RESOURCE and completion
- ACPI: video: Shortening quirk list by identifying Clevo by board_name only
* unprivileged users may trigger page cache invalidation WARN (LP: #1989144)
- iomap: fix WARN_ON_ONCE() from unprivileged users
* Users belonging to video group may trigger a deadlock WARN (LP: #1990690)
- SAUCE: fbdev: remove redundant lock_fb_info
* ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel
systems (LP: #1990985)
- ACPI: processor_idle: Skip dummy wait if kernel is in guest
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel
systems
* CVE-2022-3028
- af_key: Do not call xfrm_probe_algs in parallel
* CVE-2022-2978
- fs: fix UAF/GPF bug in nilfs_mdt_destroy
* CVE-2022-40768
- scsi: stex: Properly zero out the passthrough command structure
[ Ubuntu: 4.15.0-196.207 ]
* bionic/linux: 4.15.0-196.207 -proposed tracker (LP: #1994992)
* [UBUNTU 18.04] Ubuntu 18.04 kernel 4.15.0-194 crashes on IPL (LP: #1994601)
- SAUCE: Revert "s390/archrandom: simplify back to earlier design and
initialize earlier"
-- Thadeu Lima de Souza Cascardo <email address hidden> Thu, 24 Nov 2022 16:04:40 -0300
-
linux-aws (4.15.0-1144.156) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1144.156 -proposed tracker (LP: #1996392)
[ Ubuntu: 4.15.0-198.209 ]
* bionic/linux: 4.15.0-198.209 -proposed tracker (LP: #1996417)
* CVE-2022-42073
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse
* CVE-2022-42703
- mm/rmap.c: don't reuse anon_vma if we just want a copy
- mm: rmap: explicitly reset vma->anon_vma in unlink_anon_vmas()
* Bionic update: upstream stable patchset 2022-09-21 (LP: #1990434)
- s390/archrandom: prevent CPACF trng invocations in interrupt context
* BUG: scheduling while atomic: ip/1210/0x00000200 on xenial/hwe rumford
(LP: #1995870)
- tg3: prevent scheduling while atomic splat
* Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349)
- bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds()
- selftests/bpf: Fix test_align verifier log patterns
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- kcm: fix strp_init() order and cleanup
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- staging: rtl8712: fix use after free bugs
- vt: Clear selection before changing the font
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- binder: fix UAF of ref->proc caused by race condition
- drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
- Input: rk805-pwrkey - fix module autoloading
- hwmon: (gpio-fan) Fix array out of bounds access
- thunderbolt: Use the actual buffer in tb_async_error()
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- USB: serial: cp210x: add Decagon UCA device id
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- s390: fix nospec table alignments
- USB: core: Prevent nested device-reset calls
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- net: mac802154: Fix a condition in the receive path
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: seq: Fix data-race at module auto-loading
- efi: capsule-loader: Fix use-after-free in efi_capsule_write
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in
il4965_rs_fill_link_cmd()
- fs: only do a memory barrier for the first set_buffer_uptodate()
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/radeon: add a force flush to delay work when radeon
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: usb-audio: Fix an out-of-bounds bug in
__snd_usb_parse_audio_interface()
- kprobes: Prohibit probes in gate area
- scsi: mpt3sas: Fix use-after-free warning
- driver core: Don't probe devices after bus_type.match() probe deferral
- netfilter: br_netfilter: Drop dst references before setting.
- sch_sfb: Don't assume the skb is still around after enqueueing to child
- tipc: fix shift wrapping bug in map_get()
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- sch_sfb: Also store skb len before calling child enqueue
- usb: dwc3: fix PHY disable sequence
- USB: serial: ch341: fix lost character on LCR updates
- USB: serial: ch341: fix disabled rx timer on older devices
- MIPS: loongson32: ls1c: Fix hang during startup
- SUNRPC: use _bh spinlocking on ->transport_lock
- net: dp83822: disable false carrier interrupt
- tcp: annotate data-race around challenge_timestamp
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- i40e: Fix kernel crash during module removal
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- drm/msm/rd: Fix FIFO-full deadlock
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- ieee802154: cc2520: add rc code in cc2520_tx()
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- tracefs: Only clobber mode/uid/gid on remount if asked
- net: dp83822: disable rx error interrupt
* Bionic update: upstream stable patchset 2022-10-06 (LP: #1992112)
- audit: fix potential double free on error path from fsnotify_add_inode_mark
- parisc: Fix exception handler for fldw and fstw instructions
- pinctrl: amd: Don't save/restore interrupt status and wake status bits
- xfrm: fix refcount leak in __xfrm_policy_check()
- rose: check NULL rose_loopback_neigh->loopback
- bonding: 802.3ad: fix no transmission of LACPDUs
- net: ipvtap - add __init/__exit annotations to module init/exit funcs
- netfilter: ebtables: reject blobs that don't provide all entry points
- netfilter: nft_payload: report ERANGE for too long offset and length
- netfilter: nft_payload: do not truncate csum_offset and csum_type
- net: Fix data-races around weight_p and dev_weight_[rt]x_bias.
- ratelimit: Fix data-races in ___ratelimit().
- net: Fix a data-race around sysctl_tstamp_allow_data.
- net: Fix a data-race around sysctl_net_busy_poll.
- net: Fix a data-race around sysctl_net_busy_read.
- net: Fix a data-race around netdev_budget.
- net: Fix a data-race around netdev_budget_usecs.
- net: Fix a data-race around sysctl_somaxconn.
- ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter
- btrfs: check if root is readonly while setting security xattr
- loop: Check for overflow while configuring loop
- asm-generic: sections: refactor memory_intersects
- mm/hugetlb: fix hugetlb not supporting softdirty tracking
- md: call __md_stop_writes in md_stop
- mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
- arm64: map FDT as RW for early_init_dt_scan()
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- x86/bugs: Add "unknown" reporting for MMIO Stale Data
- kbuild: Fix include path in scripts/Makefile.modpost
- Bluetooth: L2CAP: Fix build errors in some archs
- media: pvrusb2: fix memory leak in pvr_probe
- HID: hidraw: fix memory leak in hidraw_release()
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is
dead
- neigh: fix possible DoS due to net iface start/stop loop
- s390/hypfs: avoid error message under KVM
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- kprobes: don't call disarm_kprobe() for disabled kprobes
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net: Fix data-races around netdev_tstamp_prequeue.
- x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry
- s390: fix double free of GS and RI CBs on fork() failure
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
- bpf: Fix the off-by-two error in range markings
* CVE-2022-3239
- media: em28xx: initialize refcount before kref_get
* CVE-2022-2663
- netfilter: nf_conntrack_irc: Fix forged IP logic
* CVE-2022-3061
- video: fbdev: i740fb: Error out if 'pixclock' equals zero
[ Ubuntu: 4.15.0-197.208 ]
* bionic/linux: 4.15.0-197.208 -proposed tracker (LP: #1994998)
* Memory leak while using NFQUEUE to delegate the decision on TCP packets to
userspace processes (LP: #1991774)
- SAUCE: netfilter: nf_queue: Fix memory leak in nf_queue_entry_get_refs
* Bionic update: upstream stable patchset 2022-09-23 (LP: #1990698)
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
- ntfs: fix use-after-free in ntfs_ucsncmp()
- ARM: crypto: comment out gcc warning that breaks clang builds
- mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle.
- ACPI: video: Force backlight native for some TongFang devices
- macintosh/adb: fix oob read in do_adb_query() function
- Makefile: link with -z noexecstack --no-warn-rwx-segments
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments
- ALSA: bcd2000: Fix a UAF bug on the error path of probing
- add barriers to buffer_uptodate and set_buffer_uptodate
- HID: wacom: Don't register pad_input for touch switch
- KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
- KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
- KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP
- ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model
- ALSA: hda/cirrus - support for iMac 12,1 model
- vfs: Check the truncate maximum size in inode_newsize_ok()
- fs: Add missing umask strip in vfs_tmpfile
- usbnet: Fix linkwatch use-after-free on disconnect
- parisc: Fix device names in /proc/iomem
- drm/nouveau: fix another off-by-one in nvbios_addr
- drm/amdgpu: Check BO's requested pinning domains against its
preferred_domains
- iio: light: isl29028: Fix the warning in isl29028_remove()
- fuse: limit nsec
- md-raid10: fix KASAN warning
- ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr()
- PCI: Add defines for normal and subtractive PCI bridges
- powerpc/fsl-pci: Fix Class Code of PCIe Root Port
- powerpc/powernv: Avoid crashing if rng is NULL
- MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- USB: HCD: Fix URB giveback issue in tasklet function
- netfilter: nf_tables: fix null deref due to zeroed list head
- arm64: Do not forget syscall when starting a new thread.
- arm64: fix oops in concurrently setting insn_emulation sysctls
- ext2: Add more validity checks for inode counts
- ARM: dts: imx6ul: add missing properties for sram
- ARM: dts: imx6ul: fix qspi node compatible
- ARM: OMAP2+: display: Fix refcount leak bug
- ACPI: PM: save NVS memory for Lenovo G40-45
- ACPI: LPSS: Fix missing check in register_device_clock()
- PM: hibernate: defer device probing when resuming from hibernation
- selinux: Add boundary check in put_entry()
- ARM: findbit: fix overflowing offset
- ARM: bcm: Fix refcount leak in bcm_kona_smc_init
- x86/pmem: Fix platform-device leak in error path
- ARM: dts: ast2500-evb: fix board compatible
- soc: fsl: guts: machine variable might be unset
- cpufreq: zynq: Fix refcount leak in zynq_get_revision
- ARM: dts: qcom: pm8841: add required thermal-sensor-cells
- arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node
- regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
- thermal/tools/tmon: Include pthread and time headers in tmon.h
- dm: return early from dm_pr_call() if DM device is suspended
- drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()
- drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function
- i2c: Fix a potential use after free
- wifi: iwlegacy: 4965: fix potential off-by-one overflow in
il4965_rs_fill_link_cmd()
- drm: bridge: adv7511: Add check for mipi_dsi_driver_register
- media: hdpvr: fix error value returns in hdpvr_read
- drm/vc4: dsi: Correct DSI divider calculations
- drm/rockchip: vop: Don't crash for invalid duplicate_state()
- drm/mediatek: dpi: Remove output format of YUV
- drm: bridge: sii8620: fix possible off-by-one
- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment
- tcp: make retransmitted SKB fit into the send window
- selftests: timers: valid-adjtimex: build fix for newer toolchains
- selftests: timers: clocksource-switch: fix passing errors from child
- fs: check FMODE_LSEEK to control internal pipe splicing
- wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
- wifi: p54: Fix an error handling path in p54spi_probe()
- wifi: p54: add missing parentheses in p54_flush()
- can: pch_can: do not report txerr and rxerr during bus-off
- can: rcar_can: do not report txerr and rxerr during bus-off
- can: sja1000: do not report txerr and rxerr during bus-off
- can: hi311x: do not report txerr and rxerr during bus-off
- can: sun4i_can: do not report txerr and rxerr during bus-off
- can: usb_8dev: do not report txerr and rxerr during bus-off
- can: error: specify the values of data[5..7] of CAN error frames
- can: pch_can: pch_can_error(): initialize errc before using it
- Bluetooth: hci_intel: Add check for platform_driver_register
- i2c: cadence: Support PEC for SMBus block read
- i2c: mux-gpmux: Add of_node_put() when breaking out of loop
- wifi: wil6210: debugfs: fix uninitialized variable use in
`wil_write_file_wmi()`
- wifi: libertas: Fix possible refcount leak in if_usb_probe()
- net: rose: fix netdev reference changes
- dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock
- mtd: maps: Fix refcount leak in of_flash_probe_versatile
- mtd: maps: Fix refcount leak in ap_flash_init
- mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release
- mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path
- fpga: altera-pr-ip: fix unsigned comparison with less than zero
- usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe
- usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe
- misc: rtsx: Fix an error handling path in rtsx_pci_probe()
- mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch
- memstick/ms_block: Fix some incorrect memory allocation
- memstick/ms_block: Fix a memory leak
- mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R
- scsi: smartpqi: Fix DMA direction for RAID requests
- usb: gadget: udc: amd5536 depends on HAS_DMA
- RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
- gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()
- mmc: cavium-octeon: Add of_node_put() when breaking out of loop
- mmc: cavium-thunderx: Add of_node_put() when breaking out of loop
- USB: serial: fix tty-port initialized comments
- platform/olpc: Fix uninitialized data in debugfs write
- mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region
- RDMA/rxe: Fix error unwind in rxe_create_qp()
- ext4: recover csum seed of tmp_inode after migrating to extents
- jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted
- ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe
- ASoC: codecs: da7210: add check for i2c_add_driver
- ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe
- profiling: fix shift too large makes kernel panic
- tty: n_gsm: fix non flow control frames during mux flow off
- tty: n_gsm: fix packet re-transmission without open control channel
- tty: n_gsm: fix race condition in gsmld_write()
- remoteproc: qcom: wcnss: Fix handling of IRQs
- vfio/ccw: Do not change FSM state in subchannel event
- tty: n_gsm: fix wrong T1 retry count handling
- tty: n_gsm: fix DM command
- iommu/exynos: Handle failed IOMMU device registration properly
- kfifo: fix kfifo_to_user() return type
- mfd: t7l66xb: Drop platform disable callback
- iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop
- s390/zcore: fix race when reading from hardware system area
- video: fbdev: amba-clcd: Fix refcount leak bugs
- video: fbdev: sis: fix typos in SiS_GetModeID()
- powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and
alias
- powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader
- powerpc/xive: Fix refcount leak in xive_get_max_prio
- powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address
- kprobes: Forbid probing on trampoline and BPF code areas
- powerpc/pci: Fix PHB numbering when using opal-phbid
- genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO
- x86/numa: Use cpumask_available instead of hardcoded NULL check
- video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()
- tools/thermal: Fix possible path truncations
- video: fbdev: vt8623fb: Check the size of screen before memset_io()
- video: fbdev: arkfb: Check the size of screen before memset_io()
- video: fbdev: s3fb: Check the size of screen before memset_io()
- scsi: zfcp: Fix missing auto port scan and thus missing target ports
- x86/olpc: fix 'logical not is only applied to the left hand side'
- spmi: trace: fix stack-out-of-bound access in SPMI tracing functions
- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
- ext4: make sure ext4_append() always allocates new block
- ext4: fix use-after-free in ext4_xattr_set_entry
- ext4: update s_overhead_clusters in the superblock during an on-line resize
- ext4: fix extent status tree race in writeback error recovery path
- ext4: correct max_inline_xattr_value_size computing
- ext4: correct the misjudgment in ext4_iget_extra_inode
- intel_th: pci: Add Raptor Lake-S CPU support
- intel_th: pci: Add Raptor Lake-S PCH support
- intel_th: pci: Add Meteor Lake-P support
- dm raid: fix address sanitizer warning in raid_resume
- dm raid: fix address sanitizer warning in raid_status
- btrfs: reject log replay if there is unsupported RO compat flag
- KVM: Add infrastructure and macro to mark VM as bugged
- KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq
- KVM: x86: Avoid theoretical NULL pointer dereference in
kvm_irq_delivery_to_apic_fast()
- tcp: fix over estimation in sk_forced_mem_schedule()
- scsi: sg: Allow waiting for commands to complete on removed device
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
- net/9p: Initialize the iounit field during fid creation
- net_sched: cls_route: disallow handle of 0
- powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E
- ALSA: info: Fix llseek return value when using callback
- rds: add missing barrier to release_refill
- ata: libata-eh: Add missing command name
- btrfs: fix lost error handling when looking up extended ref on log replay
- can: ems_usb: fix clang's -Wunaligned-access warning
- apparmor: fix quiet_denied for file rules
- apparmor: Fix failed mount permission check error message
- apparmor: fix aa_label_asxprint return check
- apparmor: fix reference count leak in aa_pivotroot()
- NFSv4: Fix races in the legacy idmapper upcall
- NFSv4.1: RECLAIM_COMPLETE must handle EACCES
- SUNRPC: Reinitialise the backchannel request buffers before reuse
- pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map
- pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed
- ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool
- geneve: do not use RT_TOS for IPv6 flowlabel
- vsock: Fix memory leak in vsock_connect()
- vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout()
- tools build: Switch to new openssl API for test-libcrypto
- xen/xenbus: fix return type in xenbus_file_read()
- atm: idt77252: fix use-after-free bugs caused by tst_timer
- nios2: page fault et.al. are *not* restartable syscalls...
- nios2: don't leave NULLs in sys_call_table[]
- nios2: traced syscall does need to check the syscall number
- nios2: fix syscall restart checks
- nios2: restarts apply only to the first sigframe we build...
- nios2: add force_successful_syscall_return()
- netfilter: nf_tables: really skip inactive sets when allocating name
- powerpc/pci: Fix get_phb_number() locking
- i40e: Fix to stop tx_timeout recovery if GLOBR fails
- fec: Fix timer capture timing in `fec_ptp_enable_pps()`
- igb: Add lock to avoid data race
- kbuild: clear LDFLAGS in the top Makefile
- btrfs: only write the sectors in the vertical stripe which has data stripes
- btrfs: raid56: don't trust any cached sector in __raid56_parity_recover()
- drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()
- PCI: Add ACS quirk for Broadcom BCM5750x NICs
- irqchip/tegra: Fix overflow implicit truncation warnings
- usb: host: ohci-ppc-of: Fix refcount leak bug
- clk: qcom: ipq8074: dont disable gcc_sleep_clk_src
- gadgetfs: ep_io - wait until IRQ finishes
- cxl: Fix a memory leak in an error handling path
- drivers:md:fix a potential use-after-free bug
- ext4: avoid remove directory when directory is corrupted
- ext4: avoid resizing to a partial cluster size
- tty: serial: Fix refcount leak bug in ucc_uart.c
- vfio: Clear the caps->buf to NULL after free
- mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start
- ALSA: core: Add async signal helpers
- ALSA: timer: Use deferred fasync helper
- smb3: check xattr value length earlier
- powerpc/64: Init jump labels before parse_early_param()
- video: fbdev: i740fb: Check the argument of i740_calc_vclk()
- MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0
- meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init
- ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init
- nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt()
- media: tw686x: Register the irq at the end of probe
- HID: cp2112: prevent a buffer overflow in cp2112_xfer()
- staging: rtl8192u: Fix sleep in atomic context bug in
dm_fsync_timer_callback
- HID: alps: Declare U1_UNICORN_LEGACY support
- tty: n_gsm: fix missing corner cases in gsmld_poll()
- rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge
- gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file
* Bionic update: upstream stable patchset 2022-09-21 (LP: #1990434)
- xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE
- xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in
xfrm_bundle_lookup()
- power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe
- perf/core: Fix data race between perf_event_set_output() and
perf_mmap_close()
- ip: Fix a data-race around sysctl_fwmark_reflect.
- tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.
- tcp: Fix a data-race around sysctl_tcp_probe_threshold.
- tcp: Fix a data-race around sysctl_tcp_probe_interval.
- i2c: cadence: Change large transfer count reset logic to be unconditional
- net: stmmac: fix dma queue left shift overflow issue
- igmp: Fix data-races around sysctl_igmp_llm_reports.
- igmp: Fix a data-race around sysctl_igmp_max_memberships.
- tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
- be2net: Fix buffer overflow in be_get_module_eeprom
- Revert "Revert "char/random: silence a lockdep splat with printk()""
- mm/mempolicy: fix uninit-value in mpol_rebind_policy()
- bpf: Make sure mac_header was set before using it
- drm/tilcdc: Remove obsolete crtc_mode_valid() hack
- tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator
- ALSA: memalloc: Align buffer allocations in page size
- Bluetooth: Add bt_skb_sendmsg helper
- Bluetooth: Add bt_skb_sendmmsg helper
- Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg
- Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg
- Bluetooth: Fix passing NULL to PTR_ERR
- Bluetooth: SCO: Fix sco_send_frame returning skb->len
- Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks
- tty: drivers/tty/, stop using tty_schedule_flip()
- tty: the rest, stop using tty_schedule_flip()
- tty: drop tty_schedule_flip()
- tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
- tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()
- PCI: hv: Fix multi-MSI to allow more than one MSI vector
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()
- PCI: hv: Fix interrupt mapping for multi-MSI
- ip: Fix data-races around sysctl_ip_fwd_use_pmtu.
- ip: Fix data-races around sysctl_ip_nonlocal_bind.
- tcp: Fix data-races around sysctl_tcp_mtu_probing.
- tcp: Fix data-races around sysctl_tcp_reordering.
- tcp: Fix data-races around some timeout sysctl knobs.
- tcp: Fix a data-race around sysctl_tcp_tw_reuse.
- tcp: Fix data-races around sysctl_tcp_fastopen.
- tcp: Fix a data-race around sysctl_tcp_early_retrans.
- tcp: Fix data-races around sysctl_tcp_recovery.
- tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.
- tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.
- tcp: Fix a data-race around sysctl_tcp_retrans_collapse.
- tcp: Fix a data-race around sysctl_tcp_stdurg.
- tcp: Fix a data-race around sysctl_tcp_rfc1337.
- tcp: Fix data-races around sysctl_tcp_max_reordering.
- ima: remove the IMA_TEMPLATE Kconfig option
- [Config] updateconfigs for IMA_TEMPLATE
- tcp: Fix data-races around sysctl_tcp_dsack.
- tcp: Fix a data-race around sysctl_tcp_app_win.
- tcp: Fix a data-race around sysctl_tcp_adv_win_scale.
- tcp: Fix a data-race around sysctl_tcp_frto.
- tcp: Fix a data-race around sysctl_tcp_nometrics_save.
- scsi: ufs: host: Hold reference returned by of_parse_phandle()
- tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit.
- net: ping6: Fix memleak in ipv6_renew_options().
- igmp: Fix data-races around sysctl_igmp_qrv.
- net: sungem_phy: Add of_node_put() for reference returned by of_get_parent()
- tcp: Fix a data-race around sysctl_tcp_min_tso_segs.
- tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen.
- tcp: Fix a data-race around sysctl_tcp_autocorking.
- tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit.
- Documentation: fix sctp_wmem in ip-sysctl.rst
- i40e: Fix interface init with MSI interrupts (no MSI-X)
- sctp: fix sleep in atomic context bug in timer handlers
- perf symbol: Correct address for bss symbols
- scsi: core: Fix race between handling STS_RESOURCE and completion
- ACPI: video: Shortening quirk list by identifying Clevo by board_name only
* unprivileged users may trigger page cache invalidation WARN (LP: #1989144)
- iomap: fix WARN_ON_ONCE() from unprivileged users
* Users belonging to video group may trigger a deadlock WARN (LP: #1990690)
- SAUCE: fbdev: remove redundant lock_fb_info
* ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel
systems (LP: #1990985)
- ACPI: processor_idle: Skip dummy wait if kernel is in guest
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel
systems
* CVE-2022-3028
- af_key: Do not call xfrm_probe_algs in parallel
* CVE-2022-2978
- fs: fix UAF/GPF bug in nilfs_mdt_destroy
* CVE-2022-40768
- scsi: stex: Properly zero out the passthrough command structure
[ Ubuntu: 4.15.0-196.207 ]
* bionic/linux: 4.15.0-196.207 -proposed tracker (LP: #1994992)
* [UBUNTU 18.04] Ubuntu 18.04 kernel 4.15.0-194 crashes on IPL (LP: #1994601)
- SAUCE: Revert "s390/archrandom: simplify back to earlier design and
initialize earlier"
-- Ian May <email address hidden> Thu, 17 Nov 2022 09:51:32 -0600
-
linux-aws (4.15.0-1143.155) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1143.155 -proposed tracker (LP: #1992072)
[ Ubuntu: 4.15.0-195.206 ]
* bionic/linux: 4.15.0-195.206 -proposed tracker (LP: #1992097)
* Memory leak while using NFQUEUE to delegate the decision on TCP packets to
userspace processes (LP: #1991774)
- SAUCE: netfilter: nf_queue: Fix memory leak in nf_queue_entry_get_refs
* Bionic update: upstream stable patchset 2022-09-23 (LP: #1990698)
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
- ntfs: fix use-after-free in ntfs_ucsncmp()
- ARM: crypto: comment out gcc warning that breaks clang builds
- mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle.
- ACPI: video: Force backlight native for some TongFang devices
- macintosh/adb: fix oob read in do_adb_query() function
- Makefile: link with -z noexecstack --no-warn-rwx-segments
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments
- ALSA: bcd2000: Fix a UAF bug on the error path of probing
- add barriers to buffer_uptodate and set_buffer_uptodate
- HID: wacom: Don't register pad_input for touch switch
- KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
- KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
- KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP
- ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model
- ALSA: hda/cirrus - support for iMac 12,1 model
- vfs: Check the truncate maximum size in inode_newsize_ok()
- fs: Add missing umask strip in vfs_tmpfile
- usbnet: Fix linkwatch use-after-free on disconnect
- parisc: Fix device names in /proc/iomem
- drm/nouveau: fix another off-by-one in nvbios_addr
- drm/amdgpu: Check BO's requested pinning domains against its
preferred_domains
- iio: light: isl29028: Fix the warning in isl29028_remove()
- fuse: limit nsec
- md-raid10: fix KASAN warning
- ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr()
- PCI: Add defines for normal and subtractive PCI bridges
- powerpc/fsl-pci: Fix Class Code of PCIe Root Port
- powerpc/powernv: Avoid crashing if rng is NULL
- MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- USB: HCD: Fix URB giveback issue in tasklet function
- netfilter: nf_tables: fix null deref due to zeroed list head
- arm64: Do not forget syscall when starting a new thread.
- arm64: fix oops in concurrently setting insn_emulation sysctls
- ext2: Add more validity checks for inode counts
- ARM: dts: imx6ul: add missing properties for sram
- ARM: dts: imx6ul: fix qspi node compatible
- ARM: OMAP2+: display: Fix refcount leak bug
- ACPI: PM: save NVS memory for Lenovo G40-45
- ACPI: LPSS: Fix missing check in register_device_clock()
- PM: hibernate: defer device probing when resuming from hibernation
- selinux: Add boundary check in put_entry()
- ARM: findbit: fix overflowing offset
- ARM: bcm: Fix refcount leak in bcm_kona_smc_init
- x86/pmem: Fix platform-device leak in error path
- ARM: dts: ast2500-evb: fix board compatible
- soc: fsl: guts: machine variable might be unset
- cpufreq: zynq: Fix refcount leak in zynq_get_revision
- ARM: dts: qcom: pm8841: add required thermal-sensor-cells
- arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node
- regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
- thermal/tools/tmon: Include pthread and time headers in tmon.h
- dm: return early from dm_pr_call() if DM device is suspended
- drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()
- drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function
- i2c: Fix a potential use after free
- wifi: iwlegacy: 4965: fix potential off-by-one overflow in
il4965_rs_fill_link_cmd()
- drm: bridge: adv7511: Add check for mipi_dsi_driver_register
- media: hdpvr: fix error value returns in hdpvr_read
- drm/vc4: dsi: Correct DSI divider calculations
- drm/rockchip: vop: Don't crash for invalid duplicate_state()
- drm/mediatek: dpi: Remove output format of YUV
- drm: bridge: sii8620: fix possible off-by-one
- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment
- tcp: make retransmitted SKB fit into the send window
- selftests: timers: valid-adjtimex: build fix for newer toolchains
- selftests: timers: clocksource-switch: fix passing errors from child
- fs: check FMODE_LSEEK to control internal pipe splicing
- wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
- wifi: p54: Fix an error handling path in p54spi_probe()
- wifi: p54: add missing parentheses in p54_flush()
- can: pch_can: do not report txerr and rxerr during bus-off
- can: rcar_can: do not report txerr and rxerr during bus-off
- can: sja1000: do not report txerr and rxerr during bus-off
- can: hi311x: do not report txerr and rxerr during bus-off
- can: sun4i_can: do not report txerr and rxerr during bus-off
- can: usb_8dev: do not report txerr and rxerr during bus-off
- can: error: specify the values of data[5..7] of CAN error frames
- can: pch_can: pch_can_error(): initialize errc before using it
- Bluetooth: hci_intel: Add check for platform_driver_register
- i2c: cadence: Support PEC for SMBus block read
- i2c: mux-gpmux: Add of_node_put() when breaking out of loop
- wifi: wil6210: debugfs: fix uninitialized variable use in
`wil_write_file_wmi()`
- wifi: libertas: Fix possible refcount leak in if_usb_probe()
- net: rose: fix netdev reference changes
- dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock
- mtd: maps: Fix refcount leak in of_flash_probe_versatile
- mtd: maps: Fix refcount leak in ap_flash_init
- mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release
- mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path
- fpga: altera-pr-ip: fix unsigned comparison with less than zero
- usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe
- usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe
- misc: rtsx: Fix an error handling path in rtsx_pci_probe()
- mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch
- memstick/ms_block: Fix some incorrect memory allocation
- memstick/ms_block: Fix a memory leak
- mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R
- scsi: smartpqi: Fix DMA direction for RAID requests
- usb: gadget: udc: amd5536 depends on HAS_DMA
- RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
- gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()
- mmc: cavium-octeon: Add of_node_put() when breaking out of loop
- mmc: cavium-thunderx: Add of_node_put() when breaking out of loop
- USB: serial: fix tty-port initialized comments
- platform/olpc: Fix uninitialized data in debugfs write
- mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region
- RDMA/rxe: Fix error unwind in rxe_create_qp()
- ext4: recover csum seed of tmp_inode after migrating to extents
- jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted
- ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe
- ASoC: codecs: da7210: add check for i2c_add_driver
- ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe
- profiling: fix shift too large makes kernel panic
- tty: n_gsm: fix non flow control frames during mux flow off
- tty: n_gsm: fix packet re-transmission without open control channel
- tty: n_gsm: fix race condition in gsmld_write()
- remoteproc: qcom: wcnss: Fix handling of IRQs
- vfio/ccw: Do not change FSM state in subchannel event
- tty: n_gsm: fix wrong T1 retry count handling
- tty: n_gsm: fix DM command
- iommu/exynos: Handle failed IOMMU device registration properly
- kfifo: fix kfifo_to_user() return type
- mfd: t7l66xb: Drop platform disable callback
- iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop
- s390/zcore: fix race when reading from hardware system area
- video: fbdev: amba-clcd: Fix refcount leak bugs
- video: fbdev: sis: fix typos in SiS_GetModeID()
- powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and
alias
- powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader
- powerpc/xive: Fix refcount leak in xive_get_max_prio
- powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address
- kprobes: Forbid probing on trampoline and BPF code areas
- powerpc/pci: Fix PHB numbering when using opal-phbid
- genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO
- x86/numa: Use cpumask_available instead of hardcoded NULL check
- video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()
- tools/thermal: Fix possible path truncations
- video: fbdev: vt8623fb: Check the size of screen before memset_io()
- video: fbdev: arkfb: Check the size of screen before memset_io()
- video: fbdev: s3fb: Check the size of screen before memset_io()
- scsi: zfcp: Fix missing auto port scan and thus missing target ports
- x86/olpc: fix 'logical not is only applied to the left hand side'
- spmi: trace: fix stack-out-of-bound access in SPMI tracing functions
- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
- ext4: make sure ext4_append() always allocates new block
- ext4: fix use-after-free in ext4_xattr_set_entry
- ext4: update s_overhead_clusters in the superblock during an on-line resize
- ext4: fix extent status tree race in writeback error recovery path
- ext4: correct max_inline_xattr_value_size computing
- ext4: correct the misjudgment in ext4_iget_extra_inode
- intel_th: pci: Add Raptor Lake-S CPU support
- intel_th: pci: Add Raptor Lake-S PCH support
- intel_th: pci: Add Meteor Lake-P support
- dm raid: fix address sanitizer warning in raid_resume
- dm raid: fix address sanitizer warning in raid_status
- btrfs: reject log replay if there is unsupported RO compat flag
- KVM: Add infrastructure and macro to mark VM as bugged
- KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq
- KVM: x86: Avoid theoretical NULL pointer dereference in
kvm_irq_delivery_to_apic_fast()
- tcp: fix over estimation in sk_forced_mem_schedule()
- scsi: sg: Allow waiting for commands to complete on removed device
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
- net/9p: Initialize the iounit field during fid creation
- net_sched: cls_route: disallow handle of 0
- powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E
- ALSA: info: Fix llseek return value when using callback
- rds: add missing barrier to release_refill
- ata: libata-eh: Add missing command name
- btrfs: fix lost error handling when looking up extended ref on log replay
- can: ems_usb: fix clang's -Wunaligned-access warning
- apparmor: fix quiet_denied for file rules
- apparmor: Fix failed mount permission check error message
- apparmor: fix aa_label_asxprint return check
- apparmor: fix reference count leak in aa_pivotroot()
- NFSv4: Fix races in the legacy idmapper upcall
- NFSv4.1: RECLAIM_COMPLETE must handle EACCES
- SUNRPC: Reinitialise the backchannel request buffers before reuse
- pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map
- pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed
- ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool
- geneve: do not use RT_TOS for IPv6 flowlabel
- vsock: Fix memory leak in vsock_connect()
- vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout()
- tools build: Switch to new openssl API for test-libcrypto
- xen/xenbus: fix return type in xenbus_file_read()
- atm: idt77252: fix use-after-free bugs caused by tst_timer
- nios2: page fault et.al. are *not* restartable syscalls...
- nios2: don't leave NULLs in sys_call_table[]
- nios2: traced syscall does need to check the syscall number
- nios2: fix syscall restart checks
- nios2: restarts apply only to the first sigframe we build...
- nios2: add force_successful_syscall_return()
- netfilter: nf_tables: really skip inactive sets when allocating name
- powerpc/pci: Fix get_phb_number() locking
- i40e: Fix to stop tx_timeout recovery if GLOBR fails
- fec: Fix timer capture timing in `fec_ptp_enable_pps()`
- igb: Add lock to avoid data race
- kbuild: clear LDFLAGS in the top Makefile
- btrfs: only write the sectors in the vertical stripe which has data stripes
- btrfs: raid56: don't trust any cached sector in __raid56_parity_recover()
- drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()
- PCI: Add ACS quirk for Broadcom BCM5750x NICs
- irqchip/tegra: Fix overflow implicit truncation warnings
- usb: host: ohci-ppc-of: Fix refcount leak bug
- clk: qcom: ipq8074: dont disable gcc_sleep_clk_src
- gadgetfs: ep_io - wait until IRQ finishes
- cxl: Fix a memory leak in an error handling path
- drivers:md:fix a potential use-after-free bug
- ext4: avoid remove directory when directory is corrupted
- ext4: avoid resizing to a partial cluster size
- tty: serial: Fix refcount leak bug in ucc_uart.c
- vfio: Clear the caps->buf to NULL after free
- mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start
- ALSA: core: Add async signal helpers
- ALSA: timer: Use deferred fasync helper
- smb3: check xattr value length earlier
- powerpc/64: Init jump labels before parse_early_param()
- video: fbdev: i740fb: Check the argument of i740_calc_vclk()
- MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0
- meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init
- ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init
- nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt()
- media: tw686x: Register the irq at the end of probe
- HID: cp2112: prevent a buffer overflow in cp2112_xfer()
- staging: rtl8192u: Fix sleep in atomic context bug in
dm_fsync_timer_callback
- HID: alps: Declare U1_UNICORN_LEGACY support
- tty: n_gsm: fix missing corner cases in gsmld_poll()
- rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge
- gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file
* Bionic update: upstream stable patchset 2022-09-21 (LP: #1990434)
- xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE
- xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in
xfrm_bundle_lookup()
- power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe
- perf/core: Fix data race between perf_event_set_output() and
perf_mmap_close()
- ip: Fix a data-race around sysctl_fwmark_reflect.
- tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.
- tcp: Fix a data-race around sysctl_tcp_probe_threshold.
- tcp: Fix a data-race around sysctl_tcp_probe_interval.
- i2c: cadence: Change large transfer count reset logic to be unconditional
- net: stmmac: fix dma queue left shift overflow issue
- igmp: Fix data-races around sysctl_igmp_llm_reports.
- igmp: Fix a data-race around sysctl_igmp_max_memberships.
- tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
- be2net: Fix buffer overflow in be_get_module_eeprom
- Revert "Revert "char/random: silence a lockdep splat with printk()""
- mm/mempolicy: fix uninit-value in mpol_rebind_policy()
- bpf: Make sure mac_header was set before using it
- drm/tilcdc: Remove obsolete crtc_mode_valid() hack
- tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator
- ALSA: memalloc: Align buffer allocations in page size
- Bluetooth: Add bt_skb_sendmsg helper
- Bluetooth: Add bt_skb_sendmmsg helper
- Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg
- Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg
- Bluetooth: Fix passing NULL to PTR_ERR
- Bluetooth: SCO: Fix sco_send_frame returning skb->len
- Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks
- tty: drivers/tty/, stop using tty_schedule_flip()
- tty: the rest, stop using tty_schedule_flip()
- tty: drop tty_schedule_flip()
- tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
- tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()
- PCI: hv: Fix multi-MSI to allow more than one MSI vector
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()
- PCI: hv: Fix interrupt mapping for multi-MSI
- ip: Fix data-races around sysctl_ip_fwd_use_pmtu.
- ip: Fix data-races around sysctl_ip_nonlocal_bind.
- tcp: Fix data-races around sysctl_tcp_mtu_probing.
- tcp: Fix data-races around sysctl_tcp_reordering.
- tcp: Fix data-races around some timeout sysctl knobs.
- tcp: Fix a data-race around sysctl_tcp_tw_reuse.
- tcp: Fix data-races around sysctl_tcp_fastopen.
- tcp: Fix a data-race around sysctl_tcp_early_retrans.
- tcp: Fix data-races around sysctl_tcp_recovery.
- tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.
- tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.
- tcp: Fix a data-race around sysctl_tcp_retrans_collapse.
- tcp: Fix a data-race around sysctl_tcp_stdurg.
- tcp: Fix a data-race around sysctl_tcp_rfc1337.
- tcp: Fix data-races around sysctl_tcp_max_reordering.
- ima: remove the IMA_TEMPLATE Kconfig option
- [Config] updateconfigs for IMA_TEMPLATE
- s390/archrandom: prevent CPACF trng invocations in interrupt context
- tcp: Fix data-races around sysctl_tcp_dsack.
- tcp: Fix a data-race around sysctl_tcp_app_win.
- tcp: Fix a data-race around sysctl_tcp_adv_win_scale.
- tcp: Fix a data-race around sysctl_tcp_frto.
- tcp: Fix a data-race around sysctl_tcp_nometrics_save.
- scsi: ufs: host: Hold reference returned by of_parse_phandle()
- tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit.
- net: ping6: Fix memleak in ipv6_renew_options().
- igmp: Fix data-races around sysctl_igmp_qrv.
- net: sungem_phy: Add of_node_put() for reference returned by of_get_parent()
- tcp: Fix a data-race around sysctl_tcp_min_tso_segs.
- tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen.
- tcp: Fix a data-race around sysctl_tcp_autocorking.
- tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit.
- Documentation: fix sctp_wmem in ip-sysctl.rst
- i40e: Fix interface init with MSI interrupts (no MSI-X)
- sctp: fix sleep in atomic context bug in timer handlers
- perf symbol: Correct address for bss symbols
- scsi: core: Fix race between handling STS_RESOURCE and completion
- ACPI: video: Shortening quirk list by identifying Clevo by board_name only
* unprivileged users may trigger page cache invalidation WARN (LP: #1989144)
- iomap: fix WARN_ON_ONCE() from unprivileged users
* Users belonging to video group may trigger a deadlock WARN (LP: #1990690)
- SAUCE: fbdev: remove redundant lock_fb_info
* ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel
systems (LP: #1990985)
- ACPI: processor_idle: Skip dummy wait if kernel is in guest
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel
systems
* CVE-2022-3028
- af_key: Do not call xfrm_probe_algs in parallel
* CVE-2022-2978
- fs: fix UAF/GPF bug in nilfs_mdt_destroy
* CVE-2022-40768
- scsi: stex: Properly zero out the passthrough command structure
-- Ian May <email address hidden> Fri, 28 Oct 2022 13:39:37 -0500
-
linux-aws (4.15.0-1142.154) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1142.154 -proposed tracker (LP: #1989910)
* Miscellaneous Ubuntu changes
- [Config] aws: updateconfigs for RANDOM_TRUST_CPU
[ Ubuntu: 4.15.0-194.205 ]
* bionic/linux: 4.15.0-194.205 -proposed tracker (LP: #1989935)
* Bionic update: upstream stable patchset 2022-09-14 (LP: #1989625)
- random: schedule mix_interrupt_randomness() less often
- ata: libata: add qc->flags in ata_qc_complete_template tracepoint
- dm era: commit metadata in postsuspend after worker stops
- random: quiet urandom warning ratelimit suppression message
- USB: serial: option: add Telit LE910Cx 0x1250 composition
- USB: serial: option: add Quectel EM05-G modem
- USB: serial: option: add Quectel RM500K module support
- bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers
- x86/xen: Remove undefined behavior in setup_features()
- MIPS: Remove repetitive increase irq_err_count
- igb: Make DMA faster when CPU is active on the PCIe link
- iio: adc: vf610: fix conversion mode sysfs node name
- usb: chipidea: udc: check request status before setting device address
- iio:accel:bma180: rearrange iio trigger get and register
- iio: accel: mma8452: ignore the return value of reset operation
- iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up()
- iio: trigger: sysfs: fix use-after-free on remove
- iio: adc: axp288: Override TS pin bias current for some models
- xtensa: xtfpga: Fix refcount leak bug in setup
- xtensa: Fix refcount leak bug in time.c
- powerpc: Enable execve syscall exit tracepoint
- powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address
- powerpc/powernv: wire up rng during setup_arch
- ARM: dts: imx6qdl: correct PU regulator ramp delay
- ARM: exynos: Fix refcount leak in exynos_map_pmu
- ARM: Fix refcount leak in axxia_boot_secondary
- ARM: cns3xxx: Fix refcount leak in cns3xxx_init
- modpost: fix section mismatch check for exported init/exit sections
- powerpc/pseries: wire up rng during setup_arch()
- drm: remove drm_fb_helper_modinit
- xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
- fdt: Update CRC check for rng-seed
- kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add]
- swiotlb: skip swiotlb_bounce when orig_addr is zero
- net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms
- afs: Fix dynamic root getattr
- iio:chemical:ccs811: rearrange iio trigger get and register
- soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
- nvdimm: Fix badblocks clear off-by-one error
- dm raid: fix accesses beyond end of raid member array
- dm raid: fix KASAN warning in raid5_add_disks
- s390/archrandom: simplify back to earlier design and initialize earlier
- SUNRPC: Fix READ_PLUS crasher
- net: rose: fix UAF bugs caused by timer handler
- net: usb: ax88179_178a: Fix packet receiving
- RDMA/qedr: Fix reporting QP timeout attribute
- usbnet: fix memory allocation in helpers
- net: ipv6: unexport __init-annotated seg6_hmac_net_init()
- caif_virtio: fix race between virtio_device_ready() and ndo_open()
- netfilter: nft_dynset: restore set element counter when failing to update
- net: bonding: fix possible NULL deref in rlb code
- net: bonding: fix use-after-free after 802.3ad slave unbind
- nfc: nfcmrvl: Fix irq_of_parse_and_map() return value
- NFC: nxp-nci: Don't issue a zero length i2c_master_read()
- xen/gntdev: Avoid blocking in unmap_grant_pages()
- hwmon: (ibmaem) don't call platform_device_del() if platform_device_add()
fails
- sit: use min
- ipv6/sit: fix ipip6_tunnel_get_prl return value
- net: Rename and export copy_skb_header
- xen/blkfront: fix leaking data in shared pages
- xen/netfront: fix leaking data in shared pages
- xen/netfront: force data bouncing when backend is untrusted
- xen/blkfront: force data bouncing when backend is untrusted
- xen/arm: Fix race in RB-tree based P2M accounting
- net: usb: qmi_wwan: add Telit 0x1060 composition
- net: usb: qmi_wwan: add Telit 0x1070 composition
- virtio-net: fix race between ndo_open() and virtio_device_ready()
- net: tun: unlink NAPI from device on destruction
- net: tun: stop NAPI when detaching queues
- esp: limit skb_page_frag_refill use to a single page
- mm/slub: add missing TID updates on slab deactivation
- can: grcan: grcan_probe(): remove extra of_node_get()
- can: gs_usb: gs_usb_open/close(): fix memory leak
- usbnet: fix memory leak in error case
- net: rose: fix UAF bug caused by rose_t0timer_expiry
- iommu/vt-d: Fix PCI bus rescan device hot add
- video: of_display_timing.h: include errno.h
- powerpc/powernv: delay rng platform device creation until later in boot
- xfs: remove incorrect ASSERT in xfs_rename
- pinctrl: sunxi: a83t: Fix NAND function name for some pins
- i2c: cadence: Unregister the clk notifier in error path
- ida: don't use BUG_ON() for debugging
- dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly
- dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate
- dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
- ARM: meson: Fix refcount leak in meson_smp_prepare_cpus
- dmaengine: pl330: Fix lockdep warning about non-static key
- ALSA: hda - Add fixup for Dell Latitidue E5430
- ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model
- xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue
- net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale
pointer
- ARM: 9213/1: Print message about disabled Spectre workarounds only once
- ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- nilfs2: fix incorrect masking of permission flags for symlinks
- net: dsa: bcm_sf2: force pause link settings
- ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle
- inetpeer: Fix data-races around sysctl.
- net: Fix data-races around sysctl_mem.
- cipso: Fix data-races around sysctl.
- icmp: Fix data-races around sysctl.
- ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero
- icmp: Fix a data-race around sysctl_icmp_ratelimit.
- icmp: Fix a data-race around sysctl_icmp_ratemask.
- ipv4: Fix data-races around sysctl_ip_dynaddr.
- sfc: fix use after free when disabling sriov
- seg6: fix skb checksum evaluation in SRH encapsulation/insertion
- seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors
- sfc: fix kernel panic when creating VF
- virtio_mmio: Add missing PM calls to freeze/restore
- virtio_mmio: Restore guest page size on resume
- netfilter: br_netfilter: do not skip all hooks with 0 priority
- cpufreq: pmac32-cpufreq: Fix refcount leak bug
- platform/x86: hp-wmi: Ignore Sanitization Mode event
- net: tipc: fix possible refcount leak in tipc_sk_create()
- NFC: nxp-nci: don't print header length mismatch on i2c error
- net: sfp: fix memory leak in sfp_probe()
- ASoC: ops: Fix off by one in range control validation
- ASoC: wm5110: Fix DRE control
- irqchip: or1k-pic: Undefine mask_ack for level triggered hardware
- x86: Clear .brk area at early boot
- signal handling: don't use BUG_ON() for debugging
- USB: serial: ftdi_sio: add Belimo device ids
- usb: dwc3: gadget: Fix event pending check
- tty: serial: samsung_tty: set dma burst_size to 1
- serial: 8250: fix return error code in serial8250_request_std_resource()
- mm: invalidate hwpoison page cache page in fault path
- can: m_can: m_can_tx_handler(): fix use after free of skb
- ASoC: sgtl5000: Fix noise on shutdown/remove
- serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle
* Bionic update: upstream stable patchset 2022-09-12 (LP: #1989374)
- [Config] dkms-versions -- force wireguard-dkms update
- Revert "random: Make getrandom() ready earlier"
- 9p: missing chunk of "fs/9p: Don't update file type when updating file
attributes"
- crypto: chacha20 - Fix keystream alignment for chacha20_block()
- random: always fill buffer in get_random_bytes_wait
- random: optimize add_interrupt_randomness
- drivers/char/random.c: remove unused dont_count_entropy
- random: Fix whitespace pre random-bytes work
- random: Return nbytes filled from hw RNG
- [Config] updateconfigs for RANDOM_TRUST_CPU, RANDOM_TRUST_BOOTLOADER
- random: add a config option to trust the CPU's hwrng
- random: remove preempt disabled region
- random: Make crng state queryable
- random: make CPU trust a boot parameter
- drivers/char/random.c: constify poolinfo_table
- drivers/char/random.c: remove unused stuct poolinfo::poolbits
- drivers/char/random.c: make primary_crng static
- random: only read from /dev/random after its pool has received 128 bits
- random: move rand_initialize() earlier
- random: document get_random_int() family
- latent_entropy: avoid build error when plugin cflags are not set
- random: fix soft lockup when trying to read from an uninitialized blocking
pool
- random: Support freezable kthreads in add_hwgenerator_randomness()
- fdt: add support for rng-seed
- random: Use wait_event_freezable() in add_hwgenerator_randomness()
- char/random: Add a newline at the end of the file
- Revert "hwrng: core - Freeze khwrng thread during suspend"
- crypto: Deduplicate le32_to_cpu_array() and cpu_to_le32_array()
- crypto: blake2s - generic C library implementation and selftest
- lib/crypto: blake2s: move hmac construction into wireguard
- lib/crypto: sha1: re-roll loops to reduce code size
- random: Don't wake crng_init_wait when crng_init == 1
- random: Add a urandom_read_nowait() for random APIs that don't warn
- random: add GRND_INSECURE to return best-effort non-cryptographic bytes
- random: ignore GRND_RANDOM in getentropy(2)
- random: make /dev/random be almost like /dev/urandom
- random: fix crash on multiple early calls to add_bootloader_randomness()
- random: remove the blocking pool
- random: delete code to pull data into pools
- random: remove kernel.random.read_wakeup_threshold
- random: remove unnecessary unlikely()
- random: convert to ENTROPY_BITS for better code readability
- random: Add and use pr_fmt()
- random: fix typo in add_timer_randomness()
- random: remove some dead code of poolinfo
- random: split primary/secondary crng init paths
- random: avoid warnings for !CONFIG_NUMA builds
- x86: Remove arch_has_random, arch_has_random_seed
- powerpc: Remove arch_has_random, arch_has_random_seed
- s390: Remove arch_has_random, arch_has_random_seed
- linux/random.h: Remove arch_has_random, arch_has_random_seed
- linux/random.h: Use false with bool
- linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check
- powerpc: Use bool in archrandom.h
- random: add arch_get_random_*long_early()
- random: avoid arch_get_random_seed_long() when collecting IRQ randomness
- random: remove dead code left over from blocking pool
- MAINTAINERS: co-maintain random.c
- crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h>
- crypto: blake2s - adjust include guard naming
- random: document add_hwgenerator_randomness() with other input functions
- random: remove unused irq_flags argument from add_interrupt_randomness()
- random: use BLAKE2s instead of SHA1 in extraction
- random: do not sign extend bytes for rotation when mixing
- random: do not re-init if crng_reseed completes before primary init
- random: mix bootloader randomness into pool
- random: harmonize "crng init done" messages
- random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs
- random: initialize ChaCha20 constants with correct endianness
- random: early initialization of ChaCha constants
- random: avoid superfluous call to RDRAND in CRNG extraction
- random: don't reset crng_init_cnt on urandom_read()
- random: fix typo in comments
- random: cleanup poolinfo abstraction
- crypto: chacha20 - Fix chacha20_block() keystream alignment (again)
- random: cleanup integer types
- random: remove incomplete last_data logic
- random: remove unused extract_entropy() reserved argument
- random: rather than entropy_store abstraction, use global
- random: remove unused OUTPUT_POOL constants
- random: de-duplicate INPUT_POOL constants
- random: prepend remaining pool constants with POOL_
- random: cleanup fractional entropy shift constants
- random: access input_pool_data directly rather than through pointer
- random: simplify arithmetic function flow in account()
- random: continually use hwgenerator randomness
- random: access primary_pool directly rather than through pointer
- random: only call crng_finalize_init() for primary_crng
- random: use computational hash for entropy extraction
- random: simplify entropy debiting
- random: use linear min-entropy accumulation crediting
- random: always wake up entropy writers after extraction
- random: make credit_entropy_bits() always safe
- random: remove use_input_pool parameter from crng_reseed()
- random: remove batched entropy locking
- random: fix locking in crng_fast_load()
- random: use RDSEED instead of RDRAND in entropy extraction
- random: inline leaves of rand_initialize()
- random: ensure early RDSEED goes through mixer on init
- random: do not xor RDRAND when writing into /dev/random
- random: absorb fast pool into input pool after fast load
- random: use hash function for crng_slow_load()
- random: remove outdated INT_MAX >> 6 check in urandom_read()
- random: zero buffer after reading entropy from userspace
- random: tie batched entropy generation to base_crng generation
- random: remove ifdef'd out interrupt bench
- random: remove unused tracepoints
- random: add proper SPDX header
- random: deobfuscate irq u32/u64 contributions
- random: introduce drain_entropy() helper to declutter crng_reseed()
- random: remove useless header comment
- random: remove whitespace and reorder includes
- random: group initialization wait functions
- random: group entropy extraction functions
- random: group entropy collection functions
- random: group userspace read/write functions
- random: group sysctl functions
- random: rewrite header introductory comment
- random: defer fast pool mixing to worker
- random: do not take pool spinlock at boot
- random: unify early init crng load accounting
- random: check for crng_init == 0 in add_device_randomness()
- random: pull add_hwgenerator_randomness() declaration into random.h
- random: clear fast pool, crng, and batches in cpuhp bring up
- random: round-robin registers as ulong, not u32
- random: only wake up writers after zap if threshold was passed
- random: cleanup UUID handling
- random: unify cycles_t and jiffies usage and types
- random: do crng pre-init loading in worker rather than irq
- random: give sysctl_random_min_urandom_seed a more sensible value
- random: don't let 644 read-only sysctls be written to
- random: replace custom notifier chain with standard one
- random: use SipHash as interrupt entropy accumulator
- random: make consistent usage of crng_ready()
- random: reseed more often immediately after booting
- random: check for signal and try earlier when generating entropy
- random: skip fast_init if hwrng provides large chunk of entropy
- random: treat bootloader trust toggle the same way as cpu trust toggle
- random: re-add removed comment about get_random_{u32,u64} reseeding
- random: mix build-time latent entropy into pool at init
- random: do not split fast init input in add_hwgenerator_randomness()
- random: do not allow user to keep crng key around on stack
- random: check for signal_pending() outside of need_resched() check
- random: check for signals every PAGE_SIZE chunk of /dev/[u]random
- random: make random_get_entropy() return an unsigned long
- random: document crng_fast_key_erasure() destination possibility
- random: fix sysctl documentation nits
- init: call time_init() before rand_initialize()
- ia64: define get_cycles macro for arch-override
- s390: define get_cycles macro for arch-override
- parisc: define get_cycles macro for arch-override
- alpha: define get_cycles macro for arch-override
- powerpc: define get_cycles macro for arch-override
- timekeeping: Add raw clock fallback for random_get_entropy()
- m68k: use fallback for random_get_entropy() instead of zero
- mips: use fallback for random_get_entropy() instead of just c0 random
- arm: use fallback for random_get_entropy() instead of zero
- nios2: use fallback for random_get_entropy() instead of zero
- x86/tsc: Use fallback for random_get_entropy() instead of zero
- um: use fallback for random_get_entropy() instead of zero
- sparc: use fallback for random_get_entropy() instead of zero
- xtensa: use fallback for random_get_entropy() instead of zero
- random: insist on random_get_entropy() existing in order to simplify
- random: do not use batches when !crng_ready()
- random: do not pretend to handle premature next security model
- random: order timer entropy functions below interrupt functions
- random: do not use input pool from hard IRQs
- random: help compiler out with fast_mix() by using simpler arguments
- siphash: use one source of truth for siphash permutations
- random: use symbolic constants for crng_init states
- random: avoid initializing twice in credit race
- random: remove ratelimiting for in-kernel unseeded randomness
- random: use proper jiffies comparison macro
- random: handle latent entropy and command line from random_init()
- random: credit architectural init the exact amount
- random: use static branch for crng_ready()
- random: remove extern from functions in header
- random: use proper return types on get_random_{int,long}_wait()
- random: move initialization functions out of hot pages
- random: move randomize_page() into mm where it belongs
- random: convert to using fops->write_iter()
- random: wire up fops->splice_{read,write}_iter()
- random: check for signals after page of pool writes
- Revert "random: use static branch for crng_ready()"
- crypto: drbg - add FIPS 140-2 CTRNG for noise source
- crypto: drbg - always seeded with SP800-90B compliant noise source
- crypto: drbg - prepare for more fine-grained tracking of seeding state
- crypto: drbg - track whether DRBG was seeded with !rng_is_initialized()
- crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed()
- crypto: drbg - always try to free Jitter RNG instance
- crypto: drbg - make reseeding from get_random_bytes() synchronous
- random: avoid checking crng_ready() twice in random_init()
- random: mark bootloader randomness code as __init
- random: account for arch randomness in bits
- ASoC: cs42l52: Fix TLV scales for mixer controls
- ASoC: cs53l30: Correct number of volume levels on SX controls
- ASoC: cs42l52: Correct TLV for Bypass Volume
- ASoC: cs42l56: Correct typo in minimum level for SX volume controls
- ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
- ASoC: wm8962: Fix suspend while playing music
- scsi: vmw_pvscsi: Expand vcpuHint to 16 bits
- scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology
- scsi: ipr: Fix missing/incorrect resource cleanup in error case
- scsi: pmcraid: Fix missing resource cleanup in error case
- virtio-mmio: fix missing put_device() when vm_cmdline_parent registration
failed
- nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
- ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
- net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface
netdev[napi]_alloc_frag
- random: credit cpu and bootloader seeds by default
- pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE
- i40e: Fix call trace in setup_tx_descriptors
- tty: goldfish: Fix free_irq() on remove
- misc: atmel-ssc: Fix IRQ check in ssc_probe
- net: bgmac: Fix an erroneous kfree() in bgmac_remove()
- arm64: ftrace: fix branch range checks
- certs/blacklist_hashes.c: fix const confusion in certs blacklist
- irqchip/gic/realview: Fix refcount leak in realview_gic_of_init
- comedi: vmk80xx: fix expression for tx buffer size
- USB: serial: option: add support for Cinterion MV31 with new baseline
- USB: serial: io_ti: add Agilent E5805A support
- usb: dwc2: Fix memory leak in dwc2_hcd_init
- usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
- serial: 8250: Store to lsr_save_flags after lsr read
- ext4: fix bug_on ext4_mb_use_inode_pa
- ext4: make variable "count" signed
- ext4: add reserved GDT blocks check
- virtio-pci: Remove wrong address verification in vp_del_vqs()
- s390/mm: use non-quiescing sske for KVM switch to keyed guest
- usb: gadget: u_ether: fix regression in setting fixed MAC address
- xprtrdma: fix incorrect header size calculations
- tcp: add some entropy in __inet_hash_connect()
- tcp: use different parts of the port_offset for index and offset
- tcp: add small random increments to the source port
- tcp: dynamically allocate the perturb table used by source ports
- tcp: increase source port perturb table to 2^16
- tcp: drop the hash_32() part from the index calculation
- powerpc/kasan: Silence KASAN warnings in __get_wchan()
- ASoC: es8328: Fix event generation for deemphasis control
- ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put()
- i40e: Fix adding ADQ filter to TC0
- mlxsw: spectrum_cnt: Reorder counter pools
- net: openvswitch: fix misuse of the cached connection on tuple changes
- RISC-V: fix barrier() use in <vdso/processor.h>
- powerpc/mm: Switch obsolete dssall to .long
-- Ian May <email address hidden> Mon, 03 Oct 2022 15:01:38 -0500
-
linux-aws (4.15.0-1141.152) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1141.152 -proposed tracker (LP: #1987880)
[ Ubuntu: 4.15.0-193.204 ]
* bionic/linux: 4.15.0-193.204 -proposed tracker (LP: #1987905)
* CVE-2022-36946
- netfilter: nf_queue: do not allow packet truncation below transport header
offset
* CVE-2021-33655
- fbcon: Disallow setting font bigger than screen size
- fbcon: Prevent that screen size is smaller than font size
- fbmem: Check virtual screen sizes in fb_set_var()
-- Ian May <email address hidden> Thu, 01 Sep 2022 17:12:55 -0500
-
linux-aws (4.15.0-1140.151) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1140.151 -proposed tracker (LP: #1983954)
[ Ubuntu: 4.15.0-192.203 ]
* bionic/linux: 4.15.0-192.203 -proposed tracker (LP: #1983980)
* CVE-2021-33656
- vt: drop old FONT ioctls
* Bionic update: upstream stable patchset 2022-07-25 (LP: #1982782)
- binfmt_flat: do not stop relocating GOT entries prematurely on riscv
- USB: serial: option: add Quectel BG95 modem
- USB: new quirk for Dell Gen 2 devices
- ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP
- ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
- btrfs: add "0x" prefix for unsupported optional features
- btrfs: repair super block num_devices automatically
- drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
- mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue
- b43legacy: Fix assigning negative value to unsigned variable
- b43: Fix assigning negative value to unsigned variable
- ipw2x00: Fix potential NULL dereference in libipw_xmit()
- ACPICA: Avoid cache flush inside virtual machines
- ALSA: jack: Access input_dev under mutex
- drm/amd/pm: fix double free in si_parse_power_table()
- ath9k: fix QCA9561 PA bias level
- media: venus: hfi: avoid null dereference in deinit
- media: pci: cx23885: Fix the error handling in cx23885_initdev()
- media: cx25821: Fix the warning when removing the module
- scsi: megaraid: Fix error check return value of register_chrdev()
- drm/amd/pm: fix the compile warning
- ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
- ASoC: dapm: Don't fold register value changes into notifications
- s390/preempt: disable __preempt_count_add() optimization for
PROFILE_ALL_BRANCHES
- dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
- ipmi:ssif: Check for NULL msg when handling events and messages
- rtlwifi: Use pr_warn instead of WARN_ONCE
- openrisc: start CPU timer early in boot
- nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
- ASoC: rt5645: Fix errorenous cleanup order
- net: phy: micrel: Allow probing without .driver_data
- media: exynos4-is: Fix compile warning
- rxrpc: Return an error to sendmsg if call failed
- eth: tg3: silence the GCC 12 array-bounds warning
- ARM: dts: ox820: align interrupt controller node name with dtschema
- fs: jfs: fix possible NULL pointer dereference in dbFree()
- ARM: OMAP1: clock: Fix UART rate reporting algorithm
- fat: add ratelimit to fat*_ent_bread()
- ARM: versatile: Add missing of_node_put in dcscb_init
- ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
- ARM: hisi: Add missing of_node_put after of_find_compatible_node
- PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
- tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
- powerpc/xics: fix refcount leak in icp_opal_init()
- macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
- RDMA/hfi1: Prevent panic when SDMA is disabled
- drm: fix EDID struct for old ARM OABI format
- ath9k: fix ar9003_get_eepmisc
- ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
- ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
- x86/delay: Fix the wrong asm constraint in delay_loop()
- drm/mediatek: Fix mtk_cec_mask()
- spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
- NFC: NULL out the dev->rfkill to prevent UAF
- efi: Add missing prototype for efi_capsule_setup_info
- HID: hid-led: fix maximum brightness for Dream Cheeky
- spi: img-spfi: Fix pm_runtime_get_sync() error checking
- ath9k_htc: fix potential out of bounds access with invalid
rxstatus->rs_keyix
- inotify: show inotify mask flags in proc fdinfo
- fsnotify: fix wrong lockdep annotations
- x86/pm: Fix false positive kmemleak report in msr_build_context()
- drm/msm/dsi: fix error checks and return values for DSI xmit functions
- drm/msm/hdmi: check return value after calling
platform_get_resource_byname()
- drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
- x86: Fix return value of __setup handlers
- irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
- x86/mm: Cleanup the control_va_addr_alignment() __setup handler
- drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
- media: uvcvideo: Fix missing check to determine if element is found in list
- ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
- regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
- media: st-delta: Fix PM disable depth imbalance in delta_probe
- media: exynos4-is: Change clk_disable to clk_disable_unprepare
- media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
- Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
- m68k: math-emu: Fix dependencies of math emulation support
- sctp: read sk->sk_bound_dev_if once in sctp_rcv()
- ASoC: wm2000: fix missing clk_disable_unprepare() on error in
wm2000_anc_transition()
- rxrpc: Fix listen() setting the bar too high for the prealloc rings
- rxrpc: Don't try to resend the request if we're receiving the reply
- soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
- soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
- ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
- ARM: dts: bcm2835-rpi-b: Fix GPIO line names
- mfd: ipaq-micro: Fix error check return value of platform_get_irq()
- scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()
- pinctrl: mvebu: Fix irq_of_parse_and_map() return value
- drivers/base/node.c: fix compaction sysfs file leak
- powerpc/8xx: export 'cpm_setbrg' for modules
- powerpc/idle: Fix return value of __setup() handler
- powerpc/4xx/cpm: Fix return value of __setup() handler
- tty: fix deadlock caused by calling printk() under tty_port->lock
- Input: sparcspkr - fix refcount leak in bbc_beep_probe
- powerpc/perf: Fix the threshold compare group constraint for power9
- powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
- mailbox: forward the hrtimer if not queued and under a lock
- iommu/mediatek: Add list_del in mtk_iommu_remove
- video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
- iommu/amd: Increase timeout waiting for GA log enablement
- perf c2c: Use stdio interface if slang is not supported
- perf jevents: Fix event syntax error caused by ExtSel
- wifi: mac80211: fix use-after-free in chanctx code
- iwlwifi: mvm: fix assert 1F04 upon reconfig
- fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped
pages
- ext4: fix use-after-free in ext4_rename_dir_prepare
- ext4: fix bug_on in ext4_writepages
- ext4: verify dir block before splitting it
- ext4: avoid cycles in directory h-tree
- dlm: fix plock invalid read
- dlm: fix missing lkb refcount handling
- ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
- scsi: dc395x: Fix a missing check on list iterator
- scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
- drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
- drm/nouveau/clk: Fix an incorrect NULL check on list iterator
- drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
- md: fix an incorrect NULL check in does_sb_need_changing
- md: fix an incorrect NULL check in md_reload_sb
- RDMA/hfi1: Fix potential integer multiplication overflow errors
- irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375,
A38x, A39x
- irqchip: irq-xtensa-mx: fix initial IRQ affinity
- mac80211: upgrade passive scan to active scan on DFS channels after beacon
rx
- um: chan_user: Fix winch_tramp() return value
- um: Fix out-of-bounds read in LDT setup
- iommu/msm: Fix an incorrect NULL check on list iterator
- nodemask.h: fix compilation error with GCC12
- hugetlb: fix huge_pmd_unshare address update
- rtl818x: Prevent using not initialized queues
- ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
- carl9170: tx: fix an incorrect use of list iterator
- gma500: fix an incorrect NULL check on list iterator
- arm64: dts: qcom: ipq8074: fix the sleep clock frequency
- phy: qcom-qmp: fix struct clk leak on probe errors
- docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
- dt-bindings: gpio: altera: correct interrupt-cells
- phy: qcom-qmp: fix reset-controller leak on probe errors
- RDMA/rxe: Generate a completion for unsupported/invalid opcode
- MIPS: IP27: Remove incorrect `cpu_has_fpu' override
- pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
- staging: greybus: codecs: fix type confusion of list iterator variable
- tty: goldfish: Use tty_port_destroy() to destroy port
- usb: usbip: fix a refcount leak in stub_probe()
- usb: usbip: add missing device lock on tweak configuration cmd
- USB: storage: karma: fix rio_karma_init return
- pwm: lp3943: Fix duty calculation in case period was clamped
- rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
- coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
- soc: rockchip: Fix refcount leak in rockchip_grf_init
- rtc: mt6397: check return value after calling platform_get_resource()
- serial: meson: acquire port->lock in startup()
- serial: digicolor-usart: Don't allow CS5-6
- serial: txx9: Don't allow CS5-6
- serial: sh-sci: Don't allow CS5-6
- serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
- firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
- clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value
- net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
- net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
- modpost: fix removing numeric suffixes
- jffs2: fix memory leak in jffs2_do_fill_super
- ubi: ubi_create_volume: Fix use-after-free when volume creation failed
- tcp: tcp_rtx_synack() can be called from process context
- perf c2c: Fix sorting in percent_rmt_hitm_cmp()
- mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
- tracing: Fix sleeping function called from invalid context on RT kernel
- tracing: Avoid adding tracer option before update_tracer_options
- i2c: cadence: Increase timeout per message if necessary
- m68knommu: set ZERO_PAGE() to the allocated zeroed page
- m68knommu: fix undefined reference to `_init_sp'
- video: fbdev: pxa3xx-gcu: release the resources correctly in
pxa3xx_gcu_probe/remove()
- xprtrdma: treat all calls not a bcall when bc_serv is NULL
- ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
- net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure
- SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
- net: mdio: unexport __init-annotated mdio_bus_init()
- net: xfrm: unexport __init-annotated xfrm4_protocol_init()
- net: ipv6: unexport __init-annotated seg6_hmac_init()
- net: altera: Fix refcount leak in altera_tse_mdio_create
- drm: imx: fix compiler warning with gcc-12
- iio: dummy: iio_simple_dummy: check the return value of kstrdup()
- lkdtm/usercopy: Expand size of "out of frame" object
- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
- tty: Fix a possible resource leak in icom_probe
- drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
- USB: host: isp116x: check return value after calling platform_get_resource()
- drivers: tty: serial: Fix deadlock in sa1100_set_termios()
- drivers: usb: host: Fix deadlock in oxu_bus_suspend()
- USB: hcd-pci: Fully suspend across freeze/thaw cycle
- usb: dwc2: gadget: don't reset gadget's driver->bus
- misc: rtsx: set NULL intfdata when probe fails
- extcon: Modify extcon device to be created after driver data is set
- clocksource/drivers/sp804: Avoid error on multiple instances
- staging: rtl8712: fix uninit-value in r871xu_drv_init()
- serial: msm_serial: disable interrupts in __msm_console_write()
- kernfs: Separate kernfs_pr_cont_buf and rename_lock.
- md: protect md_unregister_thread from reentrancy
- drm/radeon: fix a possible null pointer dereference
- modpost: fix undefined behavior of is_arm_mapping_symbol()
- nbd: call genl_unregister_family() first in nbd_cleanup()
- nbd: fix race between nbd_alloc_config() and module removal
- nbd: fix io hung while disconnecting device
- nodemask: Fix return values to be unsigned
- vringh: Fix loop descriptors check in the indirect cases
- ALSA: hda/conexant - Fix loopback issue with CX20632
- cifs: return errors during session setup during reconnects
- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
- nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION
- nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
- ixgbe: fix bcast packets Rx on VF after promisc removal
- ixgbe: fix unexpected VLAN Rx in promisc mode on VF
- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
- powerpc/32: Fix overread/overwrite of thread_struct via ptrace
- md/raid0: Ignore RAID0 layout if the second zone has only one device
- mtd: cfi_cmdset_0002: Move and rename
chip_check/chip_ready/chip_good_for_write
- mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
- PCI: qcom: Fix unbalanced PHY init on probe errors
- tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
- drm/edid: fix invalid EDID extension block filtering
- drm/bridge: adv7511: clean up CEC adapter when probe fails
- nl80211: show SSID for P2P_GO interfaces
- of: overlay: do not break notify on NOTIFY_{OK|STOP}
- x86/speculation: Add missing prototype for unpriv_ebpf_notify()
- media: vsp1: Fix offset calculation for plane cropping
- ext4: reject the 'commit' option on ext2 filesystems
- drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
- NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx
- crypto: marvell/cesa - ECB does not IV
- dax: fix cache flush on PMD-mapped pages
- f2fs: fix dereference of stale list iterator after loop body
- i2c: at91: use dma safe buffers
- dmaengine: stm32-mdma: remove GISR1 register
- md: bcache: check the return value of kzalloc() in detached_dev_do_request()
- usb: musb: Fix missing of_node_put() in omap2430_probe
- usb: dwc3: pci: Fix pm_runtime_get_sync() error checking
- rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails
- serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
- serial: stm32-usart: Correct CSIZE, bits, and parity
- s390/crypto: fix scatterwalk_unmap() callers in AES-GCM
- nfp: only report pause frame configuration for physical device
- af_unix: ensure POLLOUT on remote close() for connected dgram socket
- af_unix: Fix a data-race in unix_dgram_peer_wake_me().
- ip_gre: test csum_start instead of transport header
- Upstream stable to v4.14.284, v4.19.248
-- Ian May <email address hidden> Thu, 11 Aug 2022 14:38:27 -0500
-
linux-aws (4.15.0-1139.150) bionic; urgency=medium
[ Ubuntu: 4.15.0-191.202 ]
* CVE-2022-2586
- SAUCE: netfilter: nf_tables: do not allow SET_ID to refer to another table
- SAUCE: netfilter: nf_tables: do not allow RULE_ID to refer to another chain
* CVE-2022-2588
- SAUCE: net_sched: cls_route: remove from list when handle is 0
* CVE-2022-34918
- netfilter: nf_tables: stricter validation of element data
* BUG: kernel NULL pointer dereference, address: 0000000000000008
(LP: #1981658)
- tcp: make sure treq->af_specific is initialized
linux-aws (4.15.0-1138.149) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1138.149 -proposed tracker (LP: #1981296)
* Bionic update: upstream stable patchset 2022-06-21 (LP: #1979355)
- [Config] aws: updateconfigs for NVM, NVM_PBLK
[ Ubuntu: 4.15.0-190.201 ]
* bionic/linux: 4.15.0-190.201 -proposed tracker (LP: #1981321)
* CVE-2022-1679
- SAUCE: ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
* Bionic update: upstream stable patchset 2022-07-06 (LP: #1980879)
- MIPS: Use address-of operator on section symbols
- block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit
- can: grcan: grcan_probe(): fix broken system id check for errata workaround
needs
- can: grcan: only use the NAPI poll budget for RX
- Bluetooth: Fix the creation of hdev->name
- mmc: rtsx: add 74 Clocks in power on flow
- mm: hugetlb: fix missing cache flush in copy_huge_page_from_user()
- mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and
__mcopy_atomic()
- ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
- ALSA: pcm: Fix races among concurrent read/write and buffer changes
- ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
- ALSA: pcm: Fix races among concurrent prealloc proc writes
- ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
- VFS: Fix memory leak caused by concurrently mounting fs with subtype
- batman-adv: Don't skb_split skbuffs with frag_list
- net: Fix features skip in for_each_netdev_feature()
- ipv4: drop dst in multicast routing path
- netlink: do not reset transport header in netlink_recvmsg()
- mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection
- hwmon: (ltq-cputemp) restrict it to SOC_XWAY
- s390/ctcm: fix variable dereferenced before check
- s390/ctcm: fix potential memory leak
- s390/lcs: fix variable dereferenced before check
- net/smc: non blocking recvmsg() return -EAGAIN when no data and
signal_pending
- net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe()
- hwmon: (f71882fg) Fix negative temperature
- ASoC: max98090: Reject invalid values in custom control put()
- ASoC: max98090: Generate notifications on changes for custom control
- ASoC: ops: Validate input values in snd_soc_put_volsw_range()
- tcp: resalt the secret every 10 seconds
- usb: cdc-wdm: fix reading stuck on device close
- USB: serial: pl2303: add device id for HP LM930 Display
- USB: serial: qcserial: add support for Sierra Wireless EM7590
- USB: serial: option: add Fibocom L610 modem
- USB: serial: option: add Fibocom MA510 modem
- cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp()
- drm/vmwgfx: Initialize drm_mode_fb_cmd2
- ping: fix address binding wrt vrf
- tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe()
- net/sched: act_pedit: really ensure the skb is writable
- um: Cleanup syscall_handler_t definition/cast, fix warning
- Input: add bounds checking to input_set_capability()
- Input: stmfts - fix reference leak in stmfts_input_open
- MIPS: lantiq: check the return value of kzalloc()
- drbd: remove usage of list iterator variable after loop
- ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame()
- ALSA: wavefront: Proper check of get_user() error
- perf: Fix sys_perf_event_open() race against self
- drm/dp/mst: fix a possible memory leak in fetch_monitor_name()
- mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC
- mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD
- mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch()
- net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
- net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
- clk: at91: generated: consider range when calculating best rate
- net/qla3xxx: Fix a test in ql_reset_work()
- NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc
- ARM: 9196/1: spectre-bhb: enable for Cortex-A15
- ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
- igb: skip phy status check where unavailable
- net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.
- gpio: gpio-vf610: do not touch other bits when set the target bit
- gpio: mvebu/pwm: Refuse requests with inverted polarity
- perf bench numa: Address compiler error on s390
- scsi: qla2xxx: Fix missed DMA unmap for aborted commands
- mac80211: fix rx reordering with non explicit / psmp ack policy
- ethernet: tulip: fix missing pci_disable_device() on error in
tulip_init_one()
- net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe()
- net: atlantic: verify hw_head_ lies within TX buffer ring
- swiotlb: fix info leak with DMA_FROM_DEVICE
- Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
- net: macb: Increment rx bd head after allocating skb and buffer
- net/sched: act_pedit: sanitize shift argument before usage
- afs: Fix afs_getattr() to refetch file status if callback break occurred
- x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
- staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan()
- tcp: change source port randomizarion at connect() time
- secure_seq: use the 64 bits of the siphash for port offset calculation
- ACPI: sysfs: Make sparse happy about address space in use
- Revert "UBUNTU: SAUCE: ACPI: sysfs: copy ACPI data using io memory copying"
- ACPI: sysfs: Fix BERT error region memory mapping
- net: af_key: check encryption module availability consistency
- net: ftgmac100: Disable hardware checksum on AST2600
- drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI
controllers
- assoc_array: Fix BUG_ON during garbage collect
- drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency()
- block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
- exec: Force single empty string when argv is empty
- netfilter: conntrack: re-fetch conntrack after insertion
- zsmalloc: fix races between asynchronous zspage free and page migration
- dm integrity: fix error code in dm_integrity_ctr()
- dm crypt: make printing of the key constant-time
- dm stats: add cond_resched when looping over entries
- dm verity: set DM_TARGET_IMMUTABLE feature flag
- tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe()
- docs: submitting-patches: Fix crossref to 'The canonical patch format'
- NFSD: Fix possible sleep during nfsd4_release_lockowner()
- bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes
* Bionic update: upstream stable patchset 2022-06-21 (LP: #1979355)
- floppy: disable FDRAWCMD by default
- [Config] updateconfigs for BLK_DEV_FD_RAWCMD
- hamradio: defer 6pack kfree after unregister_netdev
- hamradio: remove needs_free_netdev to avoid UAF
- lightnvm: disable the subsystem
- [Config] updateconfigs for NVM, NVM_PBLK
- usb: mtu3: fix USB 3.0 dual-role-switch from device to host
- USB: quirks: add a Realtek card reader
- USB: quirks: add STRING quirk for VCOM device
- USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS
- USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader
- USB: serial: option: add support for Cinterion MV32-WA/MV32-WB
- USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions
- xhci: stop polling roothubs after shutdown
- iio: dac: ad5592r: Fix the missing return value.
- iio: dac: ad5446: Fix read_raw not returning set value
- iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()
- usb: misc: fix improper handling of refcount in uss720_probe()
- usb: gadget: uvc: Fix crash when encoding data for usb request
- usb: gadget: configfs: clear deactivation flag in
configfs_composite_unbind()
- serial: 8250: Also set sticky MCR bits in console restoration
- serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
- hex2bin: make the function hex_to_bin constant-time
- hex2bin: fix access beyond string end
- USB: Fix xhci event ring dequeue pointer ERDP update issue
- ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue
- phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe
- phy: samsung: exynos5250-sata: fix missing device put in probe error paths
- ARM: OMAP2+: Fix refcount leak in omap_gic_of_init
- ARM: dts: Fix mmc order for omap3-gta04
- ipvs: correctly print the memory size of ip_vs_conn_tab
- mtd: rawnand: Fix return value check of wait_for_completion_timeout
- sctp: check asoc strreset_chunk in sctp_generate_reconf_event
- pinctrl: pistachio: fix use of irq_of_parse_and_map()
- ip_gre: Make o_seqno start from 0 in native mode
- tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
- bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
- clk: sunxi: sun9i-mmc: check return value after calling
platform_get_resource()
- net: bcmgenet: hide status block before TX timestamping
- bnx2x: fix napi API usage sequence
- ASoC: wm8731: Disable the regulator when probing fails
- x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
- cifs: destage any unwritten data to the server before calling
copychunk_write
- drivers: net: hippi: Fix deadlock in rr_close()
- x86/cpu: Load microcode during restore_processor_state()
- tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2
- tty: n_gsm: fix malformed counter for out of frame data
- tty: n_gsm: fix insufficient txframe size
- tty: n_gsm: fix missing explicit ldisc flush
- tty: n_gsm: fix wrong command retry handling
- tty: n_gsm: fix wrong command frame length field encoding
- tty: n_gsm: fix incorrect UA handling
- MIPS: Fix CP0 counter erratum detection for R4k CPUs
- parisc: Merge model and model name into one line in /proc/cpuinfo
- ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes
- Revert "SUNRPC: attempt AF_LOCAL connect on setup"
- firewire: fix potential uaf in outbound_phy_packet_callback()
- firewire: remove check of list iterator against head past the loop body
- firewire: core: extend card->lock in fw_core_handle_bus_reset
- ASoC: wm8958: Fix change notifications for DSP controls
- can: grcan: grcan_close(): fix deadlock
- can: grcan: use ofdev->dev when allocating DMA memory
- nfc: replace improper check device_is_registered() in netlink related
functions
- NFC: netlink: fix sleep in atomic bug when firmware download timeout
- hwmon: (adt7470) Fix warning on module removal
- ASoC: dmaengine: Restore NULL prepare_slave_config() callback
- net: emaclite: Add error handling for of_address_to_resource()
- smsc911x: allow using IRQ0
- btrfs: always log symlinks in full mode
- net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
- kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU
- net: ipv6: ensure we call ipv6_mc_down() at most once
- dm: fix mempool NULL pointer race when completing IO
- dm: interlock pending dm_io and dm_wait_for_bios_completion
- PCI: aardvark: Clear all MSIs at setup
- PCI: aardvark: Fix reading MSI interrupt number
- tcp: md5: incorrect tcp_header_len for incoming connections
- net: hns3: add validity check for message data length
- genirq: Synchronize interrupt thread startup
- net: stmmac: dwmac-sun8i: add missing of_node_put() in
sun8i_dwmac_register_mdio_mux()
- mm: fix unexpected zeroed page mapping with zram swap
* unprivileged tests in test_verifier from ubuntu_bpf failed with "Failed to
load prog 'Operation not permitted'" on B-4.15 (LP: #1980648)
- selftests/bpf: Count tests skipped by unpriv
- selftests/bpf: Only run tests if !bpf_disabled
* CVE-2022-1734
- nfc: nfcmrvl: main: reorder destructive operations in
nfcmrvl_nci_unregister_dev to avoid bugs
* CVE-2022-1652
- floppy: use a statically allocated error counter
-- Thadeu Lima de Souza Cascardo <email address hidden> Thu, 04 Aug 2022 20:49:35 -0300
-
linux-aws (4.15.0-1138.149) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1138.149 -proposed tracker (LP: #1981296)
* Bionic update: upstream stable patchset 2022-06-21 (LP: #1979355)
- [Config] aws: updateconfigs for NVM, NVM_PBLK
[ Ubuntu: 4.15.0-190.201 ]
* bionic/linux: 4.15.0-190.201 -proposed tracker (LP: #1981321)
* CVE-2022-1679
- SAUCE: ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
* Bionic update: upstream stable patchset 2022-07-06 (LP: #1980879)
- MIPS: Use address-of operator on section symbols
- block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit
- can: grcan: grcan_probe(): fix broken system id check for errata workaround
needs
- can: grcan: only use the NAPI poll budget for RX
- Bluetooth: Fix the creation of hdev->name
- mmc: rtsx: add 74 Clocks in power on flow
- mm: hugetlb: fix missing cache flush in copy_huge_page_from_user()
- mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and
__mcopy_atomic()
- ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
- ALSA: pcm: Fix races among concurrent read/write and buffer changes
- ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
- ALSA: pcm: Fix races among concurrent prealloc proc writes
- ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
- VFS: Fix memory leak caused by concurrently mounting fs with subtype
- batman-adv: Don't skb_split skbuffs with frag_list
- net: Fix features skip in for_each_netdev_feature()
- ipv4: drop dst in multicast routing path
- netlink: do not reset transport header in netlink_recvmsg()
- mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection
- hwmon: (ltq-cputemp) restrict it to SOC_XWAY
- s390/ctcm: fix variable dereferenced before check
- s390/ctcm: fix potential memory leak
- s390/lcs: fix variable dereferenced before check
- net/smc: non blocking recvmsg() return -EAGAIN when no data and
signal_pending
- net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe()
- hwmon: (f71882fg) Fix negative temperature
- ASoC: max98090: Reject invalid values in custom control put()
- ASoC: max98090: Generate notifications on changes for custom control
- ASoC: ops: Validate input values in snd_soc_put_volsw_range()
- tcp: resalt the secret every 10 seconds
- usb: cdc-wdm: fix reading stuck on device close
- USB: serial: pl2303: add device id for HP LM930 Display
- USB: serial: qcserial: add support for Sierra Wireless EM7590
- USB: serial: option: add Fibocom L610 modem
- USB: serial: option: add Fibocom MA510 modem
- cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp()
- drm/vmwgfx: Initialize drm_mode_fb_cmd2
- ping: fix address binding wrt vrf
- tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe()
- net/sched: act_pedit: really ensure the skb is writable
- um: Cleanup syscall_handler_t definition/cast, fix warning
- Input: add bounds checking to input_set_capability()
- Input: stmfts - fix reference leak in stmfts_input_open
- MIPS: lantiq: check the return value of kzalloc()
- drbd: remove usage of list iterator variable after loop
- ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame()
- ALSA: wavefront: Proper check of get_user() error
- perf: Fix sys_perf_event_open() race against self
- drm/dp/mst: fix a possible memory leak in fetch_monitor_name()
- mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC
- mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD
- mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch()
- net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
- net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
- clk: at91: generated: consider range when calculating best rate
- net/qla3xxx: Fix a test in ql_reset_work()
- NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc
- ARM: 9196/1: spectre-bhb: enable for Cortex-A15
- ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
- igb: skip phy status check where unavailable
- net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.
- gpio: gpio-vf610: do not touch other bits when set the target bit
- gpio: mvebu/pwm: Refuse requests with inverted polarity
- perf bench numa: Address compiler error on s390
- scsi: qla2xxx: Fix missed DMA unmap for aborted commands
- mac80211: fix rx reordering with non explicit / psmp ack policy
- ethernet: tulip: fix missing pci_disable_device() on error in
tulip_init_one()
- net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe()
- net: atlantic: verify hw_head_ lies within TX buffer ring
- swiotlb: fix info leak with DMA_FROM_DEVICE
- Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
- net: macb: Increment rx bd head after allocating skb and buffer
- net/sched: act_pedit: sanitize shift argument before usage
- afs: Fix afs_getattr() to refetch file status if callback break occurred
- x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
- staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan()
- tcp: change source port randomizarion at connect() time
- secure_seq: use the 64 bits of the siphash for port offset calculation
- ACPI: sysfs: Make sparse happy about address space in use
- Revert "UBUNTU: SAUCE: ACPI: sysfs: copy ACPI data using io memory copying"
- ACPI: sysfs: Fix BERT error region memory mapping
- net: af_key: check encryption module availability consistency
- net: ftgmac100: Disable hardware checksum on AST2600
- drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI
controllers
- assoc_array: Fix BUG_ON during garbage collect
- drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency()
- block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
- exec: Force single empty string when argv is empty
- netfilter: conntrack: re-fetch conntrack after insertion
- zsmalloc: fix races between asynchronous zspage free and page migration
- dm integrity: fix error code in dm_integrity_ctr()
- dm crypt: make printing of the key constant-time
- dm stats: add cond_resched when looping over entries
- dm verity: set DM_TARGET_IMMUTABLE feature flag
- tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe()
- docs: submitting-patches: Fix crossref to 'The canonical patch format'
- NFSD: Fix possible sleep during nfsd4_release_lockowner()
- bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes
* Bionic update: upstream stable patchset 2022-06-21 (LP: #1979355)
- floppy: disable FDRAWCMD by default
- [Config] updateconfigs for BLK_DEV_FD_RAWCMD
- hamradio: defer 6pack kfree after unregister_netdev
- hamradio: remove needs_free_netdev to avoid UAF
- lightnvm: disable the subsystem
- [Config] updateconfigs for NVM, NVM_PBLK
- usb: mtu3: fix USB 3.0 dual-role-switch from device to host
- USB: quirks: add a Realtek card reader
- USB: quirks: add STRING quirk for VCOM device
- USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS
- USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader
- USB: serial: option: add support for Cinterion MV32-WA/MV32-WB
- USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions
- xhci: stop polling roothubs after shutdown
- iio: dac: ad5592r: Fix the missing return value.
- iio: dac: ad5446: Fix read_raw not returning set value
- iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()
- usb: misc: fix improper handling of refcount in uss720_probe()
- usb: gadget: uvc: Fix crash when encoding data for usb request
- usb: gadget: configfs: clear deactivation flag in
configfs_composite_unbind()
- serial: 8250: Also set sticky MCR bits in console restoration
- serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
- hex2bin: make the function hex_to_bin constant-time
- hex2bin: fix access beyond string end
- USB: Fix xhci event ring dequeue pointer ERDP update issue
- ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue
- phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe
- phy: samsung: exynos5250-sata: fix missing device put in probe error paths
- ARM: OMAP2+: Fix refcount leak in omap_gic_of_init
- ARM: dts: Fix mmc order for omap3-gta04
- ipvs: correctly print the memory size of ip_vs_conn_tab
- mtd: rawnand: Fix return value check of wait_for_completion_timeout
- sctp: check asoc strreset_chunk in sctp_generate_reconf_event
- pinctrl: pistachio: fix use of irq_of_parse_and_map()
- ip_gre: Make o_seqno start from 0 in native mode
- tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
- bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
- clk: sunxi: sun9i-mmc: check return value after calling
platform_get_resource()
- net: bcmgenet: hide status block before TX timestamping
- bnx2x: fix napi API usage sequence
- ASoC: wm8731: Disable the regulator when probing fails
- x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
- cifs: destage any unwritten data to the server before calling
copychunk_write
- drivers: net: hippi: Fix deadlock in rr_close()
- x86/cpu: Load microcode during restore_processor_state()
- tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2
- tty: n_gsm: fix malformed counter for out of frame data
- tty: n_gsm: fix insufficient txframe size
- tty: n_gsm: fix missing explicit ldisc flush
- tty: n_gsm: fix wrong command retry handling
- tty: n_gsm: fix wrong command frame length field encoding
- tty: n_gsm: fix incorrect UA handling
- MIPS: Fix CP0 counter erratum detection for R4k CPUs
- parisc: Merge model and model name into one line in /proc/cpuinfo
- ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes
- Revert "SUNRPC: attempt AF_LOCAL connect on setup"
- firewire: fix potential uaf in outbound_phy_packet_callback()
- firewire: remove check of list iterator against head past the loop body
- firewire: core: extend card->lock in fw_core_handle_bus_reset
- ASoC: wm8958: Fix change notifications for DSP controls
- can: grcan: grcan_close(): fix deadlock
- can: grcan: use ofdev->dev when allocating DMA memory
- nfc: replace improper check device_is_registered() in netlink related
functions
- NFC: netlink: fix sleep in atomic bug when firmware download timeout
- hwmon: (adt7470) Fix warning on module removal
- ASoC: dmaengine: Restore NULL prepare_slave_config() callback
- net: emaclite: Add error handling for of_address_to_resource()
- smsc911x: allow using IRQ0
- btrfs: always log symlinks in full mode
- net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
- kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU
- net: ipv6: ensure we call ipv6_mc_down() at most once
- dm: fix mempool NULL pointer race when completing IO
- dm: interlock pending dm_io and dm_wait_for_bios_completion
- PCI: aardvark: Clear all MSIs at setup
- PCI: aardvark: Fix reading MSI interrupt number
- tcp: md5: incorrect tcp_header_len for incoming connections
- net: hns3: add validity check for message data length
- genirq: Synchronize interrupt thread startup
- net: stmmac: dwmac-sun8i: add missing of_node_put() in
sun8i_dwmac_register_mdio_mux()
- mm: fix unexpected zeroed page mapping with zram swap
* unprivileged tests in test_verifier from ubuntu_bpf failed with "Failed to
load prog 'Operation not permitted'" on B-4.15 (LP: #1980648)
- selftests/bpf: Count tests skipped by unpriv
- selftests/bpf: Only run tests if !bpf_disabled
* CVE-2022-1734
- nfc: nfcmrvl: main: reorder destructive operations in
nfcmrvl_nci_unregister_dev to avoid bugs
* CVE-2022-1652
- floppy: use a statically allocated error counter
-- Ian May <email address hidden> Fri, 15 Jul 2022 12:01:26 -0500
-
linux-aws (4.15.0-1137.148) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1137.148 -proposed tracker (LP: #1979499)
[ Ubuntu: 4.15.0-189.200 ]
* bionic/linux: 4.15.0-189.200 -proposed tracker (LP: #1979525)
* linux-image-4.15.0-177-generic freezes on the welcome screen (LP: #1973167)
- mfd: intel-lpss: Use MODULE_SOFTDEP() instead of implicit request
* Bionic update: upstream stable patchset 2022-06-03 (LP: #1977622)
- etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead
- mm: page_alloc: fix building error on -Werror=array-compare
- tracing: Dump stacktrace trigger to the corresponding instance
- gfs2: assign rgrp glock before compute_bitstructs
- ALSA: usb-audio: Clear MIDI port active flag after draining
- tcp: fix race condition when creating child sockets from syncookies
- tcp: Fix potential use-after-free due to double kfree()
- dmaengine: imx-sdma: Fix error checking in sdma_event_remap
- net/packet: fix packet_sock xmit return value checking
- netlink: reset network and mac headers in netlink_dump()
- ARM: vexpress/spc: Avoid negative array index when !SMP
- platform/x86: samsung-laptop: Fix an unsigned comparison which can never be
negative
- ALSA: usb-audio: Fix undefined behavior due to shift overflowing the
constant
- vxlan: fix error return code in vxlan_fdb_append
- cifs: Check the IOCB_DIRECT flag, not O_DIRECT
- brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant
- drm/msm/mdp5: check the return of kzalloc()
- net: macb: Restart tx only if queue pointer is lagging
- stat: fix inconsistency between struct stat and struct compat_stat
- ata: pata_marvell: Check the 'bmdma_addr' beforing reading
- dma: at_xdmac: fix a missing check on list iterator
- powerpc/perf: Fix power9 event alternatives
- openvswitch: fix OOB access in reserve_sfa_size()
- ASoC: soc-dapm: fix two incorrect uses of list iterator
- e1000e: Fix possible overflow in LTR decoding
- ARC: entry: fix syscall_trace_exit argument
- ext4: fix symlink file size not match to file content
- ext4: fix overhead calculation to account for the reserved gdt blocks
- ext4: force overhead calculation if the s_overhead_cluster makes no sense
- staging: ion: Prevent incorrect reference counting behavour
- block/compat_ioctl: fix range check in BLKGETSIZE
- ax25: add refcount in ax25_dev to avoid UAF bugs
- ax25: fix reference count leaks of ax25_dev
- ax25: fix UAF bugs of net_device caused by rebinding operation
- ax25: Fix refcount leaks caused by ax25_cb_del()
- ax25: fix UAF bug in ax25_send_control()
- ax25: fix NPD bug in ax25_disconnect
- ax25: Fix NULL pointer dereferences in ax25 timers
- ax25: Fix UAF bugs in ax25 timers
- ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek
- net/sched: cls_u32: fix possible leak in u32_init_knode()
- drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised
- drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare
* Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831)
- USB: serial: pl2303: add IBM device IDs
- USB: serial: simple: add Nokia phone driver
- netdevice: add the case if dev is NULL
- virtio_console: break out of buf poll on remove
- ethernet: sun: Free the coherent when failing in probing
- spi: Fix invalid sgs value
- spi: Fix erroneous sgs value with min_t()
- af_key: add __GFP_ZERO flag for compose_sadb_supported in function
pfkey_register
- fuse: fix pipe buffer lifetime for direct_io
- tpm: fix reference counting for struct tpm_chip
- block: Add a helper to validate the block size
- virtio-blk: Use blk_validate_block_size() to validate block size
- USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c
- coresight: Fix TRCCONFIGR.QE sysfs interface
- iio: inkern: apply consumer scale on IIO_VAL_INT cases
- iio: inkern: apply consumer scale when no channel scale is available
- iio: inkern: make a best effort on offset calculation
- clk: uniphier: Fix fixed-rate initialization
- Documentation: add link to stable release candidate tree
- Documentation: update stable tree link
- SUNRPC: avoid race between mod_timer() and del_timer_sync()
- NFSD: prevent underflow in nfssvc_decode_writeargs()
- pinctrl: samsung: drop pin banks references on error paths
- jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
- jffs2: fix memory leak in jffs2_do_mount_fs
- jffs2: fix memory leak in jffs2_scan_medium
- mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
- mempolicy: mbind_range() set_policy() after vma_merge()
- scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
- qed: display VF trust config
- qed: validate and restrict untrusted VFs vlan promisc mode
- Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
- ALSA: cs4236: fix an incorrect NULL check on list iterator
- drbd: fix potential silent data corruption
- ACPI: properties: Consistently return -ENOENT if there are no more
references
- drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
- video: fbdev: sm712fb: Fix crash in smtcfb_read()
- video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
- ARM: dts: at91: sama5d2: Fix PMERRLOC resource size
- ARM: dts: exynos: fix UART3 pins configuration in Exynos5250
- ARM: dts: exynos: add missing HDMI supplies on SMDK5250
- ARM: dts: exynos: add missing HDMI supplies on SMDK5420
- carl9170: fix missing bit-wise or operator for tx_params
- thermal: int340x: Increase bitmap size
- lib/raid6/test: fix multiple definition linking error
- DEC: Limit PMAX memory probing to R3k systems
- media: davinci: vpif: fix unbalanced runtime PM get
- brcmfmac: firmware: Allocate space for default boardrev in nvram
- brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio
- PCI: pciehp: Clear cmd_busy bit in polling mode
- crypto: authenc - Fix sleep in atomic context in decrypt_tail
- crypto: mxs-dcp - Fix scatterlist processing
- spi: tegra114: Add missing IRQ check in tegra_spi_probe
- selftests/x86: Add validity check and allow field splitting
- spi: pxa2xx-pci: Balance reference count for PCI DMA device
- hwmon: (pmbus) Add mutex to regulator ops
- hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING
- PM: hibernate: fix __setup handler error handling
- PM: suspend: fix return value of __setup handler
- hwrng: atmel - disable trng on failure path
- crypto: vmx - add missing dependencies
- ACPI: APEI: fix return value of __setup handlers
- crypto: ccp - ccp_dmaengine_unregister release dma channels
- hwmon: (pmbus) Add Vin unit off handling
- clocksource: acpi_pm: fix return value of __setup handler
- sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa
- perf/core: Fix address filter parser for multiple filters
- perf/x86/intel/pt: Fix address filter config for 32-bit kernel
- media: coda: Fix missing put_device() call in coda_get_vdoa_data
- video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
- video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
- ARM: dts: qcom: ipq4019: fix sleep clock
- soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe
- media: usb: go7007: s2250-board: fix leak in probe()
- ASoC: ti: davinci-i2s: Add check for clk_enable()
- ALSA: spi: Add check for clk_enable()
- arm64: dts: ns2: Fix spi-cpol and spi-cpha property
- arm64: dts: broadcom: Fix sata nodename
- printk: fix return value of printk.devkmsg __setup handler
- ASoC: mxs-saif: Handle errors for clk_enable
- ASoC: atmel_ssc_dai: Handle errors for clk_enable
- memory: emif: Add check for setup_interrupts
- memory: emif: check the pointer temp in get_device_details()
- ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
- media: stk1160: If start stream fails, return buffers with
VB2_BUF_STATE_QUEUED
- ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
- ASoC: wm8350: Handle error for wm8350_register_irq
- ASoC: fsi: Add check for clk_enable
- video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of
- ASoC: dmaengine: do not use a NULL prepare_slave_config() callback
- ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
- ASoC: imx-es8328: Fix error return code in imx_es8328_probe()
- ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in
msm8916_wcd_digital_probe
- mtd: onenand: Check for error irq
- drm/edid: Don't clear formats if using deep color
- ath9k_htc: fix uninit value bugs
- power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe
- ray_cs: Check ioremap return value
- power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
- HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
- iwlwifi: Fix -EIO error code that is never returned
- dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS
- scsi: pm8001: Fix command initialization in pm80XX_send_read_log()
- scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()
- scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()
- scsi: pm8001: Fix abort all task initialization
- TOMOYO: fix __setup handlers return values
- ext2: correct max file size computing
- drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
- power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false
return
- KVM: x86: Fix emulation in writing cr8
- KVM: x86/emulator: Defer not-present segment check in
__load_segment_descriptor()
- i2c: xiic: Make bus names unique
- power: supply: wm8350-power: Handle error for wm8350_register_irq
- power: supply: wm8350-power: Add missing free in free_charger_irq
- PCI: Reduce warnings on possible RW1C corruption
- powerpc/sysdev: fix incorrect use to determine if list is empty
- mfd: mc13xxx: Add check for mc13xxx_irq_request
- vxcan: enable local echo for sent CAN frames
- MIPS: RB532: fix return value of __setup handler
- mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
- USB: storage: ums-realtek: fix error code in rts51x_read_mem()
- af_netlink: Fix shift out of bounds in group mask calculation
- i2c: mux: demux-pinctrl: do not deactivate a master that is not active
- tcp: ensure PMTU updates are processed during fastopen
- mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
- mxser: fix xmit_buf leak in activate when LSR == 0xff
- pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
- staging:iio:adc:ad7280a: Fix handing of device address bit reversing.
- serial: 8250_mid: Balance reference count for PCI DMA device
- serial: 8250: Fix race condition in RTS-after-send handling
- iio: adc: Add check for devm_request_threaded_irq
- clk: qcom: clk-rcg2: Update the frac table for pixel clock
- remoteproc: qcom_wcnss: Add missing of_node_put() in
wcnss_alloc_memory_region
- clk: loongson1: Terminate clk_div_table with sentinel element
- clk: clps711x: Terminate clk_div_table with sentinel element
- clk: tegra: tegra124-emc: Fix missing put_device() call in
emc_ensure_emc_driver
- NFS: remove unneeded check in decode_devicenotify_args()
- pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init
- pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
- pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe
- tty: hvc: fix return value of __setup handler
- kgdboc: fix return value of __setup handler
- kgdbts: fix return value of __setup handler
- jfs: fix divide error in dbNextAG
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
- xen: fix is_xen_pmu()
- net: phy: broadcom: Fix brcm_fet_config_init()
- qlcnic: dcb: default to returning -EOPNOTSUPP
- net/x25: Fix null-ptr-deref caused by x25_disconnect
- NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
- lib/test: use after free in register_test_dev_kmod()
- selinux: use correct type for context length
- loop: use sysfs_emit() in the sysfs xxx show()
- Fix incorrect type in assignment of ipv6 port for audit
- irqchip/nvic: Release nvic_base upon failure
- ACPICA: Avoid walking the ACPI Namespace if it is not there
- ACPI/APEI: Limit printable size of BERT table data
- PM: core: keep irq flags in device_pm_check_callbacks()
- spi: tegra20: Use of_device_get_match_data()
- ext4: don't BUG if someone dirty pages without asking ext4 first
- ntfs: add sanity check on allocation size
- video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
- video: fbdev: w100fb: Reset global state
- video: fbdev: cirrusfb: check pixclock to avoid divide by zero
- video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit
- ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960
- ARM: dts: bcm2837: Add the missing L1/L2 cache information
- video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf()
- video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of
snprintf()
- ASoC: soc-core: skip zero num_dai component in searching dai name
- media: cx88-mpeg: clear interrupt status register before streaming video
- ARM: tegra: tamonten: Fix I2C3 pad setting
- ARM: mmp: Fix failure to remove sram device
- video: fbdev: sm712fb: Fix crash in smtcfb_write()
- media: hdpvr: initialize dev->worker at hdpvr_register_videodev
- mmc: host: Return an error when ->enable_sdio_irq() ops is missing
- powerpc/lib/sstep: Fix 'sthcx' instruction
- powerpc/lib/sstep: Fix build errors with newer binutils
- scsi: qla2xxx: Fix warning for missing error code
- scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
- KVM: Prevent module exit until all VMs are freed
- ubifs: rename_whiteout: Fix double free for whiteout_ui->data
- ubifs: Add missing iput if do_tmpfile() failed in rename whiteout
- ubifs: setflags: Make dirtied_ino_d 8 bytes aligned
- ubifs: rename_whiteout: correct old_dir size computing
- can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path
- can: mcba_usb: properly check endpoint type
- gfs2: Make sure FITRIM minlen is rounded up to fs block size
- pinctrl: pinconf-generic: Print arguments for bias-pull-*
- ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
- ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
- mm/mmap: return 1 from stack_guard_gap __setup() handler
- mm/memcontrol: return 1 from cgroup.memory __setup() handler
- ubi: fastmap: Return error code if memory allocation fails in add_aeb()
- ASoC: topology: Allow TLV control to be either read or write
- ARM: dts: spear1340: Update serial node properties
- ARM: dts: spear13xx: Update SPI dma properties
- openvswitch: Fixed nd target mask field in the flow dump.
- KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
- ubifs: Rectify space amount budget for mkdir/tmpfile operations
- rtc: wm8350: Handle error for wm8350_register_irq
- ARM: 9187/1: JIVE: fix return value of __setup handler
- KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
- ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
- ptp: replace snprintf with sysfs_emit
- powerpc: dts: t104xrdb: fix phy type for FMAN 4/5
- scsi: mvsas: Replace snprintf() with sysfs_emit()
- scsi: bfa: Replace snprintf() with sysfs_emit()
- power: supply: axp20x_battery: properly report current when discharging
- powerpc: Set crashkernel offset to mid of RMA region
- PCI: aardvark: Fix support for MSI interrupts
- iommu/arm-smmu-v3: fix event handling soft lockup
- dm ioctl: prevent potential spectre v1 gadget
- scsi: pm8001: Fix pm8001_mpi_task_abort_resp()
- scsi: aha152x: Fix aha152x_setup() __setup handler return value
- net/smc: correct settings of RMB window update limit
- macvtap: advertise link netns via netlink
- bnxt_en: Eliminate unintended link toggle during FW reset
- MIPS: fix fortify panic when copying asm exception handlers
- scsi: libfc: Fix use after free in fc_exch_abts_resp()
- usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm
- xtensa: fix DTC warning unit_address_format
- Bluetooth: Fix use after free in hci_send_acl
- init/main.c: return 1 from handled __setup() functions
- w1: w1_therm: fixes w1_seq for ds28ea00 sensors
- SUNRPC/call_alloc: async tasks mustn't block waiting for memory
- NFS: swap IO handling is slightly different for O_DIRECT IO
- NFS: swap-out must always use STABLE writes.
- serial: samsung_tty: do not unlock port->lock for uart_write_wakeup()
- virtio_console: eliminate anonymous module_init & module_exit
- jfs: prevent NULL deref in diFree
- parisc: Fix CPU affinity for Lasi, WAX and Dino chips
- ipv6: add missing tx timestamping on IPPROTO_RAW
- net: add missing SOF_TIMESTAMPING_OPT_ID support
- mm: fix race between MADV_FREE reclaim and blkdev direct IO read
- drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
- scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
- net: stmmac: Fix unset max_speed difference between DT and non-DT platforms
- drm/imx: Fix memory leak in imx_pd_connector_get_modes
- drbd: Fix five use after free bugs in get_initial_state
- Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning"
- mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
- mm/mempolicy: fix mpol_new leak in shared_policy_replace
- x86/pm: Save the MSR validity status at context setup
- x86/speculation: Restore speculation related MSRs during S3 resume
- btrfs: fix qgroup reserve overflow the qgroup limit
- arm64: patch_text: Fixup last cpu should be master
- perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
- tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts
- dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error"
- mm: don't skip swap entry even if zap_details specified
- arm64: module: remove (NOLOAD) from linker script
- mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
- cgroup: Use open-time credentials for process migraton perm checks
- cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
- cgroup: Use open-time cgroup namespace for process migration perm checks
- memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe
- veth: Ensure eth header is in skb's linear part
- gpiolib: acpi: use correct format characters
- mlxsw: i2c: Fix initialization error flow
- nfc: nci: add flush_workqueue to prevent uaf
- cifs: potential buffer overflow in handling symlinks
- drm/amd: Add USBC connector ID
- drm/amdkfd: Check for potential null return of kmalloc_array()
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer
- scsi: target: tcmu: Fix possible page UAF
- scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
- ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs
- gpu: ipu-v3: Fix dev_dbg frequency output
- scsi: mvsas: Add PCI ID of RocketRaid 2640
- drivers: net: slip: fix NPD bug in sl_tx_timeout()
- mm, page_alloc: fix build_zonerefs_node()
- mm: kmemleak: take a full lowmem check in kmemleak_*_phys()
- gcc-plugins: latent_entropy: use /dev/urandom
- ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
- ARM: davinci: da850-evm: Avoid NULL pointer dereference
- smp: Fix offline cpu check in flush_smp_call_function_queue()
- i2c: pasemi: Wait for write xfers to finish
- xhci: make xhci_handshake timeout for xhci_reset() adjustable
- drm/edid: check basic audio support on CEA extension block
- ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp()
- mmc: davinci_mmc: Handle error for clk_enable
- drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev
- Bluetooth: hci_serdev: call init_rwsem() before p->open()
- drm/amd/display: Fix a NULL pointer dereference in
amdgpu_dm_connector_add_common_modes()
- hv_balloon: rate-limit "Unhandled message" warning
- scsi: qla2xxx: Fix incorrect reporting of task management failure
- ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
- sctp: Initialize daddr on peeled off socket
- testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set
[ Ubuntu: 4.15.0-188.199 ]
* bionic/linux: 4.15.0-188.199 -proposed tracker (LP: #1978697)
* CVE-2022-28388
- can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error
path
-- Ian May <email address hidden> Fri, 01 Jul 2022 09:16:07 -0500
-
linux-aws (4.15.0-1136.147) bionic; urgency=medium
[ Ubuntu: 4.15.0-187.198 ]
* CVE-2022-21123 // CVE-2022-21125 // CVE-2022-21166
- x86/cpu: Add Elkhart Lake to Intel family
- cpu/speculation: Add prototype for cpu_show_srbds()
- x86/cpu: Add Jasper Lake to Intel family
- x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel
CPU family
- x86/cpu: Add another Alder Lake CPU to the Intel family
- Documentation: Add documentation for Processor MMIO Stale Data
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
- x86/speculation: Add a common function for MD_CLEAR mitigation update
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
- x86/speculation/srbds: Update SRBDS mitigation selection
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
- KVM: x86/speculation: Disable Fill buffer clear within guests
- x86/speculation/mmio: Print SMT warning
-- Thadeu Lima de Souza Cascardo <email address hidden> Mon, 13 Jun 2022 16:51:43 -0300
-
linux-aws (4.15.0-1133.143) bionic; urgency=medium
[ Ubuntu: 4.15.0-184.194 ]
* CVE-2022-1966
- netfilter: nf_tables: disallow non-stateful expression in sets earlier
-- Thadeu Lima de Souza Cascardo <email address hidden> Fri, 03 Jun 2022 06:38:04 -0300
-
linux-aws (4.15.0-1131.140) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1131.140 -proposed tracker (LP: #1974401)
* Bionic update: upstream stable patchset 2022-05-06 (LP: #1972006)
- [Config] aws: updateconfigs for ARM64_ERRATUM_1188873
- [Config] aws: updateconfigs for MITIGATE_SPECTRE_BRANCH_HISTORY
[ Ubuntu: 4.15.0-182.191 ]
* CVE-2022-21499
- SAUCE: debug: Lock down kgdb
[ Ubuntu: 4.15.0-181.190 ]
* bionic/linux: 4.15.0-181.190 -proposed tracker (LP: #1974426)
* Bionic update: upstream stable patchset 2022-05-06 (LP: #1972006)
- [Config] updateconfigs for ARM64_ERRATUM_1188873
- arm64: arch_timer: Add workaround for ARM erratum 1188873
- arm64: arch_timer: avoid unused function warning
- arm64: Add silicon-errata.txt entry for ARM erratum 1188873
- arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT
- arm64: Add part number for Neoverse N1
- arm64: Add part number for Arm Cortex-A77
- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
- arm64: Add Cortex-X2 CPU part definition
- arm64: entry.S: Add ventry overflow sanity checks
- arm64: entry: Make the trampoline cleanup optional
- arm64: entry: Free up another register on kpti's tramp_exit path
- arm64: entry: Move the trampoline data page before the text page
- arm64: entry: Allow tramp_alias to access symbols after the 4K boundary
- arm64: entry: Don't assume tramp_vectors is the start of the vectors
- arm64: entry: Move trampoline macros out of ifdef'd section
- arm64: entry: Make the kpti trampoline's kpti sequence optional
- Revert "arm64: mmu: add the entry trampolines start/end section markers into
sections.h"
- arm64: entry: Allow the trampoline text to occupy multiple pages
- arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
- [Config] updateconfigs for MITIGATE_SPECTRE_BRANCH_HISTORY
- arm64: entry: Add vectors that have the bhb mitigation sequences
- arm64: entry: Add macro for reading symbol addresses from the trampoline
- arm64: Add percpu vectors for EL1
- arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2
- KVM: arm64: Add templates for BHB mitigation sequences
- arm64: Mitigate spectre style branch history side channels
- KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
- arm64: add ID_AA64ISAR2_EL1 sys register
- arm64: Use the clearbhb instruction in mitigations
* issuing invalid ioctl to /dev/vsock may spam dmesg (LP: #1971480)
- vsock: remove ratelimit unknown ioctl message
* ubuntu_ltp_controllers:cpuset_sched_domains: tests 3,9,11,17,19,25 report
incorrect sched domain for cpu#32 (LP: #1951289)
- sched/topology: Make sched_init_numa() use a set for the deduplicating sort
- sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa()
- ia64: ensure proper NUMA distance and possible map initialization
* CVE-2022-1419
- drm/vgem: Reclassify buffer creation debug message
- drm/vgem: Close use-after-free race in vgem_gem_create
* CVE-2022-28390
- can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
* Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479)
- net: qlogic: check the return value of dma_alloc_coherent() in
qed_vf_hw_prepare()
- qed: return status of qed_iov_get_link
- ethernet: Fix error handling in xemaclite_of_probe
- net: ethernet: ti: cpts: Handle error for clk_enable
- net: ethernet: lpc_eth: Handle error for clk_enable
- ax25: Fix NULL pointer dereference in ax25_kill_by_device
- net/mlx5: Fix size field in bufferx_reg struct
- NFC: port100: fix use-after-free in port100_send_complete
- gpio: ts4900: Do not set DAT and OE together
- sctp: fix kernel-infoleak for SCTP sockets
- net-sysfs: add check for netdevice being present to speed_show
- Revert "xen-netback: remove 'hotplug-status' once it has served its purpose"
- Revert "xen-netback: Check for hotplug-status existence before watching"
- tracing: Ensure trace buffer is at least 4096 bytes large
- selftests/memfd: clean up mapping in mfd_fail_write
- ARM: Spectre-BHB: provide empty stub for non-config
- staging: gdm724x: fix use after free in gdm_lte_rx()
- virtio: unexport virtio_finalize_features
- virtio: acknowledge all features before access
- ARM: fix Thumb2 regression with Spectre BHB
- ext4: add check to prevent attempting to resize an fs with sparse_super2
- btrfs: unlock newly allocated extent buffer after error
- net: phy: DP83822: clear MISR2 register to disable interrupts
- sctp: fix the processing for INIT chunk
- sctp: fix the processing for INIT_ACK chunk
- xfrm: Fix xfrm migrate issues when address family changes
- arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity
- ARM: dts: rockchip: fix a typo on rk3288 crypto-controller
- MIPS: smp: fill in sibling and core maps earlier
- ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE
- can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when
fully ready
- atm: firestream: check the return value of ioremap() in fs_init()
- nl80211: Update bss channel on channel switch for P2P_CLIENT
- tcp: make tcp_read_sock() more robust
- sfc: extend the locking on mcdi->seqno
- kselftest/vm: fix tests build with old libc
- fs: sysfs_emit: Remove PAGE_SIZE alignment check
- efi: fix return value of __setup handlers
- net/packet: fix slab-out-of-bounds access in packet_recvmsg()
- atm: eni: Add check for dma_map_single
- net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
- usb: gadget: rndis: prevent integer overflow in rndis_set_response()
- usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
- Input: aiptek - properly check endpoint type
- perf symbols: Fix symbol size calculation condition
- net: dsa: Add missing of_node_put() in dsa_port_parse_of
- net: ipv6: fix skb_over_panic in __ip6_append_data
- staging: fbtft: fb_st7789v: reset display before initialization
- thermal: int340x: fix memory leak in int3400_notify()
- llc: fix netdevice reference leaks in llc_ui_bind()
- ALSA: pcm: Add stream lock during PCM reset ioctl operations
- ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
- ALSA: cmipci: Restore aux vol on suspend/resume
- ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
- drivers: net: xgene: Fix regression in CRC stripping
- netfilter: nf_tables: initialize registers in nft_do_chain()
- ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
- ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
- ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
- crypto: qat - disable registration of algorithms
- mac80211: fix potential double free on mesh join
- llc: only change llc->dev when bind() succeeds
-- Ian May <email address hidden> Fri, 27 May 2022 09:30:15 -0500
-
linux-aws (4.15.0-1130.139) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1130.139 -proposed tracker (LP: #1973988)
[ Ubuntu: 4.15.0-180.189 ]
* bionic/linux: 4.15.0-180.189 -proposed tracker (LP: #1974013)
* CVE-2022-29581
- net/sched: cls_u32: fix netns refcount changes in u32_change()
* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP
option (LP: #1972740)
- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
* ext4: limit length to bitmap_maxbytes (LP: #1972281)
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
-- Ian May <email address hidden> Wed, 18 May 2022 14:31:46 -0500
-
linux-aws (4.15.0-1129.138) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1129.138 -proposed tracker (LP: #1971776)
* Bionic update: upstream stable patchset 2022-05-06 (LP: #1972006)
- [Config] aws: updateconfigs for ARM64_ERRATUM_1188873
- [Config] aws: updateconfigs for MITIGATE_SPECTRE_BRANCH_HISTORY
[ Ubuntu: 4.15.0-179.188 ]
* bionic/linux: 4.15.0-179.188 -proposed tracker (LP: #1972673)
* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP
option (LP: #1972740)
- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
* ext4: limit length to bitmap_maxbytes (LP: #1972281)
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
[ Ubuntu: 4.15.0-178.187 ]
* bionic/linux: 4.15.0-178.187 -proposed tracker (LP: #1971799)
* Bionic update: upstream stable patchset 2022-05-06 (LP: #1972006)
- [Config] updateconfigs for ARM64_ERRATUM_1188873
- arm64: arch_timer: Add workaround for ARM erratum 1188873
- arm64: arch_timer: avoid unused function warning
- arm64: Add silicon-errata.txt entry for ARM erratum 1188873
- arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT
- arm64: Add part number for Neoverse N1
- arm64: Add part number for Arm Cortex-A77
- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
- arm64: Add Cortex-X2 CPU part definition
- arm64: entry.S: Add ventry overflow sanity checks
- arm64: entry: Make the trampoline cleanup optional
- arm64: entry: Free up another register on kpti's tramp_exit path
- arm64: entry: Move the trampoline data page before the text page
- arm64: entry: Allow tramp_alias to access symbols after the 4K boundary
- arm64: entry: Don't assume tramp_vectors is the start of the vectors
- arm64: entry: Move trampoline macros out of ifdef'd section
- arm64: entry: Make the kpti trampoline's kpti sequence optional
- Revert "arm64: mmu: add the entry trampolines start/end section markers into
sections.h"
- arm64: entry: Allow the trampoline text to occupy multiple pages
- arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
- [Config] updateconfigs for MITIGATE_SPECTRE_BRANCH_HISTORY
- arm64: entry: Add vectors that have the bhb mitigation sequences
- arm64: entry: Add macro for reading symbol addresses from the trampoline
- arm64: Add percpu vectors for EL1
- arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2
- KVM: arm64: Add templates for BHB mitigation sequences
- arm64: Mitigate spectre style branch history side channels
- KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
- arm64: add ID_AA64ISAR2_EL1 sys register
- arm64: Use the clearbhb instruction in mitigations
* issuing invalid ioctl to /dev/vsock may spam dmesg (LP: #1971480)
- vsock: remove ratelimit unknown ioctl message
* ubuntu_ltp_controllers:cpuset_sched_domains: tests 3,9,11,17,19,25 report
incorrect sched domain for cpu#32 (LP: #1951289)
- sched/topology: Make sched_init_numa() use a set for the deduplicating sort
- sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa()
- ia64: ensure proper NUMA distance and possible map initialization
* CVE-2022-1419
- drm/vgem: Reclassify buffer creation debug message
- drm/vgem: Close use-after-free race in vgem_gem_create
* CVE-2022-28390
- can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
* Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479)
- net: qlogic: check the return value of dma_alloc_coherent() in
qed_vf_hw_prepare()
- qed: return status of qed_iov_get_link
- ethernet: Fix error handling in xemaclite_of_probe
- net: ethernet: ti: cpts: Handle error for clk_enable
- net: ethernet: lpc_eth: Handle error for clk_enable
- ax25: Fix NULL pointer dereference in ax25_kill_by_device
- net/mlx5: Fix size field in bufferx_reg struct
- NFC: port100: fix use-after-free in port100_send_complete
- gpio: ts4900: Do not set DAT and OE together
- sctp: fix kernel-infoleak for SCTP sockets
- net-sysfs: add check for netdevice being present to speed_show
- Revert "xen-netback: remove 'hotplug-status' once it has served its purpose"
- Revert "xen-netback: Check for hotplug-status existence before watching"
- tracing: Ensure trace buffer is at least 4096 bytes large
- selftests/memfd: clean up mapping in mfd_fail_write
- ARM: Spectre-BHB: provide empty stub for non-config
- staging: gdm724x: fix use after free in gdm_lte_rx()
- virtio: unexport virtio_finalize_features
- virtio: acknowledge all features before access
- ARM: fix Thumb2 regression with Spectre BHB
- ext4: add check to prevent attempting to resize an fs with sparse_super2
- btrfs: unlock newly allocated extent buffer after error
- net: phy: DP83822: clear MISR2 register to disable interrupts
- sctp: fix the processing for INIT chunk
- sctp: fix the processing for INIT_ACK chunk
- xfrm: Fix xfrm migrate issues when address family changes
- arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity
- ARM: dts: rockchip: fix a typo on rk3288 crypto-controller
- MIPS: smp: fill in sibling and core maps earlier
- ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE
- can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when
fully ready
- atm: firestream: check the return value of ioremap() in fs_init()
- nl80211: Update bss channel on channel switch for P2P_CLIENT
- tcp: make tcp_read_sock() more robust
- sfc: extend the locking on mcdi->seqno
- kselftest/vm: fix tests build with old libc
- fs: sysfs_emit: Remove PAGE_SIZE alignment check
- efi: fix return value of __setup handlers
- net/packet: fix slab-out-of-bounds access in packet_recvmsg()
- atm: eni: Add check for dma_map_single
- net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
- usb: gadget: rndis: prevent integer overflow in rndis_set_response()
- usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
- Input: aiptek - properly check endpoint type
- perf symbols: Fix symbol size calculation condition
- net: dsa: Add missing of_node_put() in dsa_port_parse_of
- net: ipv6: fix skb_over_panic in __ip6_append_data
- staging: fbtft: fb_st7789v: reset display before initialization
- thermal: int340x: fix memory leak in int3400_notify()
- llc: fix netdevice reference leaks in llc_ui_bind()
- ALSA: pcm: Add stream lock during PCM reset ioctl operations
- ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
- ALSA: cmipci: Restore aux vol on suspend/resume
- ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
- drivers: net: xgene: Fix regression in CRC stripping
- netfilter: nf_tables: initialize registers in nft_do_chain()
- ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
- ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
- ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
- crypto: qat - disable registration of algorithms
- mac80211: fix potential double free on mesh join
- llc: only change llc->dev when bind() succeeds
-- Ian May <email address hidden> Thu, 12 May 2022 14:29:49 -0500
-
linux-aws (4.15.0-1128.137) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1128.137 -proposed tracker (LP: #1969061)
* Bionic update: upstream stable patchset 2022-04-13 (LP: #1968932)
- [Config] aws: updateconfigs for HARDEN_BRANCH_HISTORY
[ Ubuntu: 4.15.0-177.186 ]
* bionic/linux: 4.15.0-177.186 -proposed tracker (LP: #1969083)
* Bionic update: upstream stable patchset 2022-04-13 (LP: #1968932)
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
- vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
- parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel
- parisc/unaligned: Fix ldw() and stw() unalignment handlers
- sr9700: sanity check for packet length
- USB: zaurus: support another broken Zaurus
- ping: remove pr_err from ping_lookup
- net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
- gso: do not skip outer ip header in case of ipip and net_failover
- openvswitch: Fix setting ipv6 fields causing hw csum failure
- drm/edid: Always set RGB444
- net/mlx5e: Fix wrong return value on ioctl EEPROM query failure
- configfs: fix a race in configfs_{,un}register_subsystem()
- RDMA/ib_srp: Fix a deadlock
- iio: adc: men_z188_adc: Fix a resource leak in an error handling path
- ata: pata_hpt37x: disable primary channel on HPT371
- Revert "USB: serial: ch341: add new Product ID for CH341A"
- usb: gadget: rndis: add spinlock for rndis response list
- tracefs: Set the group ownership in apply_options() not parse_options()
- USB: serial: option: add support for DW5829e
- USB: serial: option: add Telit LE910R1 compositions
- usb: dwc3: gadget: Let the interrupt handler disable bottom halves.
- xhci: re-initialize the HC during resume if HCE was set
- xhci: Prevent futile URB re-submissions due to incorrect return value.
- tty: n_gsm: fix encoding of control signal octet bit DV
- tty: n_gsm: fix proper link termination after failed open
- Revert "drm/nouveau/pmu/gm200-: avoid touching PMU outside of
DEVINIT/PREOS/ACR"
- memblock: use kfree() to release kmalloced memblock regions
- fget: clarify and improve __fget_files() implementation
- gpio: tegra186: Fix chip_data type confusion
- tracing: Have traceon and traceoff trigger honor the instance
- mac80211_hwsim: report NOACK frames in tx_status
- mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
- i2c: bcm2835: Avoid clock stretching timeouts
- Input: clear BTN_RIGHT/MIDDLE on buttonpads
- cifs: fix double free race when mount fails in cifs_get_root()
- dmaengine: shdma: Fix runtime PM imbalance on error
- i2c: cadence: allow COMPILE_TEST
- i2c: qup: allow COMPILE_TEST
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
- usb: gadget: don't release an existing dev->buf
- usb: gadget: clear related members when goto fail
- ata: pata_hpt37x: fix PCI clock detection
- ALSA: intel_hdmi: Fix reference to PCM buffer address
- ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
- xfrm: fix MTU regression
- netfilter: fix use-after-free in __nf_register_net_hook()
- xfrm: enforce validity of offload input flags
- netfilter: nf_queue: don't assume sk is full socket
- netfilter: nf_queue: fix possible use-after-free
- batman-adv: Request iflink once in batadv-on-batadv check
- batman-adv: Request iflink once in batadv_get_real_netdevice
- batman-adv: Don't expect inter-netns unique iflink indices
- net: dcb: flush lingering app table entries for unregistered devices
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
- mac80211: fix forwarded mesh frames AC & queue selection
- net: stmmac: fix return value of __setup handler
- net: sxgbe: fix return value of __setup handler
- net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
- efivars: Respect "block" flag in efivar_entry_set_safe()
- can: gs_usb: change active_channels's type from atomic_t to u8
- ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
- soc: fsl: qe: Check of ioremap return value
- net: chelsio: cxgb3: check the return value of pci_find_capability()
- nl80211: Handle nla_memdup failures in handle_nan_filter
- Input: elan_i2c - move regulator_[en|dis]able() out of
elan_[en|dis]able_power()
- Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
- HID: add mapping for KEY_ALL_APPLICATIONS
- memfd: fix F_SEAL_WRITE after shmem huge page allocated
- net: dcb: disable softirqs in dcbnl_flush_dev()
- hamradio: fix macro redefine warning
- arm/arm64: Provide a wrapper for SMCCC 1.1 calls
- arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit()
- ARM: report Spectre v2 status through sysfs
- ARM: early traps initialisation
- ARM: use LOADADDR() to get load address of sections
- [Config] updateconfigs for HARDEN_BRANCH_HISTORY
- ARM: Spectre-BHB workaround
- ARM: include unprivileged BPF status in Spectre V2 reporting
- ARM: fix build error when BPF_SYSCALL is disabled
- ARM: fix co-processor register typo
- ARM: Do not use NOCROSSREFS directive with ld.lld
- ARM: fix build warning in proc-v7-bugs.c
- xen/xenbus: don't let xenbus_grant_ring() remove grants in error case
- xen/grant-table: add gnttab_try_end_foreign_access()
- xen/blkfront: don't use gnttab_query_foreign_access() for mapped status
- xen/netfront: don't use gnttab_query_foreign_access() for mapped status
- xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
- xen/gntalloc: don't use gnttab_query_foreign_access()
- xen: remove gnttab_query_foreign_access()
- xen/9p: use alloc/free_pages_exact()
- xen/gnttab: fix gnttab_end_foreign_access() without page specified
- xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
* ip6gre driver does not hold device reference (LP: #1968340)
- ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
* LRMv6: add multi-architecture support (LP: #1968774)
- [Packaging] resync dkms-build{,--nvidia-N}
* Use kernel-testing repo from launchpad for ADT tests (LP: #1968016)
- [Debian] Use kernel-testing repo from launchpad
* vmx_ldtr_test in ubuntu_kvm_unit_tests failed (FAIL: Expected 0 for L1 LDTR
selector (got 50)) (LP: #1956315)
- KVM: nVMX: Set LDTR to its architecturally defined value on nested VM-Exit
* Bionic update: upstream stable patchset 2022-03-29 (LP: #1967013)
- moxart: fix potential use-after-free on remove path
- x86/mm, mm/hwpoison: Fix the unmap kernel 1:1 pages check condition
- integrity: check the return value of audit_log_start()
- ima: Remove ima_policy file before directory
- ima: Allow template selection with ima_template[_fmt]= after ima_hash=
- mmc: sdhci-of-esdhc: Check for error num after setting mask
- net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs
- NFS: Fix initialisation of nfs_client cl_flags field
- NFSD: Clamp WRITE offsets
- NFSv4 only print the label when its queried
- nfs: nfs4clinet: check the return value of kstrdup()
- NFSv4.1: Fix uninitialised variable in devicenotify
- NFSv4 remove zero number of fs_locations entries error check
- NFSv4 expose nfs_parse_server_name function
- scsi: target: iscsi: Make sure the np under each tpg is unique
- usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend
- net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout()
- Revert "net: axienet: Wait for PhyRstCmplt after core reset"
- ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group
- ARM: dts: meson: Fix the UART compatible strings
- staging: fbtft: Fix error path in fbtft_driver_module_init()
- ARM: dts: imx6qdl-udoo: Properly describe the SD card detect
- usb: f_fs: Fix use-after-free for epfile
- bonding: pair enable_port with slave_arr_updates
- ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
- net: do not keep the dst cache when uncloning an skb dst and its metadata
- net: fix a memleak when uncloning an skb dst and its metadata
- tipc: rate limit warning for received illegal binding update
- net: amd-xgbe: disable interrupts during pci removal
- vt_ioctl: fix array_index_nospec in vt_setactivate
- vt_ioctl: add array_index_nospec to VT_ACTIVATE
- n_tty: wake up poll(POLLRDNORM) on receiving data
- usb: ulpi: Move of_node_put to ulpi_dev_release
- usb: ulpi: Call of_node_put correctly
- usb: dwc3: gadget: Prevent core from processing stale TRBs
- USB: gadget: validate interface OS descriptor requests
- usb: gadget: rndis: check size of RNDIS_MSG_SET command
- USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320
- USB: serial: option: add ZTE MF286D modem
- USB: serial: ch341: add support for GW Instek USB2.0-Serial devices
- USB: serial: cp210x: add NCR Retail IO box id
- USB: serial: cp210x: add CPI Bulk Coin Recycler id
- seccomp: Invalidate seccomp mode to catch death failures
- hwmon: (dell-smm) Speed up setting of fan speed
- perf: Fix list corruption in perf_cgroup_switch()
- net: bridge: fix stale eth hdr pointer in br_dev_xmit
- Makefile.extrawarn: Move -Wunaligned-access to W=1
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
- serial: parisc: GSC: fix build when IOSAPIC is not set
- parisc: Fix data TLB miss in sba_unmap_sg
- parisc: Fix sglist access in ccio-dma.c
- btrfs: send: in case of IO error log it
- net: ieee802154: at86rf230: Stop leaking skb's
- selftests/zram: Skip max_comp_streams interface on newer kernel
- selftests/zram01.sh: Fix compression ratio calculation
- selftests/zram: Adapt the situation that /dev/zram0 is being used
- ax25: improve the incomplete fix to avoid UAF and NPD bugs
- vfs: make freeze_super abort when sync_filesystem returns error
- quota: make dquot_quota_sync return errors from ->sync_fs
- Revert "module, async: async_synchronize_full() on module init iff async is
used"
- iwlwifi: fix use-after-free
- drm/radeon: Fix backlight control on iMac 12,1
- xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
- taskstats: Cleanup the use of task->exit_code
- vsock: remove vsock from connected table when connect is interrupted by a
signal
- iwlwifi: pcie: fix locking when "HW not ready"
- iwlwifi: pcie: gen2: fix locking when "HW not ready"
- net: ieee802154: ca8210: Fix lifs/sifs periods
- ping: fix the dif and sdif check in ping_lookup
- drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
- bonding: fix data-races around agg_select_timer
- libsubcmd: Fix use-after-free for realloc(..., 0)
- ALSA: hda: Fix regression on forced probe mask option
- ALSA: hda: Fix missing codec probe on Shenker Dock 15
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
- powerpc/lib/sstep: fix 'ptesync' build error
- NFS: LOOKUP_DIRECTORY is also ok with symlinks
- EDAC: Fix calculation of returned address and next offset in
edac_align_ptr()
- net: sched: limit TC_ACT_REPEAT loops
- dmaengine: sh: rcar-dmac: Check for error num after setting mask
- i2c: brcmstb: fix support for DSL and CM variants
- mtd: rawnand: brcmnand: Refactored code to introduce helper functions
- mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
- KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
- NFS: Do not report writeback errors in nfs_getattr()
- ARM: OMAP2+: hwmod: Add of_node_put() before break
- ata: libata-core: Disable TRIM on M88V29
- tracing: Fix tp_printk option related with tp_printk_stop_on_boot
- net: usb: qmi_wwan: Add support for Dell DW5829e
- net: macb: Align the dma and coherent dma masks
- net: dsa: lan9303: fix reset on probe
* CVE-2022-27223
- USB: gadget: validate endpoint index for xilinx udc
* CVE-2022-26490
- nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
* CVE-2021-26401
- x86/speculation: Use generic retpoline by default on AMD
- x86/speculation: Update link to AMD speculation whitepaper
- x86/speculation: Warn about Spectre v2 LFENCE mitigation
- x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
* CVE-2022-0001
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation
reporting
-- Ian May <email address hidden> Fri, 22 Apr 2022 13:26:03 -0500
-
linux-aws (4.15.0-1127.136) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1127.136 -proposed tracker (LP: #1967402)
[ Ubuntu: 4.15.0-176.185 ]
* bionic/linux: 4.15.0-176.185 -proposed tracker (LP: #1966771)
* Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717)
- can: bcm: fix UAF of bcm op
- net: bridge: clear bridge's private skb space on xmit
- s390/hypfs: include z/VM guests with access control group set
- scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP
devices
- udf: Restore i_lenAlloc when inode expansion fails
- udf: Fix NULL ptr deref when converting from inline format
- PM: wakeup: simplify the output logic of pm_show_wakelocks()
- netfilter: nft_payload: do not update layer 4 checksum when mangling
fragments
- serial: stm32: fix software flow control transfer
- tty: n_gsm: fix SW flow control encoding/handling
- tty: Add support for Brainboxes UC cards.
- usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
- usb: common: ulpi: Fix crash in ulpi_match()
- usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
- USB: core: Fix hang in usb_kill_urb by adding memory barriers
- usb: typec: tcpm: Do not disconnect while receiving VBUS off
- net: sfp: ignore disabled SFP node
- powerpc/32: Fix boot failure with GCC latent entropy plugin
- lkdtm: Fix content of section containing lkdtm_rodata_do_nothing()
- i40e: Increase delay to 1 s after global EMP reset
- i40e: fix unsigned stat widths
- rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
- rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
- scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
- ipv6_tunnel: Rate limit warning messages
- net: fix information leakage in /proc/net/ptype
- ping: fix the sk_bound_dev_if match in ping_lookup
- ipv4: avoid using shared IP generator for connected sockets
- hwmon: (lm90) Reduce maximum conversion rate for G781
- NFSv4: Handle case where the lookup of a directory fails
- NFSv4: nfs_atomic_open() can race when looking up a non-regular file
- net-procfs: show net devices bound packet types
- drm/msm: Fix wrong size calculation
- drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
- ibmvnic: don't spin in tasklet
- yam: fix a memory leak in yam_siocdevprivate()
- ipv4: raw: lock the socket in raw_bind()
- ipv4: tcp: send zero IPID in SYNACK messages
- netfilter: nat: remove l4 protocol port rovers
- netfilter: nat: limit port clash resolution attempts
- ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
- net: amd-xgbe: ensure to reset the tx_timer_active flag
- net: amd-xgbe: Fix skb data length underflow
- rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
- af_packet: fix data-race in packet_setsockopt / packet_setsockopt
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
- ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
- drm/nouveau: fix off by one in BIOS boundary checking
- block: bio-integrity: Advance seed correctly for larger interval sizes
- RDMA/mlx4: Don't continue event handler after memory allocation failure
- iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()
- iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
- spi: bcm-qspi: check for valid cs before applying chip select
- spi: mediatek: Avoid NULL pointer crash in interrupt
- spi: meson-spicc: add IRQ check in meson_spicc_probe
- net: ieee802154: ca8210: Stop leaking skb's
- net: ieee802154: Return meaningful error codes from the netlink helpers
- net: macsec: Verify that send_sci is on when setting Tx sci explicitly
- drm/i915/overlay: Prevent divide by zero bugs in scaling
- ASoC: fsl: Add missing error handling in pcm030_fabric_probe
- scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
- nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client.
- selftests: futex: Use variable MAKE instead of make
- rtc: cmos: Evaluate century appropriate
- EDAC/altera: Fix deferred probing
- EDAC/xgene: Fix deferred probing
- ext4: fix error handling in ext4_restore_inline_data()
- serial: 8250: of: Fix mapped region size when using reg-offset property
- i40e: Fix issue when maximum queues is exceeded
- i40e: Fix queues reservation for XDP
- ipv6: annotate accesses to fn->fn_sernum
- ibmvnic: init ->running_cap_crqs early
* Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // audit:
improve audit queue handling when "audit=1" on cmdline (LP: #1965723)
- audit: improve audit queue handling when "audit=1" on cmdline
* CVE-2021-43975
- atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
* Packaging resync (LP: #1786013)
- [Packaging] resync dkms-build{,--nvidia-N} from LRMv5
-- Ian May <email address hidden> Fri, 01 Apr 2022 14:21:52 -0500
-
linux-aws (4.15.0-1126.135) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1126.135 -proposed tracker (LP: #1966282)
[ Ubuntu: 4.15.0-175.184 ]
* bionic/linux: 4.15.0-175.184 -proposed tracker (LP: #1966304)
* CVE-2022-27666
- esp: Fix possible buffer overflow in ESP transformation
[ Ubuntu: 4.15.0-173.182 ]
* bionic/linux: 4.15.0-173.182 -proposed tracker (LP: #1965552)
* Pick fixup from upstream stable patchset 2022-03-04 to address cert
failure with clock jitter test on NUC7i3DNHE (LP: #1964213)
- Bluetooth: refactor malicious adv data check
-- Ian May <email address hidden> Thu, 24 Mar 2022 23:45:02 -0500
-
linux-aws (4.15.0-1125.134) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1125.134 -proposed tracker (LP: #1965391)
[ Ubuntu: 4.15.0-174.183 ]
* bionic/linux: 4.15.0-174.183 -proposed tracker (LP: #1965413)
* Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717)
- can: bcm: fix UAF of bcm op
- net: bridge: clear bridge's private skb space on xmit
- Bluetooth: refactor malicious adv data check
- s390/hypfs: include z/VM guests with access control group set
- scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP
devices
- udf: Restore i_lenAlloc when inode expansion fails
- udf: Fix NULL ptr deref when converting from inline format
- PM: wakeup: simplify the output logic of pm_show_wakelocks()
- netfilter: nft_payload: do not update layer 4 checksum when mangling
fragments
- serial: stm32: fix software flow control transfer
- tty: n_gsm: fix SW flow control encoding/handling
- tty: Add support for Brainboxes UC cards.
- usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
- usb: common: ulpi: Fix crash in ulpi_match()
- usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
- USB: core: Fix hang in usb_kill_urb by adding memory barriers
- usb: typec: tcpm: Do not disconnect while receiving VBUS off
- net: sfp: ignore disabled SFP node
- powerpc/32: Fix boot failure with GCC latent entropy plugin
- lkdtm: Fix content of section containing lkdtm_rodata_do_nothing()
- i40e: Increase delay to 1 s after global EMP reset
- i40e: fix unsigned stat widths
- rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
- rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
- scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
- ipv6_tunnel: Rate limit warning messages
- net: fix information leakage in /proc/net/ptype
- ping: fix the sk_bound_dev_if match in ping_lookup
- ipv4: avoid using shared IP generator for connected sockets
- hwmon: (lm90) Reduce maximum conversion rate for G781
- NFSv4: Handle case where the lookup of a directory fails
- NFSv4: nfs_atomic_open() can race when looking up a non-regular file
- net-procfs: show net devices bound packet types
- drm/msm: Fix wrong size calculation
- drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
- ibmvnic: don't spin in tasklet
- yam: fix a memory leak in yam_siocdevprivate()
- ipv4: raw: lock the socket in raw_bind()
- ipv4: tcp: send zero IPID in SYNACK messages
- netfilter: nat: remove l4 protocol port rovers
- netfilter: nat: limit port clash resolution attempts
- ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
- net: amd-xgbe: ensure to reset the tx_timer_active flag
- net: amd-xgbe: Fix skb data length underflow
- rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
- af_packet: fix data-race in packet_setsockopt / packet_setsockopt
- audit: improve audit queue handling when "audit=1" on cmdline
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
- ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
- drm/nouveau: fix off by one in BIOS boundary checking
- block: bio-integrity: Advance seed correctly for larger interval sizes
- RDMA/mlx4: Don't continue event handler after memory allocation failure
- iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()
- iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
- spi: bcm-qspi: check for valid cs before applying chip select
- spi: mediatek: Avoid NULL pointer crash in interrupt
- spi: meson-spicc: add IRQ check in meson_spicc_probe
- net: ieee802154: ca8210: Stop leaking skb's
- net: ieee802154: Return meaningful error codes from the netlink helpers
- net: macsec: Verify that send_sci is on when setting Tx sci explicitly
- drm/i915/overlay: Prevent divide by zero bugs in scaling
- ASoC: fsl: Add missing error handling in pcm030_fabric_probe
- scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
- nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client.
- selftests: futex: Use variable MAKE instead of make
- rtc: cmos: Evaluate century appropriate
- EDAC/altera: Fix deferred probing
- EDAC/xgene: Fix deferred probing
- ext4: fix error handling in ext4_restore_inline_data()
- serial: 8250: of: Fix mapped region size when using reg-offset property
- i40e: Fix issue when maximum queues is exceeded
- i40e: Fix queues reservation for XDP
- ipv6: annotate accesses to fn->fn_sernum
- ibmvnic: init ->running_cap_crqs early
* CVE-2021-43975
- atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
* Packaging resync (LP: #1786013)
- [Packaging] resync dkms-build{,--nvidia-N} from LRMv5
-- Ian May <email address hidden> Wed, 23 Mar 2022 11:16:12 -0500
-
linux-aws (4.15.0-1124.133) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1124.133 -proposed tracker (LP: #1964217)
[ Ubuntu: 4.15.0-172.181 ]
* CVE-2022-0847
- lib/iov_iter: initialize "flags" in new pipe_buffer
* Bionic update: upstream stable patchset 2022-02-11 (LP: #1960681)
- Bluetooth: bfusb: fix division by zero in send path
- USB: core: Fix bug in resuming hub's handling of wakeup requests
- USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
- mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
- can: gs_usb: fix use of uninitialized variable, detach device on reception
of invalid USB data
- can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
- random: fix data race on crng_node_pool
- random: fix data race on crng init time
- staging: wlan-ng: Avoid bitwise vs logical OR warning in
hfa384x_usb_throttlefn()
- drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
- orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
- media: uvcvideo: fix division by zero at stream start
- rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with
interrupts enabled
- Bluetooth: schedule SCO timeouts with delayed_work
- Bluetooth: fix init and cleanup of sco_conn.timeout_work
- HID: uhid: Fix worker destroying device without any protection
- HID: wacom: Ignore the confidence flag when a touch is removed
- HID: wacom: Avoid using stale array indicies to read contact count
- nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed
bind()
- rtc: cmos: take rtc_lock while reading from CMOS
- media: flexcop-usb: fix control-message timeouts
- media: mceusb: fix control-message timeouts
- media: em28xx: fix control-message timeouts
- media: cpia2: fix control-message timeouts
- media: s2255: fix control-message timeouts
- media: dib0700: fix undefined behavior in tuner shutdown
- media: redrat3: fix control-message timeouts
- media: pvrusb2: fix control-message timeouts
- media: stk1160: fix control-message timeouts
- can: softing_cs: softingcs_probe(): fix memleak on registration failure
- shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
- Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
- clk: bcm-2835: Pick the closest clock rate
- clk: bcm-2835: Remove rounding up the dividers
- wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
- media: em28xx: fix memory leak in em28xx_init_dev
- Bluetooth: stop proccessing malicious adv data
- media: dmxdev: fix UAF when dvb_register_device() fails
- crypto: qce - fix uaf on qce_ahash_register_one
- tty: serial: atmel: Check return code of dmaengine_submit()
- tty: serial: atmel: Call dma_async_issue_pending()
- media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
- netfilter: bridge: add support for pppoe filtering
- arm64: dts: qcom: msm8916: fix MMC controller aliases
- drm/amdgpu: Fix a NULL pointer dereference in
amdgpu_connector_lcd_native_mode()
- drm/radeon/radeon_kms: Fix a NULL pointer dereference in
radeon_driver_open_kms()
- serial: amba-pl011: do not request memory region twice
- floppy: Fix hang in watchdog when disk is ejected
- media: dib8000: Fix a memleak in dib8000_init()
- media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
- media: si2157: Fix "warm" tuner state detection
- sched/rt: Try to restart rt period timer when rt runtime exceeded
- media: dw2102: Fix use after free
- media: msi001: fix possible null-ptr-deref in msi001_probe()
- usb: ftdi-elan: fix memory leak on device disconnect
- x86/mce/inject: Avoid out-of-bounds write when setting flags
- pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
__nonstatic_find_io_region()
- pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
nonstatic_find_mem_region()
- ppp: ensure minimum packet size in ppp_write()
- fsl/fman: Check for null pointer after calling devm_ioremap
- spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
- tpm: add request_locality before write TPM_INT_ENABLE
- can: softing: softing_startstop(): fix set but not used variable warning
- can: xilinx_can: xcan_probe(): check for error irq
- pcmcia: fix setting of kthread task states
- net: mcs7830: handle usb read errors properly
- ext4: avoid trim error on fs with small groups
- ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
- ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
- ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
- RDMA/hns: Validate the pkey index
- powerpc/prom_init: Fix improper check of prom_getprop()
- ALSA: oss: fix compile error when OSS_DEBUG is enabled
- char/mwave: Adjust io port register size
- scsi: ufs: Fix race conditions related to driver data
- RDMA/core: Let ib_find_gid() continue search even after empty entry
- dmaengine: pxa/mmp: stop referencing config->slave_id
- iommu/iova: Fix race between FQ timeout and teardown
- ASoC: samsung: idma: Check of ioremap return value
- misc: lattice-ecp3-config: Fix task hung when firmware load failed
- mips: lantiq: add support for clk_set_parent()
- mips: bcm63xx: add support for clk_set_parent()
- RDMA/cxgb4: Set queue pair state when being queried
- Bluetooth: Fix debugfs entry leak in hci_register_dev()
- fs: dlm: filter user dlm messages for kernel locks
- ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
- drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
- usb: gadget: f_fs: Use stream_open() for endpoint files
- HID: apple: Do not reset quirks when the Fn key is not found
- media: b2c2: Add missing check in flexcop_pci_isr:
- mlxsw: pci: Add shutdown method in PCI driver
- drm/bridge: megachips: Ensure both bridges are probed before registration
- gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
- HSI: core: Fix return freed object in hsi_new_client
- mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
- usb: uhci: add aspeed ast2600 uhci support
- floppy: Add max size check for user space request
- media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
- media: saa7146: hexium_orion: Fix a NULL pointer dereference in
hexium_attach()
- media: m920x: don't use stack on USB reads
- iwlwifi: mvm: synchronize with FW after multicast commands
- ath10k: Fix tx hanging
- net: bonding: debug: avoid printing debug logs when bond is not notifying
peers
- bpf: Do not WARN in bpf_warn_invalid_xdp_action()
- media: igorplugusb: receiver overflow should be reported
- media: saa7146: hexium_gemini: Fix a NULL pointer dereference in
hexium_attach()
- mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
- arm64: tegra: Adjust length of CCPLEX cluster MMIO region
- usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
- ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
- iwlwifi: fix leaks/bad data after failed firmware load
- iwlwifi: remove module loading failure message
- um: registers: Rename function names to avoid conflicts and build problems
- jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
- ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
- ACPICA: Utilities: Avoid deleting the same object twice in a row
- ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
- ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
- btrfs: remove BUG_ON() in find_parent_nodes()
- btrfs: remove BUG_ON(!eie) in find_parent_nodes
- net: mdio: Demote probed message to debug print
- mac80211: allow non-standard VHT MCS-10/11
- dm btree: add a defensive bounds check to insert_at()
- dm space map common: add bounds check to sm_ll_lookup_bitmap()
- net: phy: marvell: configure RGMII delays for 88E1118
- serial: pl010: Drop CR register reset on set_termios
- serial: core: Keep mctrl register state and cached copy in sync
- parisc: Avoid calling faulthandler_disabled() twice
- powerpc/6xx: add missing of_node_put
- powerpc/powernv: add missing of_node_put
- powerpc/cell: add missing of_node_put
- powerpc/btext: add missing of_node_put
- powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
- i2c: i801: Don't silently correct invalid transfer size
- powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
- i2c: mpc: Correct I2C reset procedure
- w1: Misuse of get_user()/put_user() reported by sparse
- ALSA: seq: Set upper limit of processed events
- MIPS: OCTEON: add put_device() after of_find_device_by_node()
- i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
- MIPS: Octeon: Fix build errors using clang
- scsi: sr: Don't use GFP_DMA
- ASoC: mediatek: mt8173: fix device_node leak
- power: bq25890: Enable continuous conversion for ADC at charging
- ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
- serial: Fix incorrect rs485 polarity on uart open
- cputime, cpuacct: Include guest time in user time in cpuacct.stat
- iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
- ext4: make sure quota gets properly shutdown on error
- ext4: set csum seed in tmp inode while migrating to extents
- ext4: Fix BUG_ON in ext4_bread when write quota data
- ext4: don't use the orphan list when migrating an inode
- crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
- drm/radeon: fix error handling in radeon_driver_open_kms
- firmware: Update Kconfig help text for Google firmware
- Documentation: refer to config RANDOMIZE_BASE for kernel address-space
randomization
- RDMA/hns: Modify the mapping attribute of doorbell to device
- RDMA/rxe: Fix a typo in opcode name
- powerpc/cell: Fix clang -Wimplicit-fallthrough warning
- powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
- net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
- parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
- af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
- net: axienet: Wait for PhyRstCmplt after core reset
- net: axienet: fix number of TX ring slots for available check
- netns: add schedule point in ops_exit_list()
- libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
- dmaengine: at_xdmac: Print debug message after realeasing the lock
- dmaengine: at_xdmac: Fix lld view setting
- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
- net_sched: restore "mpu xxx" handling
- bcmgenet: add WOL IRQ check
- scripts/dtc: dtx_diff: remove broken example from help text
- lib82596: Fix IRQ check in sni_82596_probe
- mips,s390,sh,sparc: gup: Work around the "COW can break either way" issue
- gianfar: simplify FCS handling and fix memory leak
- firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
- firmware: qemu_fw_cfg: fix kobject leak in probe error path
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after
reboot from Windows
- wcn36xx: Release DMA channel descriptor allocations
- tty: serial: uartlite: allow 64 bit address
- xfrm: fix a small bug in xfrm_sa_len()
- mmc: meson-mx-sdio: add IRQ check
- netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
- staging: greybus: audio: Check null pointer
- Bluetooth: hci_bcm: Check for error irq
- ASoC: rt5663: Handle device_property_read_u32_array error codes
- rpmsg: Only invoke announce_create for rpdev with endpoints
- rpmsg: core: Clean up resources on announce_create failure.
- dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK
- rtc: pxa: fix null pointer dereference
* CVE-2022-0435
- tipc: improve size validations for received domain records
* CVE-2022-0492
- cgroup-v1: Require capabilities to set release_agent
* CVE-2021-3506
- f2fs: fix to avoid out-of-bounds memory access
* Bionic update: upstream stable patchset 2022-02-01 (LP: #1959709)
- tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
- tracing: Tag trace_percpu_buffer as a percpu pointer
- virtio_pci: Support surprise removal of virtio pci device
- ieee802154: atusb: fix uninit value in atusb_set_extended_addr
- RDMA/core: Don't infoleak GRH fields
- mac80211: initialize variable have_higher_than_11mbit
- i40e: fix use-after-free in i40e_sync_filters_subtask()
- i40e: Fix incorrect netdev's real number of RX/TX queues
- ipv6: Check attribute length for RTA_GATEWAY in multipath route
- ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
- sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
- power: reset: ltc2952: Fix use of floating point literals
- rndis_host: support Hytera digital radios
- phonet: refcount leak in pep_sock_accep
- ipv6: Continue processing multipath route even if gateway attribute is
invalid
- ipv6: Do cleanup if attribute validation fails in multipath route
- scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
- ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
- net: udp: fix alignment problem in udp4_seq_show()
- mISDN: change function names to avoid conflicts
- usb: mtu3: fix interval value for intr and isoc
* Bionic update: upstream stable patchset 2022-01-27 (LP: #1959335)
- tee: handle lookup of shm with reference count 0
- platform/x86: apple-gmux: use resource_size() with res
- selinux: initialize proto variable in selinux_ip_postroute_compat()
- scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
- net: usb: pegasus: Do not drop long Ethernet frames
- NFC: st21nfca: Fix memory leak in device probe and remove
- fsl/fman: Fix missing put_device() call in fman_port_probe
- nfc: uapi: use kernel size_t to fix user-space builds
- uapi: fix linux/nfc.h userspace compilation errors
- xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set.
- usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- binder: fix async_free_space accounting for empty parcels
- scsi: vmw_pvscsi: Set residual data length conditionally
- Input: appletouch - initialize work before device registration
- Input: spaceball - fix parsing of movement data packets
- net: fix use-after-free in tw_timer_handler
- sctp: use call_rcu to free endpoint
- Input: i8042 - add deferred probe support
- Input: i8042 - enable deferred probe quirk for ASUS UM325UA
- i2c: validate user data in compat ioctl
- usb: mtu3: set interval of FS intr and isoc endpoint
* Bionic update: upstream stable patchset 2022-01-27 (LP: #1959335) //
HID_ASUS should depend on USB_HID in stable v4.15 backports (LP: #1959762)
- HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
-- Ian May <email address hidden> Thu, 10 Mar 2022 13:35:22 -0600
-
linux-aws (4.15.0-1123.132) bionic; urgency=medium
* Disable unprivileged BPF by default (LP: #1961338)
- [Config] set CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
[ Ubuntu: 4.15.0-171.180 ]
* CVE-2022-0001
- cpu/SMT: create and export cpu_smt_possible()
- x86/speculation: Merge one test in spectre_v2_user_select_mitigation()
- x86,bugs: Unconditionally allow spectre_v2=retpoline,amd
- SAUCE: x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE
- SAUCE: x86/speculation: Add eIBRS + Retpoline options
- SAUCE: Documentation/hw-vuln: Update spectre doc
* Disable unprivileged BPF by default (LP: #1961338)
- bpf: Add kconfig knob for disabling unpriv bpf by default
- [Config] set CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
-- Thadeu Lima de Souza Cascardo <email address hidden> Wed, 02 Mar 2022 15:44:28 -0300
-
linux-aws (4.15.0-1122.130) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1122.130 -proposed tracker (LP: #1961276)
[ Ubuntu: 4.15.0-170.178 ]
* bionic/linux: 4.15.0-170.178 -proposed tracker (LP: #1961299)
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
* Bionic update: upstream stable patchset 2022-02-11 (LP: #1960681)
- Bluetooth: bfusb: fix division by zero in send path
- USB: core: Fix bug in resuming hub's handling of wakeup requests
- USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
- mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
- can: gs_usb: fix use of uninitialized variable, detach device on reception
of invalid USB data
- can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
- random: fix data race on crng_node_pool
- random: fix data race on crng init time
- staging: wlan-ng: Avoid bitwise vs logical OR warning in
hfa384x_usb_throttlefn()
- drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
- orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
- media: uvcvideo: fix division by zero at stream start
- rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with
interrupts enabled
- Bluetooth: schedule SCO timeouts with delayed_work
- Bluetooth: fix init and cleanup of sco_conn.timeout_work
- HID: uhid: Fix worker destroying device without any protection
- HID: wacom: Ignore the confidence flag when a touch is removed
- HID: wacom: Avoid using stale array indicies to read contact count
- nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed
bind()
- rtc: cmos: take rtc_lock while reading from CMOS
- media: flexcop-usb: fix control-message timeouts
- media: mceusb: fix control-message timeouts
- media: em28xx: fix control-message timeouts
- media: cpia2: fix control-message timeouts
- media: s2255: fix control-message timeouts
- media: dib0700: fix undefined behavior in tuner shutdown
- media: redrat3: fix control-message timeouts
- media: pvrusb2: fix control-message timeouts
- media: stk1160: fix control-message timeouts
- can: softing_cs: softingcs_probe(): fix memleak on registration failure
- shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
- Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
- clk: bcm-2835: Pick the closest clock rate
- clk: bcm-2835: Remove rounding up the dividers
- wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
- media: em28xx: fix memory leak in em28xx_init_dev
- Bluetooth: stop proccessing malicious adv data
- media: dmxdev: fix UAF when dvb_register_device() fails
- crypto: qce - fix uaf on qce_ahash_register_one
- tty: serial: atmel: Check return code of dmaengine_submit()
- tty: serial: atmel: Call dma_async_issue_pending()
- media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
- netfilter: bridge: add support for pppoe filtering
- arm64: dts: qcom: msm8916: fix MMC controller aliases
- drm/amdgpu: Fix a NULL pointer dereference in
amdgpu_connector_lcd_native_mode()
- drm/radeon/radeon_kms: Fix a NULL pointer dereference in
radeon_driver_open_kms()
- serial: amba-pl011: do not request memory region twice
- floppy: Fix hang in watchdog when disk is ejected
- media: dib8000: Fix a memleak in dib8000_init()
- media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
- media: si2157: Fix "warm" tuner state detection
- sched/rt: Try to restart rt period timer when rt runtime exceeded
- media: dw2102: Fix use after free
- media: msi001: fix possible null-ptr-deref in msi001_probe()
- usb: ftdi-elan: fix memory leak on device disconnect
- x86/mce/inject: Avoid out-of-bounds write when setting flags
- pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
__nonstatic_find_io_region()
- pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
nonstatic_find_mem_region()
- ppp: ensure minimum packet size in ppp_write()
- fsl/fman: Check for null pointer after calling devm_ioremap
- spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
- tpm: add request_locality before write TPM_INT_ENABLE
- can: softing: softing_startstop(): fix set but not used variable warning
- can: xilinx_can: xcan_probe(): check for error irq
- pcmcia: fix setting of kthread task states
- net: mcs7830: handle usb read errors properly
- ext4: avoid trim error on fs with small groups
- ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
- ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
- ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
- RDMA/hns: Validate the pkey index
- powerpc/prom_init: Fix improper check of prom_getprop()
- ALSA: oss: fix compile error when OSS_DEBUG is enabled
- char/mwave: Adjust io port register size
- scsi: ufs: Fix race conditions related to driver data
- RDMA/core: Let ib_find_gid() continue search even after empty entry
- dmaengine: pxa/mmp: stop referencing config->slave_id
- iommu/iova: Fix race between FQ timeout and teardown
- ASoC: samsung: idma: Check of ioremap return value
- misc: lattice-ecp3-config: Fix task hung when firmware load failed
- mips: lantiq: add support for clk_set_parent()
- mips: bcm63xx: add support for clk_set_parent()
- RDMA/cxgb4: Set queue pair state when being queried
- Bluetooth: Fix debugfs entry leak in hci_register_dev()
- fs: dlm: filter user dlm messages for kernel locks
- ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
- drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
- usb: gadget: f_fs: Use stream_open() for endpoint files
- HID: apple: Do not reset quirks when the Fn key is not found
- media: b2c2: Add missing check in flexcop_pci_isr:
- mlxsw: pci: Add shutdown method in PCI driver
- drm/bridge: megachips: Ensure both bridges are probed before registration
- gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
- HSI: core: Fix return freed object in hsi_new_client
- mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
- usb: uhci: add aspeed ast2600 uhci support
- floppy: Add max size check for user space request
- media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
- media: saa7146: hexium_orion: Fix a NULL pointer dereference in
hexium_attach()
- media: m920x: don't use stack on USB reads
- iwlwifi: mvm: synchronize with FW after multicast commands
- ath10k: Fix tx hanging
- net: bonding: debug: avoid printing debug logs when bond is not notifying
peers
- bpf: Do not WARN in bpf_warn_invalid_xdp_action()
- media: igorplugusb: receiver overflow should be reported
- media: saa7146: hexium_gemini: Fix a NULL pointer dereference in
hexium_attach()
- mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
- arm64: tegra: Adjust length of CCPLEX cluster MMIO region
- usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
- ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
- iwlwifi: fix leaks/bad data after failed firmware load
- iwlwifi: remove module loading failure message
- um: registers: Rename function names to avoid conflicts and build problems
- jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
- ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
- ACPICA: Utilities: Avoid deleting the same object twice in a row
- ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
- ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
- btrfs: remove BUG_ON() in find_parent_nodes()
- btrfs: remove BUG_ON(!eie) in find_parent_nodes
- net: mdio: Demote probed message to debug print
- mac80211: allow non-standard VHT MCS-10/11
- dm btree: add a defensive bounds check to insert_at()
- dm space map common: add bounds check to sm_ll_lookup_bitmap()
- net: phy: marvell: configure RGMII delays for 88E1118
- serial: pl010: Drop CR register reset on set_termios
- serial: core: Keep mctrl register state and cached copy in sync
- parisc: Avoid calling faulthandler_disabled() twice
- powerpc/6xx: add missing of_node_put
- powerpc/powernv: add missing of_node_put
- powerpc/cell: add missing of_node_put
- powerpc/btext: add missing of_node_put
- powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
- i2c: i801: Don't silently correct invalid transfer size
- powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
- i2c: mpc: Correct I2C reset procedure
- w1: Misuse of get_user()/put_user() reported by sparse
- ALSA: seq: Set upper limit of processed events
- MIPS: OCTEON: add put_device() after of_find_device_by_node()
- i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
- MIPS: Octeon: Fix build errors using clang
- scsi: sr: Don't use GFP_DMA
- ASoC: mediatek: mt8173: fix device_node leak
- power: bq25890: Enable continuous conversion for ADC at charging
- ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
- serial: Fix incorrect rs485 polarity on uart open
- cputime, cpuacct: Include guest time in user time in cpuacct.stat
- iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
- ext4: make sure quota gets properly shutdown on error
- ext4: set csum seed in tmp inode while migrating to extents
- ext4: Fix BUG_ON in ext4_bread when write quota data
- ext4: don't use the orphan list when migrating an inode
- crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
- drm/radeon: fix error handling in radeon_driver_open_kms
- firmware: Update Kconfig help text for Google firmware
- Documentation: refer to config RANDOMIZE_BASE for kernel address-space
randomization
- RDMA/hns: Modify the mapping attribute of doorbell to device
- RDMA/rxe: Fix a typo in opcode name
- powerpc/cell: Fix clang -Wimplicit-fallthrough warning
- powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
- net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
- parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
- af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
- net: axienet: Wait for PhyRstCmplt after core reset
- net: axienet: fix number of TX ring slots for available check
- netns: add schedule point in ops_exit_list()
- libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
- dmaengine: at_xdmac: Print debug message after realeasing the lock
- dmaengine: at_xdmac: Fix lld view setting
- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
- net_sched: restore "mpu xxx" handling
- bcmgenet: add WOL IRQ check
- scripts/dtc: dtx_diff: remove broken example from help text
- lib82596: Fix IRQ check in sni_82596_probe
- mips,s390,sh,sparc: gup: Work around the "COW can break either way" issue
- gianfar: simplify FCS handling and fix memory leak
- firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
- firmware: qemu_fw_cfg: fix kobject leak in probe error path
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after
reboot from Windows
- wcn36xx: Release DMA channel descriptor allocations
- tty: serial: uartlite: allow 64 bit address
- xfrm: fix a small bug in xfrm_sa_len()
- mmc: meson-mx-sdio: add IRQ check
- netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
- staging: greybus: audio: Check null pointer
- Bluetooth: hci_bcm: Check for error irq
- ASoC: rt5663: Handle device_property_read_u32_array error codes
- rpmsg: Only invoke announce_create for rpdev with endpoints
- rpmsg: core: Clean up resources on announce_create failure.
- dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK
- rtc: pxa: fix null pointer dereference
* CVE-2022-0435
- tipc: improve size validations for received domain records
* CVE-2022-0492
- cgroup-v1: Require capabilities to set release_agent
* CVE-2021-3506
- f2fs: fix to avoid out-of-bounds memory access
* Bionic update: upstream stable patchset 2022-02-01 (LP: #1959709)
- tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
- tracing: Tag trace_percpu_buffer as a percpu pointer
- virtio_pci: Support surprise removal of virtio pci device
- ieee802154: atusb: fix uninit value in atusb_set_extended_addr
- RDMA/core: Don't infoleak GRH fields
- mac80211: initialize variable have_higher_than_11mbit
- i40e: fix use-after-free in i40e_sync_filters_subtask()
- i40e: Fix incorrect netdev's real number of RX/TX queues
- ipv6: Check attribute length for RTA_GATEWAY in multipath route
- ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
- sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
- power: reset: ltc2952: Fix use of floating point literals
- rndis_host: support Hytera digital radios
- phonet: refcount leak in pep_sock_accep
- ipv6: Continue processing multipath route even if gateway attribute is
invalid
- ipv6: Do cleanup if attribute validation fails in multipath route
- scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
- ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
- net: udp: fix alignment problem in udp4_seq_show()
- mISDN: change function names to avoid conflicts
- usb: mtu3: fix interval value for intr and isoc
* Bionic update: upstream stable patchset 2022-01-27 (LP: #1959335)
- tee: handle lookup of shm with reference count 0
- platform/x86: apple-gmux: use resource_size() with res
- selinux: initialize proto variable in selinux_ip_postroute_compat()
- scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
- net: usb: pegasus: Do not drop long Ethernet frames
- NFC: st21nfca: Fix memory leak in device probe and remove
- fsl/fman: Fix missing put_device() call in fman_port_probe
- nfc: uapi: use kernel size_t to fix user-space builds
- uapi: fix linux/nfc.h userspace compilation errors
- xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set.
- usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- binder: fix async_free_space accounting for empty parcels
- scsi: vmw_pvscsi: Set residual data length conditionally
- Input: appletouch - initialize work before device registration
- Input: spaceball - fix parsing of movement data packets
- net: fix use-after-free in tw_timer_handler
- sctp: use call_rcu to free endpoint
- Input: i8042 - add deferred probe support
- Input: i8042 - enable deferred probe quirk for ASUS UM325UA
- i2c: validate user data in compat ioctl
- usb: mtu3: set interval of FS intr and isoc endpoint
* Bionic update: upstream stable patchset 2022-01-27 (LP: #1959335) //
HID_ASUS should depend on USB_HID in stable v4.15 backports (LP: #1959762)
- HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option
-- Ian May <email address hidden> Thu, 24 Feb 2022 11:55:29 -0600
-
linux-aws (4.15.0-1121.129) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1121.129 -proposed tracker (LP: #1960932)
* linux-modules-extra-* fails to install due to dependency on unsigned package
(LP: #1960871)
- [Packaging] aws: Fix dependency for modules-extra
-- Ian May <email address hidden> Tue, 15 Feb 2022 11:09:33 -0600
-
linux-aws (4.15.0-1120.128) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1120.128 -proposed tracker (LP: #1959286)
[ Ubuntu: 4.15.0-169.177 ]
* bionic/linux: 4.15.0-169.177 -proposed tracker (LP: #1959877)
* ubuntu_kernel_selftests.ftrace:ftracetest fails with bionic:linux
4.15.0-168.176 on s390x (LP: #1959752)
- recordmcount.pl: fix typo in s390 mcount regex
[ Ubuntu: 4.15.0-168.176 ]
* bionic/linux: 4.15.0-168.176 -proposed tracker (LP: #1959308)
* CVE-2022-22942
- SAUCE: drm/vmwgfx: Fix stale file descriptors on failed usercopy
* Bionic update: upstream stable patchset 2022-01-25 (LP: #1959033)
- IB/qib: Use struct_size() helper
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
- net: usb: lan78xx: add Allied Telesis AT29M2-AF
- can: kvaser_usb: get CAN clock frequency from device
- HID: holtek: fix mouse probing
- spi: change clk_disable_unprepare to clk_unprepare
- IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
- netfilter: fix regression in looped (broad|multi)cast's MAC handling
- qlcnic: potential dereference null pointer of rx_queue->page_ring
- net: accept UFOv6 packages in virtio_net_hdr_to_skb
- net: skip virtio_net_hdr_set_proto if protocol already set
- bonding: fix ad_actor_system option setting to default
- fjes: Check for error irq
- drivers: net: smc911x: Check for error irq
- sfc: falcon: Check null pointer of rx_queue->page_ring
- hwmon: (lm90) Fix usage of CONFIG2 register in detect function
- ALSA: jack: Check the return value of kstrdup()
- ALSA: drivers: opl3: Fix incorrect use of vp->state
- Input: atmel_mxt_ts - fix double free in mxt_read_info_block
- x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
- pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
- ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
- f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
- usb: gadget: u_ether: fix race in setting MAC address in setup phase
- KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
- hwmon: (lm90) Do not report 'busy' status bit as alarm
- ax25: NPD bug when detaching AX25 device
- hamradio: defer ax25 kfree after unregister_netdev
- hamradio: improve the incomplete fix to avoid NPD
- phonet/pep: refuse to enable an unbound pipe
- parisc: Correct completer in lws start
* Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957)
- nfc: fix segfault in nfc_genl_dump_devices_done
- drm/msm/dsi: set default num_data_lanes
- net/mlx4_en: Update reported link modes for 1/10G
- parisc/agp: Annotate parisc agp init functions with __init
- i2c: rk3x: Handle a spurious start completion interrupt flag
- net: netlink: af_netlink: Prevent empty skb by adding a check on len.
- tracing: Fix a kmemleak false positive in tracing_map
- bpf: fix panic due to oob in bpf_prog_test_run_skb
- hwmon: (dell-smm) Fix warning on /proc/i8k creation error
- mac80211: send ADDBA requests using the tid/queue of the aggregation session
- recordmcount.pl: look for jgnop instruction as well as bcrl on s390
- dm btree remove: fix use after free in rebalance_children()
- audit: improve robustness of the audit queue handling
- nfsd: fix use-after-free due to delegation race
- x86: Make ARCH_USE_MEMREMAP_PROT a generic Kconfig symbol
- x86/sme: Explicitly map new EFI memmap table as encrypted
- ARM: socfpga: dts: fix qspi node compatible
- dmaengine: st_fdma: fix MODULE_ALIAS
- soc/tegra: fuse: Fix bitwise vs. logical OR warning
- igbvf: fix double free in `igbvf_probe`
- ixgbe: set X550 MDIO speed before talking to PHY
- net/packet: rx_owner_map depends on pg_vec
- sit: do not call ipip6_dev_free() from sit_init_net()
- USB: gadget: bRequestType is a bitfield, not a enum
- PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
- PCI/MSI: Mask MSI-X vectors only on success
- USB: serial: option: add Telit FN990 compositions
- timekeeping: Really make sure wall_to_monotonic isn't positive
- libata: if T_LENGTH is zero, dma direction should be DMA_NONE
- net: systemport: Add global locking for descriptor lifecycle
- firmware: arm_scpi: Fix string overflow in SCPI genpd driver
- ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
- fuse: annotate lock in fuse_reverse_inval_entry()
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
- net: lan78xx: Avoid unnecessary self assignment
- ARM: 8805/2: remove unneeded naked function usage
- mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO
- ARM: 8800/1: use choice for kernel unwinders
- [Config] updateconfigs for UNWINDER_ARM
- Input: touchscreen - avoid bitwise vs logical OR warning
- xen/blkfront: harden blkfront against event channel storms
- xen/netfront: harden netfront against event channel storms
- xen/console: harden hvc_xen against event channel storms
- xen/netback: fix rx queue stall detection
- xen/netback: don't queue unlimited number of packages
- mac80211: track only QoS data frames for admission control
* Bionic update: upstream stable patchset 2022-01-11 (LP: #1957113)
- HID: add hid_is_usb() function to make it simpler for USB detection
- HID: add USB_HID dependancy to hid-prodikeys
- HID: add USB_HID dependancy to hid-chicony
- HID: add USB_HID dependancy on some USB HID drivers
- HID: wacom: fix problems when device is not a valid USB device
- HID: check for valid USB device for many HID drivers
- can: sja1000: fix use after free in ems_pcmcia_add_card()
- nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
- bpf: Fix the off-by-two error in range markings
- nfp: Fix memory leak in nfp_cpp_area_cache_add()
- seg6: fix the iif in the IPv6 socket control block
- IB/hfi1: Correct guard on eager buffer deallocation
- mm: bdi: initialize bdi_min_ratio when bdi is unregistered
- ALSA: ctl: Fix copy of updated id with element read/write
- ALSA: pcm: oss: Fix negative period/buffer sizes
- ALSA: pcm: oss: Limit the period size to 16MB
- ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
- tracefs: Have new files inherit the ownership of their parent
- can: pch_can: pch_can_rx_normal: fix use after free
- can: m_can: Disable and ignore ELO interrupt
- libata: add horkage for ASMedia 1092
- wait: add wake_up_pollfree()
- binder: use wake_up_pollfree()
- signalfd: use wake_up_pollfree()
- tracefs: Set all files to the same group ownership as the mount option
- block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
- qede: validate non LSO skb length
- net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
- net: altera: set a couple error code in probe()
- net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
- net, neigh: clear whole pneigh_entry at alloc time
- net/qla3xxx: fix an error code in ql_adapter_up()
- USB: gadget: detect too-big endpoint 0 requests
- USB: gadget: zero allocate endpoint 0 buffers
- usb: core: config: fix validation of wMaxPacketValue entries
- xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
suspending
- usb: core: config: using bit mask instead of individual bits
- iio: trigger: Fix reference counting
- iio: trigger: stm32-timer: fix MODULE_ALIAS
- iio: stk3310: Don't return error code in interrupt handler
- iio: mma8452: Fix trigger reference couting
- iio: ltr501: Don't return error code in trigger handler
- iio: kxsd9: Don't return error code in trigger handler
- iio: itg3200: Call iio_trigger_notify_done() on error
- iio: dln2-adc: Fix lockdep complaint
- iio: dln2: Check return value of devm_iio_trigger_register()
- iio: adc: axp20x_adc: fix charging current reporting on AXP22x
- iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
- irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
- irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
- irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
- irqchip: nvic: Fix offset for Interrupt Priority Offsets
- bonding: make tx_rebalance_counter an atomic
* Bionic update: upstream stable patchset 2022-01-06 (LP: #1956614)
- USB: serial: option: add Telit LE910S1 0x9200 composition
- USB: serial: option: add Fibocom FM101-GL variants
- usb: hub: Fix usb enumeration issue due to address0 race
- usb: hub: Fix locking issues with address0_mutex
- binder: fix test regression due to sender_euid change
- ALSA: ctxfi: Fix out-of-range access
- media: cec: copy sequence field for the reply
- HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
- staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
- fuse: fix page stealing
- xen: don't continue xenstore initialization in case of errors
- xen: detect uninitialized xenbus in xenbus_init
- tracing: Fix pid filtering when triggers are attached
- netfilter: ipvs: Fix reuse connection if RS weight is 0
- ARM: dts: BCM5301X: Fix I2C controller interrupt
- ARM: dts: BCM5301X: Add interrupt properties to GPIO node
- ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
- net: ieee802154: handle iftypes as u32
- NFSv42: Don't fail clone() unless the OP_CLONE operation failed
- ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
- scsi: mpt3sas: Fix kernel panic during drive powercycle test
- drm/vc4: fix error code in vc4_create_object()
- ipv6: fix typos in __ip6_finish_output()
- net/smc: Ensure the active closing peer first closes clcsock
- PM: hibernate: use correct mode for swsusp_close()
- tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
flows
- MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48
- net/smc: Don't call clcsock shutdown twice when smc shutdown
- vhost/vsock: fix incorrect used length reported to the guest
- tracing: Check pid filtering when creating events
- s390/mm: validate VMA in PGSTE manipulation functions
- PCI: aardvark: Fix a leaked reference by adding missing of_node_put()
- PCI: aardvark: Wait for endpoint to be ready before training link
- PCI: aardvark: Train link immediately after enabling training
- PCI: aardvark: Improve link training
- PCI: aardvark: Issue PERST via GPIO
- PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros
- PCI: aardvark: Indicate error in 'val' when config read fails
- PCI: aardvark: Introduce an advk_pcie_valid_device() helper
- PCI: aardvark: Don't touch PCIe registers if no card connected
- PCI: aardvark: Fix compilation on s390
- PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link()
- PCI: aardvark: Update comment about disabling link training
- PCI: aardvark: Remove PCIe outbound window configuration
- PCI: aardvark: Configure PCIe resources from 'ranges' DT property
- PCI: aardvark: Fix PCIe Max Payload Size setting
- PCI: Add PCI_EXP_LNKCTL2_TLS* macros
- PCI: aardvark: Fix link training
- PCI: aardvark: Fix checking for link up via LTSSM state
- pinctrl: armada-37xx: Correct mpp definitions
- pinctrl: armada-37xx: add missing pin: PCIe1 Wakeup
- pinctrl: armada-37xx: Correct PWM pins definitions
- arm64: dts: marvell: armada-37xx: declare PCIe reset pin
- arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function
- proc/vmcore: fix clearing user buffer by properly using clear_user()
- NFC: add NCI_UNREG flag to eliminate the race
- fuse: release pipe buf after last use
- xen: sync include/xen/interface/io/ring.h with Xen's newest version
- xen/blkfront: read response from backend only once
- xen/blkfront: don't take local copy of a request from the ring page
- xen/blkfront: don't trust the backend response data blindly
- xen/netfront: read response from backend only once
- xen/netfront: don't read data from request on the ring page
- xen/netfront: disentangle tx_skb_freelist
- xen/netfront: don't trust the backend response data blindly
- tty: hvc: replace BUG_ON() with negative return value
- shm: extend forced shm destroy to support objects from several IPC nses
- ipc: WARN if trying to remove ipc object which is absent
- NFSv42: Fix pagecache invalidation after COPY/CLONE
- hugetlb: take PMD sharing into account when flushing tlb/caches
- net: return correct error code
- platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
- s390/setup: avoid using memblock_enforce_memory_limit
- btrfs: check-integrity: fix a warning on write caching disabled disk
- thermal: core: Reset previous low and high trip during thermal zone init
- scsi: iscsi: Unblock session then wake up error handler
- ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in
hns_dsaf_ge_srst_by_port()
- net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of
bound
- net: ethernet: dec: tulip: de4x5: fix possible array overflows in
type3_infoblock()
- perf hist: Fix memory leak of a perf_hpp_fmt
- vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
- kprobes: Limit max data_size of the kretprobe instances
- sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
- sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
- natsemi: xtensa: fix section mismatch warnings
- net: qlogic: qlcnic: Fix a NULL pointer dereference in
qlcnic_83xx_add_rings()
- net: mpls: Fix notifications when deleting a device
- siphash: use _unaligned version by default
- net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
- net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ
is available
- net/rds: correct socket tunable error in rds_tcp_tune()
- net/smc: Keep smc_close_final rc during active close
- parisc: Fix KBUILD_IMAGE for self-extracting kernel
- parisc: Fix "make install" on newer debian releases
- vgacon: Propagate console boot parameters before calling `vc_resize'
- xhci: Fix commad ring abort, write all 64 bits to CRCR register.
- usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
- x86/64/mm: Map all kernel memory into trampoline_pgd
- tty: serial: msm_serial: Deactivate RX DMA for polling support
- serial: pl011: Add ACPI SBSA UART match id
- serial: core: fix transmit-buffer reset and memleak
- parisc: Mark cr16 CPU clocksource unstable on all SMP machines
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF
- net: hns3: fix VF RSS failed problem after PF enable multi-TCs
- i2c: stm32f7: recover the bus on access timeout
- net: annotate data-races on txq->xmit_lock_owner
* CVE-2022-0330
- drm/i915: Flush TLBs before releasing backing store
* CVE-2021-4083
- fs: add fget_many() and fput_many()
- fget: check that the fd still exists after getting a ref to it
* CVE-2021-4155
- xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate
-- Ian May <email address hidden> Thu, 10 Feb 2022 11:34:15 -0600
-
linux-aws (4.15.0-1119.127) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1119.127 -proposed tracker (LP: #1955252)
* linux-aws: Make a signed kernel (LP: #1951011)
- [Packaging] aws: Enable signed kernel
- [Packaging] aws: remove handoff check for uefi signing
- [Packaging] aws: decompress gzipped efi images in signing tarball
[ Ubuntu: 4.15.0-167.175 ]
* bionic/linux: 4.15.0-167.175 -proposed tracker (LP: #1955276)
* hisi_sas driver may oops in prep_ssp_v3_hw() (LP: #1953386)
- scsi: hisi_sas: Fix to only call scsi_get_prot_op() for non-NULL scsi_cmnd
* Bionic update: upstream stable patchset 2021-12-13 (LP: #1954703)
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
delay
- binder: use euid from cred instead of using task
- Input: elantench - fix misreporting trackpoint coordinates
- Input: i8042 - Add quirk for Fujitsu Lifebook T725
- libata: fix read log timeout value
- ocfs2: fix data corruption on truncate
- mmc: dw_mmc: Dont wait for DRTO on Write RSP error
- parisc: Fix ptrace check on syscall return
- tpm: Check for integer overflow in tpm2_map_response_body()
- media: ite-cir: IR receiver stop working after receive overflow
- ALSA: ua101: fix division by zero at probe
- ALSA: 6fire: fix control and bulk message timeouts
- ALSA: line6: fix control and interrupt message timeouts
- ALSA: synth: missing check for possible NULL after the call to kstrdup
- ALSA: timer: Fix use-after-free problem
- ALSA: timer: Unconditionally unlink slave instances, too
- x86/irq: Ensure PI wakeup handler is unregistered before module unload
- cavium: Return negative value when pci_alloc_irq_vectors() fails
- scsi: qla2xxx: Fix unmap of already freed sgl
- cavium: Fix return values of the probe function
- sfc: Don't use netif_info before net_device setup
- hyperv/vmbus: include linux/bitops.h
- mmc: winbond: don't build on M68K
- bpf: Prevent increasing bpf_jit_limit above max
- xen/netfront: stop tx queues during live migration
- spi: spl022: fix Microwire full duplex mode
- watchdog: Fix OMAP watchdog early handling
- vmxnet3: do not stop tx queues after netif_device_detach()
- btrfs: fix lost error handling when replaying directory deletes
- hwmon: (pmbus/lm25066) Add offset coefficients
- regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is
disabled
- regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-
dvs-idx property
- EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
- mwifiex: fix division by zero in fw download path
- ath6kl: fix division by zero in send path
- ath6kl: fix control-message timeout
- ath10k: fix control-message timeout
- ath10k: fix division by zero in send path
- PCI: Mark Atheros QCA6174 to avoid bus reset
- rtl8187: fix control-message timeouts
- evm: mark evm_fixmode as __ro_after_init
- wcn36xx: Fix HT40 capability for 2Ghz band
- mwifiex: Read a PCI register after writing the TX ring write pointer
- libata: fix checking of DMA state
- wcn36xx: handle connection loss indication
- RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
- signal: Remove the bogus sigkill_pending in ptrace_stop
- signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
- power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
- power: supply: max17042_battery: use VFSOC for capacity when no rsns
- powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
- serial: core: Fix initializing and restoring termios speed
- ALSA: mixer: oss: Fix racy access to slots
- ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
- xen/balloon: add late_initcall_sync() for initial ballooning done
- PCI: aardvark: Do not clear status bits of masked interrupts
- PCI: aardvark: Do not unmask unused interrupts
- PCI: aardvark: Fix return value of MSI domain .alloc() method
- PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
- quota: check block number when reading the block in quota file
- quota: correct error number in free_dqentry()
- pinctrl: core: fix possible memory leak in pinctrl_enable()
- iio: dac: ad5446: Fix ad5622_write() return value
- USB: serial: keyspan: fix memleak on probe errors
- USB: iowarrior: fix control-message timeouts
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
- Bluetooth: fix use-after-free error in lock_sock_nested()
- platform/x86: wmi: do not fail if disabling fails
- MIPS: lantiq: dma: add small delay after reset
- MIPS: lantiq: dma: reset correct number of channel
- locking/lockdep: Avoid RCU-induced noinstr fail
- smackfs: Fix use-after-free in netlbl_catmap_walk()
- x86: Increase exception stack sizes
- mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
- mwifiex: Properly initialize private structure on interface type changes
- media: mt9p031: Fix corrupted frame after restarting stream
- media: netup_unidvb: handle interrupt properly according to the firmware
- media: uvcvideo: Set capability in s_param
- media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
- media: s5p-mfc: Add checking to s5p_mfc_probe().
- media: mceusb: return without resubmitting URB in case of -EPROTO error.
- ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
- ACPICA: Avoid evaluating methods too early during system resume
- media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
- tracefs: Have tracefs directories not set OTH permission bits by default
- ath: dfs_pattern_detector: Fix possible null-pointer dereference in
channel_detector_create()
- ACPI: battery: Accept charges over the design capacity as full
- leaking_addresses: Always print a trailing newline
- memstick: r592: Fix a UAF bug when removing the driver
- lib/xz: Avoid overlapping memcpy() with invalid input with in-place
decompression
- lib/xz: Validate the value before assigning it to an enum variable
- tracing/cfi: Fix cmp_entries_* functions signature mismatch
- mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
- PM: hibernate: Get block device exclusively in swsusp_check()
- iwlwifi: mvm: disable RX-diversity in powersave
- smackfs: use __GFP_NOFAIL for smk_cipso_doi()
- ARM: clang: Do not rely on lr register for stacktrace
- gre/sit: Don't generate link-local addr if addr_gen_mode is
IN6_ADDR_GEN_MODE_NONE
- ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
- spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in
bcm_qspi_probe()
- parisc: fix warning in flush_tlb_all
- task_stack: Fix end_of_stack() for architectures with upwards-growing stack
- parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
- cgroup: Make rebind_subsystems() disable v2 controllers all at once
- media: dvb-usb: fix ununit-value in az6027_rc_query
- media: mtk-vpu: Fix a resource leak in the error handling path of
'mtk_vpu_probe()'
- media: si470x: Avoid card name truncation
- media: cx23885: Fix snd_card_free call on null card pointer
- cpuidle: Fix kobject memory leaks in error paths
- ath9k: Fix potential interrupt storm on queue reset
- crypto: qat - detect PFVF collision after ACK
- crypto: qat - disregard spurious PFVF interrupts
- hwrng: mtk - Force runtime pm ops for sleep ops
- b43legacy: fix a lower bounds test
- b43: fix a lower bounds test
- memstick: avoid out-of-range warning
- memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
- hwmon: Fix possible memleak in __hwmon_device_register()
- ath10k: fix max antenna gain unit
- drm/msm: uninitialized variable in msm_gem_import()
- net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
- mmc: mxs-mmc: disable regulator on error and in the remove function
- platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
- mwifiex: Send DELBA requests according to spec
- phy: micrel: ksz8041nl: do not use power down mode
- PM: hibernate: fix sparse warnings
- smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
- s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
- irq: mips: avoid nested irq_enter()
- samples/kretprobes: Fix return value if register_kretprobe() failed
- libertas_tf: Fix possible memory leak in probe and disconnect
- libertas: Fix possible memory leak in probe and disconnect
- net: amd-xgbe: Toggle PLL settings during rate change
- net: phylink: avoid mvneta warning when setting pause parameters
- crypto: pcrypt - Delay write to padata->info
- ibmvnic: Process crqs after enabling interrupts
- RDMA/rxe: Fix wrong port_cap_flags
- ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
- ARM: dts: at91: tse850: the emac<->phy interface is rmii
- scsi: dc395: Fix error case unwinding
- MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
- JFS: fix memleak in jfs_mount
- ALSA: hda: Reduce udelay() at SKL+ position reporting
- arm: dts: omap3-gta04a4: accelerometer irq fix
- soc/tegra: Fix an error handling path in tegra_powergate_power_up()
- memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
- video: fbdev: chipsfb: use memset_io() instead of memset()
- serial: 8250_dw: Drop wrong use of ACPI_PTR()
- usb: gadget: hid: fix error code in do_config()
- power: supply: rt5033_battery: Change voltage values to µV
- scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
- RDMA/mlx4: Return missed an error if device doesn't support steering
- ASoC: cs42l42: Correct some register default values
- ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
- serial: xilinx_uartps: Fix race condition causing stuck TX
- mips: cm: Convert to bitfield API to fix out-of-bounds access
- power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
- apparmor: fix error check
- rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
- drm/plane-helper: fix uninitialized variable reference
- PCI: aardvark: Don't spam about PIO Response Status
- NFS: Fix deadlocks in nfs_scan_commit_list()
- fs: orangefs: fix error return code of orangefs_revalidate_lookup()
- mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
- dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
- auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
- auxdisplay: ht16k33: Connect backlight to fbdev
- auxdisplay: ht16k33: Fix frame buffer device blanking
- netfilter: nfnetlink_queue: fix OOB when mac header was cleared
- dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
- m68k: set a default value for MEMORY_RESERVE
- watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
- ar7: fix kernel builds for compiler test
- scsi: qla2xxx: Turn off target reset during issue_lip
- i2c: xlr: Fix a resource leak in the error handling path of
'xlr_i2c_probe()'
- xen-pciback: Fix return in pm_ctrl_init()
- net: davinci_emac: Fix interrupt pacing disable
- ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and
zs_unregister_migration()
- llc: fix out-of-bound array index in llc_sk_dev_hash()
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
- vsock: prevent unnecessary refcnt inc for nonblocking connect
- USB: chipidea: fix interrupt deadlock
- ARM: 9155/1: fix early early_iounmap()
- ARM: 9156/1: drop cc-option fallbacks for architecture selection
- powerpc/lib: Add helper to check if offset is within conditional branch
range
- powerpc/bpf: Validate branch ranges
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
- mm, oom: do not trigger out_of_memory from the #PF
- s390/cio: check the subchannel validity for dev_busid
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
- ext4: fix lazy initialization next schedule time computation in more
granular unit
- tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT
- parisc/entry: fix trace test in syscall exit path
- PCI/MSI: Destroy sysfs before freeing entries
- arm64: zynqmp: Fix serial compatible string
- scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
- usb: musb: tusb6010: check return value after calling
platform_get_resource()
- scsi: advansys: Fix kernel pointer leak
- ARM: dts: omap: fix gpmc,mux-add-data type
- usb: host: ohci-tmio: check return value after calling
platform_get_resource()
- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
- MIPS: sni: Fix the build
- scsi: target: Fix ordered tag handling
- scsi: target: Fix alua_tg_pt_gps_count tracking
- powerpc/5200: dts: fix memory node unit name
- ALSA: gus: fix null pointer dereference on pointer block
- powerpc/dcr: Use cmplwi instead of 3-argument cmpli
- sh: check return code of request_irq
- maple: fix wrong return value of maple_bus_init().
- sh: fix kconfig unmet dependency warning for FRAME_POINTER
- sh: define __BIG_ENDIAN for math-emu
- mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
- sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
- net: bnx2x: fix variable dereferenced before check
- iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
- MIPS: generic/yamon-dt: fix uninitialized variable error
- mips: bcm63xx: add support for clk_get_parent()
- mips: lantiq: add support for clk_get_parent()
- platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
- net: virtio_net_hdr_to_skb: count transport header in UFO
- i40e: Fix NULL ptr dereference on VSI filter sync
- NFC: reorganize the functions in nci_request
- NFC: reorder the logic in nfc_{un,}register_device
- perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
- perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
- tun: fix bonding active backup with arp monitoring
- hexagon: export raw I/O routines for modules
- mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
- btrfs: fix memory ordering between normal and ordered work functions
- parisc/sticon: fix reverse colors
- cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
- drm/udl: fix control-message timeout
- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
and dvi connectors
- perf/core: Avoid put_page() when GUP fails
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
- batman-adv: Consider fragmentation for needed_headroom
- batman-adv: Reserve needed_*room for fragments
- batman-adv: Don't always reallocate the fragmentation skb head
- RDMA/netlink: Add __maybe_unused to static inline in C file
- ASoC: DAPM: Cover regression by kctl change notification fix
- usb: max-3421: Use driver data instead of maintaining a list of bound
devices
- soc/tegra: pmc: Fix imbalanced clock disabling in error code path
- crypto: s5p-sss - Add error handling in s5p_aes_probe()
- ia64: kprobes: Fix to pass correct trampoline address to the handler
- rsi: fix key enabled check causing unwanted encryption for vap_id > 0
- rsi: fix rate mask set leading to P2P failure
- mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
- wcn36xx: add proper DMA memory barriers in rx path
- s390/tape: fix timer initialization in tape_std_assign()
- fuse: truncate pagecache on atomic_o_trunc
- f2fs: fix up f2fs_lookup tracepoints
- iavf: check for null in iavf_fix_features
- i40e: Fix correct max_pkt_size on VF RX queue
- i40e: Fix changing previously set num_queue_pairs for PFs
- i40e: Fix display error code in dmesg
* Bionic update: upstream stable patchset 2021-12-03 (LP: #1953202)
- ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned
- ARM: 9134/1: remove duplicate memcpy() definition
- ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype
- ARM: 8819/1: Remove '-p' from LDFLAGS
- usbnet: sanity check for maxpacket
- usbnet: fix error return code in usbnet_probe()
- ata: sata_mv: Fix the error handling of mv_chip_id()
- nfc: port100: fix using -ERRNO as command type mask
- ipv4: use siphash instead of Jenkins in fnhe_hashfun()
- mmc: vub300: fix control-message timeouts
- mmc: dw_mmc: exynos: fix the finding clock sample value
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330
- mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning
circuit
- net: lan78xx: fix division by zero in send path
- regmap: Fix possible double-free in regcache_rbtree_exit()
- net: batman-adv: fix error handling
- nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST
- net: nxp: lpc_eth.c: avoid hang when bringing interface down
- sctp: use init_tag from inithdr for ABORT chunk
- sctp: fix the processing for COOKIE_ECHO chunk
- sctp: add vtag check in sctp_sf_violation
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
- sctp: add vtag check in sctp_sf_ootb
- ARM: 9141/1: only warn about XIP address when not compile testing
- arm64: Avoid premature usercopy failure
- ipv6: use siphash in rt6_exception_hash()
- ipv6: make exception cache less predictible
- arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
- scsi: core: Put LLD module refcnt after SCSI device is released
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
- sfc: Fix reading non-legacy supported link modes
- ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
- mm/zsmalloc: Prepare to variable MAX_PHYSMEM_BITS
- arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed
- block: introduce multi-page bvec helpers
- Revert "x86/kvm: fix vcpu-id indexed array sizes"
- usb: gadget: Mark USB_FSL_QE broken on 64-bit
- usb: musb: Balance list entry in musb_gadget_queue
- usb-storage: Add compatibility quirk flags for iODD 2531/2541
- printk/console: Allow to disable console output by using console="" or
console=null
- isofs: Fix out of bound access for corrupted isofs image
- comedi: dt9812: fix DMA buffers on stack
- comedi: ni_usb6501: fix NULL-deref in command paths
- comedi: vmk80xx: fix transfer-buffer overflows
- comedi: vmk80xx: fix bulk-buffer overflow
- comedi: vmk80xx: fix bulk and interrupt message timeouts
- staging: r8712u: fix control-message timeout
- staging: rtl8192u: fix control-message timeouts
- rsi: fix control-message timeout
- usb: ehci: handshake CMD_RUN instead of STS_HALT
-- Ian May <email address hidden> Tue, 18 Jan 2022 16:09:28 -0600
-
linux-aws (4.15.0-1118.125) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1118.125 -proposed tracker (LP: #1953644)
[ Ubuntu: 4.15.0-166.174 ]
* bionic/linux: 4.15.0-166.174 -proposed tracker (LP: #1953667)
* Ubuntu version macros overflow with high ABI numbers (LP: #1953522)
- SAUCE: Revert "stable: clamp SUBLEVEL in 4.14"
* test_bpf.sh test in net of ubuntu_kernel_selftests failed on B-4.15 and
variants (LP: #1953287)
- SAUCE: Revert "bpf: add also cbpf long jump test cases with heavy expansion"
* test_bpf.sh test in net of ubuntu_kernel_selftests failed on B-4.15 and
variants (LP: #1953287) // CVE-2018-25020
- bpf: fix truncated jump targets on heavy expansions
-- Ian May <email address hidden> Thu, 09 Dec 2021 13:25:12 -0600
-
linux-aws (4.15.0-1117.124) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1117.124 -proposed tracker (LP: #1952325)
* Support builtin revoked certificates (LP: #1932029)
- [Config] aws: Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys
[ Ubuntu: 4.15.0-165.173 ]
* bionic/linux: 4.15.0-165.173 -proposed tracker (LP: #1952780)
* Support builtin revoked certificates (LP: #1932029)
- certs: Add EFI_CERT_X509_GUID support for dbx entries
- certs: Move load_system_certificate_list to a common function
- integrity: Move import of MokListRT certs to a separate routine
- integrity: Load certs from the EFI MOK config table
- certs: Add ability to preload revocation certs
- certs: add 'x509_revocation_list' to gitignore
- SAUCE: Dump stack when X.509 certificates cannot be loaded
- [Packaging] build canonical-revoked-certs.pem from branch/arch certs
- [Packaging] Revoke 2012 UEFI signing certificate as built-in
- [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys
* Support importing mokx keys into revocation list from the mok table
(LP: #1928679)
- efi: Support for MOK variable config table
- efi: mokvar-table: fix some issues in new code
- efi: mokvar: add missing include of asm/early_ioremap.h
- efi/mokvar: Reserve the table only if it is in boot services data
- SAUCE: integrity: Load mokx certs from the EFI MOK config table
- SAUCE: integrity: add informational messages when revoking certs
* CVE-2021-4002
- arm64: tlb: Provide forward declaration of tlb_flush() before including
tlb.h
- mm: mmu_notifier fix for tlb_end_vma
- hugetlbfs: flush TLBs correctly after huge_pmd_unshare
[ Ubuntu: 4.15.0-164.172 ]
* bionic/linux: 4.15.0-164.172 -proposed tracker (LP: #1952348)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- debian/dkms-versions -- update from kernel-versions (main/2021.11.29)
* Bionic update: upstream stable patchset 2021-11-23 (LP: #1951997)
- btrfs: always wait on ordered extents at fsync time
- ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default
- xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF
- xtensa: xtfpga: Try software restart before simulating CPU reset
- NFSD: Keep existing listeners on portlist error
- netfilter: ipvs: make global sysctl readonly in non-init netns
- NIOS2: irqflags: rename a redefined register name
- can: rcar_can: fix suspend/resume
- can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
notification
- can: peak_pci: peak_pci_remove(): fix UAF
- ocfs2: fix data corruption after conversion from inline format
- ocfs2: mount fails with buffer overflow in strlen
- elfcore: correct reference to CONFIG_UML
- ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
- ASoC: DAPM: Fix missing kctl change notifications
- nfc: nci: fix the UAF of rf_conn_info object
- isdn: cpai: check ctr->cnr to avoid array index out of bound
- netfilter: Kconfig: use 'default y' instead of 'm' for bool config option
- btrfs: deal with errors when checking if a dir entry exists during log
replay
- net: stmmac: add support for dwmac 3.40a
- ARM: dts: spear3xx: Fix gmac node
- isdn: mISDN: Fix sleeping function called from invalid context
- platform/x86: intel_scu_ipc: Update timeout value in comment
- ALSA: hda: avoid write to STATESTS if controller is in reset
- tracing: Have all levels of checks prevent recursion
- ARM: 9122/1: select HAVE_FUTEX_CMPXCHG
- dma-debug: fix sg checks in debug_dma_map_sg()
- ASoC: wm8960: Fix clock configuration on slave mode
- lan78xx: select CRC32
- net: hns3: add limit ets dwrr bandwidth cannot be 0
- net: hns3: disable sriov before unload hclge layer
- ALSA: hda/realtek: Add quirk for Clevo PC50HS
- mm, slub: fix mismatch between reconstructed freelist depth and cnt
- gcc-plugins/structleak: add makefile var for disabling structleak
* creat09 from ubuntu_ltp_syscalls and cve-2018-13405 from ubuntu_ltp/cve
failed with XFS (LP: #1950239)
- xfs: ensure that the inode uid/gid match values match the icdinode ones
- xfs: merge the projid fields in struct xfs_icdinode
- xfs: remove the icdinode di_uid/di_gid members
- xfs: fix up non-directory creation in SGID directories
* ubuntu_ltp / finit_module02 fails on v4.15 and other kernels (LP: #1950644)
- vfs: check fd has read access in kernel_read_file_from_fd()
* reuseport_bpf_numa in net from ubuntu_kernel_selftests fails on ppc64le
(LP: #1867570)
- selftests/net: Fix reuseport_bpf_numa by skipping unavailable nodes
* Bionic update: upstream stable patchset 2021-11-12 (LP: #1950816)
- net: mdio: introduce a shutdown method to mdio device drivers
- xen-netback: correct success/error reporting for the SKB-with-fraglist case
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set
- ext2: fix sleeping in atomic bugs on error
- scsi: sd: Free scsi_disk device via put_device()
- usb: testusb: Fix for showing the connection speed
- usb: dwc2: check return value after calling platform_get_resource()
- scsi: ses: Retry failed Send/Receive Diagnostic commands
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
- lib/timerqueue: Rely on rbtree semantics for next timer
- selftests: be sure to make khdr before other targets
- Partially revert "usb: Kconfig: using select for USB_COMMON dependency"
- USB: cdc-acm: fix racy tty buffer accesses
- USB: cdc-acm: fix break reporting
- ovl: fix missing negative dentry check in ovl_rename()
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
- xen/balloon: fix cancelled balloon action
- ARM: dts: omap3430-sdp: Fix NAND device node
- ARM: dts: qcom: apq8064: use compatible which contains chipid
- bpf: add also cbpf long jump test cases with heavy expansion
- bpf, mips: Validate conditional branch offsets
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected
- bpf: Fix integer overflow in prealloc_elems_and_freelist()
- phy: mdio: fix memory leak
- net_sched: fix NULL deref in fifo_set_limit()
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
- ptp_pch: Load module automatically if ID matches
- ARM: imx6: disable the GIC CPU interface before calling stby-poweroff
sequence
- net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
- netlink: annotate data races around nlk->bound
- drm/nouveau/debugfs: fix file release memory leak
- rtnetlink: fix if_nlmsg_stats_size() under estimation
- i40e: fix endless loop under rtnl
- i2c: acpi: fix resource leak in reconfiguration device addition
- net: phy: bcm7xxx: Fixed indirect MMD operations
- HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
- netfilter: ip6_tables: zero-initialize fragment offset
- mac80211: Drop frames from invalid MAC address in ad-hoc mode
- m68k: Handle arrivals of multiple signals correctly
- net: sun: SUNVNET_COMMON should depend on INET
- scsi: ses: Fix unsigned comparison with less than zero
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
- perf/x86: Reset destroy callback on event init failure
- sched: Always inline is_percpu_thread()
- bpf, arm: Fix register clobbering in div/mod implementation
- i40e: Fix freeing of uninitialized misc IRQ vector
- mac80211: check return value of rhashtable_init
- stable: clamp SUBLEVEL in 4.14
- ALSA: seq: Fix a potential UAF by wrong private_free call order
- s390: fix strrchr() implementation
- btrfs: deal with errors when replaying dir entry during log replay
- btrfs: deal with errors when adding inode reference during log replay
- btrfs: check for error when looking up inode during dir entry replay
- xhci: Fix command ring pointer corruption while aborting a command
- xhci: Enable trust tx length quirk for Fresco FL11 USB controller
- cb710: avoid NULL pointer subtraction
- efi/cper: use stack buffer for error record decoding
- efi: Change down_interruptible() in virt_efi_reset_system() to
down_trylock()
- usb: musb: dsps: Fix the probe error path
- Input: xpad - add support for another USB ID of Nacon GC-100
- USB: serial: qcserial: add EM9191 QDL support
- USB: serial: option: add Quectel EC200S-CN module support
- USB: serial: option: add Telit LE910Cx composition 0x1204
- USB: serial: option: add prod. id for Quectel EG91
- virtio: write back F_VERSION_1 before validate
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically
- iio: adc: aspeed: set driver data when adc probe.
- iio: adc128s052: Fix the error handling path of 'adc128_probe()'
- iio: light: opt3001: Fixed timeout error when 0 lux
- iio: ssp_sensors: add more range checking in ssp_parse_dataframe()
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
- sctp: account stream padding length for reconf chunk
- net: arc: select CRC32
- net: korina: select CRC32
- net: encx24j600: check error in devm_regmap_init_encx24j600
- ethernet: s2io: fix setting mac address during resume
- nfc: fix error handling of nfc_proto_register()
- NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
- NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
- pata_legacy: fix a couple uninitialized variable bugs
- drm/msm: Fix null pointer dereference on pointer edp
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
- acpi/arm64: fix next_platform_timer() section mismatch error
- qed: Fix missing error code in qed_slowpath_start()
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
-- Ian May <email address hidden> Fri, 03 Dec 2021 09:58:32 -0600
-
linux-aws (4.15.0-1116.123) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1116.123 -proposed tracker (LP: #1949851)
[ Ubuntu: 4.15.0-163.171 ]
* bionic/linux: 4.15.0-163.171 -proposed tracker (LP: #1949874)
* Packaging resync (LP: #1786013)
- [Packaging] update Ubuntu.md
- debian/dkms-versions -- update from kernel-versions (main/2021.11.08)
* Unable to build net/reuseport_bpf and other tests in ubuntu_kernel_selftests
on Bionic with make command (LP: #1949889)
- selftests: Fix loss of test output in run_kselftests.sh
- selftests: Makefile set KSFT_TAP_LEVEL to prevent nested TAP headers
- selftests: fix headers_install circular dependency
- selftests: fix bpf build/test workflow regression when KBUILD_OUTPUT is set
- selftests: vm: Fix test build failure when built by itself
* KVM emulation failure when booting into VM crash kernel with multiple CPUs
(LP: #1948862)
- KVM: x86: Properly reset MMU context at vCPU RESET/INIT
* aufs: kernel bug with apparmor and fuseblk (LP: #1948470)
- SAUCE: aufs: bugfix, stop omitting path->mnt
* ebpf: bpf_redirect fails with ip6 gre interfaces (LP: #1947164)
- net: handle ARPHRD_IP6GRE in dev_is_mac_header_xmit()
* require CAP_NET_ADMIN to attach N_HCI ldisc (LP: #1949516)
- Bluetooth: hci_ldisc: require CAP_NET_ADMIN to attach N_HCI ldisc
* ACL updates on OCFS2 are not revalidated (LP: #1947161)
- ocfs2: fix remounting needed after setfacl command
* ppc64 BPF JIT mod by 1 will not return 0 (LP: #1948351)
- powerpc/bpf: Fix BPF_MOD when imm == 1
* Drop "UBUNTU: SAUCE: cachefiles: Page leaking in
cachefiles_read_backing_file while vmscan is active" (LP: #1947709)
- Revert "UBUNTU: SAUCE: cachefiles: Page leaking in
cachefiles_read_backing_file while vmscan is active"
- cachefiles: Fix page leak in cachefiles_read_backing_file while vmscan is
active
* Some test in ubuntu_bpf test_verifier failed on i386 Bionic kernel
(LP: #1788578)
- bpf: fix context access in tracing progs on 32 bit archs
* test_bpf.sh from ubuntu_kernel_selftests.net from linux ADT test failure
with linux/4.15.0-149.153 i386 (Segmentation fault) (LP: #1934414)
- selftests/bpf: make test_verifier run most programs
- bpf: add couple of test cases for div/mod by zero
- bpf: add further test cases around div/mod and others
* Bionic update: upstream stable patchset 2021-11-02 (LP: #1949512)
- usb: gadget: r8a66597: fix a loop in set_feature()
- usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned()
- cifs: fix incorrect check for null pointer in header_assemble
- xen/x86: fix PV trap handling on secondary processors
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter
- staging: greybus: uart: fix tty use after free
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
- USB: serial: mos7840: remove duplicated 0xac24 device ID
- USB: serial: option: add Telit LN920 compositions
- USB: serial: option: remove duplicate USB device ID
- USB: serial: option: add device id for Foxconn T99W265
- mcb: fix error handling in mcb_alloc_bus()
- serial: mvebu-uart: fix driver's tx_empty callback
- net: hso: fix muxed tty registration
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest
- net/mlx4_en: Don't allow aRFS for encapsulated packets
- scsi: iscsi: Adjust iface sysfs attr detection
- thermal/core: Potential buffer overflow in thermal_build_list_of_policies()
- irqchip/gic-v3-its: Fix potential VPE leak on error
- md: fix a lock order reversal in md_alloc
- blktrace: Fix uaf in blk_trace access after removing by sysfs
- net: macb: fix use after free on rmmod
- net: stmmac: allow CSR clock of 300MHz
- m68k: Double cast io functions to unsigned long
- xen/balloon: use a kernel thread instead a workqueue
- compiler.h: Introduce absolute_pointer macro
- net: i825xx: Use absolute_pointer for memcpy from fixed memory location
- sparc: avoid stringop-overread errors
- qnx4: avoid stringop-overread errors
- parisc: Use absolute_pointer() to define PAGE0
- arm64: Mark __stack_chk_guard as __ro_after_init
- alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile
- net: 6pack: Fix tx timeout and slot time
- spi: Fix tegra20 build with CONFIG_PM=n
- arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
- PCI: aardvark: Fix checking for PIO Non-posted Request
- PCI: aardvark: Fix checking for PIO status
- xen/balloon: fix balloon kthread freezing
- qnx4: work around gcc false positive warning bug
- tty: Fix out-of-bound vmalloc access in imageblit
- cpufreq: schedutil: Use kobject release() method to free sugov_tunables
- cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
- mac80211: fix use-after-free in CCMP/GCMP RX
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
- mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
- hwmon: (tmp421) fix rounding for negative values
- e100: fix length calculation in e100_get_regs_len
- e100: fix buffer overrun in e100_get_regs
- scsi: csiostor: Add module softdep on cxgb4
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
- ipack: ipoctal: fix stack information leak
- ipack: ipoctal: fix tty registration race
- ipack: ipoctal: fix tty-registration error handling
- ipack: ipoctal: fix missing allocation-failure check
- ipack: ipoctal: fix module reference leak
- ext4: fix potential infinite loop in ext4_dx_readdir()
- net: udp: annotate data race around udp_sk(sk)->corkflag
- EDAC/synopsys: Fix wrong value type assignment for edac_mode
- ARM: 9077/1: PLT: Move struct plt_entries definition to header
- ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link()
- ARM: 9079/1: ftrace: Add MODULE_PLTS support
- ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE
- arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55
- hso: fix bailout in error case of probe
- usb: hso: fix error handling code of hso_create_net_device
- usb: hso: remove the bailout parameter
- crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
- HID: betop: fix slab-out-of-bounds Write in betop_probe
- netfilter: ipset: Fix oversized kvmalloc() calls
- HID: usbhid: free raw_report buffers in usbhid_stop
- cred: allow get_cred() and put_cred() to be given NULL.
- gpio: uniphier: Fix void functions to remove return value
- tty: synclink_gt, drop unneeded forward declarations
- tty: synclink_gt: rename a conflicting function name
- drm/amd/display: Pass PCI deviceid into DC
- hwmon: (tmp421) Replace S_<PERMS> with octal values
- hwmon: (tmp421) report /PVLD condition as fault
* ACL updates on OCFS2 are not revalidated (LP: #1947161) // Bionic update:
upstream stable patchset 2021-11-02 (LP: #1949512)
- ocfs2: drop acl cache for directories too
-- Ian May <email address hidden> Mon, 15 Nov 2021 10:43:53 -0600
-
linux-aws (4.15.0-1115.122) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1115.122 -proposed tracker (LP: #1947270)
* Packaging resync (LP: #1786013)
- [Packaging] update Ubuntu.md
[ Ubuntu: 4.15.0-162.170 ]
* bionic/linux: 4.15.0-162.170 -proposed tracker (LP: #1947293)
* Add final-checks to check certificates (LP: #1947174)
- [Packaging] Add system trusted and revocation keys final check
* CVE-2020-36385
- RDMA/cma: Add missing locking to rdma_accept()
- RDMA/ucma: Fix the locking of ctx->file
- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
* CVE-2021-28950
- fuse: fix live lock in fuse_iget()
* CVE-2020-36322
- fuse: fix bad inode
* Bionic update: upstream stable patchset 2021-10-13 (LP: #1947011)
- rcu: Fix missed wakeup of exp_wq waiters
- apparmor: remove duplicate macro list_entry_is_head()
- crypto: talitos - fix max key size for sha384 and sha512
- sctp: validate chunk size in __rcv_asconf_lookup
- sctp: add param size validation for SCTP_PARAM_SET_PRIMARY
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
- 9p/trans_virtio: Remove sysfs file on probe failure
- prctl: allow to setup brk for et_dyn executables
- profiling: fix shift-out-of-bounds bugs
- pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was
registered
- Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH
- parisc: Move pci_dev_is_behind_card_dino to where it is used
- dmaengine: ioat: depends on !UML
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs
- ceph: lockdep annotations for try_nonblocking_invalidate
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
- pwm: rockchip: Don't modify HW state in .remove() callback
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV
- nilfs2: use refcount_dec_and_lock() to fix potential UAF
- drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION()
* Invalid backport to v4.15: missing pgtable_l5_enabled (LP: #1946464)
- SAUCE: Revert "x86/mm: Don't free P4D table when it is folded at runtime"
* CVE-2021-38199
- NFSv4: Initialise connection to the server in nfs4_alloc_client()
* CVE-2019-19449
- f2fs: fix wrong total_sections check and fsmeta check
- f2fs: fix to do sanity check on segment/section count
* vrf: fix refcnt leak with vxlan slaves (LP: #1945180)
- ipv4: Fix device used for dst_alloc with local routes
* Check for changes relevant for security certifications (LP: #1945989)
- [Packaging] Add a new fips-checks script
- [Packaging] Add fips-checks as part of finalchecks
* CVE-2021-3759
- memcg: enable accounting of ipc resources
* Bionic update: upstream stable patchset 2021-09-27 (LP: #1945224)
- ARC: Fix CONFIG_STACKDEPOT
- can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX
and TX error counters
- Revert "USB: serial: ch341: fix character loss at high transfer rates"
- USB: serial: option: add new VID/PID to support Fibocom FG150
- usb: dwc3: gadget: Fix dwc3_calc_trbs_left()
- usb: dwc3: gadget: Stop EP0 transfers during pullup disable
- IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs()
- e1000e: Fix the max snoop/no-snoop latency for 10M
- ip_gre: add validation for csum_start
- xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()'
- net: marvell: fix MVNETA_TX_IN_PRGRS bit number
- usb: gadget: u_audio: fix race condition on endpoint stop
- opp: remove WARN when no valid OPPs remain
- virtio: Improve vq->broken access to avoid any compiler optimization
- vringh: Use wiov->used to check for read/write desc order
- drm: Copy drm_wait_vblank to user before returning
- drm/nouveau/disp: power down unused DP links during init
- net/rds: dma_map_sg is entitled to merge entries
- vt_kdsetmode: extend console locking
- fbmem: add margin check to fb_check_caps()
- KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs
- Revert "floppy: reintroduce O_NDELAY fix"
- net: qrtr: fix another OOB Read in qrtr_endpoint_post
- net: hns3: fix get wrong pfc_en when query PFC configuration
- xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
- qed: Fix the VF msix vectors flow
- net: macb: Add a NULL check on desc_ptp
- qede: Fix memset corruption
- perf/x86/intel/pt: Fix mask of num_address_ranges
- perf/x86/amd/ibs: Work around erratum #1197
- cryptoloop: add a deprecation warning
- ARM: 8918/2: only build return_address() if needed
- ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
- clk: fix build warning for orphan_list
- media: stkwebcam: fix memory leak in stk_camera_probe
- igmp: Add ip_mc_list lock in ip_check_mc_rcu
- USB: serial: mos7720: improve OOM-handling in read_mos_reg()
- f2fs: fix potential overflow
- ath10k: fix recent bandwidth conversion bug
- ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing
table (v2)
- crypto: talitos - reduce max key size for SEC1
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
- powerpc/boot: Delete unneeded .globl _zimage_start
- net: ll_temac: Remove left-over debug message
- mm/page_alloc: speed up the iteration of max_order
- Revert "btrfs: compression: don't try to compress if we don't have enough
pages"
- usb: host: xhci-rcar: Don't reload firmware after the completion
- x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
- PCI: Call Max Payload Size-related fixup quirks early
- regmap: fix the offset of register error log
- crypto: mxs-dcp - Check for DMA mapping errors
- power: supply: axp288_fuel_gauge: Report register-address on readb / writeb
errors
- crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
- udf: Check LVID earlier
- isofs: joliet: Fix iocharset=utf8 mount option
- nvme-rdma: don't update queue count when failing to set io queues
- power: supply: max17042_battery: fix typo in MAx17042_TOFF
- s390/cio: add dev_busid sysfs entry for each subchannel
- libata: fix ata_host_start()
- crypto: qat - do not ignore errors from enable_vf2pf_comms()
- crypto: qat - handle both source of interrupt in VF ISR
- crypto: qat - fix reuse of completion variable
- crypto: qat - fix naming for init/shutdown VF to PF notifications
- crypto: qat - do not export adf_iov_putmsg()
- udf_get_extendedattr() had no boundary checks.
- m68k: emu: Fix invalid free in nfeth_cleanup()
- spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
- spi: spi-pic32: Fix issue with uninitialized dma_slave_config
- clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock
source channel
- crypto: qat - use proper type for vf_mask
- certs: Trigger creation of RSA module signing key if it's not an RSA key
- soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
- media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
- media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
- media: go7007: remove redundant initialization
- Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
- tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
- net: cipso: fix warnings in netlbl_cipsov4_add_std
- i2c: highlander: add IRQ check
- media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
- PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
- PCI: PM: Enable PME if it can be signaled from D3cold
- soc: qcom: smsm: Fix missed interrupts if state changes while masked
- Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
- arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
- Bluetooth: fix repeated calls to sco_sock_kill
- drm/msm/dsi: Fix some reference counted resource leaks
- usb: gadget: udc: at91: add IRQ check
- usb: phy: fsl-usb: add IRQ check
- usb: phy: twl6030: add IRQ checks
- Bluetooth: Move shutdown callback before flushing tx and rx queue
- usb: host: ohci-tmio: add IRQ check
- usb: phy: tahvo: add IRQ check
- mac80211: Fix insufficient headroom issue for AMSDU
- usb: gadget: mv_u3d: request_irq() after initializing UDC
- Bluetooth: add timeout sanity check to hci_inquiry
- i2c: iop3xx: fix deferred probing
- i2c: s3c2410: fix IRQ check
- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
- mmc: moxart: Fix issue with uninitialized dma_slave_config
- CIFS: Fix a potencially linear read overflow
- i2c: mt65xx: fix IRQ check
- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
- usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA
config is available
- tty: serial: fsl_lpuart: fix the wrong mapbase value
- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
- bcma: Fix memory leak for internally-handled cores
- ipv4: make exception cache less predictible
- net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
- net: qualcomm: fix QCA7000 checksum handling
- netns: protect netns ID lookups with RCU
- tty: Fix data race between tiocsti() and flush_to_ldisc()
- x86/resctrl: Fix a maybe-uninitialized build warning treated as error
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is
adjusted
- IMA: remove -Wmissing-prototypes warning
- backlight: pwm_bl: Improve bootloader/kernel device handover
- clk: kirkwood: Fix a clocking boot regression
- fbmem: don't allow too huge resolutions
- rtc: tps65910: Correct driver module alias
- blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
- blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
- PCI/MSI: Skip masking MSI-X on Xen PV
- powerpc/perf/hv-gpci: Fix counter value parsing
- xen: fix setting of max_pfn in shared_info
- include/linux/list.h: add a macro to test if entry is pointing to the head
- 9p/xen: Fix end of loop tests for list_for_each_entry
- soc: aspeed: lpc-ctrl: Fix boundary check for mmap
- crypto: public_key: fix overflow during implicit conversion
- block: bfq: fix bfq_set_next_ioprio_data()
- power: supply: max17042: handle fails of reading status register
- dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
- VMCI: fix NULL pointer dereference when unmapping queue pair
- media: uvc: don't do DMA on stack
- media: rc-loopback: return number of emitters rather than error
- libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
- ARM: 9105/1: atags_to_fdt: don't warn about stack size
- PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
- PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
- PCI: xilinx-nwl: Enable the clock through CCF
- PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
- PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
- HID: input: do not report stylus battery state as "full"
- RDMA/iwcm: Release resources if iw_cm module initialization fails
- docs: Fix infiniband uverbs minor number
- pinctrl: samsung: Fix pinctrl bank pin count
- vfio: Use config not menuconfig for VFIO_NOIOMMU
- openrisc: don't printk() unconditionally
- pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
- scsi: qedi: Fix error codes in qedi_alloc_global_queues()
- MIPS: Malta: fix alignment of the devicetree buffer
- media: dib8000: rewrite the init prbs logic
- crypto: mxs-dcp - Use sg_mapping_iter to copy data
- PCI: Use pci_update_current_state() in pci_enable_device_flags()
- iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
- ARM: dts: qcom: apq8064: correct clock names
- video: fbdev: kyro: fix a DoS bug by restricting user input
- netlink: Deal with ESRCH error in nlmsg_notify()
- Smack: Fix wrong semantics in smk_access_entry()
- usb: host: fotg210: fix the endpoint's transactional opportunities
calculation
- usb: host: fotg210: fix the actual_length of an iso packet
- usb: gadget: u_ether: fix a potential null pointer dereference
- usb: gadget: composite: Allow bMaxPower=0 if self-powered
- staging: board: Fix uninitialized spinlock when attaching genpd
- tty: serial: jsm: hold port lock when reporting modem line changes
- bpf/tests: Fix copy-and-paste error in double word test
- bpf/tests: Do not PASS tests without actually testing the result
- video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
- video: fbdev: kyro: Error out if 'pixclock' equals zero
- video: fbdev: riva: Error out if 'pixclock' equals zero
- ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
- flow_dissector: Fix out-of-bounds warnings
- s390/jump_label: print real address in a case of a jump label bug
- serial: 8250: Define RX trigger levels for OxSemi 950 devices
- xtensa: ISS: don't panic in rs_init
- hvsi: don't panic on tty_register_driver failure
- serial: 8250_pci: make setup_port() parameters explicitly unsigned
- staging: ks7010: Fix the initialization of the 'sleep_status' structure
- ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
- Bluetooth: skip invalid hci_sync_conn_complete_evt
- ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the
matching in-/output
- media: v4l2-dv-timings.c: fix wrong condition in two for-loops
- arm64: dts: qcom: sdm660: use reg value for memory node
- net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
- Bluetooth: avoid circular locks in sco_sock_connect
- gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable
access in amdgpu_i2c_router_select_ddc_port()
- ARM: tegra: tamonten: Fix UART pad setting
- rpc: fix gss_svc_init cleanup on failure
- staging: rts5208: Fix get_ms_information() heap buffer size
- gfs2: Don't call dlm after protocol is unmounted
- mmc: sdhci-of-arasan: Check return value of non-void funtions
- mmc: rtsx_pci: Fix long reads when clock is prescaled
- selftests/bpf: Enlarge select() timeout for test_maps
- cifs: fix wrong release in sess_alloc_buffer() failed path
- Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
quirk set"
- usb: musb: musb_dsps: request_irq() after initializing musb
- usbip: give back URBs for unsent unlink requests during cleanup
- usbip:vhci_hcd USB port can get stuck in the disabled state
- ASoC: rockchip: i2s: Fix regmap_ops hang
- ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
- parport: remove non-zero check on count
- ath9k: fix OOB read ar9300_eeprom_restore_internal
- ath9k: fix sleeping in atomic context
- net: fix NULL pointer reference in cipso_v4_doi_free
- net: w5100: check return value after calling platform_get_resource()
- parisc: fix crash with signals and alloca
- scsi: BusLogic: Fix missing pr_cont() use
- scsi: qla2xxx: Sync queue idx with queue_pair_map idx
- cpufreq: powernv: Fix init_chip_info initialization in numa=off
- mm/hugetlb: initialize hugetlb_usage in mm_init
- memcg: enable accounting for pids in nested pid namespaces
- platform/chrome: cros_ec_proto: Send command again when timeout occurs
- xen: reset legacy rtc flag for PV domU
- bnx2x: Fix enabling network interfaces without VFs
- PM: base: power: don't try to use non-existing RTC for storing data
- x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
- net-caif: avoid user-triggerable WARN_ON(1)
- ptp: dp83640: don't define PAGE0
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core
- r6040: Restore MDIO clock frequency after MAC reset
- tipc: increase timeout in tipc_sk_enqueue()
- events: Reuse value read using READ_ONCE instead of re-reading it
- net/af_unix: fix a data-race in unix_dgram_poll
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
- mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
- mfd: Don't use irq_create_mapping() to resolve a mapping
- PCI: Add ACS quirks for Cavium multi-function devices
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
- ethtool: Fix an error code in cxgb2.c
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
- mtd: rawnand: cafe: Fix a resource leak in the error handling path of
'cafe_nand_probe()'
- ARC: export clear_user_page() for modules
- net: dsa: b53: Fix calculating number of switch ports
- netfilter: socket: icmp6: fix use-after-scope
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
- net: renesas: sh_eth: Fix freeing wrong tx descriptor
- SUNRPC/nfs: Fix return value for nfs4_callback_compound()
- usb: mtu3: use @mult for HS isoc or intr
- usb: mtu3: fix the wrong HS mult value
- lib/mpi: use kcalloc in mpi_resize
- media: venus: venc: Fix potential null pointer dereference on pointer fmt
- platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from
run_smbios_call
- f2fs: fix to unmap pages from userspace process in punch_hole()
- userfaultfd: prevent concurrent API initialization
- arm64/sve: Use correct size when reinitialising SVE state
- perf machine: Initialize srcline string member in add_location struct
- net/mlx5: Fix potential sleeping in atomic context
- net: hns3: pad the short tunnel frame before sending to hardware
- mfd: axp20x: Update AXP288 volatile ranges
- KVM: arm64: Handle PSCI resets before userspace touches vCPU state
- ip_gre: validate csum_start only on pull
-- Ian May <email address hidden> Fri, 22 Oct 2021 14:16:37 -0500
-
linux-aws (4.15.0-1114.121) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1114.121 -proposed tracker (LP: #1947356)
[ Ubuntu: 4.15.0-161.169 ]
* bionic/linux: 4.15.0-161.169 -proposed tracker (LP: #1947358)
* Bionic/linux-aws Boot failure downgrading from Bionic/linux-aws-5.4 on
r5.metal (LP: #1946149)
- SAUCE: Revert "PCI/MSI: Enforce MSI[X] entry updates to be visible"
- SAUCE: Revert "PCI/MSI: Enforce that MSI-X table entry is masked for update"
-- Ian May <email address hidden> Fri, 15 Oct 2021 14:11:04 -0500
-
linux-aws (4.15.0-1113.120) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1113.120 -proposed tracker (LP: #1944911)
* linux-tools-aws package does not contain libperf-jvmti.so (LP: #1944754)
- Ubuntu: [Packaging] aws: do_tools_perf_jvmti = true
[ Ubuntu: 4.15.0-160.168 ]
* bionic/linux: 4.15.0-160.168 -proposed tracker (LP: #1944933)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2021.09.27)
* ext4 journal recovery fails w/ data=journal + mmap (LP: #1847340)
- jbd2: introduce/export functions
jbd2_journal_submit|finish_inode_data_buffers()
- jbd2, ext4, ocfs2: introduce/use journal callbacks
j_submit|finish_inode_data_buffers()
- ext4: data=journal: fixes for ext4_page_mkwrite()
- ext4: data=journal: write-protect pages on j_submit_inode_data_buffers()
- ext4: fix mmap write protection for data=journal mode
* CVE-2021-40490
- ext4: fix race writing to an inline_data file while its xattrs are changing
* Bionic update: upstream stable patchset 2021-09-22 (LP: #1944600)
- iio: humidity: hdc100x: Add margin to the conversion time
- iio: adc: Fix incorrect exit of for-loop
- ASoC: intel: atom: Fix reference to PCM buffer address
- i2c: dev: zero out array used for i2c reads from userspace
- ACPI: NFIT: Fix support for virtual SPA ranges
- ASoC: cs42l42: Correct definition of ADC Volume control
- ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J
- ASoC: cs42l42: Fix inversion of ADC Notch Switch control
- ASoC: cs42l42: Remove duplicate control for WNF filter frequency
- net: dsa: mt7530: add the missing RxUnicast MIB counter
- ppp: Fix generating ifname when empty IFLA_IFNAME is specified
- psample: Add a fwd declaration for skbuff
- net: Fix memory leak in ieee802154_raw_deliver
- net: bridge: fix memleak in br_add_if()
- tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B
packets
- xen/events: Fix race in set_evtchn_to_irq
- vsock/virtio: avoid potential deadlock when vsock device remove
- powerpc/kprobes: Fix kprobe Oops happens in booke
- x86/tools: Fix objdump version check again
- x86/resctrl: Fix default monitoring groups reporting
- PCI/MSI: Enable and mask MSI-X early
- PCI/MSI: Do not set invalid bits in MSI mask
- PCI/MSI: Correct misleading comments
- PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown()
- PCI/MSI: Protect msi_desc::masked for multi-MSI
- PCI/MSI: Mask all unused MSI-X entries
- PCI/MSI: Enforce that MSI-X table entry is masked for update
- PCI/MSI: Enforce MSI[X] entry updates to be visible
- vmlinux.lds.h: Handle clang's module.{c,d}tor sections
- mac80211: drop data frames without key on encrypted links
- x86/fpu: Make init_fpstate correct with optimized XSAVE
- ath: Use safer key clearing with key cache entries
- ath9k: Clear key cache explicitly on disabling hardware
- ath: Export ath_hw_keysetmac()
- ath: Modify ath_key_delete() to not need full key entry
- ath9k: Postpone key cache entry deletion for TXQ frames reference it
- dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe()
- ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218
- dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not
yet available
- scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry()
- scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach()
- scsi: core: Avoid printing an error if target_alloc() returns -ENXIO
- ARM: dts: nomadik: Fix up interrupt controller node names
- net: usb: lan78xx: don't modify phy_device state concurrently
- Bluetooth: hidp: use correct wait queue when removing ctrl_wait
- dccp: add do-while-0 stubs for dccp_pr_debug macros
- vhost: Fix the calculation in vhost_overflow()
- bnxt: don't lock the tx queue from napi poll
- net: 6pack: fix slab-out-of-bounds in decode_data
- ptp_pch: Restore dependency on PCI
- net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32
- net: mdio-mux: Don't ignore memory allocation errors
- net: mdio-mux: Handle -EPROBE_DEFER correctly
- mmc: dw_mmc: Fix hang on data CRC error
- ALSA: hda - fix the 'Capture Switch' value change notifications
- ipack: tpci200: fix many double free issues in tpci200_pci_probe
- btrfs: prevent rename2 from exchanging a subvol with a directory from
different parents
- ASoC: intel: atom: Fix breakage for PCM buffer address setup
- locks: print a warning when mount fails due to lack of "mand" support
- fs: warn about impending deprecation of mandatory locks
- netfilter: nft_exthdr: fix endianness of tcp option cast
- KVM: X86: MMU: Use the correct inherited permissions to get shadow page
- ASoC: cs42l42: Fix LRCLK frame start edge
- net: igmp: fix data-race in igmp_ifc_timer_expire()
- net: dsa: lan9303: fix broken backpressure in .port_fdb_dump
- genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP
- x86/msi: Force affinity setup before startup
- x86/ioapic: Force affinity setup before startup
- genirq/msi: Ensure deactivation on teardown
[ Ubuntu: 4.15.0-159.167 ]
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2021.09.06)
* dell300x: rsi wifi and bluetooth crash after suspend and resume
(LP: #1940488)
- Revert "rsi: Use resume_noirq for SDIO"
* LRMv5: switch primary version handling to kernel-versions data set
(LP: #1928921)
- [Packaging] switch to kernel-versions
* kvm_unit_tests: emulator test fails on 4.4 / 4.15 kernel, timeout
(LP: #1932966)
- kvm: Add emulation for movups/movupd
* memory leaking when removing a profile (LP: #1939915)
- security/apparmor/label.c: Clean code by removing redundant instructions
- apparmor: Fix memory leak of profile proxy
* ubunut_kernel_selftests: memory-hotplug: avoid spamming logs with
dump_page() (LP: #1941829)
- selftests: memory-hotplug: avoid spamming logs with dump_page(), ratio limit
hot-remove error test
* Bionic update: upstream stable patchset 2021-08-27 (LP: #1941916)
- btrfs: mark compressed range uptodate only if all bio succeed
- regulator: rt5033: Fix n_voltages settings for BUCK and LDO
- r8152: Fix potential PM refcount imbalance
- qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union()
- net: Fix zero-copy head len calculation.
- Revert "Bluetooth: Shutdown controller after workqueues are flushed or
cancelled"
- KVM: do not allow mapping valid but non-reference-counted pages
- Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout"
- spi: mediatek: Fix fifo transfer
- padata: validate cpumask without removed CPU during offline
- Revert "ACPICA: Fix memory leak caused by _CID repair function"
- ALSA: seq: Fix racy deletion of subscriber
- clk: stm32f4: fix post divisor setup for I2S/SAI PLLs
- omap5-board-common: remove not physically existing vdds_1v8_main fixed-
regulator
- scsi: sr: Return correct event when media event code is 3
- media: videobuf2-core: dequeue if start_streaming fails
- net: natsemi: Fix missing pci_disable_device() in probe and remove
- nfp: update ethtool reporting of pauseframe control
- mips: Fix non-POSIX regexp
- bnx2x: fix an error code in bnx2x_nic_load()
- net: pegasus: fix uninit-value in get_interrupt_interval
- net: fec: fix use-after-free in fec_drv_remove
- net: vxge: fix use-after-free in vxge_device_unregister
- Bluetooth: defer cleanup of resources in hci_unregister_dev()
- USB: usbtmc: Fix RCU stall warning
- USB: serial: option: add Telit FD980 composition 0x1056
- USB: serial: ch341: fix character loss at high transfer rates
- USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2
- usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers
- usb: gadget: f_hid: fixed NULL pointer dereference
- usb: gadget: f_hid: idle uses the highest byte for duration
- usb: otg-fsm: Fix hrtimer list corruption
- scripts/tracing: fix the bug that can't parse raw_trace_func
- staging: rtl8723bs: Fix a resource leak in sd_int_dpc
- media: rtl28xxu: fix zero-length control request
- pipe: increase minimum default pipe size to 2 pages
- ext4: fix potential htree corruption when growing large_dir directories
- serial: 8250: Mask out floating 16/32-bit bus bits
- MIPS: Malta: Do not byte-swap accesses to the CBUS UART
- pcmcia: i82092: fix a null pointer dereference bug
- spi: meson-spicc: fix memory leak in meson_spicc_remove
- perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest
- qmi_wwan: add network device usage statistics for qmimux devices
- libata: fix ata_pio_sector for CONFIG_HIGHMEM
- reiserfs: add check for root_inode in reiserfs_fill_super
- reiserfs: check directory items on read from disk
- alpha: Send stop IPI to send to online CPUs
- net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and
ql_adapter_reset
- USB:ehci:fix Kunpeng920 ehci hardware problem
- ppp: Fix generating ppp unit id when ifname is not specified
- ovl: prevent private clone if bind mount is not allowed
- net: xilinx_emaclite: Do not print real IOMEM pointer
- KVM: x86: accept userspace interrupt only if no event is injected
- KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds
* Bionic update: upstream stable patchset 2021-08-17 (LP: #1940315)
- selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c
- KVM: x86: determine if an exception has an error code only when injecting
it.
- net: split out functions related to registering inflight socket files
- [Config] updateconfigs for UNIX_SCM
- af_unix: fix garbage collect vs MSG_PEEK
- net/802/mrp: fix memleak in mrp_request_join()
- net/802/garp: fix memleak in garp_request_join()
- net: annotate data race around sk_ll_usec
- sctp: move 198 addresses from unusable to private scope
- hfs: add missing clean-up in hfs_fill_super
- hfs: fix high memory mapping in hfs_bnode_read
- hfs: add lock nesting notation to hfs_find_init
- ARM: dts: versatile: Fix up interrupt controller node names
- virtio_net: Do not pull payload in skb->head
- gro: ensure frag0 meets IP header alignment
- x86/kvm: fix vcpu-id indexed array sizes
- ocfs2: fix zero out valid data
- ocfs2: issue zeroout to EOF blocks
- can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF
- can: mcba_usb_start(): add missing urb->transfer_dma initialization
- can: usb_8dev: fix memory leak
- can: ems_usb: fix memory leak
- can: esd_usb2: fix memory leak
- NIU: fix incorrect error return, missed in previous revert
- nfc: nfcsim: fix use after free during module unload
- x86/asm: Ensure asm/proto.h can be included stand-alone
- cfg80211: Fix possible memory leak in function cfg80211_bss_update
- netfilter: conntrack: adjust stop timestamp to real expiry value
- netfilter: nft_nat: allow to specify layer 4 protocol NAT only
- tipc: fix sleeping in tipc accept routine
- mlx4: Fix missing error code in mlx4_load_one()
- net: llc: fix skb_over_panic
- net/mlx5: Fix flow table chaining
- sctp: fix return value check in __sctp_rcv_asconf_lookup
- tulip: windbond-840: Fix missing pci_disable_device() in probe and remove
- sis900: Fix missing pci_disable_device() in probe and remove
- can: hi311x: fix a signedness bug in hi3110_cmd()
- i40e: Fix log TC creation failure when max num of queues is exceeded
- i40e: Add additional info to PHY type error
* Bionic update: upstream stable patchset 2021-08-13 (LP: #1939913)
- ARM: dts: gemini: add device_type on pci
- ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288
- arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi
- ARM: dts: rockchip: Fix the timer clocks order
- ARM: dts: rockchip: Fix power-controller node names for rk3288
- arm64: dts: rockchip: Fix power-controller node names for rk3328
- reset: ti-syscon: fix to_ti_syscon_reset_data macro
- ARM: brcmstb: dts: fix NAND nodes names
- ARM: Cygnus: dts: fix NAND nodes names
- ARM: NSP: dts: fix NAND nodes names
- ARM: dts: BCM63xx: Fix NAND nodes names
- ARM: dts: imx6: phyFLEX: Fix UART hardware flow control
- ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info
- ARM: dts: stm32: fix RCC node name on stm32f429 MCU
- arm64: dts: juno: Update SCPI nodes as per the YAML schema
- arm64: dts: ls208xa: remove bus-num from dspi node
- thermal/core: Correct function name thermal_zone_device_unregister()
- kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set
- rtc: max77686: Do not enforce (incorrect) interrupt trigger type
- scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8
- scsi: libfc: Fix array index out of bound exception
- sched/fair: Fix CFS bandwidth hrtimer expiry type
- net: ipv6: fix return value of ip6_skb_dst_mtu
- netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo
- net: bridge: sync fdb to new unicast-filtering ports
- net: bcmgenet: Ensure all TX/RX queues DMAs are disabled
- net: moxa: fix UAF in moxart_mac_probe
- net: qcom/emac: fix UAF in emac_remove
- net: ti: fix UAF in tlan_remove_one
- net: send SYNACK packet with accepted fwmark
- net: validate lwtstate->data before returning from skb_tunnel_info()
- dma-buf/sync_file: Don't leak fences on merge failure
- tcp: annotate data races around tp->mtu_info
- ipv6: tcp: drop silly ICMPv6 packet too big messages
- igb: Fix use-after-free error during reset
- ixgbe: Fix an error handling path in 'ixgbe_probe()'
- igb: Fix an error handling path in 'igb_probe()'
- fm10k: Fix an error handling path in 'fm10k_probe()'
- e1000e: Fix an error handling path in 'e1000_probe()'
- iavf: Fix an error handling path in 'iavf_probe()'
- igb: Check if num of q_vectors is smaller than max before array access
- perf probe: Fix dso->nsinfo refcounting
- perf lzma: Close lzma stream on exit
- perf test bpf: Free obj_buf
- perf probe-file: Delete namelist in del_events() on the error path
- spi: mediatek: fix fifo rx mode
- liquidio: Fix unintentional sign extension issue on left shift of u16
- s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1]
- net: fix uninit-value in caif_seqpkt_sendmsg
- net: decnet: Fix sleeping inside in af_decnet
- netrom: Decrease sock refcount when sock timers expire
- scsi: iscsi: Fix iface sysfs attr detection
- scsi: target: Fix protect handling in WRITE SAME(32)
- spi: cadence: Correct initialisation of runtime PM again
- Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem"
- proc: Avoid mixing integer types in mem_rw()
- s390/ftrace: fix ftrace_update_ftrace_func implementation
- ALSA: sb: Fix potential ABBA deadlock in CSP driver
- xhci: Fix lost USB 2 remote wake
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow
- usb: hub: Disable USB 3 device initiated lpm if exit latency is too high
- USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS
- usb: max-3421: Prevent corruption of freed memory
- usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop()
- USB: serial: option: add support for u-blox LARA-R6 family
- USB: serial: cp210x: fix comments for GE CS1000
- USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick
- usb: dwc2: gadget: Fix sending zero length packet in DDMA mode.
- tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop.
- media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
- ixgbe: Fix packet corruption due to missing DMA sync
- selftest: use mmap instead of posix_memalign to allocate memory
- drm: Return -ENOTTY for non-drm ioctls
- net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear
- iio: accel: bma180: Use explicit member assignment
- iio: accel: bma180: Fix BMA25x bandwidth register values
- btrfs: compression: don't try to compress if we don't have enough pages
- spi: spi-fsl-dspi: Fix a resource leak in an error handling path
- xhci: add xhci_get_virt_ep() helper
- bpftool: Properly close va_list 'ap' by va_end() on error
- net: ip_tunnel: fix mtu calculation for ETHER tunnel devices
- nvme-pci: do not call nvme_dev_remove_admin from nvme_remove
- perf dso: Fix memory leak in dso__new_map()
- net/tcp_fastopen: fix data races around tfo_active_disable_stamp
- nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING
- drm/panel: raspberrypi-touchscreen: Prevent double-free
- KVM: do not assume PTE is writable after follow_pfn
- KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped()
- net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz
- workqueue: fix UAF in pwq_unbound_release_workfn()
- upstream stable to v4.14.241, v4.19.200
[ Ubuntu: 4.15.0-158.166 ]
* s390x BPF JIT vulnerabilities (LP: #1943960)
- SAUCE: s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
- SAUCE: s390/bpf: Fix optimizing out zero-extensions
-- Ian May <email address hidden> Wed, 29 Sep 2021 09:59:47 -0500
-
linux-aws (4.15.0-1112.119) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1112.119 -proposed tracker (LP: #1942566)
* Bionic update: upstream stable patchset 2021-08-17 (LP: #1940315)
- [Config] aws: updateconfigs for UNIX_SCM
[ Ubuntu: 4.15.0-157.164 ]
* bionic/linux: 4.15.0-157.164 -proposed tracker (LP: #1942588)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2021.09.06)
* dell300x: rsi wifi and bluetooth crash after suspend and resume
(LP: #1940488)
- Revert "rsi: Use resume_noirq for SDIO"
* LRMv5: switch primary version handling to kernel-versions data set
(LP: #1928921)
- [Packaging] switch to kernel-versions
* kvm_unit_tests: emulator test fails on 4.4 / 4.15 kernel, timeout
(LP: #1932966)
- kvm: Add emulation for movups/movupd
* memory leaking when removing a profile (LP: #1939915)
- security/apparmor/label.c: Clean code by removing redundant instructions
- apparmor: Fix memory leak of profile proxy
* ubunut_kernel_selftests: memory-hotplug: avoid spamming logs with
dump_page() (LP: #1941829)
- selftests: memory-hotplug: avoid spamming logs with dump_page(), ratio limit
hot-remove error test
* Bionic update: upstream stable patchset 2021-08-27 (LP: #1941916)
- btrfs: mark compressed range uptodate only if all bio succeed
- regulator: rt5033: Fix n_voltages settings for BUCK and LDO
- r8152: Fix potential PM refcount imbalance
- qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union()
- net: Fix zero-copy head len calculation.
- Revert "Bluetooth: Shutdown controller after workqueues are flushed or
cancelled"
- KVM: do not allow mapping valid but non-reference-counted pages
- Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout"
- spi: mediatek: Fix fifo transfer
- padata: validate cpumask without removed CPU during offline
- Revert "ACPICA: Fix memory leak caused by _CID repair function"
- ALSA: seq: Fix racy deletion of subscriber
- clk: stm32f4: fix post divisor setup for I2S/SAI PLLs
- omap5-board-common: remove not physically existing vdds_1v8_main fixed-
regulator
- scsi: sr: Return correct event when media event code is 3
- media: videobuf2-core: dequeue if start_streaming fails
- net: natsemi: Fix missing pci_disable_device() in probe and remove
- nfp: update ethtool reporting of pauseframe control
- mips: Fix non-POSIX regexp
- bnx2x: fix an error code in bnx2x_nic_load()
- net: pegasus: fix uninit-value in get_interrupt_interval
- net: fec: fix use-after-free in fec_drv_remove
- net: vxge: fix use-after-free in vxge_device_unregister
- Bluetooth: defer cleanup of resources in hci_unregister_dev()
- USB: usbtmc: Fix RCU stall warning
- USB: serial: option: add Telit FD980 composition 0x1056
- USB: serial: ch341: fix character loss at high transfer rates
- USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2
- usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers
- usb: gadget: f_hid: fixed NULL pointer dereference
- usb: gadget: f_hid: idle uses the highest byte for duration
- usb: otg-fsm: Fix hrtimer list corruption
- scripts/tracing: fix the bug that can't parse raw_trace_func
- staging: rtl8723bs: Fix a resource leak in sd_int_dpc
- media: rtl28xxu: fix zero-length control request
- pipe: increase minimum default pipe size to 2 pages
- ext4: fix potential htree corruption when growing large_dir directories
- serial: 8250: Mask out floating 16/32-bit bus bits
- MIPS: Malta: Do not byte-swap accesses to the CBUS UART
- pcmcia: i82092: fix a null pointer dereference bug
- spi: meson-spicc: fix memory leak in meson_spicc_remove
- perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest
- qmi_wwan: add network device usage statistics for qmimux devices
- libata: fix ata_pio_sector for CONFIG_HIGHMEM
- reiserfs: add check for root_inode in reiserfs_fill_super
- reiserfs: check directory items on read from disk
- alpha: Send stop IPI to send to online CPUs
- net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and
ql_adapter_reset
- USB:ehci:fix Kunpeng920 ehci hardware problem
- ppp: Fix generating ppp unit id when ifname is not specified
- ovl: prevent private clone if bind mount is not allowed
- net: xilinx_emaclite: Do not print real IOMEM pointer
- KVM: x86: accept userspace interrupt only if no event is injected
- KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds
* Bionic update: upstream stable patchset 2021-08-17 (LP: #1940315)
- selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c
- KVM: x86: determine if an exception has an error code only when injecting
it.
- net: split out functions related to registering inflight socket files
- [Config] updateconfigs for UNIX_SCM
- af_unix: fix garbage collect vs MSG_PEEK
- net/802/mrp: fix memleak in mrp_request_join()
- net/802/garp: fix memleak in garp_request_join()
- net: annotate data race around sk_ll_usec
- sctp: move 198 addresses from unusable to private scope
- hfs: add missing clean-up in hfs_fill_super
- hfs: fix high memory mapping in hfs_bnode_read
- hfs: add lock nesting notation to hfs_find_init
- ARM: dts: versatile: Fix up interrupt controller node names
- virtio_net: Do not pull payload in skb->head
- gro: ensure frag0 meets IP header alignment
- x86/kvm: fix vcpu-id indexed array sizes
- ocfs2: fix zero out valid data
- ocfs2: issue zeroout to EOF blocks
- can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF
- can: mcba_usb_start(): add missing urb->transfer_dma initialization
- can: usb_8dev: fix memory leak
- can: ems_usb: fix memory leak
- can: esd_usb2: fix memory leak
- NIU: fix incorrect error return, missed in previous revert
- nfc: nfcsim: fix use after free during module unload
- x86/asm: Ensure asm/proto.h can be included stand-alone
- cfg80211: Fix possible memory leak in function cfg80211_bss_update
- netfilter: conntrack: adjust stop timestamp to real expiry value
- netfilter: nft_nat: allow to specify layer 4 protocol NAT only
- tipc: fix sleeping in tipc accept routine
- mlx4: Fix missing error code in mlx4_load_one()
- net: llc: fix skb_over_panic
- net/mlx5: Fix flow table chaining
- sctp: fix return value check in __sctp_rcv_asconf_lookup
- tulip: windbond-840: Fix missing pci_disable_device() in probe and remove
- sis900: Fix missing pci_disable_device() in probe and remove
- can: hi311x: fix a signedness bug in hi3110_cmd()
- i40e: Fix log TC creation failure when max num of queues is exceeded
- i40e: Add additional info to PHY type error
* Bionic update: upstream stable patchset 2021-08-13 (LP: #1939913)
- ARM: dts: gemini: add device_type on pci
- ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288
- arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi
- ARM: dts: rockchip: Fix the timer clocks order
- ARM: dts: rockchip: Fix power-controller node names for rk3288
- arm64: dts: rockchip: Fix power-controller node names for rk3328
- reset: ti-syscon: fix to_ti_syscon_reset_data macro
- ARM: brcmstb: dts: fix NAND nodes names
- ARM: Cygnus: dts: fix NAND nodes names
- ARM: NSP: dts: fix NAND nodes names
- ARM: dts: BCM63xx: Fix NAND nodes names
- ARM: dts: imx6: phyFLEX: Fix UART hardware flow control
- ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info
- ARM: dts: stm32: fix RCC node name on stm32f429 MCU
- arm64: dts: juno: Update SCPI nodes as per the YAML schema
- arm64: dts: ls208xa: remove bus-num from dspi node
- thermal/core: Correct function name thermal_zone_device_unregister()
- kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set
- rtc: max77686: Do not enforce (incorrect) interrupt trigger type
- scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8
- scsi: libfc: Fix array index out of bound exception
- sched/fair: Fix CFS bandwidth hrtimer expiry type
- net: ipv6: fix return value of ip6_skb_dst_mtu
- netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo
- net: bridge: sync fdb to new unicast-filtering ports
- net: bcmgenet: Ensure all TX/RX queues DMAs are disabled
- net: moxa: fix UAF in moxart_mac_probe
- net: qcom/emac: fix UAF in emac_remove
- net: ti: fix UAF in tlan_remove_one
- net: send SYNACK packet with accepted fwmark
- net: validate lwtstate->data before returning from skb_tunnel_info()
- dma-buf/sync_file: Don't leak fences on merge failure
- tcp: annotate data races around tp->mtu_info
- ipv6: tcp: drop silly ICMPv6 packet too big messages
- igb: Fix use-after-free error during reset
- ixgbe: Fix an error handling path in 'ixgbe_probe()'
- igb: Fix an error handling path in 'igb_probe()'
- fm10k: Fix an error handling path in 'fm10k_probe()'
- e1000e: Fix an error handling path in 'e1000_probe()'
- iavf: Fix an error handling path in 'iavf_probe()'
- igb: Check if num of q_vectors is smaller than max before array access
- perf probe: Fix dso->nsinfo refcounting
- perf lzma: Close lzma stream on exit
- perf test bpf: Free obj_buf
- perf probe-file: Delete namelist in del_events() on the error path
- spi: mediatek: fix fifo rx mode
- liquidio: Fix unintentional sign extension issue on left shift of u16
- s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1]
- net: fix uninit-value in caif_seqpkt_sendmsg
- net: decnet: Fix sleeping inside in af_decnet
- netrom: Decrease sock refcount when sock timers expire
- scsi: iscsi: Fix iface sysfs attr detection
- scsi: target: Fix protect handling in WRITE SAME(32)
- spi: cadence: Correct initialisation of runtime PM again
- Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem"
- proc: Avoid mixing integer types in mem_rw()
- s390/ftrace: fix ftrace_update_ftrace_func implementation
- ALSA: sb: Fix potential ABBA deadlock in CSP driver
- xhci: Fix lost USB 2 remote wake
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow
- usb: hub: Disable USB 3 device initiated lpm if exit latency is too high
- USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS
- usb: max-3421: Prevent corruption of freed memory
- usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop()
- USB: serial: option: add support for u-blox LARA-R6 family
- USB: serial: cp210x: fix comments for GE CS1000
- USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick
- usb: dwc2: gadget: Fix sending zero length packet in DDMA mode.
- tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop.
- media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
- ixgbe: Fix packet corruption due to missing DMA sync
- selftest: use mmap instead of posix_memalign to allocate memory
- drm: Return -ENOTTY for non-drm ioctls
- net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear
- iio: accel: bma180: Use explicit member assignment
- iio: accel: bma180: Fix BMA25x bandwidth register values
- btrfs: compression: don't try to compress if we don't have enough pages
- spi: spi-fsl-dspi: Fix a resource leak in an error handling path
- xhci: add xhci_get_virt_ep() helper
- bpftool: Properly close va_list 'ap' by va_end() on error
- net: ip_tunnel: fix mtu calculation for ETHER tunnel devices
- nvme-pci: do not call nvme_dev_remove_admin from nvme_remove
- perf dso: Fix memory leak in dso__new_map()
- net/tcp_fastopen: fix data races around tfo_active_disable_stamp
- nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING
- drm/panel: raspberrypi-touchscreen: Prevent double-free
- KVM: do not assume PTE is writable after follow_pfn
- KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped()
- net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz
- workqueue: fix UAF in pwq_unbound_release_workfn()
- upstream stable to v4.14.241, v4.19.200
-- Ian May <email address hidden> Fri, 10 Sep 2021 10:12:43 -0500
-
linux-aws (4.15.0-1111.118) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1111.118 -proposed tracker (LP: #1939811)
[ Ubuntu: 4.15.0-156.163 ]
* bionic/linux: 4.15.0-156.163 -proposed tracker (LP: #1940162)
* linux (LP: #1940564)
- SAUCE: Revert "scsi: core: Cap scsi_host cmd_per_lun at can_queue"
* fails to launch linux L2 guests on AMD (LP: #1940134) // CVE-2021-3653
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl
(CVE-2021-3653)
* fails to launch linux L2 guests on AMD (LP: #1940134)
- SAUCE: Revert "UBUNTU: SAUCE: KVM: nSVM: avoid picking up unsupported bits
from L2 in int_ctl"
[ Ubuntu: 4.15.0-155.162 ]
* bionic/linux: 4.15.0-155.162 -proposed tracker (LP: #1939833)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2021.08.16)
* CVE-2021-3656
- SAUCE: KVM: nSVM: always intercept VMLOAD/VMSAVE when nested
* CVE-2021-3653
- SAUCE: KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl
* dev_forward_skb: do not scrub skb mark within the same name space
(LP: #1935040)
- dev_forward_skb: do not scrub skb mark within the same name space
* 'ptrace trace' needed to readlink() /proc/*/ns/* files on older kernels
(LP: #1890848)
- apparmor: fix ptrace read check
* Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824)
- ALSA: usb-audio: fix rate on Ozone Z90 USB headset
- media: dvb-usb: fix wrong definition
- Input: usbtouchscreen - fix control-request directions
- net: can: ems_usb: fix use-after-free in ems_usb_disconnect()
- usb: gadget: eem: fix echo command packet response issue
- USB: cdc-acm: blacklist Heimann USB Appset device
- ntfs: fix validity check for file name attribute
- iov_iter_fault_in_readable() should do nothing in xarray case
- Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl
- ARM: dts: at91: sama5d4: fix pinctrl muxing
- btrfs: send: fix invalid path for unlink operations after parent
orphanization
- btrfs: clear defrag status of a root if starting transaction fails
- ext4: cleanup in-core orphan list if ext4_truncate() failed to get a
transaction handle
- ext4: fix kernel infoleak via ext4_extent_header
- ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit
- ext4: remove check for zero nr_to_scan in ext4_es_scan()
- ext4: fix avefreec in find_group_orlov
- ext4: use ext4_grp_locked_error in mb_find_extent
- can: gw: synchronize rcu operations before removing gw job entry
- can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in
TX path
- SUNRPC: Fix the batch tasks count wraparound.
- SUNRPC: Should wake up the privileged task firstly.
- s390/cio: dont call css_wait_for_slow_path() inside a lock
- rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path
- iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA
as volatile, too
- iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR
- iio: ltr501: ltr501_read_ps(): add missing endianness conversion
- serial: sh-sci: Stop dmaengine transfer in sci_stop_tx()
- serial_cs: Add Option International GSM-Ready 56K/ISDN modem
- serial_cs: remove wrong GLOBETROTTER.cis entry
- ath9k: Fix kernel NULL pointer dereference during ath_reset_internal()
- ssb: sdio: Don't overwrite const buffer if block_write fails
- rsi: Assign beacon rate settings to the correct rate_info descriptor field
- seq_buf: Make trace_seq_putmem_hex() support data longer than 8
- fuse: check connected before queueing on fpq->io
- spi: Make of_register_spi_device also set the fwnode
- spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf'
- spi: spi-topcliff-pch: Fix potential double free in
pch_spi_process_messages()
- spi: omap-100k: Fix the length judgment problem
- crypto: nx - add missing MODULE_DEVICE_TABLE
- media: cpia2: fix memory leak in cpia2_usb_probe
- media: cobalt: fix race condition in setting HPD
- media: pvrusb2: fix warning in pvr2_i2c_core_done
- crypto: qat - check return code of qat_hal_rd_rel_reg()
- crypto: qat - remove unused macro in FW loader
- media: em28xx: Fix possible memory leak of em28xx struct
- media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release
- media: bt8xx: Fix a missing check bug in bt878_probe
- media: st-hva: Fix potential NULL pointer dereferences
- media: dvd_usb: memory leak in cinergyt2_fe_attach
- mmc: via-sdmmc: add a check against NULL pointer dereference
- crypto: shash - avoid comparing pointers to exported functions under CFI
- media: dvb_net: avoid speculation from net slot
- media: siano: fix device register error path
- btrfs: fix error handling in __btrfs_update_delayed_inode
- btrfs: abort transaction if we fail to update the delayed inode
- btrfs: disable build on platforms having page size 256K
- regulator: da9052: Ensure enough delay time for .set_voltage_time_sel
- HID: do not use down_interruptible() when unbinding devices
- ACPI: processor idle: Fix up C-state latency if not ordered
- hv_utils: Fix passing zero to 'PTR_ERR' warning
- lib: vsprintf: Fix handling of number field widths in vsscanf
- ACPI: EC: Make more Asus laptops use ECDT _GPE
- block_dump: remove block_dump feature in mark_inode_dirty()
- fs: dlm: cancel work sync othercon
- random32: Fix implicit truncation warning in prandom_seed_state()
- fs: dlm: fix memory leak when fenced
- ACPICA: Fix memory leak caused by _CID repair function
- ACPI: bus: Call kobject_put() in acpi_init() error path
- platform/x86: toshiba_acpi: Fix missing error code in
toshiba_acpi_setup_keyboard()
- ACPI: tables: Add custom DSDT file as makefile prerequisite
- HID: wacom: Correct base usage for capacitive ExpressKey status bits
- ia64: mca_drv: fix incorrect array size calculation
- media: s5p_cec: decrement usage count if disabled
- crypto: ixp4xx - dma_unmap the correct address
- crypto: ux500 - Fix error return code in hash_hw_final()
- sata_highbank: fix deferred probing
- pata_rb532_cf: fix deferred probing
- media: I2C: change 'RST' to "RSET" to fix multiple build errors
- pata_octeon_cf: avoid WARN_ON() in ata_host_activate()
- crypto: ccp - Fix a resource leak in an error handling path
- pata_ep93xx: fix deferred probing
- media: exynos4-is: Fix a use after free in isp_video_release
- media: tc358743: Fix error return code in tc358743_probe_of()
- media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2()
- mmc: usdhi6rol0: fix error return code in usdhi6_probe()
- media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx
- hwmon: (max31722) Remove non-standard ACPI device IDs
- hwmon: (max31790) Fix fan speed reporting for fan7..12
- btrfs: clear log tree recovering status if starting transaction fails
- spi: spi-sun6i: Fix chipselect/clock bug
- crypto: nx - Fix RCU warning in nx842_OF_upd_status
- ACPI: sysfs: Fix a buffer overrun problem with description_show()
- ocfs2: fix snprintf() checking
- net: pch_gbe: Propagate error from devm_gpio_request_one()
- drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in
cdn_dp_grf_write()
- ehea: fix error return code in ehea_restart_qps()
- RDMA/rxe: Fix failure during driver load
- drm: qxl: ensure surf.data is ininitialized
- wireless: carl9170: fix LEDS build errors & warnings
- brcmsmac: mac80211_if: Fix a resource leak in an error handling path
- ath10k: Fix an error code in ath10k_add_interface()
- netlabel: Fix memory leak in netlbl_mgmt_add_common
- netfilter: nft_exthdr: check for IPv6 packet before further processing
- samples/bpf: Fix the error return code of xdp_redirect's main()
- net: ethernet: aeroflex: fix UAF in greth_of_remove
- net: ethernet: ezchip: fix UAF in nps_enet_remove
- net: ethernet: ezchip: fix error handling
- pkt_sched: sch_qfq: fix qfq_change_class() error path
- vxlan: add missing rcu_read_lock() in neigh_reduce()
- net: bcmgenet: Fix attaching to PYH failed on RPi 4B
- i40e: Fix error handling in i40e_vsi_open
- Revert "ibmvnic: remove duplicate napi_schedule call in open function"
- Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid
- writeback: fix obtain a reference to a freeing memcg css
- net: sched: fix warning in tcindex_alloc_perfect_hash
- tty: nozomi: Fix a resource leak in an error handling function
- mwifiex: re-fix for unaligned accesses
- iio: adis_buffer: do not return ints in irq handlers
- iio: accel: bma180: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: accel: bma220: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: accel: hid: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: accel: kxcjk-1013: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: accel: stk8312: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: accel: stk8ba50: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: adc: ti-ads1015: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: adc: vf610: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: gyro: bmg160: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: humidity: am2315: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: prox: srf08: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: prox: pulsed-light: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: prox: as3935: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: light: isl29125: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: light: tcs3414: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- iio: potentiostat: lmp91000: Fix alignment of buffer in
iio_push_to_buffers_with_timestamp()
- ASoC: hisilicon: fix missing clk_disable_unprepare() on error in
hi6210_i2s_startup()
- Input: hil_kbd - fix error return code in hil_dev_connect()
- char: pcmcia: error out if 'num_bytes_read' is greater than 4 in
set_protocol()
- tty: nozomi: Fix the error handling path of 'nozomi_card_init()'
- scsi: FlashPoint: Rename si_flags field
- s390: appldata depends on PROC_SYSCTL
- eeprom: idt_89hpesx: Put fwnode in matching case during ->probe()
- iio: adc: mxs-lradc: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt()
- staging: gdm724x: check for overflow in gdm_lte_netif_rx()
- ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK
- of: Fix truncation of memory sizes on 32-bit platforms
- scsi: mpt3sas: Fix error return value in _scsih_expander_add()
- phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe()
- extcon: sm5502: Drop invalid register write in sm5502_reg_data
- extcon: max8997: Add missing modalias string
- configfs: fix memleak in configfs_release_bin_file
- leds: as3645a: Fix error return code in as3645a_parse_node()
- leds: ktd2692: Fix an error handling path
- mm/huge_memory.c: don't discard hugepage if other processes are mapping it
- selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random
- mmc: vub3000: fix control-request direction
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error
- drm/mxsfb: Don't select DRM_KMS_FB_HELPER
- drm/zte: Don't select DRM_KMS_FB_HELPER
- drm/amd/amdgpu/sriov disable all ip hw status by default
- net: pch_gbe: Use proper accessors to BE data in pch_ptp_match()
- hugetlb: clear huge pte during flush function on mips platform
- atm: iphase: fix possible use-after-free in ia_module_exit()
- mISDN: fix possible use-after-free in HFC_cleanup()
- atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT
- reiserfs: add check for invalid 1st journal block
- drm/virtio: Fix double free on probe failure
- udf: Fix NULL pointer dereference in udf_symlink function
- e100: handle eeprom as little endian
- clk: renesas: r8a77995: Add ZA2 clock
- clk: tegra: Ensure that PLLU configuration is applied properly
- ipv6: use prandom_u32() for ID generation
- RDMA/cxgb4: Fix missing error code in create_qp()
- dm space maps: don't reset space map allocation cursor when committing
- virtio_net: Remove BUG() to avoid machine dead
- net: bcmgenet: check return value after calling platform_get_resource()
- net: micrel: check return value after calling platform_get_resource()
- fjes: check return value after calling platform_get_resource()
- selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC
- xfrm: Fix error reporting in xfrm_state_construct.
- wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP
- wl1251: Fix possible buffer overflow in wl1251_cmd_scan
- cw1200: add missing MODULE_DEVICE_TABLE
- atm: nicstar: use 'dma_free_coherent' instead of 'kfree'
- atm: nicstar: register the interrupt handler in the right place
- vsock: notify server to shutdown when client has pending signal
- RDMA/rxe: Don't overwrite errno from ib_umem_get()
- iwlwifi: mvm: don't change band on bound PHY contexts
- sfc: avoid double pci_remove of VFs
- sfc: error code if SRIOV cannot be disabled
- wireless: wext-spy: Fix out-of-bounds warning
- RDMA/cma: Fix rdma_resolve_route() memory leak
- Bluetooth: Fix the HCI to MGMT status conversion table
- Bluetooth: Shutdown controller after workqueues are flushed or cancelled
- Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc.
- sctp: validate from_addr_param return
- sctp: add size validation when walking chunks
- fscrypt: don't ignore minor_hash when hash is 0
- bdi: Do not use freezable workqueue
- fuse: reject internal errno
- powerpc/barrier: Avoid collision with clang's __lwsync macro
- usb: gadget: f_fs: Fix setting of device and driver data cross-references
- drm/radeon: Add the missed drm_gem_object_put() in
radeon_user_framebuffer_create()
- pinctrl/amd: Add device HID for new AMD GPIO controller
- mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode
- mmc: core: clear flags before allowing to retune
- mmc: core: Allow UHS-I voltage switch for SDSC cards if supported
- ata: ahci_sunxi: Disable DIPM
- cpu/hotplug: Cure the cpusets trainwreck
- ASoC: tegra: Set driver_name=tegra for all machine drivers
- qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute
- ipmi/watchdog: Stop watchdog timer when the current action is 'none'
- power: supply: ab8500: Fix an old bug
- seq_buf: Fix overflow in seq_buf_putmem_hex()
- tracing: Simplify & fix saved_tgids logic
- ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe
- dm btree remove: assign new_root only when removal succeeds
- media: dtv5100: fix control-request directions
- media: zr364xx: fix memory leak in zr364xx_start_readpipe
- media: gspca/sq905: fix control-request direction
- media: gspca/sunplus: fix zero-length control requests
- jfs: fix GPF in diFree
- smackfs: restrict bytes count in smk_set_cipso()
- KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled
- KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run()
- scsi: core: Fix bad pointer dereference when ehandler kthread is invalid
- tracing: Do not reference char * as a string in histograms
- PCI: aardvark: Don't rely on jiffies while holding spinlock
- PCI: aardvark: Fix kernel panic during PIO transfer
- tty: serial: fsl_lpuart: fix the potential risk of division or modulo by
zero
- misc/libmasm/module: Fix two use after free in ibmasm_init_one
- Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro"
- w1: ds2438: fixing bug that would always get page0
- scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology
- scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the
SGLs
- scsi: core: Cap scsi_host cmd_per_lun at can_queue
- tty: serial: 8250: serial_cs: Fix a memory leak in error handling path
- fs/jfs: Fix missing error code in lmLogInit()
- scsi: iscsi: Add iscsi_cls_conn refcount helpers
- scsi: iscsi: Fix shost->max_id use
- scsi: qedi: Fix null ref during abort handling
- mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE
- s390/sclp_vt220: fix console name to match device
- ALSA: sb: Fix potential double-free of CSP mixer elements
- powerpc/ps3: Add dma_mask to ps3_dma_region
- gpio: zynq: Check return value of pm_runtime_get_sync
- ALSA: ppc: fix error return code in snd_pmac_probe()
- selftests/powerpc: Fix "no_handler" EBB selftest
- ASoC: soc-core: Fix the error return code in
snd_soc_of_parse_audio_routing()
- ALSA: bebob: add support for ToneWeal FW66
- usb: gadget: f_hid: fix endianness issue with descriptors
- usb: gadget: hid: fix error return code in hid_bind()
- powerpc/boot: Fixup device-tree on little endian
- backlight: lm3630a: Fix return code of .update_status() callback
- ALSA: hda: Add IRQ check for platform_get_irq()
- staging: rtl8723bs: fix macro value for 2.4Ghz only device
- intel_th: Wait until port is in reset before programming it
- i2c: core: Disable client irq on reboot/shutdown
- lib/decompress_unlz4.c: correctly handle zero-padding around initrds.
- pwm: spear: Don't modify HW state in .remove callback
- power: supply: ab8500: Avoid NULL pointers
- power: supply: max17042: Do not enforce (incorrect) interrupt trigger type
- power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE
- ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1
- watchdog: Fix possible use-after-free in wdt_startup()
- watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()
- watchdog: Fix possible use-after-free by calling del_timer_sync()
- watchdog: iTCO_wdt: Account for rebooting on second timeout
- x86/fpu: Return proper error codes from user access functions
- orangefs: fix orangefs df output.
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty
- NFS: nfs_find_open_context() may only select open files
- power: supply: charger-manager: add missing MODULE_DEVICE_TABLE
- power: supply: ab8500: add missing MODULE_DEVICE_TABLE
- pwm: tegra: Don't modify HW state in .remove callback
- ACPI: AMBA: Fix resource name in /proc/iomem
- ACPI: video: Add quirk for the Dell Vostro 3350
- virtio-blk: Fix memory leak among suspend/resume procedure
- virtio_net: Fix error handling in virtnet_restore()
- virtio_console: Assure used length from device is limited
- f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs
- PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun
- power: supply: rt5033_battery: Fix device tree enumeration
- um: fix error return code in slip_open()
- um: fix error return code in winch_tramp()
- watchdog: aspeed: fix hardware timeout calculation
- nfs: fix acl memory leak of posix_acl_create()
- ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode
- x86/fpu: Limit xstate copy size in xstateregs_set()
- ALSA: isa: Fix error return code in snd_cmi8330_probe()
- NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times
- hexagon: use common DISCARDS macro
- reset: a10sr: add missing of_match_table reference
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4
- memory: atmel-ebi: add missing of_node_put for loop iteration
- rtc: fix snprintf() checking in is_rtc_hctosys()
- ARM: dts: r8a7779, marzen: Fix DU clock names
- ARM: dts: BCM5301X: Fixup SPI binding
- reset: bail if try_module_get() fails
- memory: fsl_ifc: fix leak of IO mapping on probe failure
- memory: fsl_ifc: fix leak of private memory on probe failure
- ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema
- scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe()
- mips: always link byteswap helpers into decompressor
- mips: disable branch profiling in boot/decompress.o
- MIPS: vdso: Invalid GIC access through VDSO
- net: bridge: multicast: fix PIM hello router port marking race
- ALSA: usb-audio: Fix OOB access at proc output
- iio: light: tcs3472: do not free unallocated IRQ
- rsi: fix AP mode with WPA failure due to encrypted EAPOL
- evm: Execute evm_inode_init_security() only when an HMAC key is loaded
- evm: fix writing <securityfs>/evm overflow
- wcn36xx: Move hal_buf allocation to devm_kmalloc in probe
- ssb: Fix error return code in ssb_bus_scan()
- brcmfmac: fix setting of station info chains bitmask
- ipv6: exthdrs: do not blindly use init_net
- i40e: Fix autoneg disabling for non-10GBaseT links
- ipv6: fix out-of-bound access in ip6_parse_tlv()
- iio: light: tcs3472: Fix buffer alignment in
iio_push_to_buffers_with_timestamp()
- ASoC: rsnd: tidyup loop on rsnd_adg_clk_query()
- visorbus: fix error return code in visorchipset_init()
- serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates
- powerpc: Offline CPU in stop_this_cpu()
- serial: mvebu-uart: correctly calculate minimal possible baudrate
- arm64: dts: marvell: armada-37xx: Fix reg for standard variant of UART
- vfio/pci: Handle concurrent vma faults
- clocksource/arm_arch_timer: Improve Allwinner A64 timer workaround
- coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
- PCI: Leave Apple Thunderbolt controllers on for s2idle or standby
- media: subdev: disallow ioctl for saa6588/davinci
- PCI: iproc: Fix multi-MSI base vector number allocation
- PCI: iproc: Support multi-MSI only on uniprocessor kernel
- virtio_net: move tx vq operation under tx queue lock
- ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1
- ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema
* Bionic update: upstream stable patchset 2021-07-20 (LP: #1936960)
- include/linux/mmdebug.h: make VM_WARN* non-rvals
- mm: add VM_WARN_ON_ONCE_PAGE() macro
- mm/rmap: remove unneeded semicolon in page_not_mapped()
- mm/rmap: use page_not_mapped in try_to_unmap()
- mm/thp: try_to_unmap() use TTU_SYNC for safe splitting
- mm/thp: fix vma_address() if virtual address below file offset
- mm/thp: fix page_address_in_vma() on file THP tails
- mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split
- mm: page_vma_mapped_walk(): use page for pvmw->page
- mm: page_vma_mapped_walk(): settle PageHuge on entry
- mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd
- mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block
- mm: page_vma_mapped_walk(): crossing page table boundary
- mm: page_vma_mapped_walk(): add a level of indentation
- mm: page_vma_mapped_walk(): use goto instead of while (1)
- mm: page_vma_mapped_walk(): get vma_address_end() earlier
- mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes
- mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk()
- mm, futex: fix shared futex pgoff on shmem huge page
- scsi: sr: Return appropriate error code when disk is ejected
- drm/nouveau: fix dma_address check for CPU/GPU sync
- kfifo: DECLARE_KIFO_PTR(fifo, u64) does not work on arm 32 bit
- kthread_worker: split code for canceling the delayed work timer
- kthread: prevent deadlock when kthread_mod_delayed_work() races with
kthread_cancel_delayed_work_sync()
- xen/events: reset active flag for lateeoi events later
- ARM: dts: imx6qdl-sabresd: Remove incorrect power supply assignment
- ARM: OMAP: replace setup_irq() by request_irq()
- clocksource/drivers/timer-ti-dm: Add clockevent and clocksource support
- clocksource/drivers/timer-ti-dm: Prepare to handle dra7 timer wrap issue
* Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231)
- Revert "UBUNTU: SAUCE: Revert "proc: Check /proc/$pid/attr/ writes against
file opener""
- proc: Track /proc/$pid/attr/ opener mm_struct
- net/nfc/rawsock.c: fix a permission check bug
- ASoC: sti-sas: add missing MODULE_DEVICE_TABLE
- isdn: mISDN: netjet: Fix crash in nj_probe:
- bonding: init notify_work earlier to avoid uninitialized use
- netlink: disable IRQs for netlink_lock_table()
- net: mdiobus: get rid of a BUG_ON()
- cgroup: disable controllers at parse time
- wq: handle VM suspension in stall detection
- net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
- scsi: vmw_pvscsi: Set correct residual data length
- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
- net: macb: ensure the device is available before accessing GEMGXL control
registers
- net: appletalk: cops: Fix data race in cops_probe1
- MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER
- bnx2x: Fix missing error code in bnx2x_iov_init_one()
- powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers
- powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers
- i2c: mpc: Make use of i2c_recover_bus()
- i2c: mpc: implement erratum A-004447 workaround
- drm: Fix use-after-free read in drm_getunique()
- drm: Lock pointer access in drm_master_release()
- kvm: avoid speculation-based attacks from out-of-range memslot accesses
- staging: rtl8723bs: Fix uninitialized variables
- btrfs: return value from btrfs_mark_extent_written() in case of error
- cgroup1: don't allow '\n' in renaming
- USB: f_ncm: ncm_bitrate (speed) is unsigned
- usb: dwc3: ep0: fix NULL pointer exception
- usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path
- usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
- USB: serial: ftdi_sio: add NovaTech OrionMX product ID
- USB: serial: omninet: add device id for Zyxel Omni 56K Plus
- USB: serial: quatech2: fix control-request directions
- usb: gadget: eem: fix wrong eem header operation
- usb: fix various gadgets null ptr deref on 10gbps cabling.
- usb: fix various gadget panics on 10gbps cabling
- regulator: core: resolve supply for boot-on/always-on regulators
- regulator: max77620: Use device_set_of_node_from_dev()
- perf: Fix data race between pin_count increment/decrement
- NFS: Fix a potential NULL dereference in nfs_get_client()
- perf session: Correct buffer copying when peeking events
- kvm: fix previous commit for 32-bit builds
- NFS: Fix use-after-free in nfs4_init_client()
- NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
- scsi: core: Fix error handling of scsi_host_alloc()
- scsi: core: Put .shost_dev in failure path if host state changes to RUNNING
- scsi: core: Only put parent device if host state differs from SHOST_CREATED
- ftrace: Do not blindly read the ip address in ftrace_bug()
- tracing: Correct the length check which causes memory corruption
- proc: only require mm_struct for writing
- scsi: bnx2fc: Return failure if io_req is already in ABTS processing
- ARM: dts: imx6qdl-sabresd: Assign corresponding power supply for LDOs
- usb: f_ncm: only first packet of aggregate needs to start timer
- usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
- RDMA/mlx4: Do not map the core_clock page to user space unless enabled
- vmlinux.lds.h: Avoid orphan section with !SMP
- sched/fair: Make sure to update tg contrib for blocked load
- net: ieee802154: fix null deref in parse dev addr
- HID: hid-sensor-hub: Return error for hid_set_field() failure
- HID: Add BUS_VIRTUAL to hid_connect logging
- HID: usbhid: fix info leak in hid_submit_ctrl
- ARM: OMAP2+: Fix build warning when mmc_omap is not built
- HID: gt683r: add missing MODULE_DEVICE_TABLE
- gfs2: Fix use-after-free in gfs2_glock_shrink_scan
- scsi: target: core: Fix warning on realtime kernels
- ethernet: myri10ge: Fix missing error code in myri10ge_probe()
- nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues()
- nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue()
fails
- nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue()
- net: ipconfig: Don't override command-line hostnames or domains
- rtnetlink: Fix missing error code in rtnl_bridge_notify()
- net/x25: Return the correct errno code
- net: Return the correct errno code
- fib: Return the correct errno code
- dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM
- dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM
- dmaengine: stedma40: add missing iounmap() on error in d40_probe()
- mm/memory-failure: make sure wait for page writeback in memory_failure
- batman-adv: Avoid WARN_ON timing related checks
- net: ipv4: fix memory leak in netlbl_cipsov4_add_std
- net: rds: fix memory leak in rds_recvmsg
- udp: fix race between close() and udp_abort()
- rtnetlink: Fix regression in bridge VLAN configuration
- netfilter: synproxy: Fix out of bounds when parsing TCP options
- alx: Fix an error handling path in 'alx_probe()'
- net: stmmac: dwmac1000: Fix extended MAC address registers definition
- qlcnic: Fix an error handling path in 'qlcnic_probe()'
- netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
- net: cdc_ncm: switch to eth%d interface naming
- net: usb: fix possible use-after-free in smsc75xx_bind
- net: ipv4: fix memory leak in ip_mc_add1_src
- net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
- be2net: Fix an error handling path in 'be_probe()'
- net: hamradio: fix memory leak in mkiss_close
- net: cdc_eem: fix tx fixup skb leak
- icmp: don't send out ICMP messages with a source address of 0.0.0.0
- net: ethernet: fix potential use-after-free in ec_bhf_remove
- radeon: use memcpy_to/fromio for UVD fw upload
- hwmon: (scpi-hwmon) shows the negative temperature properly
- can: bcm: fix infoleak in struct bcm_msg_head
- can: mcba_usb: fix memory leak in mcba_usb
- usb: core: hub: Disable autosuspend for Cypress CY7C65632
- tracing: Do not stop recording cmdlines when tracing is off
- tracing: Do not stop recording comms if the trace file is being read
- tracing: Do no increment trace_clock_global() by one
- PCI: Mark TI C667X to avoid bus reset
- PCI: Mark some NVIDIA GPUs to avoid bus reset
- PCI: Add ACS quirk for Broadcom BCM57414 NIC
- PCI: Work around Huawei Intelligent NIC VF FLR erratum
- ARCv2: save ABI registers across signal handling
- dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc
- net: bridge: fix vlan tunnel dst null pointer dereference
- net: bridge: fix vlan tunnel dst refcnt when egressing
- mm/slub.c: include swab.h
- net: fec_ptp: add clock rate zero check
- can: bcm/raw/isotp: use per module netdevice notifier
- inet: use bigger hash table for IP ID generation
- usb: dwc3: core: fix kernel panic when do reboot
- x86/fpu: Reset state for all signal restore failures
- drm/nouveau: wait for moving fence after pinning v2
- drm/radeon: wait for moving fence after pinning
- ARM: 9081/1: fix gcc-10 thumb2-kernel regression
- Makefile: Move -Wno-unused-but-set-variable out of GCC only block
- MIPS: generic: Update node names to avoid unit addresses
- Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
- mac80211: remove warning in ieee80211_get_sband()
- cfg80211: call cfg80211_leave_ocb when switching away from OCB
- mac80211: drop multicast fragments
- ping: Check return value of function 'ping_queue_rcv_skb'
- inet: annotate date races around sk->sk_txhash
- net: caif: fix memory leak in ldisc_open
- net/packet: annotate accesses to po->bind
- net/packet: annotate accesses to po->ifindex
- r8152: Avoid memcpy() over-reading of ETH_SS_STATS
- sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS
- r8169: Avoid memcpy() over-reading of ETH_SS_STATS
- net: qed: Fix memcpy() overflow of qed_dcbx_params()
- net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY
- pinctrl: stm32: fix the reported number of GPIO lines per bank
- nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
- i2c: robotfuzz-osif: fix control-request directions
- scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
- net/mlx5e: Remove dependency in IPsec initialization flows
- net: add documentation to socket.c
- net: make get_net_ns return error if NET_NS is disabled
- net: qrtr: fix OOB Read in qrtr_endpoint_post
- ptp: ptp_clock: Publish scaled_ppm_to_ppb
- ptp: improve max_adj check against unreasonable values
- net: fec_ptp: fix issue caused by refactor the fec_devtype
- ASoC: rt5659: Fix the lost powers for the HDA header
- cfg80211: make certificate generation more robust
- mm/slub: clarify verification reporting
- net: ethtool: clear heap allocations for ethtool function
- PCI: Add AMD RS690 quirk to enable 64-bit DMA
- upstream stable to v4.14.238, v4.19.196
-- Ian May <email address hidden> Fri, 20 Aug 2021 14:54:51 -0500
-
linux-aws (4.15.0-1110.117) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1110.117 -proposed tracker (LP: #1936543)
[ Ubuntu: 4.15.0-154.161 ]
* bionic/linux: 4.15.0-154.161 -proposed tracker (LP: #1938411)
* Potential reverts of 4.19.y stable changes in 18.04 (LP: #1938537)
- SAUCE: Revert "locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to
signal"
- SAUCE: Revert "drm/amd/amdgpu: fix refcount leak"
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
- [Packaging] update helper scripts
- update dkms package versions
* btrfs: Automatic balance returns -EUCLEAN and leads to forced readonly
filesystem (LP: #1934709) // CVE-2019-19036
- btrfs: Validate child tree block's level and first key
- btrfs: Detect unbalanced tree with empty leaf before crashing btree
operations
* btrfs: Automatic balance returns -EUCLEAN and leads to forced readonly
filesystem (LP: #1934709)
- Revert "btrfs: Detect unbalanced tree with empty leaf before crashing btree
operations"
- Revert "btrfs: Validate child tree block's level and first key"
- btrfs: Only check first key for committed tree blocks
- btrfs: Fix wrong first_key parameter in replace_path
* Enable fib-onlink-tests.sh and msg_zerocopy.sh in kselftests/net on Bionic
(LP: #1934759)
- selftests: Add fib-onlink-tests.sh to TEST_PROGS
- selftests: net: use TEST_PROGS_EXTENDED
- selftests/net: enable msg_zerocopy test
- SAUCE: selftests: Make fib-onlink-tests.sh executable
* Kernel oops due to uninitialized list on kernfs (kernfs_kill_sb)
(LP: #1934175)
- kernfs: deal with kernfs_fill_super() failures
- unfuck sysfs_mount()
* large_dir in ext4 broken (LP: #1933074)
- SAUCE: ext4: fix directory index node split corruption
* btrfs: Attempting to balance a nearly full filesystem with relocated root
nodes fails (LP: #1933172) // CVE-2019-19036
- btrfs: reloc: fix reloc root leak and NULL pointer dereference
* btrfs: Attempting to balance a nearly full filesystem with relocated root
nodes fails (LP: #1933172)
- Revert "btrfs: reloc: fix reloc root leak and NULL pointer dereference"
* Pixel format change broken for Elgato Cam Link 4K (LP: #1932367)
- (upstream) media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K
* Bionic update: upstream stable patchset 2021-06-23 (LP: #1933375)
- net: usb: cdc_ncm: don't spew notifications
- efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared
- efi: cper: fix snprintf() use in cper_dimm_err_location()
- vfio/pci: Fix error return code in vfio_ecap_init()
- vfio/pci: zap_vma_ptes() needs MMU
- vfio/platform: fix module_put call in error flow
- ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service
- HID: pidff: fix error return code in hid_pidff_init()
- HID: i2c-hid: fix format string mismatch
- netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches
- ieee802154: fix error return code in ieee802154_add_iface()
- ieee802154: fix error return code in ieee802154_llsec_getparams()
- Bluetooth: fix the erroneous flush_work() order
- Bluetooth: use correct lock to prevent UAF of hdev object
- net: caif: added cfserl_release function
- net: caif: add proper error handling
- net: caif: fix memory leak in caif_device_notify
- net: caif: fix memory leak in cfusbl_device_notify
- ALSA: timer: Fix master timer notification
- ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
- pid: take a reference when initializing `cad_pid`
- ocfs2: fix data corruption by fallocate
- nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
- btrfs: fix error handling in btrfs_del_csums
- btrfs: fixup error handling in fixup_inode_link_counts
- mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY
- selftests/bpf: make 'dubious pointer arithmetic' test useful
- bnxt_en: Remove the setting of dev_port.
- KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode
- sched/fair: Optimize select_idle_cpu
- xen-pciback: redo VF placement in the virtual topology
- ALSA: usb: update old-style static const declaration
- nl80211: validate key indexes for cfg80211_registered_device
- x86/apic: Mark _all_ legacy interrupts when IO/APIC is missing
- btrfs: return errors from btrfs_del_csums in cleanup_ref_head
- KVM: arm64: Fix debug register indexing
[ Ubuntu: 4.15.0-153.160 ]
* bionic/linux: 4.15.0-153.160 -proposed tracker (LP: #1938319)
* 4.15.0-151 is freezing various CPUs (LP: #1938013)
- mac80211: fix memory corruption in EAPOL handling
-- Ian May <email address hidden> Mon, 02 Aug 2021 15:37:53 -0500
-
linux-aws (4.15.0-1109.116) bionic; urgency=medium
[ Ubuntu: 4.15.0-151.157 ]
* CVE-2021-33909
- SAUCE: seq_file: Disallow extremely large seq buffer allocations
linux-aws (4.15.0-1108.115) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1108.115 -proposed tracker (LP: #1934350)
[ Ubuntu: 4.15.0-150.155 ]
* bionic/linux: 4.15.0-150.155 -proposed tracker (LP: #1934374)
* lxd exec fails (LP: #1934187)
- SAUCE: Revert "proc: Check /proc/$pid/attr/ writes against file opener"
linux-aws (4.15.0-1107.114) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1107.114 -proposed tracker (LP: #1932491)
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
- [Packaging] update helper scripts
[ Ubuntu: 4.15.0-149.153 ]
* bionic/linux: 4.15.0-149.153 -proposed tracker (LP: #1933434)
* selftests: bpf: test_verifier fixes (LP: #1933385)
- bpf: Update selftests to reflect new error states
- bpf, selftests: Adjust few selftest result_unpriv outcomes
* CVE-2021-33200
- bpf: Fix mask direction swap upon off reg sign change
[ Ubuntu: 4.15.0-148.152 ]
* bionic/linux: 4.15.0-148.152 -proposed tracker (LP: #1932515)
* Packaging resync (LP: #1786013)
- update dkms package versions
* Upstream v5.9 introduced 'module' patches that removed exported symbols
(LP: #1932065)
- SAUCE: Revert "modules: inherit TAINT_PROPRIETARY_MODULE"
- SAUCE: Revert "modules: return licensing information from find_symbol"
- SAUCE: Revert "modules: rename the licence field in struct symsearch to
license"
- SAUCE: Revert "modules: unexport __module_address"
- SAUCE: Revert "modules: unexport __module_text_address"
- SAUCE: Revert "modules: mark each_symbol_section static"
- SAUCE: Revert "modules: mark find_symbol static"
- SAUCE: Revert "modules: mark ref_module static"
* Disable hv-kvp-daemon.service on certain instance types (LP: #1932081)
- [Packaging]: Add kernel command line condition to hv-kvp-daemon service
* Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740)
- openrisc: Fix a memory leak
- RDMA/rxe: Clear all QP fields if creation failed
- scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword()
- ptrace: make ptrace() fail if the tracee changed its pid unexpectedly
- cifs: fix memory leak in smb2_copychunk_range
- ALSA: line6: Fix racy initialization of LINE6 MIDI
- ALSA: usb-audio: Validate MS endpoint descriptors
- ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro
- Revert "ALSA: sb8: add a check for request_region"
- Revert "rapidio: fix a NULL pointer dereference when create_workqueue()
fails"
- rapidio: handle create_workqueue() failure
- xen-pciback: reconfigure also from backend watch handler
- dm snapshot: fix crash with transient storage and zero chunk size
- Revert "video: hgafb: fix potential NULL pointer dereference"
- Revert "net: stmicro: fix a missing check of clk_prepare"
- Revert "leds: lp5523: fix a missing check of return value of lp55xx_read"
- Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe"
- Revert "video: imsttfb: fix potential NULL pointer dereferences"
- Revert "ecryptfs: replace BUG_ON with error handling code"
- Revert "gdrom: fix a memory leak bug"
- cdrom: gdrom: deallocate struct gdrom_unit fields in remove_gdrom
- cdrom: gdrom: initialize global variable at init time
- Revert "media: rcar_drif: fix a memory disclosure"
- Revert "rtlwifi: fix a potential NULL pointer dereference"
- Revert "qlcnic: Avoid potential NULL pointer dereference"
- Revert "niu: fix missing checks of niu_pci_eeprom_read"
- ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read()
- net: stmicro: handle clk_prepare() failure during init
- net: rtlwifi: properly check for alloc_workqueue() failure
- leds: lp5523: check return value of lp5xx_read and jump to cleanup code
- qlcnic: Add null check after calling netdev_alloc_skb
- video: hgafb: fix potential NULL pointer dereference
- vgacon: Record video mode changes with VT_RESIZEX
- vt: Fix character height handling with VT_RESIZEX
- tty: vt: always invoke vc->vc_sw->con_resize callback
- video: hgafb: correctly handle card detect failure during probe
- Bluetooth: SMP: Fail if remote and local public keys are identical
- firmware: arm_scpi: Prevent the ternary sign expansion bug
- platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
- locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal
- ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293
- Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer
dereference"
- mm, vmstat: drop zone->lock in /proc/pagetypeinfo
- usb: dwc3: gadget: Enable suspend events
- NFC: nci: fix memory leak in nci_allocate_device
- NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
- iommu/vt-d: Fix sysfs leak in alloc_iommu()
- perf intel-pt: Fix sample instruction bytes
- perf intel-pt: Fix transaction abort handling
- proc: Check /proc/$pid/attr/ writes against file opener
- net: hso: fix control-request directions
- mac80211: assure all fragments are encrypted
- mac80211: prevent mixed key and fragment cache attacks
- mac80211: properly handle A-MSDUs that start with an RFC 1042 header
- cfg80211: mitigate A-MSDU aggregation attacks
- mac80211: drop A-MSDUs on old ciphers
- mac80211: add fragment cache to sta_info
- mac80211: check defrag PN against current frame
- mac80211: prevent attacks on TKIP/WEP as well
- mac80211: do not accept/forward invalid EAPOL frames
- ath10k: Validate first subframe of A-MSDU before processing the list
- dm snapshot: properly fix a crash when an origin has no snapshots
- kgdb: fix gcc-11 warnings harder
- misc/uss720: fix memory leak in uss720_probe
- thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue
- mei: request autosuspend after sending rx flow control
- staging: iio: cdc: ad7746: avoid overwrite of num_channels
- iio: adc: ad7793: Add missing error code in ad7793_setup()
- USB: trancevibrator: fix control-request direction
- serial: sh-sci: Fix off-by-one error in FIFO threshold register setting
- serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
- USB: serial: ti_usb_3410_5052: add startech.com device id
- USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011
- USB: serial: ftdi_sio: add IDs for IDS GmbH Products
- USB: serial: pl2303: add device id for ADLINK ND-6530 GC
- usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen()
- net: usb: fix memory leak in smsc75xx_bind
- Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails
- NFS: fix an incorrect limit in filelayout_decode_layout()
- NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
- NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config
- drm/meson: fix shutdown crash when component not probed
- net/mlx4: Fix EEPROM dump support
- Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv"
- tipc: skb_linearize the head skb when reassembling msgs
- i2c: s3c2410: fix possible NULL pointer deref on read message after write
- i2c: i801: Don't generate an interrupt on bus reset
- perf jevents: Fix getting maximum number of fds
- platform/x86: hp_accel: Avoid invoking _INI to speed up resume
- serial: max310x: unregister uart driver in case of failure and abort
- net: fujitsu: fix potential null-ptr-deref
- net: caif: remove BUG_ON(dev == NULL) in caif_xmit
- char: hpet: add checks after calling ioremap
- isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io
- dmaengine: qcom_hidma: comment platform_driver_register call
- libertas: register sysfs groups properly
- media: dvb: Add check on sp8870_readreg return
- media: gspca: properly check for errors in po1030_probe()
- scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic
- openrisc: Define memory barrier mb
- btrfs: do not BUG_ON in link_to_fixup_dir
- platform/x86: hp-wireless: add AMD's hardware id to the supported list
- platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI
- SMB3: incorrect file id in requests compounded with open
- drm/amdgpu: Fix a use-after-free
- net: netcp: Fix an error message
- net: mdio: thunder: Fix a double free issue in the .remove function
- net: mdio: octeon: Fix some double free issues
- net: bnx2: Fix error return code in bnx2_init_board()
- mld: fix panic in mld_newpack()
- staging: emxx_udc: fix loop in _nbu2ss_nuke()
- ASoC: cs35l33: fix an error code in probe()
- bpf: Set mac_len in bpf_skb_change_head
- ixgbe: fix large MTU request from VF
- scsi: libsas: Use _safe() loop in sas_resume_port()
- ipv6: record frag_max_size in atomic fragments in input path
- sch_dsmark: fix a NULL deref in qdisc_reset()
- MIPS: alchemy: xxs1500: add gpio-au1000.h header file
- MIPS: ralink: export rt_sysc_membase for rt2880_wdt.c
- hugetlbfs: hugetlb_fault_mutex_hash() cleanup
- drivers/net/ethernet: clean up unused assignments
- usb: core: reduce power-on-good delay time of root hub
- USB: usbfs: Don't WARN about excessively large memory allocations
- bpf: extend is_branch_taken to registers
- bpf: Move off_reg into sanitize_ptr_alu
- bpf: Ensure off_reg has no mixed signed bounds for all types
- bpf: Rework ptr_limit into alu_limit and add common error path
- bpf: Improve verifier error messages for users
- bpf: Refactor and streamline bounds check into helper
- bpf: Move sanitize_val_alu out of op switch
- bpf: Tighten speculative pointer arithmetic mask
- bpf: Fix leakage of uninitialized bpf stack under speculation
- bpf: Wrap aux data inside bpf_sanitize_info container
- bpf: No need to simulate speculative domain for immediates
- net: dsa: fix a crash if ->get_sset_count() fails
- drm/amd/amdgpu: fix refcount leak
- net: dsa: fix error code getting shifted with 4 in dsa_slave_get_sset_count
- openvswitch: meter: fix race when getting now_ms.
- net: hns3: check the return of skb_checksum_help()
* Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) //
CVE-2020-24587 for such cases.
- mac80211: extend protection against mixed key and fragment cache attacks
* [82A1, Realtek ALC287, Speaker, Internal] Underruns, dropouts or crackling
sound (LP: #1925057) // Bionic update: upstream stable patchset 2021-06-11
(LP: #1931740)
- ALSA: hda/realtek: reset eapd coeff to default value for alc287
* test_map in ubuntu_bpf failed with "Allowed update sockmap '0:3' not in
ESTABLISHED" (LP: #1839912)
- SAUCE: Revert "bpf: test_maps, only support ESTABLISHED socks"
* Bionic update: upstream stable patchset 2021-06-01 (LP: #1930472)
- MIPS: Introduce isa-rev.h to define MIPS_ISA_REV
- MIPS: cpu-features.h: Replace __mips_isa_rev with MIPS_ISA_REV
- s390/disassembler: increase ebpf disasm buffer size
- ACPI: custom_method: fix potential use-after-free issue
- ACPI: custom_method: fix a possible memory leak
- arm64: dts: mt8173: fix property typo of 'phys' in dsi node
- ecryptfs: fix kernel panic with null dev_name
- spi: spi-ti-qspi: Free DMA resources
- mmc: block: Update ext_csd.cache_ctrl if it was written
- mmc: core: Do a power cycle when the CMD11 fails
- mmc: core: Set read only for SD cards with permanent write protect bit
- cifs: Return correct error code from smb2_get_enc_key
- btrfs: fix metadata extent leak after failure to create subvolume
- intel_th: pci: Add Rocket Lake CPU support
- fbdev: zero-fill colormap in fbcmap.c
- staging: wimax/i2400m: fix byte-order issue
- crypto: api - check for ERR pointers in crypto_destroy_tfm()
- usb: gadget: uvc: add bInterval checking for HS mode
- usb: gadget: f_uac1: validate input parameters
- usb: dwc3: gadget: Ignore EP queue requests during bus reset
- usb: xhci: Fix port minor revision
- PCI: PM: Do not read power state in pci_enable_device_flags()
- x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS)
- tee: optee: do not check memref size on return from Secure World
- perf/arm_pmu_platform: Fix error handling
- spi: dln2: Fix reference leak to master
- spi: omap-100k: Fix reference leak to master
- intel_th: Consistency and off-by-one fix
- phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
- btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
- scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
- scsi: lpfc: Fix pt2pt connection does not recover after LOGO
- scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
- media: ite-cir: check for receive overflow
- power: supply: bq27xxx: fix power_avg for newer ICs
- extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has
been unplugged
- media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
- media: gspca/sq905.c: fix uninitialized variable
- power: supply: Use IRQF_ONESHOT
- drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f
- scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
- scsi: qla2xxx: Fix use after free in bsg
- scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
- media: em28xx: fix memory leak
- media: vivid: update EDID
- clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
- power: supply: generic-adc-battery: fix possible use-after-free in
gab_remove()
- power: supply: s3c_adc_battery: fix possible use-after-free in
s3c_adc_bat_remove()
- media: adv7604: fix possible use-after-free in adv76xx_remove()
- media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove()
- media: i2c: adv7842: fix possible use-after-free in adv7842_remove()
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init
- media: gscpa/stv06xx: fix memory leak
- drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
- drm/amdgpu: fix NULL pointer dereference
- scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO
response
- scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic
- scsi: libfc: Fix a format specifier
- ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
- ALSA: hda/conexant: Re-order CX5066 quirk table entries
- ALSA: sb: Fix two use after free in snd_sb_qsound_build
- btrfs: fix race when picking most recent mod log operation for an old root
- arm64/vdso: Discard .note.gnu.property sections in vDSO
- openvswitch: fix stack OOB read while fragmenting IPv4 packets
- ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
- NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
- jffs2: Fix kasan slab-out-of-bounds problem
- powerpc/eeh: Fix EEH handling for hugepages in ioremap space.
- powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h
- intel_th: pci: Add Alder Lake-M support
- md/raid1: properly indicate failure when ending a failed write request
- security: commoncap: fix -Wstringop-overread warning
- Fix misc new gcc warnings
- jffs2: check the validity of dstlen in jffs2_zlib_compress()
- Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op")
- posix-timers: Preserve return value in clock_adjtime32()
- ftrace: Handle commands when closing set_ftrace_filter file
- ext4: fix check to prevent false positive report of incorrect used inodes
- ext4: fix error code in ext4_commit_super
- media: dvbdev: Fix memory leak in dvb_media_device_free()
- usb: gadget: dummy_hcd: fix gpf in gadget_setup
- usb: gadget: Fix double free of device descriptor pointers
- usb: gadget/function/f_fs string table fix for multiple languages
- usb: dwc3: gadget: Fix START_TRANSFER link state check
- tracing: Map all PIDs to command lines
- dm persistent data: packed struct should have an aligned() attribute too
- dm space map common: fix division bug in sm_ll_find_free_block()
- dm rq: fix double free of blk_mq_tag_set in dev remove after table load
fails
- modules: mark ref_module static
- modules: mark find_symbol static
- modules: mark each_symbol_section static
- modules: unexport __module_text_address
- modules: unexport __module_address
- modules: rename the licence field in struct symsearch to license
- modules: return licensing information from find_symbol
- modules: inherit TAINT_PROPRIETARY_MODULE
- Bluetooth: verify AMP hci_chan before amp_destroy
- hsr: use netdev_err() instead of WARN_ONCE()
- bluetooth: eliminate the potential race condition when removing the HCI
controller
- net/nfc: fix use-after-free llcp_sock_bind/connect
- MIPS: pci-rt2880: fix slot 0 configuration
- FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
- misc: lis3lv02d: Fix false-positive WARN on various HP models
- misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct
- misc: vmw_vmci: explicitly initialize vmci_datagram payload
- tracing: Restructure trace_clock_global() to never block
- md-cluster: fix use-after-free issue when removing rdev
- md: split mddev_find
- md: factor out a mddev_find_locked helper from mddev_find
- md: md_open returns -EBUSY when entering racing area
- ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
- cfg80211: scan: drop entry from hidden_list on overflow
- drm/radeon: fix copy of uninitialized variable back to userspace
- ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
- ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
- ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
- ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
- ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices
- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
- KVM: s390: split kvm_s390_logical_to_effective
- KVM: s390: fix guarded storage control register handling
- KVM: s390: split kvm_s390_real_to_abs
- usb: gadget: pch_udc: Revert d3cb25a12138 completely
- memory: gpmc: fix out of bounds read and dereference on gpmc_cs[]
- ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family
- ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250
- ARM: dts: exynos: correct PMIC interrupt trigger level on Snow
- serial: stm32: fix incorrect characters on console
- serial: stm32: fix tx_empty condition
- usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS
- x86/microcode: Check for offline CPUs before requesting new microcode
- usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits()
- usb: gadget: pch_udc: Check if driver is present before calling ->setup()
- usb: gadget: pch_udc: Check for DMA mapping error
- crypto: qat - don't release uninitialized resources
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
- fotg210-udc: Fix DMA on EP0 for length > max packet size
- fotg210-udc: Fix EP0 IN requests bigger than two packets
- fotg210-udc: Remove a dubious condition leading to fotg210_done
- fotg210-udc: Mask GRP2 interrupts we don't handle
- fotg210-udc: Don't DMA more than the buffer can take
- fotg210-udc: Complete OUT requests on short packets
- mtd: require write permissions for locking and badblock ioctls
- bus: qcom: Put child node before return
- phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y,
unconditionally
- crypto: qat - fix error path in adf_isr_resource_alloc()
- USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR()
- mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init
- staging: rtl8192u: Fix potential infinite loop
- staging: greybus: uart: fix unprivileged TIOCCSERIAL
- spi: Fix use-after-free with devm_spi_alloc_*
- soc: qcom: mdt_loader: Validate that p_filesz < p_memsz
- soc: qcom: mdt_loader: Detect truncated read of segments
- ACPI: CPPC: Replace cppc_attr with kobj_attribute
- crypto: qat - Fix a double free in adf_create_ring
- usb: gadget: r8a66597: Add missing null check on return from
platform_get_resource
- USB: cdc-acm: fix unprivileged TIOCCSERIAL
- tty: fix return value for unsupported ioctls
- firmware: qcom-scm: Fix QCOM_SCM configuration
- platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with
critclk_systems DMI table
- x86/platform/uv: Fix !KEXEC build failure
- ttyprintk: Add TTY hangup callback.
- media: vivid: fix assignment of dev->fbuf_out_flags
- media: omap4iss: return error code when omap4iss_get() failed
- media: m88rs6000t: avoid potential out-of-bounds reads on arrays
- x86/kprobes: Fix to check non boostable prefixes correctly
- pata_arasan_cf: fix IRQ check
- pata_ipx4xx_cf: fix IRQ check
- sata_mv: add IRQ checks
- ata: libahci_platform: fix IRQ check
- vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer
- clk: uniphier: Fix potential infinite loop
- scsi: jazz_esp: Add IRQ check
- scsi: sun3x_esp: Add IRQ check
- scsi: sni_53c710: Add IRQ check
- mfd: stm32-timers: Avoid clearing auto reload register
- HSI: core: fix resource leaks in hsi_add_client_from_dt()
- x86/events/amd/iommu: Fix sysfs type mismatch
- HID: plantronics: Workaround for double volume key presses
- perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of
printed chars
- net: lapbether: Prevent racing when checking whether the netif is running
- powerpc/prom: Mark identical_pvr_fixup as __init
- powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration
- ALSA: core: remove redundant spin_lock pair in snd_card_disconnect
- bug: Remove redundant condition check in report_bug
- nfc: pn533: prevent potential memory corruption
- ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls
- liquidio: Fix unintented sign extension of a left shift of a u16
- powerpc/perf: Fix PMU constraint check for EBB events
- powerpc: iommu: fix build when neither PCI or IBMVIO is set
- mac80211: bail out if cipher schemes are invalid
- mt7601u: fix always true expression
- IB/hfi1: Fix error return code in parse_platform_config()
- net: thunderx: Fix unintentional sign extension issue
- i2c: cadence: add IRQ check
- i2c: emev2: add IRQ check
- i2c: jz4780: add IRQ check
- i2c: sh7760: add IRQ check
- MIPS: pci-legacy: stop using of_pci_range_to_resource
- powerpc/pseries: extract host bridge from pci_bus prior to bus removal
- rtlwifi: 8821ae: upgrade PHY and RF parameters
- i2c: sh7760: fix IRQ error path
- mwl8k: Fix a double Free in mwl8k_probe_hw
- vsock/vmci: log once the failed queue pair allocation
- RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails
- net: davinci_emac: Fix incorrect masking of tx and rx error channel
- ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices
- powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add')
- net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
- net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
- kfifo: fix ternary sign extension bugs
- smp: Fix smp_call_function_single_async prototype
- Revert "of/fdt: Make sure no-map does not remove already reserved regions"
- Revert "fdt: Properly handle "no-map" field in the memory region"
- tpm: fix error return code in tpm2_get_cc_attrs_tbl()
- fs: dlm: fix debugfs dump
- tipc: convert dest node's address to network order
- net: stmmac: Set FIFO sizes for ipq806x
- ALSA: hdsp: don't disable if not enabled
- ALSA: hdspm: don't disable if not enabled
- ALSA: rme9652: don't disable if not enabled
- Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
- Bluetooth: initialize skb_queue_head at l2cap_chan_create()
- Bluetooth: check for zapped sk before connecting
- ip6_vti: proper dev_{hold|put} in ndo_[un]init methods
- mac80211: clear the beacon's CRC after channel switch
- pinctrl: samsung: use 'int' for register masks in Exynos
- cuse: prevent clone
- selftests: Set CC to clang in lib.mk if LLVM is set
- kconfig: nconf: stop endless search loops
- sctp: Fix out-of-bounds warning in sctp_process_asconf_param()
- powerpc/smp: Set numa node before updating mask
- ASoC: rt286: Generalize support for ALC3263 codec
- samples/bpf: Fix broken tracex1 due to kprobe argument change
- powerpc/pseries: Stop calling printk in rtas_stop_self()
- wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt
- wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join
- powerpc/iommu: Annotate nested lock for lockdep
- net: ethernet: mtk_eth_soc: fix RX VLAN offload
- ASoC: rt286: Make RT286_SET_GPIO_* readable and writable
- f2fs: fix a redundant call to f2fs_balance_fs if an error occurs
- PCI: Release OF node in pci_scan_device()'s error path
- ARM: 9064/1: hw_breakpoint: Do not directly check the event's
overflow_handler hook
- rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data()
- NFSv4.2: Always flush out writes in nfs42_proc_fallocate()
- NFS: Deal correctly with attribute generation counter overflow
- pNFS/flexfiles: fix incorrect size check in decode_nfs_fh()
- NFSv4.2 fix handling of sr_eof in SEEK's reply
- rtc: ds1307: Fix wday settings for rx8130
- sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b
- drm/radeon: Fix off-by-one power_state index heap overwrite
- khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate()
- mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts()
- ksm: fix potential missing rmap_item for stable_node
- net: fix nla_strcmp to handle more then one trailing null character
- kernel: kexec_file: fix error return code of kexec_calculate_store_digests()
- netfilter: nftables: avoid overflows in nft_hash_buckets()
- ARC: entry: fix off-by-one error in syscall number validation
- powerpc/64s: Fix crashes when toggling stf barrier
- powerpc/64s: Fix crashes when toggling entry flush barrier
- squashfs: fix divide error in calculate_skip()
- userfaultfd: release page in error path to avoid BUG_ON
- drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors
are connected
- iio: proximity: pulsedlight: Fix rumtime PM imbalance on error
- usb: fotg210-hcd: Fix an error message
- ACPI: scan: Fix a memory leak in an error handling path
- blk-mq: Swap two calls in blk_mq_exit_queue()
- usb: dwc3: omap: improve extcon initialization
- usb: xhci: Increase timeout for HC halt
- usb: dwc2: Fix gadget DMA unmap direction
- usb: core: hub: fix race condition about TRSMRCY of resume
- iio: gyro: mpu3050: Fix reported temperature value
- iio: tsl2583: Fix division by a zero lux_val
- KVM: x86: Cancel pvclock_gtod_work on module removal
- FDDI: defxx: Make MMIO the configuration default except for EISA
- MIPS: Reinstate platform `__div64_32' handler
- MIPS: Avoid DIVU in `__div64_32' is result would be zero
- MIPS: Avoid handcoded DIVU in `__div64_32' altogether
- thermal/core/fair share: Lock the thermal zone while looping over instances
- RDMA/i40iw: Avoid panic when reading back the IRQ affinity hint
- kobject_uevent: remove warning in init_uevent_argv()
- netfilter: conntrack: Make global sysctls readonly in non-init netns
- clk: exynos7: Mark aclk_fsys1_200 as critical
- x86/msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes
- kgdb: fix gcc-11 warning on indentation
- usb: sl811-hcd: improve misleading indentation
- cxgb4: Fix the -Wmisleading-indentation warning
- isdn: capi: fix mismatched prototypes
- PCI: thunder: Fix compile testing
- ARM: 9066/1: ftrace: pause/unpause function graph tracer in cpu_suspend()
- ACPI / hotplug / PCI: Fix reference count leak in enable_slot()
- Input: elants_i2c - do not bind to i2c-hid compatible ACPI instantiated
devices
- Input: silead - add workaround for x86 BIOS-es which bring the chip up in a
stuck state
- um: Mark all kernel symbols as local
- ceph: fix fscache invalidation
- gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055
- ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP
- block: reexpand iov_iter after read/write
- lib: stackdepot: turn depot_lock spinlock to raw_spinlock
- sit: proper dev_{hold|put} in ndo_[un]init methods
- ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods
- xhci: Do not use GFP_KERNEL in (potentially) atomic context
- ipv6: remove extra dev_hold() for fallback tunnels
- ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lld
- arm64: dts: marvell: armada-37xx: add syscon compatible to NB clk node
- mtd: rawnand: atmel: Update ecc_stats.corrected counter
- mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based
controllers
- genirq/matrix: Prevent allocation counter corruption
- usb: xhci-mtk: support quirk to disable usb2 lpm
- media: drivers: media: pci: sta2x11: fix Kconfig dependency on GPIOLIB
- media: tc358743: fix possible use-after-free in tc358743_remove()
- amdgpu: avoid incorrect %hu format string
- s390/archrandom: add parameter check for s390_arch_random_generate
- ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset
PC 8
- ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx
- ubifs: Only check replay with inode type to judge if inode linked
- mlxsw: spectrum_mr: Update egress RIF list before route's action
- NFS: Don't discard pNFS layout segments that are marked for return
- tpm: vtpm_proxy: Avoid reading host log when using a virtual device
- dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload
sequences
- arm64: vdso: remove commas between macro name and arguments
- ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()
- tty: fix memory leak in vc_deallocate
- rsi: Use resume_noirq for SDIO
- MIPS: pci-mt7620: fix PLL lock check
- md: Fix missing unused status line of /proc/mdstat
- ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
- ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
- ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
- ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas family
- ARM: dts: exynos: correct MUIC interrupt trigger level on Midas family
- ARM: dts: exynos: correct PMIC interrupt trigger level on Midas family
- regmap: set debugfs_name to NULL after it is freed
- mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe()
- mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC
- mtd: rawnand: qcom: Return actual error code instead of -ENODEV
- usbip: vudc: fix missing unlock on error in usbip_sockfd_store()
- clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE
- scsi: ibmvfc: Fix invalid state machine BUG_ON()
- sched/debug: Fix cgroup_path[] serialization
- net: hns3: Limiting the scope of vector_ring_chain variable
- ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails
- net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb
- RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res
- net: Only allow init netns to set default tcp cong to a restricted algo
- i2c: bail out early when RDWR parameters are wrong
- net: bridge: when suppression is enabled exclude RARP packets
- i2c: Add I2C_AQ_NO_REP_START adapter quirk
- ethtool: ioctl: Fix out-of-bounds warning in store_link_ksettings_for_user()
- PCI: iproc: Fix return value of iproc_msi_irq_domain_alloc()
- PCI: endpoint: Fix missing destroy_workqueue()
- net: hns3: disable phy loopback setting in hclge_mac_start_phy
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a
- ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
- netfilter: xt_SECMARK: add new revision to fix structure layout
- drm/radeon: Avoid power table parsing memory leaks
- sched/fair: Fix unfairness caused by missing load decay
- xhci: Add reset resume quirk for AMD xhci controller.
- cdc-wdm: untangle a circular dependency between callback and softint
- nvme: do not try to reconfigure APST when the controller is not live
- pinctrl: ingenic: Improve unreachable code generation
- ARM: 9075/1: kernel: Fix interrupted SMC calls
- scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not
found
- tweewide: Fix most Shebang lines
- scripts: switch explicitly to Python 3
-- Kleber Sacilotto de Souza <email address hidden> Wed, 14 Jul 2021 14:42:40 +0200
-
linux-aws (4.15.0-1108.115) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1108.115 -proposed tracker (LP: #1934350)
[ Ubuntu: 4.15.0-150.155 ]
* bionic/linux: 4.15.0-150.155 -proposed tracker (LP: #1934374)
* lxd exec fails (LP: #1934187)
- SAUCE: Revert "proc: Check /proc/$pid/attr/ writes against file opener"
linux-aws (4.15.0-1107.114) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1107.114 -proposed tracker (LP: #1932491)
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
- [Packaging] update helper scripts
[ Ubuntu: 4.15.0-149.153 ]
* bionic/linux: 4.15.0-149.153 -proposed tracker (LP: #1933434)
* selftests: bpf: test_verifier fixes (LP: #1933385)
- bpf: Update selftests to reflect new error states
- bpf, selftests: Adjust few selftest result_unpriv outcomes
* CVE-2021-33200
- bpf: Fix mask direction swap upon off reg sign change
[ Ubuntu: 4.15.0-148.152 ]
* bionic/linux: 4.15.0-148.152 -proposed tracker (LP: #1932515)
* Packaging resync (LP: #1786013)
- update dkms package versions
* Upstream v5.9 introduced 'module' patches that removed exported symbols
(LP: #1932065)
- SAUCE: Revert "modules: inherit TAINT_PROPRIETARY_MODULE"
- SAUCE: Revert "modules: return licensing information from find_symbol"
- SAUCE: Revert "modules: rename the licence field in struct symsearch to
license"
- SAUCE: Revert "modules: unexport __module_address"
- SAUCE: Revert "modules: unexport __module_text_address"
- SAUCE: Revert "modules: mark each_symbol_section static"
- SAUCE: Revert "modules: mark find_symbol static"
- SAUCE: Revert "modules: mark ref_module static"
* Disable hv-kvp-daemon.service on certain instance types (LP: #1932081)
- [Packaging]: Add kernel command line condition to hv-kvp-daemon service
* Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740)
- openrisc: Fix a memory leak
- RDMA/rxe: Clear all QP fields if creation failed
- scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword()
- ptrace: make ptrace() fail if the tracee changed its pid unexpectedly
- cifs: fix memory leak in smb2_copychunk_range
- ALSA: line6: Fix racy initialization of LINE6 MIDI
- ALSA: usb-audio: Validate MS endpoint descriptors
- ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro
- Revert "ALSA: sb8: add a check for request_region"
- Revert "rapidio: fix a NULL pointer dereference when create_workqueue()
fails"
- rapidio: handle create_workqueue() failure
- xen-pciback: reconfigure also from backend watch handler
- dm snapshot: fix crash with transient storage and zero chunk size
- Revert "video: hgafb: fix potential NULL pointer dereference"
- Revert "net: stmicro: fix a missing check of clk_prepare"
- Revert "leds: lp5523: fix a missing check of return value of lp55xx_read"
- Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe"
- Revert "video: imsttfb: fix potential NULL pointer dereferences"
- Revert "ecryptfs: replace BUG_ON with error handling code"
- Revert "gdrom: fix a memory leak bug"
- cdrom: gdrom: deallocate struct gdrom_unit fields in remove_gdrom
- cdrom: gdrom: initialize global variable at init time
- Revert "media: rcar_drif: fix a memory disclosure"
- Revert "rtlwifi: fix a potential NULL pointer dereference"
- Revert "qlcnic: Avoid potential NULL pointer dereference"
- Revert "niu: fix missing checks of niu_pci_eeprom_read"
- ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read()
- net: stmicro: handle clk_prepare() failure during init
- net: rtlwifi: properly check for alloc_workqueue() failure
- leds: lp5523: check return value of lp5xx_read and jump to cleanup code
- qlcnic: Add null check after calling netdev_alloc_skb
- video: hgafb: fix potential NULL pointer dereference
- vgacon: Record video mode changes with VT_RESIZEX
- vt: Fix character height handling with VT_RESIZEX
- tty: vt: always invoke vc->vc_sw->con_resize callback
- video: hgafb: correctly handle card detect failure during probe
- Bluetooth: SMP: Fail if remote and local public keys are identical
- firmware: arm_scpi: Prevent the ternary sign expansion bug
- platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
- locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal
- ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293
- Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer
dereference"
- mm, vmstat: drop zone->lock in /proc/pagetypeinfo
- usb: dwc3: gadget: Enable suspend events
- NFC: nci: fix memory leak in nci_allocate_device
- NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
- iommu/vt-d: Fix sysfs leak in alloc_iommu()
- perf intel-pt: Fix sample instruction bytes
- perf intel-pt: Fix transaction abort handling
- proc: Check /proc/$pid/attr/ writes against file opener
- net: hso: fix control-request directions
- mac80211: assure all fragments are encrypted
- mac80211: prevent mixed key and fragment cache attacks
- mac80211: properly handle A-MSDUs that start with an RFC 1042 header
- cfg80211: mitigate A-MSDU aggregation attacks
- mac80211: drop A-MSDUs on old ciphers
- mac80211: add fragment cache to sta_info
- mac80211: check defrag PN against current frame
- mac80211: prevent attacks on TKIP/WEP as well
- mac80211: do not accept/forward invalid EAPOL frames
- ath10k: Validate first subframe of A-MSDU before processing the list
- dm snapshot: properly fix a crash when an origin has no snapshots
- kgdb: fix gcc-11 warnings harder
- misc/uss720: fix memory leak in uss720_probe
- thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue
- mei: request autosuspend after sending rx flow control
- staging: iio: cdc: ad7746: avoid overwrite of num_channels
- iio: adc: ad7793: Add missing error code in ad7793_setup()
- USB: trancevibrator: fix control-request direction
- serial: sh-sci: Fix off-by-one error in FIFO threshold register setting
- serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
- USB: serial: ti_usb_3410_5052: add startech.com device id
- USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011
- USB: serial: ftdi_sio: add IDs for IDS GmbH Products
- USB: serial: pl2303: add device id for ADLINK ND-6530 GC
- usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen()
- net: usb: fix memory leak in smsc75xx_bind
- Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails
- NFS: fix an incorrect limit in filelayout_decode_layout()
- NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
- NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config
- drm/meson: fix shutdown crash when component not probed
- net/mlx4: Fix EEPROM dump support
- Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv"
- tipc: skb_linearize the head skb when reassembling msgs
- i2c: s3c2410: fix possible NULL pointer deref on read message after write
- i2c: i801: Don't generate an interrupt on bus reset
- perf jevents: Fix getting maximum number of fds
- platform/x86: hp_accel: Avoid invoking _INI to speed up resume
- serial: max310x: unregister uart driver in case of failure and abort
- net: fujitsu: fix potential null-ptr-deref
- net: caif: remove BUG_ON(dev == NULL) in caif_xmit
- char: hpet: add checks after calling ioremap
- isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io
- dmaengine: qcom_hidma: comment platform_driver_register call
- libertas: register sysfs groups properly
- media: dvb: Add check on sp8870_readreg return
- media: gspca: properly check for errors in po1030_probe()
- scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic
- openrisc: Define memory barrier mb
- btrfs: do not BUG_ON in link_to_fixup_dir
- platform/x86: hp-wireless: add AMD's hardware id to the supported list
- platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI
- SMB3: incorrect file id in requests compounded with open
- drm/amdgpu: Fix a use-after-free
- net: netcp: Fix an error message
- net: mdio: thunder: Fix a double free issue in the .remove function
- net: mdio: octeon: Fix some double free issues
- net: bnx2: Fix error return code in bnx2_init_board()
- mld: fix panic in mld_newpack()
- staging: emxx_udc: fix loop in _nbu2ss_nuke()
- ASoC: cs35l33: fix an error code in probe()
- bpf: Set mac_len in bpf_skb_change_head
- ixgbe: fix large MTU request from VF
- scsi: libsas: Use _safe() loop in sas_resume_port()
- ipv6: record frag_max_size in atomic fragments in input path
- sch_dsmark: fix a NULL deref in qdisc_reset()
- MIPS: alchemy: xxs1500: add gpio-au1000.h header file
- MIPS: ralink: export rt_sysc_membase for rt2880_wdt.c
- hugetlbfs: hugetlb_fault_mutex_hash() cleanup
- drivers/net/ethernet: clean up unused assignments
- usb: core: reduce power-on-good delay time of root hub
- USB: usbfs: Don't WARN about excessively large memory allocations
- bpf: extend is_branch_taken to registers
- bpf: Move off_reg into sanitize_ptr_alu
- bpf: Ensure off_reg has no mixed signed bounds for all types
- bpf: Rework ptr_limit into alu_limit and add common error path
- bpf: Improve verifier error messages for users
- bpf: Refactor and streamline bounds check into helper
- bpf: Move sanitize_val_alu out of op switch
- bpf: Tighten speculative pointer arithmetic mask
- bpf: Fix leakage of uninitialized bpf stack under speculation
- bpf: Wrap aux data inside bpf_sanitize_info container
- bpf: No need to simulate speculative domain for immediates
- net: dsa: fix a crash if ->get_sset_count() fails
- drm/amd/amdgpu: fix refcount leak
- net: dsa: fix error code getting shifted with 4 in dsa_slave_get_sset_count
- openvswitch: meter: fix race when getting now_ms.
- net: hns3: check the return of skb_checksum_help()
* Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) //
CVE-2020-24587 for such cases.
- mac80211: extend protection against mixed key and fragment cache attacks
* [82A1, Realtek ALC287, Speaker, Internal] Underruns, dropouts or crackling
sound (LP: #1925057) // Bionic update: upstream stable patchset 2021-06-11
(LP: #1931740)
- ALSA: hda/realtek: reset eapd coeff to default value for alc287
* test_map in ubuntu_bpf failed with "Allowed update sockmap '0:3' not in
ESTABLISHED" (LP: #1839912)
- SAUCE: Revert "bpf: test_maps, only support ESTABLISHED socks"
* Bionic update: upstream stable patchset 2021-06-01 (LP: #1930472)
- MIPS: Introduce isa-rev.h to define MIPS_ISA_REV
- MIPS: cpu-features.h: Replace __mips_isa_rev with MIPS_ISA_REV
- s390/disassembler: increase ebpf disasm buffer size
- ACPI: custom_method: fix potential use-after-free issue
- ACPI: custom_method: fix a possible memory leak
- arm64: dts: mt8173: fix property typo of 'phys' in dsi node
- ecryptfs: fix kernel panic with null dev_name
- spi: spi-ti-qspi: Free DMA resources
- mmc: block: Update ext_csd.cache_ctrl if it was written
- mmc: core: Do a power cycle when the CMD11 fails
- mmc: core: Set read only for SD cards with permanent write protect bit
- cifs: Return correct error code from smb2_get_enc_key
- btrfs: fix metadata extent leak after failure to create subvolume
- intel_th: pci: Add Rocket Lake CPU support
- fbdev: zero-fill colormap in fbcmap.c
- staging: wimax/i2400m: fix byte-order issue
- crypto: api - check for ERR pointers in crypto_destroy_tfm()
- usb: gadget: uvc: add bInterval checking for HS mode
- usb: gadget: f_uac1: validate input parameters
- usb: dwc3: gadget: Ignore EP queue requests during bus reset
- usb: xhci: Fix port minor revision
- PCI: PM: Do not read power state in pci_enable_device_flags()
- x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS)
- tee: optee: do not check memref size on return from Secure World
- perf/arm_pmu_platform: Fix error handling
- spi: dln2: Fix reference leak to master
- spi: omap-100k: Fix reference leak to master
- intel_th: Consistency and off-by-one fix
- phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
- btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
- scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
- scsi: lpfc: Fix pt2pt connection does not recover after LOGO
- scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
- media: ite-cir: check for receive overflow
- power: supply: bq27xxx: fix power_avg for newer ICs
- extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has
been unplugged
- media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
- media: gspca/sq905.c: fix uninitialized variable
- power: supply: Use IRQF_ONESHOT
- drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f
- scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
- scsi: qla2xxx: Fix use after free in bsg
- scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
- media: em28xx: fix memory leak
- media: vivid: update EDID
- clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
- power: supply: generic-adc-battery: fix possible use-after-free in
gab_remove()
- power: supply: s3c_adc_battery: fix possible use-after-free in
s3c_adc_bat_remove()
- media: adv7604: fix possible use-after-free in adv76xx_remove()
- media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove()
- media: i2c: adv7842: fix possible use-after-free in adv7842_remove()
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init
- media: gscpa/stv06xx: fix memory leak
- drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
- drm/amdgpu: fix NULL pointer dereference
- scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO
response
- scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic
- scsi: libfc: Fix a format specifier
- ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
- ALSA: hda/conexant: Re-order CX5066 quirk table entries
- ALSA: sb: Fix two use after free in snd_sb_qsound_build
- btrfs: fix race when picking most recent mod log operation for an old root
- arm64/vdso: Discard .note.gnu.property sections in vDSO
- openvswitch: fix stack OOB read while fragmenting IPv4 packets
- ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
- NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
- jffs2: Fix kasan slab-out-of-bounds problem
- powerpc/eeh: Fix EEH handling for hugepages in ioremap space.
- powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h
- intel_th: pci: Add Alder Lake-M support
- md/raid1: properly indicate failure when ending a failed write request
- security: commoncap: fix -Wstringop-overread warning
- Fix misc new gcc warnings
- jffs2: check the validity of dstlen in jffs2_zlib_compress()
- Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op")
- posix-timers: Preserve return value in clock_adjtime32()
- ftrace: Handle commands when closing set_ftrace_filter file
- ext4: fix check to prevent false positive report of incorrect used inodes
- ext4: fix error code in ext4_commit_super
- media: dvbdev: Fix memory leak in dvb_media_device_free()
- usb: gadget: dummy_hcd: fix gpf in gadget_setup
- usb: gadget: Fix double free of device descriptor pointers
- usb: gadget/function/f_fs string table fix for multiple languages
- usb: dwc3: gadget: Fix START_TRANSFER link state check
- tracing: Map all PIDs to command lines
- dm persistent data: packed struct should have an aligned() attribute too
- dm space map common: fix division bug in sm_ll_find_free_block()
- dm rq: fix double free of blk_mq_tag_set in dev remove after table load
fails
- modules: mark ref_module static
- modules: mark find_symbol static
- modules: mark each_symbol_section static
- modules: unexport __module_text_address
- modules: unexport __module_address
- modules: rename the licence field in struct symsearch to license
- modules: return licensing information from find_symbol
- modules: inherit TAINT_PROPRIETARY_MODULE
- Bluetooth: verify AMP hci_chan before amp_destroy
- hsr: use netdev_err() instead of WARN_ONCE()
- bluetooth: eliminate the potential race condition when removing the HCI
controller
- net/nfc: fix use-after-free llcp_sock_bind/connect
- MIPS: pci-rt2880: fix slot 0 configuration
- FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
- misc: lis3lv02d: Fix false-positive WARN on various HP models
- misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct
- misc: vmw_vmci: explicitly initialize vmci_datagram payload
- tracing: Restructure trace_clock_global() to never block
- md-cluster: fix use-after-free issue when removing rdev
- md: split mddev_find
- md: factor out a mddev_find_locked helper from mddev_find
- md: md_open returns -EBUSY when entering racing area
- ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
- cfg80211: scan: drop entry from hidden_list on overflow
- drm/radeon: fix copy of uninitialized variable back to userspace
- ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
- ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
- ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
- ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
- ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices
- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
- KVM: s390: split kvm_s390_logical_to_effective
- KVM: s390: fix guarded storage control register handling
- KVM: s390: split kvm_s390_real_to_abs
- usb: gadget: pch_udc: Revert d3cb25a12138 completely
- memory: gpmc: fix out of bounds read and dereference on gpmc_cs[]
- ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family
- ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250
- ARM: dts: exynos: correct PMIC interrupt trigger level on Snow
- serial: stm32: fix incorrect characters on console
- serial: stm32: fix tx_empty condition
- usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS
- x86/microcode: Check for offline CPUs before requesting new microcode
- usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits()
- usb: gadget: pch_udc: Check if driver is present before calling ->setup()
- usb: gadget: pch_udc: Check for DMA mapping error
- crypto: qat - don't release uninitialized resources
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
- fotg210-udc: Fix DMA on EP0 for length > max packet size
- fotg210-udc: Fix EP0 IN requests bigger than two packets
- fotg210-udc: Remove a dubious condition leading to fotg210_done
- fotg210-udc: Mask GRP2 interrupts we don't handle
- fotg210-udc: Don't DMA more than the buffer can take
- fotg210-udc: Complete OUT requests on short packets
- mtd: require write permissions for locking and badblock ioctls
- bus: qcom: Put child node before return
- phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y,
unconditionally
- crypto: qat - fix error path in adf_isr_resource_alloc()
- USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR()
- mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init
- staging: rtl8192u: Fix potential infinite loop
- staging: greybus: uart: fix unprivileged TIOCCSERIAL
- spi: Fix use-after-free with devm_spi_alloc_*
- soc: qcom: mdt_loader: Validate that p_filesz < p_memsz
- soc: qcom: mdt_loader: Detect truncated read of segments
- ACPI: CPPC: Replace cppc_attr with kobj_attribute
- crypto: qat - Fix a double free in adf_create_ring
- usb: gadget: r8a66597: Add missing null check on return from
platform_get_resource
- USB: cdc-acm: fix unprivileged TIOCCSERIAL
- tty: fix return value for unsupported ioctls
- firmware: qcom-scm: Fix QCOM_SCM configuration
- platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with
critclk_systems DMI table
- x86/platform/uv: Fix !KEXEC build failure
- ttyprintk: Add TTY hangup callback.
- media: vivid: fix assignment of dev->fbuf_out_flags
- media: omap4iss: return error code when omap4iss_get() failed
- media: m88rs6000t: avoid potential out-of-bounds reads on arrays
- x86/kprobes: Fix to check non boostable prefixes correctly
- pata_arasan_cf: fix IRQ check
- pata_ipx4xx_cf: fix IRQ check
- sata_mv: add IRQ checks
- ata: libahci_platform: fix IRQ check
- vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer
- clk: uniphier: Fix potential infinite loop
- scsi: jazz_esp: Add IRQ check
- scsi: sun3x_esp: Add IRQ check
- scsi: sni_53c710: Add IRQ check
- mfd: stm32-timers: Avoid clearing auto reload register
- HSI: core: fix resource leaks in hsi_add_client_from_dt()
- x86/events/amd/iommu: Fix sysfs type mismatch
- HID: plantronics: Workaround for double volume key presses
- perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of
printed chars
- net: lapbether: Prevent racing when checking whether the netif is running
- powerpc/prom: Mark identical_pvr_fixup as __init
- powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration
- ALSA: core: remove redundant spin_lock pair in snd_card_disconnect
- bug: Remove redundant condition check in report_bug
- nfc: pn533: prevent potential memory corruption
- ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls
- liquidio: Fix unintented sign extension of a left shift of a u16
- powerpc/perf: Fix PMU constraint check for EBB events
- powerpc: iommu: fix build when neither PCI or IBMVIO is set
- mac80211: bail out if cipher schemes are invalid
- mt7601u: fix always true expression
- IB/hfi1: Fix error return code in parse_platform_config()
- net: thunderx: Fix unintentional sign extension issue
- i2c: cadence: add IRQ check
- i2c: emev2: add IRQ check
- i2c: jz4780: add IRQ check
- i2c: sh7760: add IRQ check
- MIPS: pci-legacy: stop using of_pci_range_to_resource
- powerpc/pseries: extract host bridge from pci_bus prior to bus removal
- rtlwifi: 8821ae: upgrade PHY and RF parameters
- i2c: sh7760: fix IRQ error path
- mwl8k: Fix a double Free in mwl8k_probe_hw
- vsock/vmci: log once the failed queue pair allocation
- RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails
- net: davinci_emac: Fix incorrect masking of tx and rx error channel
- ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices
- powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add')
- net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
- net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
- kfifo: fix ternary sign extension bugs
- smp: Fix smp_call_function_single_async prototype
- Revert "of/fdt: Make sure no-map does not remove already reserved regions"
- Revert "fdt: Properly handle "no-map" field in the memory region"
- tpm: fix error return code in tpm2_get_cc_attrs_tbl()
- fs: dlm: fix debugfs dump
- tipc: convert dest node's address to network order
- net: stmmac: Set FIFO sizes for ipq806x
- ALSA: hdsp: don't disable if not enabled
- ALSA: hdspm: don't disable if not enabled
- ALSA: rme9652: don't disable if not enabled
- Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
- Bluetooth: initialize skb_queue_head at l2cap_chan_create()
- Bluetooth: check for zapped sk before connecting
- ip6_vti: proper dev_{hold|put} in ndo_[un]init methods
- mac80211: clear the beacon's CRC after channel switch
- pinctrl: samsung: use 'int' for register masks in Exynos
- cuse: prevent clone
- selftests: Set CC to clang in lib.mk if LLVM is set
- kconfig: nconf: stop endless search loops
- sctp: Fix out-of-bounds warning in sctp_process_asconf_param()
- powerpc/smp: Set numa node before updating mask
- ASoC: rt286: Generalize support for ALC3263 codec
- samples/bpf: Fix broken tracex1 due to kprobe argument change
- powerpc/pseries: Stop calling printk in rtas_stop_self()
- wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt
- wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join
- powerpc/iommu: Annotate nested lock for lockdep
- net: ethernet: mtk_eth_soc: fix RX VLAN offload
- ASoC: rt286: Make RT286_SET_GPIO_* readable and writable
- f2fs: fix a redundant call to f2fs_balance_fs if an error occurs
- PCI: Release OF node in pci_scan_device()'s error path
- ARM: 9064/1: hw_breakpoint: Do not directly check the event's
overflow_handler hook
- rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data()
- NFSv4.2: Always flush out writes in nfs42_proc_fallocate()
- NFS: Deal correctly with attribute generation counter overflow
- pNFS/flexfiles: fix incorrect size check in decode_nfs_fh()
- NFSv4.2 fix handling of sr_eof in SEEK's reply
- rtc: ds1307: Fix wday settings for rx8130
- sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b
- drm/radeon: Fix off-by-one power_state index heap overwrite
- khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate()
- mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts()
- ksm: fix potential missing rmap_item for stable_node
- net: fix nla_strcmp to handle more then one trailing null character
- kernel: kexec_file: fix error return code of kexec_calculate_store_digests()
- netfilter: nftables: avoid overflows in nft_hash_buckets()
- ARC: entry: fix off-by-one error in syscall number validation
- powerpc/64s: Fix crashes when toggling stf barrier
- powerpc/64s: Fix crashes when toggling entry flush barrier
- squashfs: fix divide error in calculate_skip()
- userfaultfd: release page in error path to avoid BUG_ON
- drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors
are connected
- iio: proximity: pulsedlight: Fix rumtime PM imbalance on error
- usb: fotg210-hcd: Fix an error message
- ACPI: scan: Fix a memory leak in an error handling path
- blk-mq: Swap two calls in blk_mq_exit_queue()
- usb: dwc3: omap: improve extcon initialization
- usb: xhci: Increase timeout for HC halt
- usb: dwc2: Fix gadget DMA unmap direction
- usb: core: hub: fix race condition about TRSMRCY of resume
- iio: gyro: mpu3050: Fix reported temperature value
- iio: tsl2583: Fix division by a zero lux_val
- KVM: x86: Cancel pvclock_gtod_work on module removal
- FDDI: defxx: Make MMIO the configuration default except for EISA
- MIPS: Reinstate platform `__div64_32' handler
- MIPS: Avoid DIVU in `__div64_32' is result would be zero
- MIPS: Avoid handcoded DIVU in `__div64_32' altogether
- thermal/core/fair share: Lock the thermal zone while looping over instances
- RDMA/i40iw: Avoid panic when reading back the IRQ affinity hint
- kobject_uevent: remove warning in init_uevent_argv()
- netfilter: conntrack: Make global sysctls readonly in non-init netns
- clk: exynos7: Mark aclk_fsys1_200 as critical
- x86/msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes
- kgdb: fix gcc-11 warning on indentation
- usb: sl811-hcd: improve misleading indentation
- cxgb4: Fix the -Wmisleading-indentation warning
- isdn: capi: fix mismatched prototypes
- PCI: thunder: Fix compile testing
- ARM: 9066/1: ftrace: pause/unpause function graph tracer in cpu_suspend()
- ACPI / hotplug / PCI: Fix reference count leak in enable_slot()
- Input: elants_i2c - do not bind to i2c-hid compatible ACPI instantiated
devices
- Input: silead - add workaround for x86 BIOS-es which bring the chip up in a
stuck state
- um: Mark all kernel symbols as local
- ceph: fix fscache invalidation
- gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055
- ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP
- block: reexpand iov_iter after read/write
- lib: stackdepot: turn depot_lock spinlock to raw_spinlock
- sit: proper dev_{hold|put} in ndo_[un]init methods
- ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods
- xhci: Do not use GFP_KERNEL in (potentially) atomic context
- ipv6: remove extra dev_hold() for fallback tunnels
- ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lld
- arm64: dts: marvell: armada-37xx: add syscon compatible to NB clk node
- mtd: rawnand: atmel: Update ecc_stats.corrected counter
- mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based
controllers
- genirq/matrix: Prevent allocation counter corruption
- usb: xhci-mtk: support quirk to disable usb2 lpm
- media: drivers: media: pci: sta2x11: fix Kconfig dependency on GPIOLIB
- media: tc358743: fix possible use-after-free in tc358743_remove()
- amdgpu: avoid incorrect %hu format string
- s390/archrandom: add parameter check for s390_arch_random_generate
- ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset
PC 8
- ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx
- ubifs: Only check replay with inode type to judge if inode linked
- mlxsw: spectrum_mr: Update egress RIF list before route's action
- NFS: Don't discard pNFS layout segments that are marked for return
- tpm: vtpm_proxy: Avoid reading host log when using a virtual device
- dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload
sequences
- arm64: vdso: remove commas between macro name and arguments
- ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()
- tty: fix memory leak in vc_deallocate
- rsi: Use resume_noirq for SDIO
- MIPS: pci-mt7620: fix PLL lock check
- md: Fix missing unused status line of /proc/mdstat
- ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
- ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
- ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
- ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas family
- ARM: dts: exynos: correct MUIC interrupt trigger level on Midas family
- ARM: dts: exynos: correct PMIC interrupt trigger level on Midas family
- regmap: set debugfs_name to NULL after it is freed
- mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe()
- mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC
- mtd: rawnand: qcom: Return actual error code instead of -ENODEV
- usbip: vudc: fix missing unlock on error in usbip_sockfd_store()
- clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE
- scsi: ibmvfc: Fix invalid state machine BUG_ON()
- sched/debug: Fix cgroup_path[] serialization
- net: hns3: Limiting the scope of vector_ring_chain variable
- ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails
- net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb
- RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res
- net: Only allow init netns to set default tcp cong to a restricted algo
- i2c: bail out early when RDWR parameters are wrong
- net: bridge: when suppression is enabled exclude RARP packets
- i2c: Add I2C_AQ_NO_REP_START adapter quirk
- ethtool: ioctl: Fix out-of-bounds warning in store_link_ksettings_for_user()
- PCI: iproc: Fix return value of iproc_msi_irq_domain_alloc()
- PCI: endpoint: Fix missing destroy_workqueue()
- net: hns3: disable phy loopback setting in hclge_mac_start_phy
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a
- ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
- netfilter: xt_SECMARK: add new revision to fix structure layout
- drm/radeon: Avoid power table parsing memory leaks
- sched/fair: Fix unfairness caused by missing load decay
- xhci: Add reset resume quirk for AMD xhci controller.
- cdc-wdm: untangle a circular dependency between callback and softint
- nvme: do not try to reconfigure APST when the controller is not live
- pinctrl: ingenic: Improve unreachable code generation
- ARM: 9075/1: kernel: Fix interrupted SMC calls
- scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not
found
- tweewide: Fix most Shebang lines
- scripts: switch explicitly to Python 3
-- Khalid Elmously <email address hidden> Mon, 05 Jul 2021 07:25:23 -0400
-
linux-aws (4.15.0-1107.114) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1107.114 -proposed tracker (LP: #1932491)
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
- [Packaging] update helper scripts
[ Ubuntu: 4.15.0-149.153 ]
* bionic/linux: 4.15.0-149.153 -proposed tracker (LP: #1933434)
* selftests: bpf: test_verifier fixes (LP: #1933385)
- bpf: Update selftests to reflect new error states
- bpf, selftests: Adjust few selftest result_unpriv outcomes
* CVE-2021-33200
- bpf: Fix mask direction swap upon off reg sign change
[ Ubuntu: 4.15.0-148.152 ]
* bionic/linux: 4.15.0-148.152 -proposed tracker (LP: #1932515)
* Packaging resync (LP: #1786013)
- update dkms package versions
* Upstream v5.9 introduced 'module' patches that removed exported symbols
(LP: #1932065)
- SAUCE: Revert "modules: inherit TAINT_PROPRIETARY_MODULE"
- SAUCE: Revert "modules: return licensing information from find_symbol"
- SAUCE: Revert "modules: rename the licence field in struct symsearch to
license"
- SAUCE: Revert "modules: unexport __module_address"
- SAUCE: Revert "modules: unexport __module_text_address"
- SAUCE: Revert "modules: mark each_symbol_section static"
- SAUCE: Revert "modules: mark find_symbol static"
- SAUCE: Revert "modules: mark ref_module static"
* Disable hv-kvp-daemon.service on certain instance types (LP: #1932081)
- [Packaging]: Add kernel command line condition to hv-kvp-daemon service
* Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740)
- openrisc: Fix a memory leak
- RDMA/rxe: Clear all QP fields if creation failed
- scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword()
- ptrace: make ptrace() fail if the tracee changed its pid unexpectedly
- cifs: fix memory leak in smb2_copychunk_range
- ALSA: line6: Fix racy initialization of LINE6 MIDI
- ALSA: usb-audio: Validate MS endpoint descriptors
- ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro
- Revert "ALSA: sb8: add a check for request_region"
- Revert "rapidio: fix a NULL pointer dereference when create_workqueue()
fails"
- rapidio: handle create_workqueue() failure
- xen-pciback: reconfigure also from backend watch handler
- dm snapshot: fix crash with transient storage and zero chunk size
- Revert "video: hgafb: fix potential NULL pointer dereference"
- Revert "net: stmicro: fix a missing check of clk_prepare"
- Revert "leds: lp5523: fix a missing check of return value of lp55xx_read"
- Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe"
- Revert "video: imsttfb: fix potential NULL pointer dereferences"
- Revert "ecryptfs: replace BUG_ON with error handling code"
- Revert "gdrom: fix a memory leak bug"
- cdrom: gdrom: deallocate struct gdrom_unit fields in remove_gdrom
- cdrom: gdrom: initialize global variable at init time
- Revert "media: rcar_drif: fix a memory disclosure"
- Revert "rtlwifi: fix a potential NULL pointer dereference"
- Revert "qlcnic: Avoid potential NULL pointer dereference"
- Revert "niu: fix missing checks of niu_pci_eeprom_read"
- ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read()
- net: stmicro: handle clk_prepare() failure during init
- net: rtlwifi: properly check for alloc_workqueue() failure
- leds: lp5523: check return value of lp5xx_read and jump to cleanup code
- qlcnic: Add null check after calling netdev_alloc_skb
- video: hgafb: fix potential NULL pointer dereference
- vgacon: Record video mode changes with VT_RESIZEX
- vt: Fix character height handling with VT_RESIZEX
- tty: vt: always invoke vc->vc_sw->con_resize callback
- video: hgafb: correctly handle card detect failure during probe
- Bluetooth: SMP: Fail if remote and local public keys are identical
- firmware: arm_scpi: Prevent the ternary sign expansion bug
- platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
- locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal
- ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293
- Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer
dereference"
- mm, vmstat: drop zone->lock in /proc/pagetypeinfo
- usb: dwc3: gadget: Enable suspend events
- NFC: nci: fix memory leak in nci_allocate_device
- NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
- iommu/vt-d: Fix sysfs leak in alloc_iommu()
- perf intel-pt: Fix sample instruction bytes
- perf intel-pt: Fix transaction abort handling
- proc: Check /proc/$pid/attr/ writes against file opener
- net: hso: fix control-request directions
- mac80211: assure all fragments are encrypted
- mac80211: prevent mixed key and fragment cache attacks
- mac80211: properly handle A-MSDUs that start with an RFC 1042 header
- cfg80211: mitigate A-MSDU aggregation attacks
- mac80211: drop A-MSDUs on old ciphers
- mac80211: add fragment cache to sta_info
- mac80211: check defrag PN against current frame
- mac80211: prevent attacks on TKIP/WEP as well
- mac80211: do not accept/forward invalid EAPOL frames
- ath10k: Validate first subframe of A-MSDU before processing the list
- dm snapshot: properly fix a crash when an origin has no snapshots
- kgdb: fix gcc-11 warnings harder
- misc/uss720: fix memory leak in uss720_probe
- thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue
- mei: request autosuspend after sending rx flow control
- staging: iio: cdc: ad7746: avoid overwrite of num_channels
- iio: adc: ad7793: Add missing error code in ad7793_setup()
- USB: trancevibrator: fix control-request direction
- serial: sh-sci: Fix off-by-one error in FIFO threshold register setting
- serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
- USB: serial: ti_usb_3410_5052: add startech.com device id
- USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011
- USB: serial: ftdi_sio: add IDs for IDS GmbH Products
- USB: serial: pl2303: add device id for ADLINK ND-6530 GC
- usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen()
- net: usb: fix memory leak in smsc75xx_bind
- Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails
- NFS: fix an incorrect limit in filelayout_decode_layout()
- NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
- NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config
- drm/meson: fix shutdown crash when component not probed
- net/mlx4: Fix EEPROM dump support
- Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv"
- tipc: skb_linearize the head skb when reassembling msgs
- i2c: s3c2410: fix possible NULL pointer deref on read message after write
- i2c: i801: Don't generate an interrupt on bus reset
- perf jevents: Fix getting maximum number of fds
- platform/x86: hp_accel: Avoid invoking _INI to speed up resume
- serial: max310x: unregister uart driver in case of failure and abort
- net: fujitsu: fix potential null-ptr-deref
- net: caif: remove BUG_ON(dev == NULL) in caif_xmit
- char: hpet: add checks after calling ioremap
- isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io
- dmaengine: qcom_hidma: comment platform_driver_register call
- libertas: register sysfs groups properly
- media: dvb: Add check on sp8870_readreg return
- media: gspca: properly check for errors in po1030_probe()
- scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic
- openrisc: Define memory barrier mb
- btrfs: do not BUG_ON in link_to_fixup_dir
- platform/x86: hp-wireless: add AMD's hardware id to the supported list
- platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI
- SMB3: incorrect file id in requests compounded with open
- drm/amdgpu: Fix a use-after-free
- net: netcp: Fix an error message
- net: mdio: thunder: Fix a double free issue in the .remove function
- net: mdio: octeon: Fix some double free issues
- net: bnx2: Fix error return code in bnx2_init_board()
- mld: fix panic in mld_newpack()
- staging: emxx_udc: fix loop in _nbu2ss_nuke()
- ASoC: cs35l33: fix an error code in probe()
- bpf: Set mac_len in bpf_skb_change_head
- ixgbe: fix large MTU request from VF
- scsi: libsas: Use _safe() loop in sas_resume_port()
- ipv6: record frag_max_size in atomic fragments in input path
- sch_dsmark: fix a NULL deref in qdisc_reset()
- MIPS: alchemy: xxs1500: add gpio-au1000.h header file
- MIPS: ralink: export rt_sysc_membase for rt2880_wdt.c
- hugetlbfs: hugetlb_fault_mutex_hash() cleanup
- drivers/net/ethernet: clean up unused assignments
- usb: core: reduce power-on-good delay time of root hub
- USB: usbfs: Don't WARN about excessively large memory allocations
- bpf: extend is_branch_taken to registers
- bpf: Move off_reg into sanitize_ptr_alu
- bpf: Ensure off_reg has no mixed signed bounds for all types
- bpf: Rework ptr_limit into alu_limit and add common error path
- bpf: Improve verifier error messages for users
- bpf: Refactor and streamline bounds check into helper
- bpf: Move sanitize_val_alu out of op switch
- bpf: Tighten speculative pointer arithmetic mask
- bpf: Fix leakage of uninitialized bpf stack under speculation
- bpf: Wrap aux data inside bpf_sanitize_info container
- bpf: No need to simulate speculative domain for immediates
- net: dsa: fix a crash if ->get_sset_count() fails
- drm/amd/amdgpu: fix refcount leak
- net: dsa: fix error code getting shifted with 4 in dsa_slave_get_sset_count
- openvswitch: meter: fix race when getting now_ms.
- net: hns3: check the return of skb_checksum_help()
* Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) //
CVE-2020-24587 for such cases.
- mac80211: extend protection against mixed key and fragment cache attacks
* [82A1, Realtek ALC287, Speaker, Internal] Underruns, dropouts or crackling
sound (LP: #1925057) // Bionic update: upstream stable patchset 2021-06-11
(LP: #1931740)
- ALSA: hda/realtek: reset eapd coeff to default value for alc287
* test_map in ubuntu_bpf failed with "Allowed update sockmap '0:3' not in
ESTABLISHED" (LP: #1839912)
- SAUCE: Revert "bpf: test_maps, only support ESTABLISHED socks"
* Bionic update: upstream stable patchset 2021-06-01 (LP: #1930472)
- MIPS: Introduce isa-rev.h to define MIPS_ISA_REV
- MIPS: cpu-features.h: Replace __mips_isa_rev with MIPS_ISA_REV
- s390/disassembler: increase ebpf disasm buffer size
- ACPI: custom_method: fix potential use-after-free issue
- ACPI: custom_method: fix a possible memory leak
- arm64: dts: mt8173: fix property typo of 'phys' in dsi node
- ecryptfs: fix kernel panic with null dev_name
- spi: spi-ti-qspi: Free DMA resources
- mmc: block: Update ext_csd.cache_ctrl if it was written
- mmc: core: Do a power cycle when the CMD11 fails
- mmc: core: Set read only for SD cards with permanent write protect bit
- cifs: Return correct error code from smb2_get_enc_key
- btrfs: fix metadata extent leak after failure to create subvolume
- intel_th: pci: Add Rocket Lake CPU support
- fbdev: zero-fill colormap in fbcmap.c
- staging: wimax/i2400m: fix byte-order issue
- crypto: api - check for ERR pointers in crypto_destroy_tfm()
- usb: gadget: uvc: add bInterval checking for HS mode
- usb: gadget: f_uac1: validate input parameters
- usb: dwc3: gadget: Ignore EP queue requests during bus reset
- usb: xhci: Fix port minor revision
- PCI: PM: Do not read power state in pci_enable_device_flags()
- x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS)
- tee: optee: do not check memref size on return from Secure World
- perf/arm_pmu_platform: Fix error handling
- spi: dln2: Fix reference leak to master
- spi: omap-100k: Fix reference leak to master
- intel_th: Consistency and off-by-one fix
- phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
- btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
- scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
- scsi: lpfc: Fix pt2pt connection does not recover after LOGO
- scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
- media: ite-cir: check for receive overflow
- power: supply: bq27xxx: fix power_avg for newer ICs
- extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has
been unplugged
- media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
- media: gspca/sq905.c: fix uninitialized variable
- power: supply: Use IRQF_ONESHOT
- drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f
- scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
- scsi: qla2xxx: Fix use after free in bsg
- scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
- media: em28xx: fix memory leak
- media: vivid: update EDID
- clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
- power: supply: generic-adc-battery: fix possible use-after-free in
gab_remove()
- power: supply: s3c_adc_battery: fix possible use-after-free in
s3c_adc_bat_remove()
- media: adv7604: fix possible use-after-free in adv76xx_remove()
- media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove()
- media: i2c: adv7842: fix possible use-after-free in adv7842_remove()
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init
- media: gscpa/stv06xx: fix memory leak
- drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
- drm/amdgpu: fix NULL pointer dereference
- scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO
response
- scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic
- scsi: libfc: Fix a format specifier
- ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
- ALSA: hda/conexant: Re-order CX5066 quirk table entries
- ALSA: sb: Fix two use after free in snd_sb_qsound_build
- btrfs: fix race when picking most recent mod log operation for an old root
- arm64/vdso: Discard .note.gnu.property sections in vDSO
- openvswitch: fix stack OOB read while fragmenting IPv4 packets
- ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
- NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
- jffs2: Fix kasan slab-out-of-bounds problem
- powerpc/eeh: Fix EEH handling for hugepages in ioremap space.
- powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h
- intel_th: pci: Add Alder Lake-M support
- md/raid1: properly indicate failure when ending a failed write request
- security: commoncap: fix -Wstringop-overread warning
- Fix misc new gcc warnings
- jffs2: check the validity of dstlen in jffs2_zlib_compress()
- Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op")
- posix-timers: Preserve return value in clock_adjtime32()
- ftrace: Handle commands when closing set_ftrace_filter file
- ext4: fix check to prevent false positive report of incorrect used inodes
- ext4: fix error code in ext4_commit_super
- media: dvbdev: Fix memory leak in dvb_media_device_free()
- usb: gadget: dummy_hcd: fix gpf in gadget_setup
- usb: gadget: Fix double free of device descriptor pointers
- usb: gadget/function/f_fs string table fix for multiple languages
- usb: dwc3: gadget: Fix START_TRANSFER link state check
- tracing: Map all PIDs to command lines
- dm persistent data: packed struct should have an aligned() attribute too
- dm space map common: fix division bug in sm_ll_find_free_block()
- dm rq: fix double free of blk_mq_tag_set in dev remove after table load
fails
- modules: mark ref_module static
- modules: mark find_symbol static
- modules: mark each_symbol_section static
- modules: unexport __module_text_address
- modules: unexport __module_address
- modules: rename the licence field in struct symsearch to license
- modules: return licensing information from find_symbol
- modules: inherit TAINT_PROPRIETARY_MODULE
- Bluetooth: verify AMP hci_chan before amp_destroy
- hsr: use netdev_err() instead of WARN_ONCE()
- bluetooth: eliminate the potential race condition when removing the HCI
controller
- net/nfc: fix use-after-free llcp_sock_bind/connect
- MIPS: pci-rt2880: fix slot 0 configuration
- FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
- misc: lis3lv02d: Fix false-positive WARN on various HP models
- misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct
- misc: vmw_vmci: explicitly initialize vmci_datagram payload
- tracing: Restructure trace_clock_global() to never block
- md-cluster: fix use-after-free issue when removing rdev
- md: split mddev_find
- md: factor out a mddev_find_locked helper from mddev_find
- md: md_open returns -EBUSY when entering racing area
- ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
- cfg80211: scan: drop entry from hidden_list on overflow
- drm/radeon: fix copy of uninitialized variable back to userspace
- ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
- ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
- ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
- ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
- ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices
- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
- KVM: s390: split kvm_s390_logical_to_effective
- KVM: s390: fix guarded storage control register handling
- KVM: s390: split kvm_s390_real_to_abs
- usb: gadget: pch_udc: Revert d3cb25a12138 completely
- memory: gpmc: fix out of bounds read and dereference on gpmc_cs[]
- ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family
- ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250
- ARM: dts: exynos: correct PMIC interrupt trigger level on Snow
- serial: stm32: fix incorrect characters on console
- serial: stm32: fix tx_empty condition
- usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS
- x86/microcode: Check for offline CPUs before requesting new microcode
- usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits()
- usb: gadget: pch_udc: Check if driver is present before calling ->setup()
- usb: gadget: pch_udc: Check for DMA mapping error
- crypto: qat - don't release uninitialized resources
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
- fotg210-udc: Fix DMA on EP0 for length > max packet size
- fotg210-udc: Fix EP0 IN requests bigger than two packets
- fotg210-udc: Remove a dubious condition leading to fotg210_done
- fotg210-udc: Mask GRP2 interrupts we don't handle
- fotg210-udc: Don't DMA more than the buffer can take
- fotg210-udc: Complete OUT requests on short packets
- mtd: require write permissions for locking and badblock ioctls
- bus: qcom: Put child node before return
- phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y,
unconditionally
- crypto: qat - fix error path in adf_isr_resource_alloc()
- USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR()
- mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init
- staging: rtl8192u: Fix potential infinite loop
- staging: greybus: uart: fix unprivileged TIOCCSERIAL
- spi: Fix use-after-free with devm_spi_alloc_*
- soc: qcom: mdt_loader: Validate that p_filesz < p_memsz
- soc: qcom: mdt_loader: Detect truncated read of segments
- ACPI: CPPC: Replace cppc_attr with kobj_attribute
- crypto: qat - Fix a double free in adf_create_ring
- usb: gadget: r8a66597: Add missing null check on return from
platform_get_resource
- USB: cdc-acm: fix unprivileged TIOCCSERIAL
- tty: fix return value for unsupported ioctls
- firmware: qcom-scm: Fix QCOM_SCM configuration
- platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with
critclk_systems DMI table
- x86/platform/uv: Fix !KEXEC build failure
- ttyprintk: Add TTY hangup callback.
- media: vivid: fix assignment of dev->fbuf_out_flags
- media: omap4iss: return error code when omap4iss_get() failed
- media: m88rs6000t: avoid potential out-of-bounds reads on arrays
- x86/kprobes: Fix to check non boostable prefixes correctly
- pata_arasan_cf: fix IRQ check
- pata_ipx4xx_cf: fix IRQ check
- sata_mv: add IRQ checks
- ata: libahci_platform: fix IRQ check
- vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer
- clk: uniphier: Fix potential infinite loop
- scsi: jazz_esp: Add IRQ check
- scsi: sun3x_esp: Add IRQ check
- scsi: sni_53c710: Add IRQ check
- mfd: stm32-timers: Avoid clearing auto reload register
- HSI: core: fix resource leaks in hsi_add_client_from_dt()
- x86/events/amd/iommu: Fix sysfs type mismatch
- HID: plantronics: Workaround for double volume key presses
- perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of
printed chars
- net: lapbether: Prevent racing when checking whether the netif is running
- powerpc/prom: Mark identical_pvr_fixup as __init
- powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration
- ALSA: core: remove redundant spin_lock pair in snd_card_disconnect
- bug: Remove redundant condition check in report_bug
- nfc: pn533: prevent potential memory corruption
- ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls
- liquidio: Fix unintented sign extension of a left shift of a u16
- powerpc/perf: Fix PMU constraint check for EBB events
- powerpc: iommu: fix build when neither PCI or IBMVIO is set
- mac80211: bail out if cipher schemes are invalid
- mt7601u: fix always true expression
- IB/hfi1: Fix error return code in parse_platform_config()
- net: thunderx: Fix unintentional sign extension issue
- i2c: cadence: add IRQ check
- i2c: emev2: add IRQ check
- i2c: jz4780: add IRQ check
- i2c: sh7760: add IRQ check
- MIPS: pci-legacy: stop using of_pci_range_to_resource
- powerpc/pseries: extract host bridge from pci_bus prior to bus removal
- rtlwifi: 8821ae: upgrade PHY and RF parameters
- i2c: sh7760: fix IRQ error path
- mwl8k: Fix a double Free in mwl8k_probe_hw
- vsock/vmci: log once the failed queue pair allocation
- RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails
- net: davinci_emac: Fix incorrect masking of tx and rx error channel
- ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices
- powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add')
- net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
- net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
- kfifo: fix ternary sign extension bugs
- smp: Fix smp_call_function_single_async prototype
- Revert "of/fdt: Make sure no-map does not remove already reserved regions"
- Revert "fdt: Properly handle "no-map" field in the memory region"
- tpm: fix error return code in tpm2_get_cc_attrs_tbl()
- fs: dlm: fix debugfs dump
- tipc: convert dest node's address to network order
- net: stmmac: Set FIFO sizes for ipq806x
- ALSA: hdsp: don't disable if not enabled
- ALSA: hdspm: don't disable if not enabled
- ALSA: rme9652: don't disable if not enabled
- Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
- Bluetooth: initialize skb_queue_head at l2cap_chan_create()
- Bluetooth: check for zapped sk before connecting
- ip6_vti: proper dev_{hold|put} in ndo_[un]init methods
- mac80211: clear the beacon's CRC after channel switch
- pinctrl: samsung: use 'int' for register masks in Exynos
- cuse: prevent clone
- selftests: Set CC to clang in lib.mk if LLVM is set
- kconfig: nconf: stop endless search loops
- sctp: Fix out-of-bounds warning in sctp_process_asconf_param()
- powerpc/smp: Set numa node before updating mask
- ASoC: rt286: Generalize support for ALC3263 codec
- samples/bpf: Fix broken tracex1 due to kprobe argument change
- powerpc/pseries: Stop calling printk in rtas_stop_self()
- wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt
- wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join
- powerpc/iommu: Annotate nested lock for lockdep
- net: ethernet: mtk_eth_soc: fix RX VLAN offload
- ASoC: rt286: Make RT286_SET_GPIO_* readable and writable
- f2fs: fix a redundant call to f2fs_balance_fs if an error occurs
- PCI: Release OF node in pci_scan_device()'s error path
- ARM: 9064/1: hw_breakpoint: Do not directly check the event's
overflow_handler hook
- rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data()
- NFSv4.2: Always flush out writes in nfs42_proc_fallocate()
- NFS: Deal correctly with attribute generation counter overflow
- pNFS/flexfiles: fix incorrect size check in decode_nfs_fh()
- NFSv4.2 fix handling of sr_eof in SEEK's reply
- rtc: ds1307: Fix wday settings for rx8130
- sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b
- drm/radeon: Fix off-by-one power_state index heap overwrite
- khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate()
- mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts()
- ksm: fix potential missing rmap_item for stable_node
- net: fix nla_strcmp to handle more then one trailing null character
- kernel: kexec_file: fix error return code of kexec_calculate_store_digests()
- netfilter: nftables: avoid overflows in nft_hash_buckets()
- ARC: entry: fix off-by-one error in syscall number validation
- powerpc/64s: Fix crashes when toggling stf barrier
- powerpc/64s: Fix crashes when toggling entry flush barrier
- squashfs: fix divide error in calculate_skip()
- userfaultfd: release page in error path to avoid BUG_ON
- drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors
are connected
- iio: proximity: pulsedlight: Fix rumtime PM imbalance on error
- usb: fotg210-hcd: Fix an error message
- ACPI: scan: Fix a memory leak in an error handling path
- blk-mq: Swap two calls in blk_mq_exit_queue()
- usb: dwc3: omap: improve extcon initialization
- usb: xhci: Increase timeout for HC halt
- usb: dwc2: Fix gadget DMA unmap direction
- usb: core: hub: fix race condition about TRSMRCY of resume
- iio: gyro: mpu3050: Fix reported temperature value
- iio: tsl2583: Fix division by a zero lux_val
- KVM: x86: Cancel pvclock_gtod_work on module removal
- FDDI: defxx: Make MMIO the configuration default except for EISA
- MIPS: Reinstate platform `__div64_32' handler
- MIPS: Avoid DIVU in `__div64_32' is result would be zero
- MIPS: Avoid handcoded DIVU in `__div64_32' altogether
- thermal/core/fair share: Lock the thermal zone while looping over instances
- RDMA/i40iw: Avoid panic when reading back the IRQ affinity hint
- kobject_uevent: remove warning in init_uevent_argv()
- netfilter: conntrack: Make global sysctls readonly in non-init netns
- clk: exynos7: Mark aclk_fsys1_200 as critical
- x86/msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes
- kgdb: fix gcc-11 warning on indentation
- usb: sl811-hcd: improve misleading indentation
- cxgb4: Fix the -Wmisleading-indentation warning
- isdn: capi: fix mismatched prototypes
- PCI: thunder: Fix compile testing
- ARM: 9066/1: ftrace: pause/unpause function graph tracer in cpu_suspend()
- ACPI / hotplug / PCI: Fix reference count leak in enable_slot()
- Input: elants_i2c - do not bind to i2c-hid compatible ACPI instantiated
devices
- Input: silead - add workaround for x86 BIOS-es which bring the chip up in a
stuck state
- um: Mark all kernel symbols as local
- ceph: fix fscache invalidation
- gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055
- ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP
- block: reexpand iov_iter after read/write
- lib: stackdepot: turn depot_lock spinlock to raw_spinlock
- sit: proper dev_{hold|put} in ndo_[un]init methods
- ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods
- xhci: Do not use GFP_KERNEL in (potentially) atomic context
- ipv6: remove extra dev_hold() for fallback tunnels
- ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lld
- arm64: dts: marvell: armada-37xx: add syscon compatible to NB clk node
- mtd: rawnand: atmel: Update ecc_stats.corrected counter
- mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based
controllers
- genirq/matrix: Prevent allocation counter corruption
- usb: xhci-mtk: support quirk to disable usb2 lpm
- media: drivers: media: pci: sta2x11: fix Kconfig dependency on GPIOLIB
- media: tc358743: fix possible use-after-free in tc358743_remove()
- amdgpu: avoid incorrect %hu format string
- s390/archrandom: add parameter check for s390_arch_random_generate
- ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset
PC 8
- ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx
- ubifs: Only check replay with inode type to judge if inode linked
- mlxsw: spectrum_mr: Update egress RIF list before route's action
- NFS: Don't discard pNFS layout segments that are marked for return
- tpm: vtpm_proxy: Avoid reading host log when using a virtual device
- dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload
sequences
- arm64: vdso: remove commas between macro name and arguments
- ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()
- tty: fix memory leak in vc_deallocate
- rsi: Use resume_noirq for SDIO
- MIPS: pci-mt7620: fix PLL lock check
- md: Fix missing unused status line of /proc/mdstat
- ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
- ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
- ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
- ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas family
- ARM: dts: exynos: correct MUIC interrupt trigger level on Midas family
- ARM: dts: exynos: correct PMIC interrupt trigger level on Midas family
- regmap: set debugfs_name to NULL after it is freed
- mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe()
- mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC
- mtd: rawnand: qcom: Return actual error code instead of -ENODEV
- usbip: vudc: fix missing unlock on error in usbip_sockfd_store()
- clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE
- scsi: ibmvfc: Fix invalid state machine BUG_ON()
- sched/debug: Fix cgroup_path[] serialization
- net: hns3: Limiting the scope of vector_ring_chain variable
- ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails
- net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb
- RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res
- net: Only allow init netns to set default tcp cong to a restricted algo
- i2c: bail out early when RDWR parameters are wrong
- net: bridge: when suppression is enabled exclude RARP packets
- i2c: Add I2C_AQ_NO_REP_START adapter quirk
- ethtool: ioctl: Fix out-of-bounds warning in store_link_ksettings_for_user()
- PCI: iproc: Fix return value of iproc_msi_irq_domain_alloc()
- PCI: endpoint: Fix missing destroy_workqueue()
- net: hns3: disable phy loopback setting in hclge_mac_start_phy
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a
- ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
- netfilter: xt_SECMARK: add new revision to fix structure layout
- drm/radeon: Avoid power table parsing memory leaks
- sched/fair: Fix unfairness caused by missing load decay
- xhci: Add reset resume quirk for AMD xhci controller.
- cdc-wdm: untangle a circular dependency between callback and softint
- nvme: do not try to reconfigure APST when the controller is not live
- pinctrl: ingenic: Improve unreachable code generation
- ARM: 9075/1: kernel: Fix interrupted SMC calls
- scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not
found
- tweewide: Fix most Shebang lines
- scripts: switch explicitly to Python 3
-- <email address hidden> (Guilherme G. Piccoli) Fri, 25 Jun 2021 15:37:12 -0300
-
linux-aws (4.15.0-1106.113) bionic; urgency=medium
[ Ubuntu: 4.15.0-147.151 ]
* CVE-2021-3444
- bpf: Fix truncation handling for mod32 dst reg wrt zero
* CVE-2021-3600
- SAUCE: bpf: Do not use ax register in interpreter on div/mod
- bpf: fix subprog verifier bypass by div/mod by 0 exception
- SAUCE: bpf: Fix 32-bit register truncation on div/mod instruction
linux-aws (4.15.0-1105.112) bionic; urgency=medium
[ Ubuntu: 4.15.0-146.150 ]
* UAF on CAN BCM bcm_rx_handler (LP: #1931855)
- SAUCE: can: bcm: delay release of struct bcm_op after synchronize_rcu
linux-aws (4.15.0-1104.111) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1104.111 -proposed tracker (LP: #1929944)
[ Ubuntu: 4.15.0-145.149 ]
* bionic/linux: 4.15.0-145.149 -proposed tracker (LP: #1929967)
* Packaging resync (LP: #1786013)
- update dkms package versions
* raid10: Block discard is very slow, causing severe delays for mkfs and
fstrim operations (LP: #1896578)
- md: add md_submit_discard_bio() for submitting discard bio
- md/raid10: extend r10bio devs to raid disks
- md/raid10: pull the code that wait for blocked dev into one function
- md/raid10: improve raid10 discard request
- md/raid10: improve discard request for far layout
* CVE-2021-23133
- sctp: delay auto_asconf init until binding the first addr
* Bionic update: upstream stable patchset 2021-05-25 (LP: #1929603)
- Input: nspire-keypad - enable interrupts only when opened
- dmaengine: dw: Make it dependent to HAS_IOMEM
- ARM: dts: Fix moving mmc devices with aliases for omap4 & 5
- arc: kernel: Return -EFAULT if copy_to_user() fails
- neighbour: Disregard DEAD dst in neigh_update
- ARM: keystone: fix integer overflow warning
- ASoC: fsl_esai: Fix TDM slot setup for I2S mode
- scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state
- net: ieee802154: stop dump llsec keys for monitors
- net: ieee802154: stop dump llsec devs for monitors
- net: ieee802154: forbid monitor for add llsec dev
- net: ieee802154: stop dump llsec devkeys for monitors
- net: ieee802154: forbid monitor for add llsec devkey
- net: ieee802154: stop dump llsec seclevels for monitors
- net: ieee802154: forbid monitor for add llsec seclevel
- pcnet32: Use pci_resource_len to validate PCI resource
- mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN
- Input: i8042 - fix Pegatron C15B ID entry
- HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices
- readdir: make sure to verify directory entry for legacy interfaces too
- arm64: fix inline asm in load_unaligned_zeropad()
- arm64: alternatives: Move length validation in alternative_{insn, endif}
- scsi: libsas: Reset num_scatter if libata marks qc as NODATA
- netfilter: conntrack: do not print icmpv6 as unknown via /proc
- netfilter: nft_limit: avoid possible divide error in nft_limit_init
- net: davicom: Fix regulator not turned off on failed probe
- net: sit: Unregister catch-all devices
- i40e: fix the panic when running bpf in xdpdrv mode
- ibmvnic: avoid calling napi_disable() twice
- ibmvnic: remove duplicate napi_schedule call in do_reset function
- ibmvnic: remove duplicate napi_schedule call in open function
- ARM: footbridge: fix PCI interrupt mapping
- ARM: 9071/1: uprobes: Don't hook on thumb instructions
- pinctrl: lewisburg: Update number of pins in community
- HID: wacom: Assign boolean values to a bool variable
- ARM: dts: Fix swapped mmc order for omap3
- net: geneve: check skb is large enough for IPv4/IPv6 header
- s390/entry: save the caller of psw_idle
- xen-netback: Check for hotplug-status existence before watching
- cavium/liquidio: Fix duplicate argument
- ia64: fix discontig.c section mismatches
- ia64: tools: remove duplicate definition of ia64_mf() on ia64
- x86/crash: Fix crash_setup_memmap_entries() out-of-bounds access
- net: hso: fix NULL-deref on disconnect regression
- USB: CDC-ACM: fix poison/unpoison imbalance
- lockdep: Add a missing initialization hint to the "INFO: Trying to register
non-static key" message
- drm/msm: Fix a5xx/a6xx timestamps
- Input: s6sy761 - fix coordinate read bit shift
- net: ip6_tunnel: Unregister catch-all devices
- ACPI: tables: x86: Reserve memory occupied by ACPI tables
- ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade()
- net: usb: ax88179_178a: initialize local variables before use
- iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd()
- mips: Do not include hi and lo in clobber list for R6
- bpf: Fix masking negation logic upon negative dst register
- iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd()
- ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX
- USB: Add reset-resume quirk for WD19's Realtek Hub
- platform/x86: thinkpad_acpi: Correct thermal sensor allocation
* r8152 tx status -71 (LP: #1922651) // Bionic update: upstream stable
patchset 2021-05-25 (LP: #1929603)
- USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet
* seccomp_bpf:syscall_faked from kselftests fail on s390x (LP: #1928522)
- selftests/seccomp: s390 shares the syscall and return value register
* Fix kdump failures (LP: #1927518)
- video: hyperv_fb: Add ratelimit on error message
- Drivers: hv: vmbus: Increase wait time for VMbus unload
- Drivers: hv: vmbus: Initialize unload_event statically
-- Thadeu Lima de Souza Cascardo <email address hidden> Fri, 18 Jun 2021 17:37:12 -0300
-
linux-aws (4.15.0-1104.111) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1104.111 -proposed tracker (LP: #1929944)
[ Ubuntu: 4.15.0-145.149 ]
* bionic/linux: 4.15.0-145.149 -proposed tracker (LP: #1929967)
* Packaging resync (LP: #1786013)
- update dkms package versions
* raid10: Block discard is very slow, causing severe delays for mkfs and
fstrim operations (LP: #1896578)
- md: add md_submit_discard_bio() for submitting discard bio
- md/raid10: extend r10bio devs to raid disks
- md/raid10: pull the code that wait for blocked dev into one function
- md/raid10: improve raid10 discard request
- md/raid10: improve discard request for far layout
* CVE-2021-23133
- sctp: delay auto_asconf init until binding the first addr
* Bionic update: upstream stable patchset 2021-05-25 (LP: #1929603)
- Input: nspire-keypad - enable interrupts only when opened
- dmaengine: dw: Make it dependent to HAS_IOMEM
- ARM: dts: Fix moving mmc devices with aliases for omap4 & 5
- arc: kernel: Return -EFAULT if copy_to_user() fails
- neighbour: Disregard DEAD dst in neigh_update
- ARM: keystone: fix integer overflow warning
- ASoC: fsl_esai: Fix TDM slot setup for I2S mode
- scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state
- net: ieee802154: stop dump llsec keys for monitors
- net: ieee802154: stop dump llsec devs for monitors
- net: ieee802154: forbid monitor for add llsec dev
- net: ieee802154: stop dump llsec devkeys for monitors
- net: ieee802154: forbid monitor for add llsec devkey
- net: ieee802154: stop dump llsec seclevels for monitors
- net: ieee802154: forbid monitor for add llsec seclevel
- pcnet32: Use pci_resource_len to validate PCI resource
- mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN
- Input: i8042 - fix Pegatron C15B ID entry
- HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices
- readdir: make sure to verify directory entry for legacy interfaces too
- arm64: fix inline asm in load_unaligned_zeropad()
- arm64: alternatives: Move length validation in alternative_{insn, endif}
- scsi: libsas: Reset num_scatter if libata marks qc as NODATA
- netfilter: conntrack: do not print icmpv6 as unknown via /proc
- netfilter: nft_limit: avoid possible divide error in nft_limit_init
- net: davicom: Fix regulator not turned off on failed probe
- net: sit: Unregister catch-all devices
- i40e: fix the panic when running bpf in xdpdrv mode
- ibmvnic: avoid calling napi_disable() twice
- ibmvnic: remove duplicate napi_schedule call in do_reset function
- ibmvnic: remove duplicate napi_schedule call in open function
- ARM: footbridge: fix PCI interrupt mapping
- ARM: 9071/1: uprobes: Don't hook on thumb instructions
- pinctrl: lewisburg: Update number of pins in community
- HID: wacom: Assign boolean values to a bool variable
- ARM: dts: Fix swapped mmc order for omap3
- net: geneve: check skb is large enough for IPv4/IPv6 header
- s390/entry: save the caller of psw_idle
- xen-netback: Check for hotplug-status existence before watching
- cavium/liquidio: Fix duplicate argument
- ia64: fix discontig.c section mismatches
- ia64: tools: remove duplicate definition of ia64_mf() on ia64
- x86/crash: Fix crash_setup_memmap_entries() out-of-bounds access
- net: hso: fix NULL-deref on disconnect regression
- USB: CDC-ACM: fix poison/unpoison imbalance
- lockdep: Add a missing initialization hint to the "INFO: Trying to register
non-static key" message
- drm/msm: Fix a5xx/a6xx timestamps
- Input: s6sy761 - fix coordinate read bit shift
- net: ip6_tunnel: Unregister catch-all devices
- ACPI: tables: x86: Reserve memory occupied by ACPI tables
- ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade()
- net: usb: ax88179_178a: initialize local variables before use
- iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd()
- mips: Do not include hi and lo in clobber list for R6
- bpf: Fix masking negation logic upon negative dst register
- iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd()
- ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX
- USB: Add reset-resume quirk for WD19's Realtek Hub
- platform/x86: thinkpad_acpi: Correct thermal sensor allocation
* r8152 tx status -71 (LP: #1922651) // Bionic update: upstream stable
patchset 2021-05-25 (LP: #1929603)
- USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet
* seccomp_bpf:syscall_faked from kselftests fail on s390x (LP: #1928522)
- selftests/seccomp: s390 shares the syscall and return value register
* Fix kdump failures (LP: #1927518)
- video: hyperv_fb: Add ratelimit on error message
- Drivers: hv: vmbus: Increase wait time for VMbus unload
- Drivers: hv: vmbus: Initialize unload_event statically
-- Tim Gardner <email address hidden> Tue, 01 Jun 2021 09:00:12 -0600
-
linux-aws (4.15.0-1103.110) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1103.110 -proposed tracker (LP: #1927626)
[ Ubuntu: 4.15.0-144.148 ]
* bionic/linux: 4.15.0-144.148 -proposed tracker (LP: #1927648)
* Introduce the 465 driver series, fabric-manager, and libnvidia-nscq
(LP: #1925522)
- debian/dkms-versions -- add NVIDIA 465 and migrate 450 to 460
* xfrm_policy.sh / pmtu.sh / udpgso_bench.sh from net in
ubuntu_kernel_selftests will fail if running the whole suite (LP: #1856010)
- selftests/net: bump timeout to 5 minutes
* locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (LP: #1926184)
- locking/barriers: Introduce smp_cond_load_relaxed() and
atomic_cond_read_relaxed()
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath()
* Bionic update: upstream stable patchset 2021-04-30 (LP: #1926808)
- net: fec: ptp: avoid register access when ipg clock is disabled
- powerpc/4xx: Fix build errors from mfdcr()
- atm: eni: dont release is never initialized
- atm: lanai: dont run lanai_dev_close if not open
- Revert "r8152: adjust the settings about MAC clock speed down for RTL8153"
- ixgbe: Fix memleak in ixgbe_configure_clsu32
- net: tehuti: fix error return code in bdx_probe()
- sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count
- gpiolib: acpi: Add missing IRQF_ONESHOT
- nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default
- NFS: Correct size calculation for create reply length
- net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch()
- net: wan: fix error return code of uhdlc_init()
- atm: uPD98402: fix incorrect allocation
- atm: idt77252: fix null-ptr-dereference
- sparc64: Fix opcode filtering in handling of no fault loads
- u64_stats,lockdep: Fix u64_stats_init() vs lockdep
- drm/radeon: fix AGP dependency
- nfs: we don't support removing system.nfs4_acl
- ia64: fix ia64_syscall_get_set_arguments() for break-based syscalls
- ia64: fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign
- squashfs: fix inode lookup sanity checks
- squashfs: fix xattr id and id lookup sanity checks
- arm64: dts: ls1046a: mark crypto engine dma coherent
- arm64: dts: ls1012a: mark crypto engine dma coherent
- arm64: dts: ls1043a: mark crypto engine dma coherent
- ARM: dts: at91-sama5d27_som1: fix phy address to 7
- dm ioctl: fix out of bounds array access when no devices
- bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD
- libbpf: Fix INSTALL flag order
- macvlan: macvlan_count_rx() needs to be aware of preemption
- net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port
- e1000e: add rtnl_lock() to e1000_reset_task
- e1000e: Fix error handling in e1000_set_d0_lplu_state_82571
- net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template
- ftgmac100: Restart MAC HW once
- can: peak_usb: add forgotten supported devices
- can: c_can_pci: c_can_pci_remove(): fix use-after-free
- can: c_can: move runtime PM enable/disable to c_can_platform
- can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning
- mac80211: fix rate mask reset
- net: cdc-phonet: fix data-interface release on probe failure
- net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes
- drm/msm: fix shutdown hook in case GPU components failed to bind
- arm64: kdump: update ppos when reading elfcorehdr
- net/mlx5e: Fix error path for ethtool set-priv-flag
- RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening
server
- ACPI: scan: Rearrange memory allocation in acpi_device_add()
- ACPI: scan: Use unique number for instance_no
- perf auxtrace: Fix auxtrace queue conflict
- scsi: qedi: Fix error return code of qedi_alloc_global_queues()
- scsi: mpt3sas: Fix error return code of mpt3sas_base_attach()
- locking/mutex: Fix non debug version of mutex_lock_io_nested()
- can: dev: Move device back to init netns on owning netns delete
- net: sched: validate stab values
- net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()
- mac80211: fix double free in ibss_leave
- ext4: add reclaim checks to xattr code
- can: peak_usb: Revert "can: peak_usb: add forgotten supported devices"
- block: Suppress uevent for hidden device when removed
- netsec: restore phy power state after controller reset
- can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate
- dm verity: add root hash pkcs#7 signature verification
- x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc()
- selinux: vsock: Set SID for socket returned by accept()
- ipv6: weaken the v4mapped source check
- ext4: fix bh ref count on error paths
- rpc: fix NULL dereference on kmalloc failure
- ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10
- ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10
- ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe
- ASoC: es8316: Simplify adc_pga_gain_tlv table
- ASoC: cs42l42: Fix mixer volume control
- ASoC: cs42l42: Always wait at least 3ms after reset
- vhost: Fix vhost_vq_reset()
- scsi: st: Fix a use after free in st_open()
- scsi: qla2xxx: Fix broken #endif placement
- staging: comedi: cb_pcidas: fix request_irq() warn
- staging: comedi: cb_pcidas64: fix request_irq() warn
- ASoC: rt5659: Update MCLK rate in set_sysclk()
- ext4: do not iput inode under running transaction in ext4_rename()
- brcmfmac: clear EAP/association status bits on linkdown events
- net: ethernet: aquantia: Handle error cleanup of start on open
- appletalk: Fix skb allocation size in loopback case
- net: wan/lmc: unregister device when no matching device is found
- bpf: Remove MTU check in __bpf_skb_max_len
- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
- ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO
- ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook
- tracing: Fix stack trace event size
- mm: fix race by making init_zero_pfn() early_initcall
- drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings()
- drm/amdgpu: check alignment on CPU page for bo map
- reiserfs: update reiserfs_xattrs_initialized() condition
- mm: memcontrol: fix NR_WRITEBACK leak in memcg and system stats
- mm: memcg: make sure memory.events is uptodate when waking pollers
- mem_cgroup: make sure moving_account, move_lock_task and stat_cpu in the
same cacheline
- mm: fix oom_kill event handling
- mm: writeback: use exact memcg dirty counts
- pinctrl: rockchip: fix restore error in resume
- extcon: Add stubs for extcon_register_notifier_all() functions
- extcon: Fix error handling in extcon_dev_register
- firewire: nosy: Fix a use-after-free bug in nosy_ioctl()
- usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control()
- USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem
- usb: musb: Fix suspend with devices connected for a64
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
- cdc-acm: fix BREAK rx code path adding necessary calls
- USB: cdc-acm: untangle a circular dependency between callback and softint
- USB: cdc-acm: downgrade message to debug
- USB: cdc-acm: fix use-after-free after probe failure
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
- staging: rtl8192e: Fix incorrect source in memcpy()
- staging: rtl8192e: Change state information from u16 to u8
- drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
- ARM: dts: am33xx: add aliases for mmc interfaces
- net: pxa168_eth: Fix a potential data race in pxa168_eth_remove
- mISDN: fix crash in fritzpci
- mac80211: choose first enabled channel for monitor
- drm/msm: Ratelimit invalid-fence message
- platform/x86: thinkpad_acpi: Allow the FnLock LED to change state
- x86/build: Turn off -fcf-protection for realmode targets
- scsi: target: pscsi: Clean up after failure in pscsi_map_sg()
- ia64: mca: allocate early mca with GFP_ATOMIC
- cifs: revalidate mapping when we open files for SMB1 POSIX
- cifs: Silently ignore unknown oplock break handle
- init/Kconfig: make COMPILE_TEST depend on !S390
- init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM
- ia64: fix format strings for err_inject
- ALSA: aloop: Fix initialization of controls
- ASoC: intel: atom: Stop advertising non working S24LE support
- nfc: fix refcount leak in llcp_sock_bind()
- nfc: fix refcount leak in llcp_sock_connect()
- nfc: fix memory leak in llcp_sock_connect()
- nfc: Avoid endless loops caused by repeated llcp_sock_connect()
- xen/evtchn: Change irq_info lock to raw_spinlock_t
- net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh
- ia64: fix user_stack_pointer() for ptrace()
- ocfs2: fix deadlock between setattr and dio_end_io_write
- fs: direct-io: fix missing sdio->boundary
- parisc: parisc-agp requires SBA IOMMU driver
- parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers
- ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin
- batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
- net: ensure mac header is set in virtio_net_hdr_to_skb()
- net: sched: sch_teql: fix null-pointer dereference
- usbip: add sysfs_lock to synchronize sysfs code paths
- usbip: stub-dev synchronize sysfs code paths
- usbip: synchronize event handler with sysfs code paths
- i2c: turn recovery error on init to debug
- regulator: bd9571mwv: Fix AVS and DVFS voltage range
- ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips
- amd-xgbe: Update DMA coherency values
- sch_red: fix off-by-one checks in red_check_params()
- gianfar: Handle error code at MAC address change
- net:tipc: Fix a double free in tipc_sk_mcast_rcv
- ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces
- net/ncsi: Avoid channel_monitor hrtimer deadlock
- ASoC: sunxi: sun4i-codec: fill ASoC card owner
- soc/fsl: qbman: fix conflicting alignment attributes
- clk: fix invalid usage of list cursor in register
- clk: fix invalid usage of list cursor in unregister
- workqueue: Move the position of debug_work_activate() in __queue_work()
- s390/cpcmd: fix inline assembly register clobbering
- net/mlx5: Fix placement of log_max_flow_counter
- RDMA/cxgb4: check for ipv6 address properly while destroying listener
- clk: socfpga: fix iomem pointer cast on 64-bit
- net/ncsi: Add generic netlink family
- net/ncsi: Refactor MAC, VLAN filters
- net/ncsi: Avoid GFP_KERNEL in response handler
- cfg80211: remove WARN_ON() in cfg80211_sme_connect
- net: tun: set tun->dev->addr_len during TUNSETLINK processing
- drivers: net: fix memory leak in atusb_probe
- drivers: net: fix memory leak in peak_usb_create_dev
- net: mac802154: Fix general protection fault
- net: ieee802154: nl-mac: fix check on panid
- net: ieee802154: fix nl802154 del llsec key
- net: ieee802154: fix nl802154 del llsec dev
- net: ieee802154: fix nl802154 add llsec key
- net: ieee802154: fix nl802154 del llsec devkey
- net: ieee802154: forbid monitor for set llsec params
- net: ieee802154: forbid monitor for del llsec seclevel
- net: ieee802154: stop dump llsec params for monitors
- Revert "cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting
cifs_sb->prepath."
- KVM: arm64: Hide system instruction access to Trace registers
- KVM: arm64: Disable guest access to trace filter controls
- drm/imx: imx-ldb: fix out of bounds array access warning
- gfs2: report "already frozen/thawed" errors
- block: only update parent bi_status when bio fail
- net: phy: broadcom: Only advertise EEE for supported modes
- netfilter: x_tables: fix compat match/target pad out-of-bound write
- perf map: Tighten snprintf() string precision to pass gcc check on some
32-bit arches
- xen/events: fix setting irq affinity
- net: hso: fix null-ptr-deref during tty device unregistration
- usbip: vudc synchronize sysfs code paths
- net: xfrm: Localize sequence counter per network namespace
- i40e: Added Asym_Pause to supported link modes
- i40e: Fix kernel oops when i40e driver removes VF's
- drm/tegra: dc: Don't set PLL clock to 0Hz
- riscv,entry: fix misaligned base for excp_vect_table
* s390x broken with unknown syscall number on kernels < 5.8 (LP: #1895132)
- s390/ptrace: return -ENOSYS when invalid syscall is supplied
- s390/ptrace: pass invalid syscall numbers to tracing
* Bionic update: upstream stable patchset 2021-04-14 (LP: #1923897)
- uapi: nfnetlink_cthelper.h: fix userspace compilation error
- ath9k: fix transmitting to stations in dynamic SMPS mode
- net: Fix gro aggregation for udp encaps with zero csum
- net: Introduce parse_protocol header_ops callback
- net: check if protocol extracted by virtio_net_hdr_set_proto is correct
- net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0
- can: skb: can_skb_set_owner(): fix ref counting if socket was closed before
setting skb ownership
- can: flexcan: assert FRZ bit in flexcan_chip_freeze()
- can: flexcan: enable RX FIFO after FRZ/HALT valid
- netfilter: x_tables: gpf inside xt_find_revision()
- cifs: return proper error code in statfs(2)
- scripts/recordmcount.{c,pl}: support -ffunction-sections .text.* section
names
- Revert "mm, slub: consider rest of partial list if acquire_slab() fails"
- sh_eth: fix TRSCER mask for SH771x
- net/mlx4_en: update moderation when config reset
- net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10
- net: sched: avoid duplicates in classes dump
- net: usb: qmi_wwan: allow qmimux add/del with master up
- cipso,calipso: resolve a number of problems with the DOI refcounts
- net: lapbether: Remove netif_start_queue / netif_stop_queue
- net: davicom: Fix regulator not turned off on failed probe
- net: davicom: Fix regulator not turned off on driver removal
- net: stmmac: stop each tx channel independently
- perf traceevent: Ensure read cmdlines are null terminated.
- s390/cio: return -EFAULT if copy_to_user() fails again
- drm/compat: Clear bounce structures
- drm: meson_drv add shutdown function
- s390/cio: return -EFAULT if copy_to_user() fails
- media: usbtv: Fix deadlock on suspend
- net: phy: fix save wrong speed and duplex problem if autoneg is on
- udf: fix silent AED tagLocation corruption
- mmc: mxs-mmc: Fix a resource leak in an error handling path in
'mxs_mmc_probe()'
- mmc: mediatek: fix race condition between msdc_request_timeout and irq
- powerpc: improve handling of unrecoverable system reset
- powerpc/perf: Record counter overflow always if SAMPLE_IP is unset
- PCI: xgene-msi: Fix race in installing chained irq handler
- PCI: mediatek: Add missing of_node_put() to fix reference leak
- s390/smp: __smp_rescan_cpus() - move cpumask away from stack
- scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling
- ALSA: hda/hdmi: Cancel pending works before suspend
- ALSA: hda: Drop the BATCH workaround for AMD controllers
- ALSA: hda: Avoid spurious unsol event handling during S3/S4
- ALSA: usb-audio: Fix "cannot get freq eq" errors on Dell AE515 sound bar
- Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file
capabilities")
- s390/dasd: fix hanging DASD driver unbind
- s390/dasd: fix hanging IO request during DASD driver unbind
- mmc: core: Fix partition switch time for eMMC
- Goodix Fingerprint device is not a modem
- USB: gadget: u_ether: Fix a configfs return code
- usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio
slot
- usb: gadget: f_uac1: stop playback on function disable
- usb: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM
- xhci: Improve detection of device initiated wake signal.
- usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing
- USB: serial: io_edgeport: fix memory leak in edge_startup
- USB: serial: ch341: add new Product ID
- USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter
- USB: serial: cp210x: add some more GE USB IDs
- usbip: fix stub_dev to check for stream socket
- usbip: fix vhci_hcd to check for stream socket
- usbip: fix vudc to check for stream socket
- usbip: fix vhci_hcd attach_store() races leading to gpf
- staging: rtl8192u: fix ->ssid overflow in r8192_wx_set_scan()
- staging: rtl8188eu: prevent ->ssid overflow in rtw_wx_set_scan()
- staging: rtl8712: unterminated string leads to read overflow
- staging: rtl8188eu: fix potential memory corruption in
rtw_check_beacon_data()
- staging: ks7010: prevent buffer overflow in ks_wlan_set_scan()
- staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd
- staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan
- staging: comedi: addi_apci_1032: Fix endian problem for COS sample
- staging: comedi: addi_apci_1500: Fix endian problem for command sample
- staging: comedi: adv_pci1710: Fix endian problem for AI command data
- staging: comedi: das6402: Fix endian problem for AI command data
- staging: comedi: das800: Fix endian problem for AI command data
- staging: comedi: dmm32at: Fix endian problem for AI command data
- staging: comedi: me4000: Fix endian problem for AI command data
- staging: comedi: pcl711: Fix endian problem for AI command data
- staging: comedi: pcl818: Fix endian problem for AI command data
- sh_eth: fix TRSCER mask for R7S72100
- NFSv4.2: fix return value of _nfs4_get_security_label()
- block: rsxx: fix error return code of rsxx_pci_probe()
- configfs: fix a use-after-free in __configfs_open_file
- stop_machine: mark helpers __always_inline
- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
- powerpc/64s: Fix instruction encoding for lis in ppc_function_entry()
- binfmt_misc: fix possible deadlock in bm_register_write
- hwmon: (lm90) Fix max6658 sporadic wrong temperature reading
- KVM: arm64: Fix exclusive limit for IPA size
- xen/events: reset affinity of 2-level event when tearing it down
- xen/events: don't unmask an event channel when an eoi is pending
- xen/events: avoid handling the same event on two cpus at the same time
- tcp: add sanity tests to TCP_QUEUE_SEQ
- net: qrtr: fix error return code of qrtr_sendmsg()
- net: stmmac: fix watchdog timeout during suspend/resume stress test
- i2c: rcar: optimize cacheline to minimize HW race condition
- powerpc/pci: Add ppc_md.discover_phbs()
- PCI: Fix pci_register_io_range() memory leak
- i40e: Fix memory leak in i40e_probe
- ALSA: usb: Add Plantronics C320-M USB ctrl msg delay quirk
- ALSA: usb-audio: Apply the control quirk to Plantronics headsets
- mmc: cqhci: Fix random crash when remove mmc module/card
- usbip: fix vudc usbip_sockfd_store races leading to gpf
- net: dsa: b53: Support setting learning on port
- ext4: check journal inode extents more carefully
- perf tools: Use %define api.pure full instead of %pure-parser
- tools build feature: Check if get_current_dir_name() is available
- tools build feature: Check if eventfd() is available
- tools build: Check if gettid() is available before providing helper
- tools build feature: Check if pthread_barrier_t is available
- btrfs: fix race when cloning extent buffer during rewind of an old root
- nvmet: don't check iosqes,iocqes for discovery controllers
- NFSD: Repair misuse of sv_lock in 5.10.16-rt30.
- svcrdma: disable timeouts on rdma backchannel
- sunrpc: fix refcount leak for rpc auth modules
- net/qrtr: fix __netdev_alloc_skb call
- scsi: lpfc: Fix some error codes in debugfs
- nvme-rdma: fix possible hang when failing to set io queues
- usb-storage: Add quirk to defeat Kindle's automatic unload
- USB: replace hardcode maximum usb string length by definition
- usb: gadget: configfs: Fix KASAN use-after-free
- iio:adc:stm32-adc: Add HAS_IOMEM dependency
- iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel
- iio: adis16400: Fix an error code in adis16400_initial_setup()
- iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler
- iio: hid-sensor-humidity: Fix alignment issue of timestamp channel
- iio: hid-sensor-prox: Fix scale not correct issue
- iio: hid-sensor-temperature: Fix issues of timestamp channel
- PCI: rpadlpar: Fix potential drc_name corruption in store functions
- perf/x86/intel: Fix a crash caused by zero PEBS status
- x86/ioapic: Ignore IRQ2 again
- kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data()
- x86: Move TS_COMPAT back to asm/thread_info.h
- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
- ext4: find old entry again if failed to rename whiteout
- ext4: do not try to set xattr into ea_inode if value is empty
- ext4: fix potential error in ext4_do_update_inode
- genirq: Disable interrupts for force threaded handlers
- btrfs: fix slab cache flags for free space tree bitmap
- powerpc: Force inlining of cpu_has_feature() to avoid build failure
- usbip: Fix incorrect double assignment to udc->ud.tcp_rx
- x86/apic/of: Fix CPU devicetree-node lookups
-- Ian May <email address hidden> Thu, 13 May 2021 16:25:36 -0500
-
linux-aws (4.15.0-1102.109) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1102.109 -proposed tracker (LP: #1926970)
[ Ubuntu: 4.15.0-143.147 ]
* bionic/linux: 4.15.0-143.147 -proposed tracker (LP: #1923811)
* CVE-2021-29650
- netfilter: x_tables: Use correct memory barriers.
* LRMv4: switch to signing nvidia modules via the Ubuntu Modules signing key
(LP: #1918134)
- [Packaging] dkms-build{,--nvidia-N} sync back from LRMv4
* Security-Fix Xen XSA 371 for Kernel 5.4.0-71 (LP: #1921902) //
CVE-2021-28688
- xen-blkback: don't leak persistent grants from xen_blkbk_map()
* CVE-2021-20292
- drm/ttm/nouveau: don't call tt destroy callback on alloc failure.
* CVE-2021-29264
- gianfar: fix jumbo packets+napi+rx overrun crash
* CVE-2021-29265
- usbip: fix stub_dev usbip_sockfd_store() races leading to gpf
* Bcache bypasse writeback on caching device with fragmentation (LP: #1900438)
- bcache: consider the fragmentation when update the writeback rate
* Bionic update: upstream stable patchset 2021-03-31 (LP: #1922124)
- net: usb: qmi_wwan: support ZTE P685M modem
- scripts: use pkg-config to locate libcrypto
- scripts: set proper OpenSSL include dir also for sign-file
- hugetlb: fix update_and_free_page contig page struct assumption
- drm/virtio: use kvmalloc for large allocations
- virtio/s390: implement virtio-ccw revision 2 correctly
- arm64 module: set plt* section addresses to 0x0
- arm64: Avoid redundant type conversions in xchg() and cmpxchg()
- arm64: cmpxchg: Use "K" instead of "L" for ll/sc immediate constraint
- arm64: Use correct ll/sc atomic constraints
- JFS: more checks for invalid superblock
- media: mceusb: sanity check for prescaler value
- xfs: Fix assert failure in xfs_setattr_size()
- smackfs: restrict bytes count in smackfs write functions
- net: fix up truesize of cloned skb in skb_prepare_for_shift()
- mm/hugetlb.c: fix unnecessary address expansion of pmd sharing
- net: bridge: use switchdev for port flags set through sysfs too
- dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/
- staging: fwserial: Fix error handling in fwserial_create
- x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk
- vt/consolemap: do font sum unsigned
- wlcore: Fix command execute failure 19 for wl12xx
- pktgen: fix misuse of BUG_ON() in pktgen_thread_worker()
- ath10k: fix wmi mgmt tx queue full due to race condition
- x86/build: Treat R_386_PLT32 relocation as R_386_PC32
- Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
- staging: most: sound: add sanity check for function argument
- media: uvcvideo: Allow entities with no pads
- f2fs: handle unallocated section and zone on pinned/atgc
- parisc: Bump 64-bit IRQ stack size to 64 KB
- Xen/gnttab: handle p2m update errors on a per-slot basis
- xen-netback: respect gnttab_map_refs()'s return value
- zsmalloc: account the number of compacted pages correctly
- swap: fix swapfile read/write offset
- media: v4l: ioctl: Fix memory leak in video_usercopy
- PCI: Add a REBAR size quirk for Sapphire RX 5600 XT Pulse
- drm/amd/display: Guard against NULL pointer deref when get_i2c_info fails
- f2fs: fix to set/clear I_LINKABLE under i_lock
- btrfs: fix error handling in commit_fs_roots
- ALSA: hda/realtek: Add quirk for Clevo NH55RZQ
- ALSA: hda/realtek: Apply dual codec quirks for MSI Godlike X570 board
- btrfs: raid56: simplify tracking of Q stripe presence
- btrfs: fix raid6 qstripe kmap
- usbip: tools: fix build error for multiple definition
- ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits
- rsxx: Return -EFAULT if copy_to_user() fails
- dm table: fix iterate_devices based device capability checks
- dm table: fix DAX iterate_devices based device capability checks
- dm table: fix zoned iterate_devices based device capability checks
- iommu/amd: Fix sleeping in atomic in increase_address_space()
- mwifiex: pcie: skip cancel_work_sync() on reset failure path
- platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines
- platform/x86: acer-wmi: Cleanup accelerometer device handling
- platform/x86: acer-wmi: Add new force_caps module parameter
- platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag
- platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices
- platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch
10E SW3-016
- PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller
- misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom
- drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register
- Revert "zram: close udev startup race condition as default groups"
- HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube Adapter
* Bionic update: upstream stable patchset 2021-03-16 (LP: #1919380)
- fgraph: Initialize tracing_graph_pause at task creation
- tracing: Do not count ftrace events in top level enable output
- tracing: Check length before giving out the filter buffer
- arm/xen: Don't probe xenbus as part of an early initcall
- MIPS: BMIPS: Fix section mismatch warning
- arm64: dts: rockchip: Fix PCIe DT properties on rk3399
- platform/x86: hp-wmi: Disable tablet-mode reporting by default
- ovl: perform vfs_getxattr() with mounter creds
- cap: fix conversions on getxattr
- ovl: skip getxattr of security labels
- ARM: dts: lpc32xx: Revert set default clock rate of HCLK PLL
- ARM: ensure the signal page contains defined contents
- bpf: Check for integer overflow when using roundup_pow_of_two()
- netfilter: xt_recent: Fix attempt to update deleted entry
- xen/netback: avoid race in xenvif_rx_ring_slots_available()
- netfilter: conntrack: skip identical origin tuple in same zone only
- usb: dwc3: ulpi: fix checkpatch warning
- usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one
- net/vmw_vsock: improve locking in vsock_connect_timeout()
- net: watchdog: hold device global xmit lock during tx disable
- vsock/virtio: update credit only if socket is not closed
- vsock: fix locking in vsock_shutdown()
- i2c: stm32f7: fix configuration of the digital filter
- h8300: fix PREEMPTION build, TI_PRE_COUNT undefined
- x86/build: Disable CET instrumentation in the kernel for 32-bit too
- trace: Use -mcount-record for dynamic ftrace
- tracing: Fix SKIP_STACK_VALIDATION=1 build due to bad merge with -mrecord-
mcount
- tracing: Avoid calling cc-option -mrecord-mcount for every Makefile
- Xen/x86: don't bail early from clear_foreign_p2m_mapping()
- Xen/x86: also check kernel mapping in set_foreign_p2m_mapping()
- Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages()
- Xen/gntdev: correct error checking in gntdev_map_grant_pages()
- xen/arm: don't ignore return errors from set_phys_to_machine
- xen-blkback: don't "handle" error by BUG()
- xen-netback: don't "handle" error by BUG()
- xen-scsiback: don't "handle" error by BUG()
- xen-blkback: fix error handling in xen_blkbk_map()
- scsi: qla2xxx: Fix crash during driver load on big endian machines
- kvm: check tlbs_dirty directly
- drm/amd/display: Free atomic state after drm_atomic_commit
- riscv: virt_addr_valid must check the address belongs to linear mapping
- ARM: kexec: fix oops after TLB are invalidated
- net: hns3: add a check for queue_id in hclge_reset_vf_queue()
- firmware_loader: align .builtin_fw to 8
- net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
- ovl: expand warning in ovl_d_real()
- net: qrtr: Fix port ID for control messages
- HID: make arrays usage and value to be the same
- usb: quirks: add quirk to start video capture on ELMO L-12F document camera
reliable
- ntfs: check for valid standard information attribute
- arm64: tegra: Add power-domain for Tegra210 HDA
- NET: usb: qmi_wwan: Adding support for Cinterion MV31
- cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath.
- scripts/recordmcount.pl: support big endian for ARCH sh
- vmlinux.lds.h: add DWARF v5 sections
- kdb: Make memory allocations more robust
- MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section
- random: fix the RNDRESEEDCRNG ioctl
- Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the
probe function
- Bluetooth: Fix initializing response id after clearing struct
- ARM: dts: exynos: correct PMIC interrupt trigger level on Monk
- ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato
- ARM: dts: exynos: correct PMIC interrupt trigger level on Spring
- ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa
- arm64: dts: exynos: correct PMIC interrupt trigger level on TM2
- arm64: dts: exynos: correct PMIC interrupt trigger level on Espresso
- cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove()
- usb: gadget: u_audio: Free requests only after callback
- Bluetooth: drop HCI device reference before return
- Bluetooth: Put HCI device if inquiry procedure interrupts
- ARM: dts: Configure missing thermal interrupt for 4430
- usb: dwc2: Do not update data length if it is 0 on inbound transfers
- usb: dwc2: Abort transaction after errors with unknown reason
- usb: dwc2: Make "trimming xfer length" a debug message
- staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules
- arm64: dts: msm8916: Fix reserved and rfsa nodes unit address
- ARM: s3c: fix fiq for clang IAS
- bpf_lru_list: Read double-checked variable once without lock
- ath9k: fix data bus crash when setting nf_override via debugfs
- bnxt_en: reverse order of TX disable and carrier off
- xen/netback: fix spurious event detection for common event case
- mac80211: fix potential overflow when multiplying to u32 integers
- b43: N-PHY: Fix the update of coef for the PHY revision >= 3case
- ibmvnic: skip send_request_unmap for timeout reset
- net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout
- net: amd-xgbe: Reset link when the link never comes back
- net: mvneta: Remove per-cpu queue mapping for Armada 3700
- fbdev: aty: SPARC64 requires FB_ATY_CT
- drm/gma500: Fix error return code in psb_driver_load()
- gma500: clean up error handling in init
- crypto: sun4i-ss - fix kmap usage
- MIPS: c-r4k: Fix section mismatch for loongson2_sc_init
- MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0
- media: i2c: ov5670: Fix PIXEL_RATE minimum value
- media: vsp1: Fix an error handling path in the probe function
- media: media/pci: Fix memleak in empress_init
- media: tm6000: Fix memleak in tm6000_start_stream
- ASoC: cs42l56: fix up error handling in probe
- crypto: bcm - Rename struct device_private to bcm_device_private
- media: lmedm04: Fix misuse of comma
- media: qm1d1c0042: fix error return code in qm1d1c0042_init()
- media: cx25821: Fix a bug when reallocating some dma memory
- media: pxa_camera: declare variable when DEBUG is defined
- media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values
- ata: ahci_brcm: Add back regulators management
- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind()
- btrfs: clarify error returns values in __load_free_space_cache
- hwrng: timeriomem - Fix cooldown period calculation
- crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key()
- ima: Free IMA measurement buffer on error
- ima: Free IMA measurement buffer after kexec syscall
- fs/jfs: fix potential integer overflow on shift of a int
- jffs2: fix use after free in jffs2_sum_write_data()
- capabilities: Don't allow writing ambiguous v3 file capabilities
- clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL
- quota: Fix memory leak when handling corrupted quota file
- spi: cadence-quadspi: Abort read if dummy cycles required are too many
- HID: core: detect and skip invalid inputs to snto32()
- dmaengine: fsldma: Fix a resource leak in the remove function
- dmaengine: fsldma: Fix a resource leak in an error handling path of the
probe function
- dmaengine: hsu: disable spurious interrupt
- mfd: bd9571mwv: Use devm_mfd_add_devices()
- fdt: Properly handle "no-map" field in the memory region
- of/fdt: Make sure no-map does not remove already reserved regions
- power: reset: at91-sama5d2_shdwc: fix wkupdbc mask
- rtc: s5m: select REGMAP_I2C
- clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined
- regulator: axp20x: Fix reference cout leak
- certs: Fix blacklist flag type confusion
- spi: atmel: Put allocated master before return
- isofs: release buffer head before return
- auxdisplay: ht16k33: Fix refresh rate handling
- IB/umad: Return EIO in case of when device disassociated
- powerpc/47x: Disable 256k page size
- mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe
- ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores
- amba: Fix resource leak for drivers without .remove
- tracepoint: Do not fail unregistering a probe due to memory failure
- perf tools: Fix DSO filtering when not finding a map for a sampled address
- RDMA/rxe: Fix coding error in rxe_recv.c
- spi: stm32: properly handle 0 byte transfer
- mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
- powerpc/pseries/dlpar: handle ibm, configure-connector delay status
- powerpc/8xx: Fix software emulation interrupt
- spi: pxa2xx: Fix the controller numbering for Wildcat Point
- perf intel-pt: Fix missing CYC processing in PSB
- perf test: Fix unaligned access in sample parsing test
- Input: elo - fix an error code in elo_connect()
- sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set
- misc: eeprom_93xx46: Fix module alias to enable module autoprobe
- misc: eeprom_93xx46: Add module alias to avoid breaking support for non
device tree users
- pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare()
- VMCI: Use set_page_dirty_lock() when unregistering guest memory
- PCI: Align checking of syscall user config accessors
- drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY)
- ext4: fix potential htree index checksum corruption
- i40e: Fix flow for IPv6 next header (extension header)
- i40e: Fix overwriting flow control settings during driver loading
- net/mlx4_core: Add missed mlx4_free_cmd_mailbox()
- ocfs2: fix a use after free on error
- mm/memory.c: fix potential pte_unmap_unlock pte error
- mm/hugetlb: fix potential double free in hugetlb_register_node() error path
- arm64: Add missing ISB after invalidating TLB in __primary_switch
- i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition
- mm/rmap: fix potential pte_unmap on an not mapped pte
- scsi: bnx2fc: Fix Kconfig warning & CNIC build errors
- blk-settings: align max_sectors on "logical_block_size" boundary
- ACPI: property: Fix fwnode string properties matching
- ACPI: configfs: add missing check after configfs_register_default_group()
- HID: wacom: Ignore attempts to overwrite the touch_max value from HID
- Input: raydium_ts_i2c - do not send zero length
- Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox
Series X|S
- Input: joydev - prevent potential read overflow in ioctl
- Input: i8042 - add ASUS Zenbook Flip to noselftest list
- USB: serial: option: update interface mapping for ZTE P685M
- usb: musb: Fix runtime PM race in musb_queue_resume_work
- USB: serial: mos7840: fix error code in mos7840_write()
- USB: serial: mos7720: fix error code in mos7720_write()
- usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1
- usb: dwc3: gadget: Fix dep->interval for fullspeed interrupt
- ALSA: hda/realtek: modify EAPD in the ALC886
- tpm_tis: Fix check_locality for correct locality acquisition
- KEYS: trusted: Fix migratable=1 failing
- btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root
- btrfs: fix reloc root leak with 0 ref reloc roots on recovery
- btrfs: fix extent buffer leak on failure to copy root
- crypto: sun4i-ss - checking sg length is not sufficient
- crypto: sun4i-ss - handle BigEndian for cipher
- seccomp: Add missing return in non-void function
- drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue
- staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table
- x86/reboot: Force all cpus to exit VMX root if VMX is supported
- floppy: reintroduce O_NDELAY fix
- arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing
- watchdog: mei_wdt: request stop on unregister
- mtd: spi-nor: hisi-sfc: Put child node np on error path
- fs/affs: release old buffer head on error path
- hugetlb: fix copy_huge_page_from_user contig page struct assumption
- mm: hugetlb: fix a race between freeing and dissolving the page
- libnvdimm/dimm: Avoid race between probe and available_slots_show()
- module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols
- mmc: sdhci-esdhc-imx: fix kernel panic when remove module
- gpio: pcf857x: Fix missing first interrupt
- printk: fix deadlock when kernel panic
- f2fs: fix out-of-repair __setattr_copy()
- sparc32: fix a user-triggerable oops in clear_user()
- gfs2: Don't skip dlm unlock if glock has an lvb
- dm era: Recover committed writeset after crash
- dm era: Verify the data block size hasn't changed
- dm era: Fix bitset memory leaks
- dm era: Use correct value size in equality function of writeset tree
- dm era: Reinitialize bitset cache before digesting a new writeset
- dm era: only resize metadata in preresume
- icmp: introduce helper for nat'd source address in network device context
- icmp: allow icmpv6_ndo_send to work with CONFIG_IPV6=n
- gtp: use icmp_ndo_send helper
- sunvnet: use icmp_ndo_send helper
- ipv6: icmp6: avoid indirect call for icmpv6_send()
- ipv6: silence compilation warning for non-IPV6 builds
- net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending
- dm era: Update in-core bitset after committing the metadata
- USB: quirks: sort quirk entries
- jump_label/lockdep: Assert we hold the hotplug lock for _cpuslocked()
operations
- ARM: dts: exynos: correct PMIC interrupt trigger level on Artik 5
- ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid XU3 family
- arm64: dts: allwinner: A64: properly connect USB PHY to port 0
- arm64: dts: allwinner: Drop non-removable from SoPine/LTS SD card
- arm64: dts: allwinner: A64: Limit MMC2 bus frequency to 150 MHz
- memory: ti-aemif: Drop child node when jumping out loop
- ibmvnic: add memory barrier to protect long term buffer
- net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning
- drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition
- drm/amd/display: Fix 10/12 bpc setup in DCE output bit depth reduction.
- crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error)
- f2fs: fix to avoid inconsistent quota data
- regulator: s5m8767: Drop regulators OF node reference
- mmc: renesas_sdhi_internal_dmac: Fix DMA buffer alignment from 8 to
128-bytes
- RDMA/rxe: Correct skb on loopback path
- i40e: Add zero-initialization of AQ command structures
- i40e: Fix add TC filter for IPv6
- r8169: fix jumbo packet handling on RTL8168e
- USB: serial: ftdi_sio: fix FTX sub-integer prescaler
- crypto: arm64/sha - add missing module aliases
- misc: rtsx: init of rts522a add OCP power off when no card is present
- seq_file: document how per-entry resources are managed.
- x86: fix seq_file iteration for pat/memtype.c
-- Tim Gardner <email address hidden> Mon, 03 May 2021 13:37:33 -0600
-
linux-aws (4.15.0-1101.108) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1101.108 -proposed tracker (LP: #1926302)
* locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (LP: #1926184)
- locking/barriers: Introduce smp_cond_load_relaxed() and
atomic_cond_read_relaxed()
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath()
-- Tim Gardner <email address hidden> Tue, 27 Apr 2021 09:12:22 -0600
-
linux-aws (4.15.0-1100.107) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1100.107 -proposed tracker (LP: #1923788)
[ Ubuntu: 4.15.0-143.147 ]
* bionic/linux: 4.15.0-143.147 -proposed tracker (LP: #1923811)
* CVE-2021-29650
- netfilter: x_tables: Use correct memory barriers.
* LRMv4: switch to signing nvidia modules via the Ubuntu Modules signing key
(LP: #1918134)
- [Packaging] dkms-build{,--nvidia-N} sync back from LRMv4
* Security-Fix Xen XSA 371 for Kernel 5.4.0-71 (LP: #1921902) //
CVE-2021-28688
- xen-blkback: don't leak persistent grants from xen_blkbk_map()
* CVE-2021-20292
- drm/ttm/nouveau: don't call tt destroy callback on alloc failure.
* CVE-2021-29264
- gianfar: fix jumbo packets+napi+rx overrun crash
* CVE-2021-29265
- usbip: fix stub_dev usbip_sockfd_store() races leading to gpf
* Bcache bypasse writeback on caching device with fragmentation (LP: #1900438)
- bcache: consider the fragmentation when update the writeback rate
* Bionic update: upstream stable patchset 2021-03-31 (LP: #1922124)
- net: usb: qmi_wwan: support ZTE P685M modem
- scripts: use pkg-config to locate libcrypto
- scripts: set proper OpenSSL include dir also for sign-file
- hugetlb: fix update_and_free_page contig page struct assumption
- drm/virtio: use kvmalloc for large allocations
- virtio/s390: implement virtio-ccw revision 2 correctly
- arm64 module: set plt* section addresses to 0x0
- arm64: Avoid redundant type conversions in xchg() and cmpxchg()
- arm64: cmpxchg: Use "K" instead of "L" for ll/sc immediate constraint
- arm64: Use correct ll/sc atomic constraints
- JFS: more checks for invalid superblock
- media: mceusb: sanity check for prescaler value
- xfs: Fix assert failure in xfs_setattr_size()
- smackfs: restrict bytes count in smackfs write functions
- net: fix up truesize of cloned skb in skb_prepare_for_shift()
- mm/hugetlb.c: fix unnecessary address expansion of pmd sharing
- net: bridge: use switchdev for port flags set through sysfs too
- dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/
- staging: fwserial: Fix error handling in fwserial_create
- x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk
- vt/consolemap: do font sum unsigned
- wlcore: Fix command execute failure 19 for wl12xx
- pktgen: fix misuse of BUG_ON() in pktgen_thread_worker()
- ath10k: fix wmi mgmt tx queue full due to race condition
- x86/build: Treat R_386_PLT32 relocation as R_386_PC32
- Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
- staging: most: sound: add sanity check for function argument
- media: uvcvideo: Allow entities with no pads
- f2fs: handle unallocated section and zone on pinned/atgc
- parisc: Bump 64-bit IRQ stack size to 64 KB
- Xen/gnttab: handle p2m update errors on a per-slot basis
- xen-netback: respect gnttab_map_refs()'s return value
- zsmalloc: account the number of compacted pages correctly
- swap: fix swapfile read/write offset
- media: v4l: ioctl: Fix memory leak in video_usercopy
- PCI: Add a REBAR size quirk for Sapphire RX 5600 XT Pulse
- drm/amd/display: Guard against NULL pointer deref when get_i2c_info fails
- f2fs: fix to set/clear I_LINKABLE under i_lock
- btrfs: fix error handling in commit_fs_roots
- ALSA: hda/realtek: Add quirk for Clevo NH55RZQ
- ALSA: hda/realtek: Apply dual codec quirks for MSI Godlike X570 board
- btrfs: raid56: simplify tracking of Q stripe presence
- btrfs: fix raid6 qstripe kmap
- usbip: tools: fix build error for multiple definition
- ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits
- rsxx: Return -EFAULT if copy_to_user() fails
- dm table: fix iterate_devices based device capability checks
- dm table: fix DAX iterate_devices based device capability checks
- dm table: fix zoned iterate_devices based device capability checks
- iommu/amd: Fix sleeping in atomic in increase_address_space()
- mwifiex: pcie: skip cancel_work_sync() on reset failure path
- platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines
- platform/x86: acer-wmi: Cleanup accelerometer device handling
- platform/x86: acer-wmi: Add new force_caps module parameter
- platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag
- platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices
- platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch
10E SW3-016
- PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller
- misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom
- drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register
- Revert "zram: close udev startup race condition as default groups"
- HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube Adapter
* Bionic update: upstream stable patchset 2021-03-16 (LP: #1919380)
- fgraph: Initialize tracing_graph_pause at task creation
- tracing: Do not count ftrace events in top level enable output
- tracing: Check length before giving out the filter buffer
- arm/xen: Don't probe xenbus as part of an early initcall
- MIPS: BMIPS: Fix section mismatch warning
- arm64: dts: rockchip: Fix PCIe DT properties on rk3399
- platform/x86: hp-wmi: Disable tablet-mode reporting by default
- ovl: perform vfs_getxattr() with mounter creds
- cap: fix conversions on getxattr
- ovl: skip getxattr of security labels
- ARM: dts: lpc32xx: Revert set default clock rate of HCLK PLL
- ARM: ensure the signal page contains defined contents
- bpf: Check for integer overflow when using roundup_pow_of_two()
- netfilter: xt_recent: Fix attempt to update deleted entry
- xen/netback: avoid race in xenvif_rx_ring_slots_available()
- netfilter: conntrack: skip identical origin tuple in same zone only
- usb: dwc3: ulpi: fix checkpatch warning
- usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one
- net/vmw_vsock: improve locking in vsock_connect_timeout()
- net: watchdog: hold device global xmit lock during tx disable
- vsock/virtio: update credit only if socket is not closed
- vsock: fix locking in vsock_shutdown()
- i2c: stm32f7: fix configuration of the digital filter
- h8300: fix PREEMPTION build, TI_PRE_COUNT undefined
- x86/build: Disable CET instrumentation in the kernel for 32-bit too
- trace: Use -mcount-record for dynamic ftrace
- tracing: Fix SKIP_STACK_VALIDATION=1 build due to bad merge with -mrecord-
mcount
- tracing: Avoid calling cc-option -mrecord-mcount for every Makefile
- Xen/x86: don't bail early from clear_foreign_p2m_mapping()
- Xen/x86: also check kernel mapping in set_foreign_p2m_mapping()
- Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages()
- Xen/gntdev: correct error checking in gntdev_map_grant_pages()
- xen/arm: don't ignore return errors from set_phys_to_machine
- xen-blkback: don't "handle" error by BUG()
- xen-netback: don't "handle" error by BUG()
- xen-scsiback: don't "handle" error by BUG()
- xen-blkback: fix error handling in xen_blkbk_map()
- scsi: qla2xxx: Fix crash during driver load on big endian machines
- kvm: check tlbs_dirty directly
- drm/amd/display: Free atomic state after drm_atomic_commit
- riscv: virt_addr_valid must check the address belongs to linear mapping
- ARM: kexec: fix oops after TLB are invalidated
- net: hns3: add a check for queue_id in hclge_reset_vf_queue()
- firmware_loader: align .builtin_fw to 8
- net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
- ovl: expand warning in ovl_d_real()
- net: qrtr: Fix port ID for control messages
- HID: make arrays usage and value to be the same
- usb: quirks: add quirk to start video capture on ELMO L-12F document camera
reliable
- ntfs: check for valid standard information attribute
- arm64: tegra: Add power-domain for Tegra210 HDA
- NET: usb: qmi_wwan: Adding support for Cinterion MV31
- cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath.
- scripts/recordmcount.pl: support big endian for ARCH sh
- vmlinux.lds.h: add DWARF v5 sections
- kdb: Make memory allocations more robust
- MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section
- random: fix the RNDRESEEDCRNG ioctl
- Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the
probe function
- Bluetooth: Fix initializing response id after clearing struct
- ARM: dts: exynos: correct PMIC interrupt trigger level on Monk
- ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato
- ARM: dts: exynos: correct PMIC interrupt trigger level on Spring
- ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa
- arm64: dts: exynos: correct PMIC interrupt trigger level on TM2
- arm64: dts: exynos: correct PMIC interrupt trigger level on Espresso
- cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove()
- usb: gadget: u_audio: Free requests only after callback
- Bluetooth: drop HCI device reference before return
- Bluetooth: Put HCI device if inquiry procedure interrupts
- ARM: dts: Configure missing thermal interrupt for 4430
- usb: dwc2: Do not update data length if it is 0 on inbound transfers
- usb: dwc2: Abort transaction after errors with unknown reason
- usb: dwc2: Make "trimming xfer length" a debug message
- staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules
- arm64: dts: msm8916: Fix reserved and rfsa nodes unit address
- ARM: s3c: fix fiq for clang IAS
- bpf_lru_list: Read double-checked variable once without lock
- ath9k: fix data bus crash when setting nf_override via debugfs
- bnxt_en: reverse order of TX disable and carrier off
- xen/netback: fix spurious event detection for common event case
- mac80211: fix potential overflow when multiplying to u32 integers
- b43: N-PHY: Fix the update of coef for the PHY revision >= 3case
- ibmvnic: skip send_request_unmap for timeout reset
- net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout
- net: amd-xgbe: Reset link when the link never comes back
- net: mvneta: Remove per-cpu queue mapping for Armada 3700
- fbdev: aty: SPARC64 requires FB_ATY_CT
- drm/gma500: Fix error return code in psb_driver_load()
- gma500: clean up error handling in init
- crypto: sun4i-ss - fix kmap usage
- MIPS: c-r4k: Fix section mismatch for loongson2_sc_init
- MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0
- media: i2c: ov5670: Fix PIXEL_RATE minimum value
- media: vsp1: Fix an error handling path in the probe function
- media: media/pci: Fix memleak in empress_init
- media: tm6000: Fix memleak in tm6000_start_stream
- ASoC: cs42l56: fix up error handling in probe
- crypto: bcm - Rename struct device_private to bcm_device_private
- media: lmedm04: Fix misuse of comma
- media: qm1d1c0042: fix error return code in qm1d1c0042_init()
- media: cx25821: Fix a bug when reallocating some dma memory
- media: pxa_camera: declare variable when DEBUG is defined
- media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values
- ata: ahci_brcm: Add back regulators management
- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind()
- btrfs: clarify error returns values in __load_free_space_cache
- hwrng: timeriomem - Fix cooldown period calculation
- crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key()
- ima: Free IMA measurement buffer on error
- ima: Free IMA measurement buffer after kexec syscall
- fs/jfs: fix potential integer overflow on shift of a int
- jffs2: fix use after free in jffs2_sum_write_data()
- capabilities: Don't allow writing ambiguous v3 file capabilities
- clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL
- quota: Fix memory leak when handling corrupted quota file
- spi: cadence-quadspi: Abort read if dummy cycles required are too many
- HID: core: detect and skip invalid inputs to snto32()
- dmaengine: fsldma: Fix a resource leak in the remove function
- dmaengine: fsldma: Fix a resource leak in an error handling path of the
probe function
- dmaengine: hsu: disable spurious interrupt
- mfd: bd9571mwv: Use devm_mfd_add_devices()
- fdt: Properly handle "no-map" field in the memory region
- of/fdt: Make sure no-map does not remove already reserved regions
- power: reset: at91-sama5d2_shdwc: fix wkupdbc mask
- rtc: s5m: select REGMAP_I2C
- clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined
- regulator: axp20x: Fix reference cout leak
- certs: Fix blacklist flag type confusion
- spi: atmel: Put allocated master before return
- isofs: release buffer head before return
- auxdisplay: ht16k33: Fix refresh rate handling
- IB/umad: Return EIO in case of when device disassociated
- powerpc/47x: Disable 256k page size
- mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe
- ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores
- amba: Fix resource leak for drivers without .remove
- tracepoint: Do not fail unregistering a probe due to memory failure
- perf tools: Fix DSO filtering when not finding a map for a sampled address
- RDMA/rxe: Fix coding error in rxe_recv.c
- spi: stm32: properly handle 0 byte transfer
- mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
- powerpc/pseries/dlpar: handle ibm, configure-connector delay status
- powerpc/8xx: Fix software emulation interrupt
- spi: pxa2xx: Fix the controller numbering for Wildcat Point
- perf intel-pt: Fix missing CYC processing in PSB
- perf test: Fix unaligned access in sample parsing test
- Input: elo - fix an error code in elo_connect()
- sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set
- misc: eeprom_93xx46: Fix module alias to enable module autoprobe
- misc: eeprom_93xx46: Add module alias to avoid breaking support for non
device tree users
- pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare()
- VMCI: Use set_page_dirty_lock() when unregistering guest memory
- PCI: Align checking of syscall user config accessors
- drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY)
- ext4: fix potential htree index checksum corruption
- i40e: Fix flow for IPv6 next header (extension header)
- i40e: Fix overwriting flow control settings during driver loading
- net/mlx4_core: Add missed mlx4_free_cmd_mailbox()
- ocfs2: fix a use after free on error
- mm/memory.c: fix potential pte_unmap_unlock pte error
- mm/hugetlb: fix potential double free in hugetlb_register_node() error path
- arm64: Add missing ISB after invalidating TLB in __primary_switch
- i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition
- mm/rmap: fix potential pte_unmap on an not mapped pte
- scsi: bnx2fc: Fix Kconfig warning & CNIC build errors
- blk-settings: align max_sectors on "logical_block_size" boundary
- ACPI: property: Fix fwnode string properties matching
- ACPI: configfs: add missing check after configfs_register_default_group()
- HID: wacom: Ignore attempts to overwrite the touch_max value from HID
- Input: raydium_ts_i2c - do not send zero length
- Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox
Series X|S
- Input: joydev - prevent potential read overflow in ioctl
- Input: i8042 - add ASUS Zenbook Flip to noselftest list
- USB: serial: option: update interface mapping for ZTE P685M
- usb: musb: Fix runtime PM race in musb_queue_resume_work
- USB: serial: mos7840: fix error code in mos7840_write()
- USB: serial: mos7720: fix error code in mos7720_write()
- usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1
- usb: dwc3: gadget: Fix dep->interval for fullspeed interrupt
- ALSA: hda/realtek: modify EAPD in the ALC886
- tpm_tis: Fix check_locality for correct locality acquisition
- KEYS: trusted: Fix migratable=1 failing
- btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root
- btrfs: fix reloc root leak with 0 ref reloc roots on recovery
- btrfs: fix extent buffer leak on failure to copy root
- crypto: sun4i-ss - checking sg length is not sufficient
- crypto: sun4i-ss - handle BigEndian for cipher
- seccomp: Add missing return in non-void function
- drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue
- staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table
- x86/reboot: Force all cpus to exit VMX root if VMX is supported
- floppy: reintroduce O_NDELAY fix
- arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing
- watchdog: mei_wdt: request stop on unregister
- mtd: spi-nor: hisi-sfc: Put child node np on error path
- fs/affs: release old buffer head on error path
- hugetlb: fix copy_huge_page_from_user contig page struct assumption
- mm: hugetlb: fix a race between freeing and dissolving the page
- libnvdimm/dimm: Avoid race between probe and available_slots_show()
- module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols
- mmc: sdhci-esdhc-imx: fix kernel panic when remove module
- gpio: pcf857x: Fix missing first interrupt
- printk: fix deadlock when kernel panic
- f2fs: fix out-of-repair __setattr_copy()
- sparc32: fix a user-triggerable oops in clear_user()
- gfs2: Don't skip dlm unlock if glock has an lvb
- dm era: Recover committed writeset after crash
- dm era: Verify the data block size hasn't changed
- dm era: Fix bitset memory leaks
- dm era: Use correct value size in equality function of writeset tree
- dm era: Reinitialize bitset cache before digesting a new writeset
- dm era: only resize metadata in preresume
- icmp: introduce helper for nat'd source address in network device context
- icmp: allow icmpv6_ndo_send to work with CONFIG_IPV6=n
- gtp: use icmp_ndo_send helper
- sunvnet: use icmp_ndo_send helper
- ipv6: icmp6: avoid indirect call for icmpv6_send()
- ipv6: silence compilation warning for non-IPV6 builds
- net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending
- dm era: Update in-core bitset after committing the metadata
- USB: quirks: sort quirk entries
- jump_label/lockdep: Assert we hold the hotplug lock for _cpuslocked()
operations
- ARM: dts: exynos: correct PMIC interrupt trigger level on Artik 5
- ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid XU3 family
- arm64: dts: allwinner: A64: properly connect USB PHY to port 0
- arm64: dts: allwinner: Drop non-removable from SoPine/LTS SD card
- arm64: dts: allwinner: A64: Limit MMC2 bus frequency to 150 MHz
- memory: ti-aemif: Drop child node when jumping out loop
- ibmvnic: add memory barrier to protect long term buffer
- net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning
- drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition
- drm/amd/display: Fix 10/12 bpc setup in DCE output bit depth reduction.
- crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error)
- f2fs: fix to avoid inconsistent quota data
- regulator: s5m8767: Drop regulators OF node reference
- mmc: renesas_sdhi_internal_dmac: Fix DMA buffer alignment from 8 to
128-bytes
- RDMA/rxe: Correct skb on loopback path
- i40e: Add zero-initialization of AQ command structures
- i40e: Fix add TC filter for IPv6
- r8169: fix jumbo packet handling on RTL8168e
- USB: serial: ftdi_sio: fix FTX sub-integer prescaler
- crypto: arm64/sha - add missing module aliases
- misc: rtsx: init of rts522a add OCP power off when no card is present
- seq_file: document how per-entry resources are managed.
- x86: fix seq_file iteration for pat/memtype.c
-- Tim Gardner <email address hidden> Mon, 19 Apr 2021 09:45:12 -0600
-
linux-aws (4.15.0-1099.106) bionic; urgency=medium
[ Ubuntu: 4.15.0-142.146 ]
* overlayfs calls vfs_setxattr without cap_convert_nscap
- vfs: move cap_convert_nscap() call into vfs_setxattr()
* CVE-2021-29154
- SAUCE: bpf, x86: Validate computation of branch displacements for x86-64
-- Thadeu Lima de Souza Cascardo <email address hidden> Tue, 13 Apr 2021 10:11:54 -0300
-
linux-aws (4.15.0-1098.105) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1098.105 -proposed tracker (LP: #1919513)
* Enforce CONFIG_DRM_BOCHS=m (LP: #1916290)
- [Config] aws: Add CONFIG_DRM_BOCHS=m (enforced)
* Bionic update: upstream stable patchset 2021-02-26 (LP: #1917093)
- [Config] aws: Updateconfigs for USB_BDC_PCI
* Please trust Canonical Livepatch Service kmod signing key (LP: #1898716)
- [Config] aws: enable CONFIG_MODVERSIONS=y
- [Packaging] aws: build canonical-certs.pem from branch/arch certs
* aws: update Xen hibernation patch set (LP: #1913410)
- Revert "UBUNTU: SAUCE: xen-netfront: prevent unnecessary close on hibernate"
- Revert "UBUNTU SAUCE [aws]: xen: Only restore the ACPI SCI interrupt in
xen_restore_pirqs."
- Revert "UBUNTU SAUCE [aws]: xen: restore pirqs on resume from hibernation."
- Revert "UBUNTU SAUCE [aws]: block: xen-blkfront: consider new dom0 features
on restore"
- Revert "UBUNTU: SAUCE [aws] x86/xen: close event channels for PIRQs in
system core suspend callback"
- Revert "UBUNTU: SAUCE [aws] xen/events: add xen_shutdown_pirqs helper
function"
- Revert "UBUNTU: SAUCE [aws] x86/xen: save and restore steal clock"
- Revert "UBUNTU: SAUCE [aws] xen-time-introduce-xen_-save-restore-
_steal_clock"
- Revert "UBUNTU: SAUCE [aws] xen-netfront: add callbacks for PM suspend and
hibernation support"
- Revert "UBUNTU: SAUCE [aws] x86/xen: add system core suspend and resume
callbacks"
- Revert "UBUNTU: SAUCE [aws] x86/xen: Introduce new function to map
HYPERVISOR_shared_info on Resume"
- Revert "UBUNTU: SAUCE: xen-blkfront: Fixed blkfront_restore to remove a call
to negotiate_mq"
- Revert "UBUNTU: SAUCE: xen-blkfront: resurrect request-based mode"
- Revert "UBUNTU: SAUCE: xen-blkfront: add callbacks for PM suspend and
hibernation"
- Revert "UBUNTU: SAUCE: xenbus: add freeze/thaw/restore callbacks support"
- Revert "UBUNTU: SAUCE: xen/manage: introduce helper function to know the on-
going suspend mode"
- Revert "UBUNTU: SAUCE: xen/manage: keep track of the on-going suspend mode"
- SAUCE: xen/manage: keep track of the on-going suspend mode
- SAUCE: xen/manage: introduce helper function to know the on-going suspend
mode
- SAUCE: xenbus: add freeze/thaw/restore callbacks support
- SAUCE: x86/xen: Introduce new function to map HYPERVISOR_shared_info on
Resume
- SAUCE: x86/xen: add system core suspend and resume callbacks
- SAUCE: xen-blkfront: add callbacks for PM suspend and hibernation
- SAUCE: xen-netfront: add callbacks for PM suspend and hibernation support
- SAUCE: xen/time: introduce xen_{save,restore}_steal_clock
- SAUCE: x86/xen: save and restore steal clock
- SAUCE: xen/events: add xen_shutdown_pirqs helper function
- SAUCE: x86/xen: close event channels for PIRQs in system core suspend
callback
- SAUCE: xen-blkfront: resurrect request-based mode
- SAUCE: xen-blkfront: add 'persistent_grants' parameter
- SAUCE: Revert "xen: dont fiddle with event channel masking in
suspend/resume"
- SAUCE: xen-blkfront: Fixed blkfront_restore to remove a call to negotiate_mq
- SAUCE: block: xen-blkfront: consider new dom0 features on restore
- SAUCE: xen: restore pirqs on resume from hibernation.
- SAUCE: xen: Only restore the ACPI SCI interrupt in xen_restore_pirqs.
- SAUCE: xen-netfront: call netif_device_attach on resume
- SAUCE: xen: Restore xen-pirqs on resume from hibernation
- SAUCE: xen-blkfront: Delay flush till queue lock dropped
- SAUCE: drivers/block/xen-blkfront.c: Convert to use
set_capacity_revalidate_and_notify
- SAUCE: x86: tsc: avoid system instability in hibernation
- SAUCE: block/genhd: Notify udev about capacity change
- SAUCE: drivers/block/virtio_blk.c: Convert to use
set_capacity_revalidate_and_notify
- SAUCE: drivers/nvme/host/core.c: Convert to use
set_capacity_revalidate_and_notify
* aws: xen-netfront: prevent potential error on hibernate (LP: #1906850)
- SAUCE: xen-netfront: prevent unnecessary close on hibernate
[ Ubuntu: 4.15.0-141.145 ]
* bionic/linux: 4.15.0-141.145 -proposed tracker (LP: #1919536)
* binary assembly failures with CONFIG_MODVERSIONS present (LP: #1919315)
- [Packaging] quiet (nomially) benign errors in BUILD script
* selftests: bpf verifier fails after sanitize_ptr_alu fixes (LP: #1920995)
- bpf: Simplify alu_limit masking for pointer arithmetic
- bpf: Add sanity check for upper ptr_limit
- bpf, selftests: Fix up some test_verifier cases for unprivileged
* Packaging resync (LP: #1786013)
- update dkms package versions
* CVE-2018-13095
- xfs: More robust inode extent count validation
* i40e PF reset due to incorrect MDD event (LP: #1772675)
- i40e: change behavior on PF in response to MDD event
* Bionic update: upstream stable patchset 2021-03-09 (LP: #1918330)
- ACPI: sysfs: Prefer "compatible" modalias
- ARM: dts: imx6qdl-gw52xx: fix duplicate regulator naming
- wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
- net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family
- drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs
- drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[]
- KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in
intel_arch_events[]
- KVM: x86: get smi pending status correctly
- xen: Fix XenStore initialisation for XS_LOCAL
- leds: trigger: fix potential deadlock with libata
- mt7601u: fix kernel crash unplugging the device
- mt7601u: fix rx buffer refcounting
- xen-blkfront: allow discard-* nodes to be optional
- ARM: imx: build suspend-imx6.S with arm instruction set
- netfilter: nft_dynset: add timeout extension to template
- xfrm: Fix oops in xfrm_replay_advance_bmp
- RDMA/cxgb4: Fix the reported max_recv_sge value
- iwlwifi: pcie: use jiffies for memory read spin time limit
- iwlwifi: pcie: reschedule in long-running memory reads
- mac80211: pause TX while changing interface type
- can: dev: prevent potential information leak in can_fill_info()
- x86/entry/64/compat: Preserve r8-r11 in int $0x80
- x86/entry/64/compat: Fix "x86/entry/64/compat: Preserve r8-r11 in int $0x80"
- iommu/vt-d: Gracefully handle DMAR units with no supported address widths
- iommu/vt-d: Don't dereference iommu_device if IOMMU_API is not built
- NFC: fix resource leak when target index is invalid
- NFC: fix possible resource leak
- team: protect features update by RCU to avoid deadlock
- tcp: fix TLP timer not set when CA_STATE changes from DISORDER to OPEN
- kernel: kexec: remove the lock operation of system_transition_mutex
- PM: hibernate: flush swap writer after marking
- pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process()
- net/mlx5: Fix memory leak on flow table creation error flow
- rxrpc: Fix memory leak in rxrpc_lookup_local
- net: dsa: bcm_sf2: put device node before return
- ibmvnic: Ensure that CRQ entry read are correctly ordered
- ACPI: thermal: Do not call acpi_thermal_check() directly
- net_sched: gen_estimator: support large ewma log
- phy: cpcap-usb: Fix warning for missing regulator_disable
- x86: __always_inline __{rd,wr}msr()
- scsi: scsi_transport_srp: Don't block target in failfast state
- scsi: libfc: Avoid invoking response handler twice if ep is already
completed
- mac80211: fix fast-rx encryption check
- scsi: ibmvfc: Set default timeout to avoid crash during migration
- objtool: Don't fail on missing symbol table
- kthread: Extract KTHREAD_IS_PER_CPU
- workqueue: Restrict affinity change to rescuer
- USB: serial: cp210x: add pid/vid for WSDA-200-USB
- USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000
- USB: serial: option: Adding support for Cinterion MV31
- arm64: dts: ls1046a: fix dcfg address range
- net: lapb: Copy the skb before sending a packet
- elfcore: fix building with clang
- USB: gadget: legacy: fix an error code in eth_bind()
- USB: usblp: don't call usb_set_interface if there's a single alt
- usb: dwc2: Fix endpoint direction check in ep_from_windex
- ovl: fix dentry leak in ovl_get_redirect
- mac80211: fix station rate table updates on assoc
- kretprobe: Avoid re-registration of the same kretprobe earlier
- xhci: fix bounce buffer usage for non-sg list case
- cifs: report error instead of invalid when revalidating a dentry fails
- smb3: Fix out-of-bounds bug in SMB2_negotiate()
- mmc: core: Limit retries when analyse of SDIO tuples fails
- nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs
- ARM: footbridge: fix dc21285 PCI configuration accessors
- mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page
- mm: hugetlb: fix a race between isolating and freeing page
- mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active
- mm: thp: fix MADV_REMOVE deadlock on shmem THP
- x86/build: Disable CET instrumentation in the kernel
- x86/apic: Add extra serialization for non-serializing MSRs
- Input: xpad - sync supported devices with fork on GitHub
- iommu/vt-d: Do not use flush-queue when caching-mode is on
- net: dsa: mv88e6xxx: override existent unicast portvec in port_fdb_add
- net: mvpp2: TCAM entry enable should be written after SRAM data
- memblock: do not start bottom-up allocations with kernel_end
- usb: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop()
- genirq/msi: Activate Multi-MSI early when MSI_FLAG_ACTIVATE_EARLY is set
- KVM: SVM: Treat SVM as unsupported when running as an SEV guest
- md: Set prev_flush_start and flush_bio in an atomic way
- net: ip_tunnel: fix mtu calculation
- block: fix NULL pointer dereference in register_disk
- remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load
- remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load
- af_key: relax availability checks for skb size calculation
- pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process()
- iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time()
- iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap
- iwlwifi: mvm: guard against device removal in reprobe
- SUNRPC: Move simple_get_bytes and simple_get_netobj into private header
- SUNRPC: Handle 0 length opaque XDR object data properly
- lib/string: Add strscpy_pad() function
- include/trace/events/writeback.h: fix -Wstringop-truncation warnings
- memcg: fix a crash in wb_workfn when a device disappears
- blk-mq: don't hold q->sysfs_lock in blk_mq_map_swqueue
- squashfs: add more sanity checks in id lookup
- squashfs: add more sanity checks in inode lookup
- squashfs: add more sanity checks in xattr id lookup
* SRU: Add FUA support for XFS (LP: #1917918)
- block: add blk_queue_fua() helper function
- xfs: move generic_write_sync calls inwards
- iomap: iomap_dio_rw() handles all sync writes
- iomap: Use FUA for pure data O_DSYNC DIO writes
* CVE-2021-3348
- nbd: freeze the queue while we're adding connections
* Bionic kernel 4.15.0-136 causes dosemu2 (with kvm mode) freezes due to lack
of KVM patch (LP: #1917138)
- KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint
* switch LRM to be signed using the Ubuntu Drivers signing key (LP: #1917034)
- [Packaging] sync dkms-build to updated API
* Bionic update: upstream stable patchset 2021-02-26 (LP: #1917093)
- i2c: bpmp-tegra: Ignore unknown I2C_M flags
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info()
- ALSA: hda/via: Add minimum mute flag
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error
- mmc: sdhci-xenon: fix 1.8v regulator stabilization
- dm: avoid filesystem lookup in dm_get_dev_t()
- drm/atomic: put state on error path
- ASoC: Intel: haswell: Add missing pm_ops
- scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback
- xen: Fix event channel callback via INTX/GSI
- drm/nouveau/bios: fix issue shadowing expansion ROMs
- drm/nouveau/privring: ack interrupts the same way as RM
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields
- i2c: octeon: check correct size of maximum RECV_LEN packet
- can: dev: can_restart: fix use after free bug
- can: vxcan: vxcan_xmit: fix use after free bug
- iio: ad5504: Fix setting power-down state
- irqchip/mips-cpu: Set IPI domain parent chip
- intel_th: pci: Add Alder Lake-P support
- stm class: Fix module init return on allocation failure
- ehci: fix EHCI host controller initialization sequence
- USB: ehci: fix an interrupt calltrace error
- usb: udc: core: Use lock when write to soft_connect
- usb: bdc: Make bdc pci driver depend on BROKEN
- [Config] updateconfigs for USB_BDC_PCI
- xhci: make sure TRB is fully written before giving it to the controller
- xhci: tegra: Delay for disabling LFPS detector
- compiler.h: Raise minimum version of GCC to 5.1 for arm64
- netfilter: rpfilter: mask ecn bits before fib lookup
- sh: dma: fix kconfig dependency for G2_DMA
- sh_eth: Fix power down vs. is_opened flag ordering
- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too
- udp: mask TOS bits in udp_v4_early_demux()
- ipv6: create multicast route with RTPROT_KERNEL
- net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
- net: dsa: b53: fix an off by one in checking "vlan->vid"
- gpio: mvebu: fix pwm .get_state period calculation
- Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
- futex: Ensure the correct return value from futex_lock_pi()
- futex: Replace pointless printk in fixup_owner()
- futex: Provide and use pi_state_update_owner()
- rtmutex: Remove unused argument from rt_mutex_proxy_unlock()
- futex: Use pi_state_update_owner() in put_pi_state()
- futex: Simplify fixup_pi_state_owner()
- futex: Handle faults correctly for PI futexes
- tracing: Fix race in trace_open and buffer resize call
- fs: move I_DIRTY_INODE to fs.h
- writeback: Drop I_DIRTY_TIME_EXPIRE
- fs: fix lazytime expiration handling in __writeback_single_inode()
- mmc: core: don't initialize block size from ext_csd if not present
- scsi: qedi: Correct max length of CHAP secret
- riscv: Fix kernel time_init()
- HID: Ignore battery for Elan touchscreen on ASUS UX550
- clk: tegra30: Add hda clock default rates to clock driver
- drm/nouveau/mmu: fix vram heap sizing
- scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression
- can: peak_usb: fix use after free bugs
- serial: mvebu-uart: fix tx lost characters at power off
- driver core: Extend device_is_dependent()
- net_sched: reject silly cell_log in qdisc_get_rtab()
- tools: Factor HOSTCC, HOSTLD, HOSTAR definitions
* Enforce CONFIG_DRM_BOCHS=m (LP: #1916290)
- [Config] Enforce CONFIG_DRM_BOCHS=m
* Please trust Canonical Livepatch Service kmod signing key (LP: #1898716)
- [Config] enable CONFIG_MODVERSIONS=y
- [Packaging] build canonical-certs.pem from branch/arch certs
- [Config] add Canonical Livepatch Service key to SYSTEM_TRUSTED_KEYS
- [Config] add ubuntu-drivers key to SYSTEM_TRUSTED_KEYS
-- Stefan Bader <email address hidden> Mon, 29 Mar 2021 15:36:21 +0200
-
linux-aws (4.15.0-1097.104) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1097.104 -proposed tracker (LP: #1920146)
[ Ubuntu: 4.15.0-140.144 ]
* bionic/linux: 4.15.0-140.144 -proposed tracker (LP: #1920169)
* CVE-2020-27170
- bpf: Fix off-by-one for area size in creating mask to left
* CVE-2020-27171
- bpf: Prohibit alu ops for pointer types not defining ptr_limit
-- Juerg Haefliger <email address hidden> Fri, 19 Mar 2021 16:43:25 +0100
-
linux-aws (4.15.0-1096.103) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1096.103 -proposed tracker (LP: #1919194)
[ Ubuntu: 4.15.0-139.143 ]
* bionic/linux: 4.15.0-139.143 -proposed tracker (LP: #1919218)
* CVE-2021-27365
- scsi: iscsi: Verify lengths on passthrough PDUs
- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE
* CVE-2021-27363 // CVE-2021-27364
- scsi: iscsi: Restrict sessions and handles to admin capabilities
-- Kleber Sacilotto de Souza <email address hidden> Tue, 16 Mar 2021 16:41:40 +0100
-
linux-aws (4.15.0-1095.102) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1095.102 -proposed tracker (LP: #1916176)
[ Ubuntu: 4.15.0-137.141 ]
* bionic/linux: 4.15.0-137.141 -proposed tracker (LP: #1916199)
* Fix oops in skb_segment for Bionic series (LP: #1915552)
- net: permit skb_segment on head_frag frag_list skb
- net: bpf: add a test for skb_segment in test_bpf module
- test_bpf: Fix NULL vs IS_ERR() check in test_skb_segment()
* Bionic update: upstream stable patchset 2021-02-10 (LP: #1915328)
- net: cdc_ncm: correct overhead in delayed_ndp_size
- net: vlan: avoid leaks on register_vlan_dev() failures
- net: ip: always refragment ip defragmented packets
- net: fix pmtu check in nopmtudisc mode
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR
- x86/resctrl: Don't move a task to the same resource group
- vmlinux.lds.h: Add PGO and AutoFDO input sections
- drm/i915: Fix mismatch between misplaced vma check and vma insert
- spi: pxa2xx: Fix use-after-free on unbind
- iio: imu: st_lsm6dsx: flip irq return logic
- iio: imu: st_lsm6dsx: fix edge-trigger interrupts
- ARM: OMAP2+: omap_device: fix idling of devices during probe
- i2c: sprd: use a specific timeout to avoid system hang up issue
- cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get()
- spi: stm32: FIFO threshold level - fix align packet size
- dmaengine: xilinx_dma: check dma_async_device_register return value
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
- wil6210: select CONFIG_CRC32
- block: rsxx: select CONFIG_CRC32
- iommu/intel: Fix memleak in intel_irq_remapping_alloc
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups
- net/mlx5e: Fix two double free cases
- wan: ds26522: select CONFIG_BITREVERSE
- KVM: arm64: Don't access PMCR_EL0 when no PMU is available
- block: fix use-after-free in disk_part_iter_next
- net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed
packet
- net: hns3: fix the number of queues actually used by ARQ
- net: stmmac: dwmac-sun8i: Balance internal PHY resource references
- net: stmmac: dwmac-sun8i: Balance internal PHY power
- net/sonic: Fix some resource leaks in error handling paths
- net: ipv6: fib: flush exceptions when purging route
- dmaengine: xilinx_dma: fix incompatible param warning in _child_probe()
- lightnvm: select CONFIG_CRC32
- ASoC: dapm: remove widget from dirty list on free
- MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB
- MIPS: relocatable: fix possible boot hangup with KASLR enabled
- ACPI: scan: Harden acpi_device_add() against device ID overflows
- mm/hugetlb: fix potential missing huge page size info
- dm snapshot: flush merged data before committing metadata
- r8152: Add Lenovo Powered USB-C Travel Hub
- ext4: fix bug for rename with RENAME_WHITEOUT
- ARC: build: remove non-existing bootpImage from KBUILD_IMAGE
- ARC: build: add uImage.lzma to the top-level target
- ARC: build: add boot_targets to PHONY
- btrfs: fix transaction leak and crash after RO remount caused by qgroup
rescan
- ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram
- arch/arc: add copy_user_page() to <asm/page.h> to fix build error on ARC
- misdn: dsp: select CONFIG_BITREVERSE
- net: ethernet: fs_enet: Add missing MODULE_LICENSE
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI
- ARM: picoxcell: fix missing interrupt-parent properties
- dump_common_audit_data(): fix racy accesses to ->d_name
- ASoC: Intel: fix error code cnl_set_dsp_D0()
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock
- pNFS: Mark layout for return if return-on-close was not sent
- NFS: nfs_igrab_and_active must first reference the superblock
- ext4: fix superblock checksum failure when setting password salt
- RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp
- mm, slub: consider rest of partial list if acquire_slab() fails
- net: sunrpc: interpret the return value of kstrtou32 correctly
- dm: eliminate potential source of excessive kernel log noise
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work()
- ALSA: fireface: Fix integer overflow in transmit_midi_msg()
- netfilter: conntrack: fix reading nf_conntrack_buckets
- usb: ohci: Make distrust_firmware param default to false
- nfsd4: readdirplus shouldn't return parent of export
- netxen_nic: fix MSI/MSI-x interrupts
- rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request
- esp: avoid unneeded kmap_atomic call
- net: dcb: Validate netlink message in DCB handler
- net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands
- net: stmmac: Fixed mtu channged by cache aligned
- net: sit: unregister_netdevice on newlink's error path
- net: avoid 32 x truesize under-estimation for tiny skbs
- rxrpc: Fix handling of an unsupported token type in rxrpc_read()
- tipc: fix NULL deref in tipc_link_xmit()
- spi: cadence: cache reference clock rate during probe
- x86/hyperv: check cpu mask after interrupt has been disabled
- mtd: rawnand: fsl_ifc: check result of SRAM initialization fixup
- kbuild: enforce -Werror=return-type
- crypto: x86/crc32c - fix building with clang ias
- rxrpc: Call state should be read with READ_ONCE() under some circumstances
* [ssbs-0118] backport SSBS bug (arm64: cpufeature: Detect SSBS and advertise
to userspace) (LP: #1911376)
- SAUCE: Move SSBS snippet from arm64_elf_hwcaps to arm64_features
* Bionic update: upstream stable patchset 2021-01-25 (LP: #1913214)
- x86/entry/64: Add instruction suffix
- md/raid10: initialize r10_bio->read_slot before use.
- ALSA: usb-audio: simplify set_sync_ep_implicit_fb_quirk
- ALSA: usb-audio: fix sync-ep altsetting sanity check
- mm: memcontrol: eliminate raw access to stat and event counters
- mm: memcontrol: implement lruvec stat functions on top of each other
- mm: memcontrol: fix excessive complexity in memory.stat reporting
- vfio/pci: Move dummy_resources_list init in vfio_pci_probe()
- powerpc/bitops: Fix possible undefined behaviour with fls() and fls64()
- uapi: move constants from <linux/kernel.h> to <linux/const.h>
- of: fix linker-section match-table corruption
- reiserfs: add check for an invalid ih_entry_count
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in
vmci_ctx_get_chkpt_doorbells()
- media: gp8psk: initialize stats at power control logic
- ALSA: seq: Use bool for snd_seq_queue internal flags
- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init
- module: set MODULE_STATE_GOING state when a module fails to load
- quota: Don't overflow quota file offsets
- powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe()
- module: delay kobject uevent until after module init call
- ALSA: pcm: Clear the full allocated memory at hw_params
- dm verity: skip verity work if I/O error when system is shutting down
- kdev_t: always inline major/minor helper functions
- iio:imu:bmi160: Fix alignment and data leak issues
- iio:magnetometer:mag3110: Fix alignment and data leak issues.
- mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start
- ext4: don't remount read-only with errors=continue on reboot
- KVM: SVM: relax conditions for allowing MSR_IA32_SPEC_CTRL accesses
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits
- xen/gntdev.c: Mark pages as dirty
- ALSA: rawmidi: Access runtime->avail always in spinlock
- fcntl: Fix potential deadlock in send_sig{io, urg}()
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
- dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate()
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
- kbuild: don't hardcode depmod path
- workqueue: Kick a worker based on the actual activation of delayed works
- scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk
->poweroff()
- scsi: ide: Do not set the RQF_PREEMPT flag for sense requests
- lib/genalloc: fix the overflow when size is too big
- depmod: handle the case of /sbin/depmod without /sbin in PATH
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove()
- ethernet: ucc_geth: set dev->max_mtu to 1518
- atm: idt77252: call pci_disable_device() on error path
- qede: fix offload for IPIP tunnel packets
- virtio_net: Fix recursive call to cpus_read_lock()
- net/ncsi: Use real net-device for response handler
- net: ethernet: Fix memleak in ethoc_probe
- net-sysfs: take the rtnl lock when storing xps_cpus
- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered
- ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst()
- net: hns: fix return value check in __lb_other_process()
- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running
- CDC-NCM: remove "connected" log message
- net: usb: qmi_wwan: add Quectel EM160R-GL
- vhost_net: fix ubuf refcount incorrectly when sendmsg fails
- net: sched: prevent invalid Scell_log shift count
- net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations
- net: systemport: set dev->max_mtu to UMAC_MAX_MTU_SIZE
- video: hyperv_fb: Fix the mmap() regression for v5.4.y and older
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
- usb: gadget: enable super speed plus
- USB: cdc-acm: blacklist another IR Droid device
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
usbmisc_get_init_data()
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set
- usb: usbip: vhci_hcd: protect shift size
- usb: uas: Add PNY USB Portable SSD to unusual_uas
- USB: serial: iuu_phoenix: fix DMA from stack
- USB: serial: option: add LongSung M5710 module support
- USB: serial: option: add Quectel EM160R-GL
- USB: yurex: fix control-URB timeout handling
- USB: usblp: fix DMA to stack
- ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
- usb: gadget: select CONFIG_CRC32
- usb: gadget: f_uac2: reset wMaxPacketSize
- usb: gadget: function: printer: Fix a memory leak for interface descriptor
- USB: gadget: legacy: fix return error code in acm_ms_bind()
- usb: gadget: Fix spinlock lockup on usb_function_deactivate
- usb: gadget: configfs: Preserve function ordering after bind failure
- usb: gadget: configfs: Fix use-after-free issue with udc_name
- USB: serial: keyspan_pda: remove unused variable
- x86/mm: Fix leak of pmd ptlock
- ALSA: hda/conexant: add a new hda codec CX11970
- ALSA: hda/realtek - Fix speaker volume control on Lenovo C940
- Revert "device property: Keep secondary firmware node secondary by type"
- netfilter: ipset: fix shift-out-of-bounds in htable_bits()
- netfilter: xt_RATEEST: reject non-null terminated string from userspace
- x86/mtrr: Correct the range check before performing MTRR type lookups
- KVM: x86: fix shift out of bounds reported by UBSAN
- i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS
- USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
- USB: Gadget Ethernet: Re-enable Jumbo frames.
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
-- Khalid Elmously <email address hidden> Wed, 24 Feb 2021 18:18:41 -0500
-
linux-aws (4.15.0-1094.101) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1094.101 -proposed tracker (LP: #1913097)
* Bionic update: upstream stable patchset 2021-01-12 (LP: #1911331)
- [Config] aws: Update config for USB_SISUSBVGA_CON
* Disable Bluetooth in cloud kernels (LP: #1840488)
- aws: [Config] disable CONFIG_BT
- aws: [Config] remove disabled BT modules
* aws: properly support instance types with > 255 cpu cores (LP: #1913739)
- iommu/vt-d: Gracefully handle DMAR units with no supported address widths
[ Ubuntu: 4.15.0-136.140 ]
* bionic/linux: 4.15.0-136.140 -proposed tracker (LP: #1913117)
* Packaging resync (LP: #1786013)
- update dkms package versions
- update dkms package versions
* Introduce the new NVIDIA 460-server series and update the 460 series
(LP: #1913200)
- [Config] dkms-versions -- drop NVIDIA 435 455 and 440-server
- [Config] dkms-versions -- add the 460-server nvidia driver
* switch to an autogenerated nvidia series based core via dkms-versions
(LP: #1912803)
- [Packaging] nvidia -- use dkms-versions to define versions built
- [Packaging] update-version-dkms -- maintain flags fields
- [Config] dkms-versions -- add transitional/skip information for nvidia
packages
* DMI entry syntax fix for Pegatron / ByteSpeed C15B (LP: #1910639)
- Input: i8042 - unbreak Pegatron C15B
* CVE-2020-29372
- mm: check that mm is still valid in madvise()
* update ENA driver, incl. new ethtool stats (LP: #1910291)
- net: ena: change num_queues to num_io_queues for clarity and consistency
- net: ena: ethtool: get_channels: use combined only
- net: ena: ethtool: support set_channels callback
- net: ena: ethtool: remove redundant non-zero check on rc
- net/amazon: Ensure that driver version is aligned to the linux kernel
- net: ena: ethtool: clean up minor indentation issue
- net: ena: remove code that does nothing
- net: ena: add unmask interrupts statistics to ethtool
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
- net: ena: cosmetic: remove unnecessary code
- net: ena: ethtool: convert stat_offset to 64 bit resolution
- net: ena: ethtool: Add new device statistics
- net: ena: Change license into format to SPDX in all files
- net: ena: Change RSS related macros and variables names
* CVE-2020-29374
- gup: document and work around "COW can break either way" issue
* Bionic update: upstream stable patchset 2021-01-12 (LP: #1911331)
- spi: bcm2835aux: Fix use-after-free on unbind
- spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe
- iwlwifi: pcie: limit memory read spin time
- arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards.
- iwlwifi: mvm: fix kernel panic in case of assert during CSA
- ARC: stack unwinding: don't assume non-current task is sleeping
- scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE
- soc: fsl: dpio: Get the cpumask through cpumask_of(cpu)
- platform/x86: acer-wmi: add automatic keyboard background light toggle key
as KEY_LIGHTS_TOGGLE
- Input: cm109 - do not stomp on control URB
- Input: i8042 - add Acer laptops to the i8042 reset list
- kbuild: avoid static_assert for genksyms
- scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()"
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP
- PCI: qcom: Add missing reset for ipq806x
- net: stmmac: free tx skb buffer in stmmac_resume()
- tcp: fix cwnd-limited bug for TSO deferral where we send nothing
- net/mlx4_en: Avoid scheduling restart task if it is already running
- net/mlx4_en: Handle TX error CQE
- net: stmmac: delete the eee_ctrl_timer after napi disabled
- net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux
- net: bridge: vlan: fix error return code in __vlan_add()
- mac80211: mesh: fix mesh_pathtbl_init() error path
- USB: dummy-hcd: Fix uninitialized array use in init()
- USB: add RESET_RESUME quirk for Snapscan 1212
- ALSA: usb-audio: Fix potential out-of-bounds shift
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap
- xhci: Give USB2 ports time to enter U3 in bus suspend
- USB: UAS: introduce a quirk to set no_write_same
- USB: sisusbvga: Make console support depend on BROKEN
- [Config] updateconfigs for USB_SISUSBVGA_CON
- ALSA: pcm: oss: Fix potential out-of-bounds shift
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access
- drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi
- pinctrl: merrifield: Set default bias in case no particular value given
- pinctrl: baytrail: Avoid clearing debounce value when turning it off
- ARM: dts: sun8i: v3s: fix GIC node memory range
- gpio: mvebu: fix potential user-after-free on probe
- scsi: bnx2i: Requires MMU
- can: softing: softing_netdev_open(): fix error handling
- RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait
- kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling
- drm/tegra: sor: Disable clocks on error in tegra_sor_init()
- vxlan: Add needed_headroom for lower device
- vxlan: Copy needed_tailroom from lowerdev
- scsi: mpt3sas: Increase IOCInit request timeout to 30s
- dm table: Remove BUG_ON(in_interrupt())
- soc/tegra: fuse: Fix index bug in get_process_id
- USB: serial: option: add interface-number sanity check to flag handling
- USB: gadget: f_acm: add support for SuperSpeed Plus
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul
- ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU
- ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on
Exynos5410
- ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU
- HID: i2c-hid: add Vero K147 to descriptor override
- serial_core: Check for port state when tty is in error state
- quota: Sanity-check quota file headers on load
- media: msi2500: assign SPI bus number dynamically
- crypto: af_alg - avoid undefined behavior accessing salg_name
- md: fix a warning caused by a race between concurrent md_ioctl()s
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
- drm/gma500: fix double free of gma_connector
- soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains()
- soc: mediatek: Check if power domains can be powered on at boot time
- RDMA/bnxt_re: Set queue pair state when being queried
- selinux: fix error initialization in inode_doinit_with_dentry()
- RDMA/rxe: Compute PSN windows correctly
- x86/mm/ident_map: Check for errors from ident_pud_init()
- ARM: p2v: fix handling of LPAE translation in BE mode
- sched/deadline: Fix sched_dl_global_validate()
- sched: Reenable interrupts in do_sched_yield()
- crypto: talitos - Fix return type of current_desc_hdr()
- spi: img-spfi: fix reference leak in img_spfi_resume
- ASoC: pcm: DRAIN support reactivation
- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling
- arm64: dts: exynos: Correct psci compatible used on Exynos7
- Bluetooth: Fix null pointer dereference in hci_event_packet()
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup
- spi: tegra20-slink: fix reference leak in slink ops of tegra20
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume
- spi: tegra114: fix reference leak in tegra spi ops
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure
- ASoC: wm8998: Fix PM disable depth imbalance on error
- ASoC: arizona: Fix a wrong free in wm8997_probe
- RDMa/mthca: Work around -Wenum-conversion warning
- MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA
- staging: greybus: codecs: Fix reference counter leak in error handling
- media: mtk-vcodec: add missing put_device() call in
mtk_vcodec_release_dec_pm()
- scsi: core: Fix VPD LUN ID designator priorities
- media: solo6x10: fix missing snd_card_free in error handling case
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe()
- Input: ads7846 - fix race that causes missing releases
- Input: ads7846 - fix integer overflow on Rt calculation
- Input: ads7846 - fix unaligned access on 7845
- powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe
- soc: ti: Fix reference imbalance in knav_dma_probe
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe
- Input: omap4-keypad - fix runtime PM error handling
- RDMA/cxgb4: Validate the number of CQEs
- memstick: fix a double-free bug in memstick_check
- ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host
- ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host
- orinoco: Move context allocation after processing the skb
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug
- samples: bpf: Fix lwt_len_hist reusing previous BPF map
- mips: cdmm: fix use-after-free in mips_cdmm_bus_discover
- media: max2175: fix max2175_set_csm_mode() error code
- HSI: omap_ssi: Don't jump to free ID in ssi_add_controller()
- ARM: dts: Remove non-existent i2c1 from 98dx3236
- power: supply: bq24190_charger: fix reference leak
- genirq/irqdomain: Don't try to free an interrupt that has no mapping
- PCI: iproc: Fix out-of-bound array accesses
- ARM: dts: at91: at91sam9rl: fix ADC triggers
- ath10k: Fix an error handling path
- ath10k: Release some resources in an error handling path
- NFSv4.2: condition READDIR's mask for security label based on LSM state
- SUNRPC: xprt_load_transport() needs to support the netid "rdma6"
- lockd: don't use interval-based rebinding over TCP
- NFS: switch nfsiod to be an UNBOUND workqueue.
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory
- media: saa7146: fix array overflow in vidioc_s_audio()
- clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent()
- ARM: dts: at91: sama5d2: map securam as device
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe()
- arm64: dts: rockchip: Fix UART pull-ups on rk3328
- memstick: r592: Fix error return in r592_probe()
- net/mlx5: Properly convey driver version to firmware
- ASoC: jz4740-i2s: add missed checks for clk_get()
- dm ioctl: fix error return code in target_message
- clocksource/drivers/arm_arch_timer: Correct fault programming of
CNTKCTL_EL1.EVNTI
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE
- cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE
- cpufreq: st: Add missing MODULE_DEVICE_TABLE
- cpufreq: loongson1: Add missing MODULE_ALIAS
- cpufreq: scpi: Add missing MODULE_ALIAS
- scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe
- scsi: pm80xx: Fix error return in pm8001_pci_probe()
- seq_buf: Avoid type mismatch for seq_buf_init
- scsi: fnic: Fix error return code in fnic_probe()
- powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops
- powerpc/pseries/hibernation: remove redundant cacheinfo update
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe
- usb: oxu210hp-hcd: Fix memory leak in oxu_create
- speakup: fix uninitialized flush_lock
- nfsd: Fix message level for normal termination
- nfs_common: need lock during iterate through the list
- x86/kprobes: Restore BTF if the single-stepping is cancelled
- clk: tegra: Fix duplicated SE clock entry
- extcon: max77693: Fix modalias string
- ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control()
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM
- um: chan_xterm: Fix fd leak
- nfc: s3fwrn5: Release the nfc firmware
- powerpc/ps3: use dma_mapping_error()
- checkpatch: fix unescaped left brace
- net: bcmgenet: Fix a resource leak in an error handling path in the probe
functin
- net: allwinner: Fix some resources leak in the error handling path of the
probe and in the remove function
- net: korina: fix return value
- watchdog: qcom: Avoid context switch in restart handler
- watchdog: coh901327: add COMMON_CLK dependency
- clk: ti: Fix memleak in ti_fapll_synth_setup
- pwm: zx: Add missing cleanup in error path
- pwm: lp3943: Dynamically allocate PWM chip base
- perf record: Fix memory leak when using '--user-regs=?' to list registers
- qlcnic: Fix error code in probe
- clk: s2mps11: Fix a resource leak in error handling paths in the probe
function
- clk: sunxi-ng: Make sure divider tables have sentinel
- cfg80211: initialize rekey_data
- fix namespaced fscaps when !CONFIG_SECURITY
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
- media: gspca: Fix memory leak in probe
- media: sunxi-cir: ensure IR is handled when it is continuous
- media: netup_unidvb: Don't leak SPI master in probe error path
- Input: cyapa_gen6 - fix out-of-bounds stack access
- PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup()
- Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources
walks"
- ACPI: PNP: compare the string length in the matching_id()
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255
- ALSA: pcm: oss: Fix a few more UBSAN fixes
- ALSA: usb-audio: Disable sample read check if firmware doesn't give back
- s390/smp: perform initial CPU reset also for SMT siblings
- s390/dasd: prevent inconsistent LCU device data
- s390/dasd: fix list corruption of pavgroup group list
- s390/dasd: fix list corruption of lcu list
- staging: comedi: mf6x4: Fix AI end-of-conversion detection
- powerpc/perf: Exclude kernel samples while counting events in user space.
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
- EDAC/amd64: Fix PCI component registration
- USB: serial: mos7720: fix parallel-port state restore
- USB: serial: keyspan_pda: fix dropped unthrottle interrupts
- USB: serial: keyspan_pda: fix write deadlock
- USB: serial: keyspan_pda: fix stalled writes
- USB: serial: keyspan_pda: fix write-wakeup use-after-free
- USB: serial: keyspan_pda: fix tx-unthrottle use-after-free
- USB: serial: keyspan_pda: fix write unthrottling
- ext4: fix a memory leak of ext4_free_data
- ext4: fix deadlock with fs freezing and EA inodes
- KVM: arm64: Introduce handling of AArch32 TTBCR2 traps
- ARM: dts: at91: sama5d2: fix CAN message ram offset and size
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter
- powerpc/xmon: Change printk() to pr_cont()
- powerpc/powernv/memtrace: Don't leak kernel memory to user space
- ima: Don't modify file descriptor mode on the fly
- ceph: fix race in concurrent __ceph_remove_cap invocations
- jffs2: Fix GC exit abnormally
- jfs: Fix array index bounds check in dbAdjTree
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor()
- spi: spi-sh: Fix use-after-free on unbind
- spi: davinci: Fix use-after-free on unbind
- spi: pic32: Don't leak DMA channels in probe error path
- spi: rb4xx: Don't leak SPI master in probe error path
- spi: sc18is602: Don't leak SPI master in probe error path
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path
- soc: qcom: smp2p: Safely acquire spinlock without IRQs
- mtd: parser: cmdline: Fix parsing of part-names with colons
- iio: buffer: Fix demux update
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in
rockchip_saradc_resume
- iio:light:rpr0521: Fix timestamp alignment and prevent data leak.
- iio:pressure:mpl3115: Force alignment of buffer
- iio:imu:bmi160: Fix too large a buffer.
- md/cluster: fix deadlock when node is doing resync job
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9
- xen-blkback: set ring->xenblkd to NULL after kthread_stop()
- xen/xenbus: Allow watches discard events before queueing
- xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path()
- xen/xenbus/xen_bus_type: Support will_handle watch callback
- xen/xenbus: Count pending messages for each watch
- xenbus/xenbus_backend: Disallow pending watch messages
- libnvdimm/namespace: Fix reaping of invalidated block-window-namespace
labels
- PCI: Fix pci_slot_release() NULL pointer dereference
- Kbuild: do not emit debug info for assembly with LLVM_IAS=1
- x86/lib: Change .weak to SYM_FUNC_START_WEAK for arch/x86/lib/mem*_64.S
- powerpc: Drop -me200 addition to build flags
- platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e
- x86/apic/vector: Fix ordering in vector assignment
- tcp: select sane initial rcvq_space.space for big MSS
- arm64: Change .weak to SYM_FUNC_START_WEAK_PI for arch/arm64/lib/mem*.S
- block: factor out requeue handling from dispatch code
- ixgbe: avoid premature Rx buffer reuse
- scsi: megaraid_sas: Check user-provided offsets
- drm/tve200: Fix handling of platform_get_irq() error
- x86/apic: Fix x2apic enablement without interrupt remapping
- crypto: talitos - Endianess in current_desc_hdr()
- arm64: dts: exynos: Include common syscon restart/poweroff for Exynos7
- media: tm6000: Fix sizeof() mismatches
- video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init()
- usb/max3421: fix return error code in max3421_probe()
- spi: mxs: fix reference leak in mxs_spi_probe
- crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd
- spi: fix resource leak for drivers without .remove callback
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
- power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching
- PCI: Bounds-check command-line resource alignment requests
- PCI: Fix overflow in command-line resource alignment requests
- arm64: dts: meson: fix spi-max-frequency on Khadas VIM2
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate()
- mac80211: don't set set TDLS STA bandwidth wider than possible
- watchdog: Fix potential dereferencing of null pointer
- um: tty: Fix handling of close in tty lines
- libnvdimm/label: Return -ENXIO for no slot in __blk_label_update
- ARM: sunxi: Add machine match for the Allwinner V3 SoC
- lwt: Disable BH too in run_lwt_bpf()
- ALSA: hda: Fix regressions on clear and reconfig sysfs
- ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256
- ALSA: hda/realtek: Add quirk for MSI-GP73
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3
- s390/dasd: fix hanging device offline processing
- USB: serial: digi_acceleport: fix write-wakeup deadlocks
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at
- ubifs: wbuf: Don't leak kernel memory to flash
- scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc()
- scsi: lpfc: Re-fix use after free in lpfc_rq_buf_free()
- pinctrl: sunxi: Always call chained_irq_{enter, exit} in
sunxi_pinctrl_irq_handler
* MSFT Touchpad not working on Lenovo Legion-5 15ARH05 (LP: #1887190) //
Bionic update: upstream stable patchset 2021-01-12 (LP: #1911331)
- pinctrl: amd: remove debounce filter setting in IRQ type setting
* Bionic update: upstream stable patchset 2021-01-07 (LP: #1910599)
- i2c: imx: use clk notifier for rate changes
- i2c: imx: Fix external abort on interrupt in exit paths
- gpio: mockup: fix resource leak in error path
- powerpc/8xx: Always fault when _PAGE_ACCESSED is not set
- Input: sunkbd - avoid use-after-free in teardown paths
- mac80211: always wind down STA state
- can: proc: can_remove_proc(): silence remove_proc_entry warning
- KVM: x86: clflushopt should be treated as a no-op by emulation
- ACPI: GED: fix -Wformat
- ah6: fix error return code in ah6_input()
- atm: nicstar: Unmap DMA on send error
- bnxt_en: read EEPROM A2h address using page 0
- devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill()
- inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill()
- mlxsw: core: Use variable timeout for EMAD retries
- net: b44: fix error return code in b44_init_one()
- net: bridge: add missing counters to ndo_get_stats64 callback
- net: dsa: mv88e6xxx: Avoid VTU corruption on 6097
- net: Have netpoll bring-up DSA management interface
- netlabel: fix our progress tracking in netlbl_unlabel_staticlist()
- netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist()
- net/mlx4_core: Fix init_hca fields offset
- net: x25: Increase refcnt of "struct x25_neigh" in x25_rx_call_request
- qlcnic: fix error return code in qlcnic_83xx_restart_hw()
- sctp: change to hold/put transport for proto_unreach_timer
- net/mlx5: Disable QoS when min_rates on all VFs are zero
- net: usb: qmi_wwan: Set DTR quirk for MR400
- tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate
- net: ftgmac100: Fix crash when removing driver
- pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq
- arm64: psci: Avoid printing in cpu_psci_cpu_die()
- vfs: remove lockdep bogosity in __sb_start_write
- Input: adxl34x - clean up a data type in adxl34x_probe()
- MIPS: export has_transparent_hugepage() for modules
- arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy
- ARM: dts: imx50-evk: Fix the chip select 1 IOMUX
- perf lock: Don't free "lock_seq_stat" if read_count isn't zero
- can: af_can: prevent potential access of uninitialized member in can_rcv()
- can: af_can: prevent potential access of uninitialized member in canfd_rcv()
- can: dev: can_restart(): post buffer from the right context
- can: ti_hecc: Fix memleak in ti_hecc_probe
- can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to
can_put_echo_skb()
- can: peak_usb: fix potential integer overflow on shift of a int
- can: m_can: m_can_handle_state_change(): fix state change
- ASoC: qcom: lpass-platform: Fix memory leak
- MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu
- regulator: ti-abb: Fix array out of bound read access on the first
transition
- xfs: revert "xfs: fix rmap key and record comparison functions"
- libfs: fix error cast of negative value in simple_attr_write()
- powerpc/uaccess-flush: fix missing includes in kup-radix.h
- speakup: Do not let the line discipline be used several times
- ALSA: ctl: fix error path at adding user-defined element set
- ALSA: mixart: Fix mutex deadlock
- tty: serial: imx: keep console clocks always on
- efivarfs: fix memory leak in efivarfs_create()
- staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids
- ext4: fix bogus warning in ext4_update_dx_flag()
- iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum
- iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-
mode
- regulator: fix memory leak with repeated set_machine_constraints()
- regulator: avoid resolve_supply() infinite recursion
- regulator: workaround self-referent regulators
- xtensa: disable preemption around cache alias management calls
- mac80211: minstrel: remove deferred sampling code
- mac80211: minstrel: fix tx status processing corner case
- mac80211: free sta in sta_info_insert_finish() on errors
- s390/cpum_sf.c: fix file permission for cpum_sfb_size
- s390/dasd: fix null pointer dereference for ERP requests
- x86/microcode/intel: Check patch signature before saving microcode for early
loading
- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup
- page_frag: Recover from memory pressure
- qed: fix error return code in qed_iwarp_ll2_start()
- scsi: ufs: Fix unbalanced scsi_block_reqs_cnt caused by ufshcd_hold()
- arm64: dts: allwinner: a64: Pine64 Plus: Fix ethernet node
- arm64: dts: allwinner: h5: OrangePi PC2: Fix ethernet node
- Revert "arm: sun8i: orangepi-pc-plus: Set EMAC activity LEDs to active high"
- ARM: dts: sun8i: h3: orangepi-plus2e: Enable RGMII RX/TX delay on Ethernet
PHY
- arm64: dts: allwinner: a64: bananapi-m64: Enable RGMII RX/TX delay on PHY
- arm64: dts: allwinner: h5: OrangePi Prime: Fix ethernet node
- ALSA: firewire: Clean up a locking issue in copy_resp_to_buf()
- ALSA: usb-audio: Add delay quirk for all Logitech USB devices
- ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220)
- ptrace: Set PF_SUPERPRIV when checking capability
- seccomp: Set PF_SUPERPRIV when checking capability
- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault()
- perf event: Check ref_reloc_sym before using it
- btrfs: fix lockdep splat when reading qgroup config on mount
- wireless: Use linux/stddef.h instead of stddef.h
- btrfs: adjust return values of btrfs_inode_by_name
- arm64: pgtable: Fix pte_accessible()
- arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect()
- ALSA: hda/hdmi: Use single mutex unlock in error paths
- ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close
- HID: cypress: Support Varmilo Keyboards' media hotkeys
- Input: i8042 - allow insmod to succeed on devices without an i8042
controller
- HID: hid-sensor-hub: Fix issue with devices with no report ID
- dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant
- x86/xen: don't unbind uninitialized lock_kicker_irq
- HID: Add Logitech Dinovo Edge battery quirk
- proc: don't allow async path resolution of /proc/self components
- nvme: free sq/cq dbbuf pointers when dbbuf set fails
- dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size
- scsi: libiscsi: Fix NOP race condition
- scsi: target: iscsi: Fix cmd abort fabric stop race
- perf/x86: fix sysfs type mismatches
- phy: tegra: xusb: Fix dangling pointer on probe failure
- batman-adv: set .owner to THIS_MODULE
- scsi: ufs: Fix race between shutdown and runtime resume flow
- bnxt_en: fix error return code in bnxt_init_one()
- bnxt_en: fix error return code in bnxt_init_board()
- video: hyperv_fb: Fix the cache type when mapping the VRAM
- bnxt_en: Release PCI regions when DMA mask setup fails during probe.
- IB/mthca: fix return value of error branch in mthca_init_cq()
- nfc: s3fwrn5: use signed integer for parsing GPIO numbers
- net: ena: set initial DMA width to avoid intel iommu issue
- ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues
- ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq
- efivarfs: revert "fix memory leak in efivarfs_create()"
- can: gs_usb: fix endianess problem with candleLight firmware
- platform/x86: toshiba_acpi: Fix the wrong variable assignment
- can: m_can: fix nominal bitiming tseg2 min for version >= 3.1
- perf probe: Fix to die_entrypc() returns error correctly
- USB: core: Change %pK for __user pointers to %px
- usb: gadget: f_midi: Fix memleak in f_midi_alloc
- usb: gadget: Fix memleak in gadgetfs_fill_super
- x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb
- x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak
- x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak
- USB: core: Fix regression in Hercules audio card
- btrfs: don't access possibly stale fs_info data for printing duplicate
device
- KVM: x86: Fix split-irqchip vs interrupt injection window request
- HID: add support for Sega Saturn
- cxgb4: fix the panic caused by non smac rewrite
- s390/qeth: fix tear down of async TX buffers
- platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup time
- USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO
built-in usb-audio card
- net/af_iucv: set correct sk_protocol for child sockets
- rose: Fix Null pointer dereference in rose_send_frame()
- sock: set sk_err to ee_errno on dequeue from errq
- tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control
- tun: honor IOCB_NOWAIT flag
- usbnet: ipheth: fix connectivity with iOS 14
- bonding: wait for sysfs kobject destruction before freeing struct slave
- netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal
- ipv4: Fix tos mask in inet_rtm_getroute()
- ibmvnic: Ensure that SCRQ entry reads are correctly ordered
- ibmvnic: Fix TX completion error handling
- net/x25: prevent a couple of overflows
- cxgb3: fix error return code in t3_sge_alloc_qset()
- net: pasemi: fix error return code in pasemi_mac_open()
- net/mlx5: Fix wrong address reclaim when command interface is down
- dt-bindings: net: correct interrupt flags in examples
- ALSA: usb-audio: US16x08: fix value count for level meters
- Input: xpad - support Ardwiino Controllers
- RDMA/i40iw: Address an mmap handler exploit in i40iw
- ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init
- ibmvnic: fix call_netdevice_notifiers in do_reset
- i40e: Fix removing driver while bare-metal VFs pass traffic
- geneve: pull IP header before ECN decapsulation
- pinctrl: baytrail: Replace WARN with dev_info_once when setting direct-irq
pin to output
- pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(...,
GPIOD_OUT_HIGH)
- vlan: consolidate VLAN parsing code and limit max parsing depth
- usb: gadget: f_fs: Use local copy of descriptors for userspace copy
- USB: serial: kl5kusb105: fix memleak on open
- USB: serial: ch341: add new Product ID for CH341A
- USB: serial: ch341: sort device-id entries
- USB: serial: option: add Fibocom NL668 variants
- USB: serial: option: add support for Thales Cinterion EXS82
- USB: serial: option: fix Quectel BG96 matching
- tty: Fix ->pgrp locking in tiocspgrp()
- tty: Fix ->session locking
- ALSA: hda/realtek - Add new codec supported for ALC897
- ALSA: hda/generic: Add option to enforce preferred_dacs pairs
- ftrace: Fix updating FTRACE_FL_TRAMP
- cifs: fix potential use-after-free in cifs_echo_request()
- mm/swapfile: do not sleep with a spin lock held
- i2c: imx: Fix reset of I2SR_IAL flag
- i2c: imx: Check for I2SR_IAL after every byte
- speakup: Reject setting the speakup line discipline outside of speakup
- iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs
- spi: Introduce device-managed SPI controller allocation
- spi: bcm-qspi: Fix use-after-free on unbind
- spi: bcm2835: Fix use-after-free on unbind
- spi: bcm2835: Release the DMA channel if probe fails after dma_init
- tracing: Fix userstacktrace option for instances
- gfs2: check for empty rgrp tree in gfs2_ri_update
- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc()
- Input: i8042 - fix error return code in i8042_setup_aux()
- x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes
- ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model
- x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes
bytes
- Revert "geneve: pull IP header before ECN decapsulation"
[ Ubuntu: 4.15.0-135.139 ]
* bionic/linux: 4.15.0-135.139 -proposed tracker (LP: #1912223)
* [drm:qxl_enc_commit [qxl]] *ERROR* head number too large or missing monitors
config: (LP: #1908219)
- qxl: remove qxl_io_log()
- qxl: move qxl_send_monitors_config()
- qxl: hook monitors_config updates into crtc, not encoder.
* Touchpad not detected on ByteSpeed C15B laptop (LP: #1906128)
- Input: i8042 - add ByteSpeed touchpad to noloop table
* vmx_nm_test in ubuntu_kvm_unit_tests interrupted on X-oracle-4.15 /
B-oracle-4.15 / X-KVM / B-KVM (LP: #1872401)
- KVM: nVMX: Always reflect #NM VM-exits to L1
* stack trace in kernel (LP: #1903596)
- net: napi: remove useless stack trace
* CVE-2020-27777
- [Config]: Set CONFIG_PPC_RTAS_FILTER
* Bionic update: upstream stable patchset 2020-12-04 (LP: #1906875)
- regulator: defer probe when trying to get voltage from unresolved supply
- ring-buffer: Fix recursion protection transitions between interrupt context
- time: Prevent undefined behaviour in timespec64_to_ns()
- nbd: don't update block size after device is started
- btrfs: sysfs: init devices outside of the chunk_mutex
- btrfs: reschedule when cloning lots of extents
- genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY
- hv_balloon: disable warning when floor reached
- net: xfrm: fix a race condition during allocing spi
- perf tools: Add missing swap for ino_generation
- ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link()
- can: rx-offload: don't call kfree_skb() from IRQ context
- can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ
context
- can: dev: __can_get_echo_skb(): fix real payload length return value for RTR
frames
- can: can_create_echo_skb(): fix echo skb generation: always use skb_clone()
- can: peak_usb: add range checking in decode operations
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
- can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is
on
- xfs: flush new eof page on truncate to avoid post-eof corruption
- Btrfs: fix missing error return if writeback for extent buffer never started
- ath9k_htc: Use appropriate rs_datalen type
- usb: gadget: goku_udc: fix potential crashes in probe
- gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free
- gfs2: Add missing truncate_inode_pages_final for sd_aspace
- gfs2: check for live vs. read-only file system in gfs2_fitrim
- scsi: hpsa: Fix memory leak in hpsa_init_one()
- drm/amdgpu: perform srbm soft reset always on SDMA resume
- mac80211: fix use of skb payload instead of header
- cfg80211: regulatory: Fix inconsistent format argument
- scsi: scsi_dh_alua: Avoid crash during alua_bus_detach()
- iommu/amd: Increase interrupt remapping table limit to 512 entries
- pinctrl: intel: Set default bias in case no particular value given
- ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template
- pinctrl: aspeed: Fix GPI only function problem.
- nbd: fix a block_device refcount leak in nbd_release
- xfs: fix flags argument to rmap lookup when converting shared file rmaps
- xfs: fix rmap key and record comparison functions
- xfs: fix a missing unlock on error in xfs_fs_map_blocks
- of/address: Fix of_node memory leak in of_dma_is_coherent
- cosa: Add missing kfree in error path of cosa_write
- perf: Fix get_recursion_context()
- ext4: correctly report "not supported" for {usr,grp}jquota when
!CONFIG_QUOTA
- ext4: unlock xattr_sem properly in ext4_inline_data_truncate()
- thunderbolt: Add the missed ida_simple_remove() in ring_request_msix()
- uio: Fix use-after-free in uio_unregister_device()
- usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode
- mei: protect mei_cl_mtu from null dereference
- futex: Don't enable IRQs unconditionally in put_pi_state()
- ocfs2: initialize ip_next_orphan
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
- don't dump the threads that had been already exiting when zapped.
- drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[]
- pinctrl: amd: use higher precision for 512 RtcClk
- pinctrl: amd: fix incorrect way to disable debounce filter
- swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb"
- IPv6: Set SIT tunnel hard_header_len to zero
- net/af_iucv: fix null pointer dereference on shutdown
- net/x25: Fix null-ptr-deref in x25_connect
- vrf: Fix fast path output packet handling with async Netfilter rules
- r8169: fix potential skb double free in an error path
- net: Update window_clamp if SOCK_RCVBUF is set
- random32: make prandom_u32() output unpredictable
- x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-
on STIBP
- perf/core: Fix bad use of igrab()
- perf/core: Fix crash when using HW tracing kernel filters
- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
- Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint"
- reboot: fix overflow parsing reboot cpu number
- Convert trailing spaces and periods in path components
- xfs: fix scrub flagging rtinherit even if there is no rt device
- drm/amd/pm: perform SMC reset on suspend/hibernation
- drm/amd/pm: do not use ixFEATURE_STATUS for checking smc running
- s390/smp: move rcu_cpu_starting() earlier
- tpm_tis: Disable interrupts on ThinkPad T490s
- tick/common: Touch watchdog in tick_unfreeze() on all CPUs
- mfd: sprd: Add wakeup capability for PMIC IRQ
- btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod
- thunderbolt: Fix memory leak if ida_simple_get() fails in
enumerate_services()
- btrfs: fix potential overflow in cluster_pages_for_defrag on 32bit arch
- mmc: renesas_sdhi_core: Add missing tmio_mmc_host_free() at remove
[ Ubuntu: 4.15.0-134.138 ]
* Packaging resync (LP: #1786013)
- update dkms package versions
-- William Breathitt Gray <email address hidden> Thu, 04 Feb 2021 05:55:46 -0500
-
linux-aws (4.15.0-1093.99) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1093.99 -proposed tracker (LP: #1911275)
* aws: network performance regression due to initial TCP receive buffer size
change (LP: #1910200)
- tcp: select sane initial rcvq_space.space for big MSS
* arm64: prevent losing page dirty state (LP: #1908503)
- arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect()
* Disable Atari partition support for cloud kernels (LP: #1908264)
- [Config] Disable Atari partition support
* aws: xen-netfront: prevent potential error on hibernate (LP: #1906850)
- SAUCE: xen-netfront: prevent unnecessary close on hibernate
[ Ubuntu: 4.15.0-133.137 ]
* bionic/linux: 4.15.0-133.137 -proposed tracker (LP: #1911295)
* [drm:qxl_enc_commit [qxl]] *ERROR* head number too large or missing monitors
config: (LP: #1908219)
- qxl: remove qxl_io_log()
- qxl: move qxl_send_monitors_config()
- qxl: hook monitors_config updates into crtc, not encoder.
* Touchpad not detected on ByteSpeed C15B laptop (LP: #1906128)
- Input: i8042 - add ByteSpeed touchpad to noloop table
* vmx_nm_test in ubuntu_kvm_unit_tests interrupted on X-oracle-4.15 /
B-oracle-4.15 / X-KVM / B-KVM (LP: #1872401)
- KVM: nVMX: Always reflect #NM VM-exits to L1
* stack trace in kernel (LP: #1903596)
- net: napi: remove useless stack trace
* CVE-2020-27777
- [Config]: Set CONFIG_PPC_RTAS_FILTER
* Bionic update: upstream stable patchset 2020-12-04 (LP: #1906875)
- regulator: defer probe when trying to get voltage from unresolved supply
- ring-buffer: Fix recursion protection transitions between interrupt context
- time: Prevent undefined behaviour in timespec64_to_ns()
- nbd: don't update block size after device is started
- btrfs: sysfs: init devices outside of the chunk_mutex
- btrfs: reschedule when cloning lots of extents
- genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY
- hv_balloon: disable warning when floor reached
- net: xfrm: fix a race condition during allocing spi
- perf tools: Add missing swap for ino_generation
- ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link()
- can: rx-offload: don't call kfree_skb() from IRQ context
- can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ
context
- can: dev: __can_get_echo_skb(): fix real payload length return value for RTR
frames
- can: can_create_echo_skb(): fix echo skb generation: always use skb_clone()
- can: peak_usb: add range checking in decode operations
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
- can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is
on
- xfs: flush new eof page on truncate to avoid post-eof corruption
- Btrfs: fix missing error return if writeback for extent buffer never started
- ath9k_htc: Use appropriate rs_datalen type
- usb: gadget: goku_udc: fix potential crashes in probe
- gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free
- gfs2: Add missing truncate_inode_pages_final for sd_aspace
- gfs2: check for live vs. read-only file system in gfs2_fitrim
- scsi: hpsa: Fix memory leak in hpsa_init_one()
- drm/amdgpu: perform srbm soft reset always on SDMA resume
- mac80211: fix use of skb payload instead of header
- cfg80211: regulatory: Fix inconsistent format argument
- scsi: scsi_dh_alua: Avoid crash during alua_bus_detach()
- iommu/amd: Increase interrupt remapping table limit to 512 entries
- pinctrl: intel: Set default bias in case no particular value given
- ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template
- pinctrl: aspeed: Fix GPI only function problem.
- nbd: fix a block_device refcount leak in nbd_release
- xfs: fix flags argument to rmap lookup when converting shared file rmaps
- xfs: fix rmap key and record comparison functions
- xfs: fix a missing unlock on error in xfs_fs_map_blocks
- of/address: Fix of_node memory leak in of_dma_is_coherent
- cosa: Add missing kfree in error path of cosa_write
- perf: Fix get_recursion_context()
- ext4: correctly report "not supported" for {usr,grp}jquota when
!CONFIG_QUOTA
- ext4: unlock xattr_sem properly in ext4_inline_data_truncate()
- thunderbolt: Add the missed ida_simple_remove() in ring_request_msix()
- uio: Fix use-after-free in uio_unregister_device()
- usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode
- mei: protect mei_cl_mtu from null dereference
- futex: Don't enable IRQs unconditionally in put_pi_state()
- ocfs2: initialize ip_next_orphan
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
- don't dump the threads that had been already exiting when zapped.
- drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[]
- pinctrl: amd: use higher precision for 512 RtcClk
- pinctrl: amd: fix incorrect way to disable debounce filter
- swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb"
- IPv6: Set SIT tunnel hard_header_len to zero
- net/af_iucv: fix null pointer dereference on shutdown
- net/x25: Fix null-ptr-deref in x25_connect
- vrf: Fix fast path output packet handling with async Netfilter rules
- r8169: fix potential skb double free in an error path
- net: Update window_clamp if SOCK_RCVBUF is set
- random32: make prandom_u32() output unpredictable
- x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-
on STIBP
- perf/core: Fix bad use of igrab()
- perf/core: Fix crash when using HW tracing kernel filters
- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
- Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint"
- reboot: fix overflow parsing reboot cpu number
- Convert trailing spaces and periods in path components
- xfs: fix scrub flagging rtinherit even if there is no rt device
- drm/amd/pm: perform SMC reset on suspend/hibernation
- drm/amd/pm: do not use ixFEATURE_STATUS for checking smc running
- s390/smp: move rcu_cpu_starting() earlier
- tpm_tis: Disable interrupts on ThinkPad T490s
- tick/common: Touch watchdog in tick_unfreeze() on all CPUs
- mfd: sprd: Add wakeup capability for PMIC IRQ
- btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod
- thunderbolt: Fix memory leak if ida_simple_get() fails in
enumerate_services()
- btrfs: fix potential overflow in cluster_pages_for_defrag on 32bit arch
- mmc: renesas_sdhi_core: Add missing tmio_mmc_host_free() at remove
[ Ubuntu: 4.15.0-132.136 ]
* bionic/linux: 4.15.0-132.136 -proposed tracker (LP: #1911147)
* Packaging resync (LP: #1786013)
- update dkms package versions
* CVE-2020-28374
- SAUCE: target: fix XCOPY NAA identifier lookup
-- Khalid Elmously <email address hidden> Fri, 15 Jan 2021 05:19:53 -0500
-
linux-aws (4.15.0-1092.98) bionic; urgency=medium
[ Ubuntu: 4.15.0-130.134 ]
* Packaging resync (LP: #1786013)
- update dkms package versions
* CVE-2021-1052 // CVE-2021-1053
- [Packaging] NVIDIA -- Add the NVIDIA 460 driver
-- Marcelo Henrique Cerri <email address hidden> Wed, 06 Jan 2021 17:15:37 -0300
-
linux-aws (4.15.0-1091.96) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1091.96 -proposed tracker (LP: #1907616)
* Bionic update: upstream stable patchset 2020-11-18 (LP: #1904791)
- [Config] updateconfigs for DW_APB_TIMER
[ Ubuntu: 4.15.0-129.132 ]
* bionic/linux: 4.15.0-129.132 -proposed tracker (LP: #1907635)
* Packaging resync (LP: #1786013)
- update dkms package versions
* Ubuntu 18.04- call trace in kernel buffer when unloading ib_ipoib module
(LP: #1904848)
- SAUCE: net/mlx5e: IPoIB, initialize update_stat_work for ipoib devices
* memory is leaked when tasks are moved to net_prio (LP: #1886859)
- netprio_cgroup: Fix unlimited memory leak of v2 cgroups
* s390: dbginfo.sh triggers kernel panic, reading from
/sys/kernel/mm/page_idle/bitmap (LP: #1904884)
- mm/page_idle.c: skip offline pages
* Bionic update: upstream stable patchset 2020-11-23 (LP: #1905333)
- drm/i915: Break up error capture compression loops with cond_resched()
- tipc: fix use-after-free in tipc_bcast_get_mode
- gianfar: Replace skb_realloc_headroom with skb_cow_head for PTP
- gianfar: Account for Tx PTP timestamp in the skb headroom
- net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition
- sctp: Fix COMM_LOST/CANT_STR_ASSOC err reporting on big-endian platforms
- sfp: Fix error handing in sfp_probe()
- Blktrace: bail out early if block debugfs is not configured
- i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c
- Fonts: Replace discarded const qualifier
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
- lib/crc32test: remove extra local_irq_disable/enable
- kthread_worker: prevent queuing delayed work from timer_fn when it is being
canceled
- mm: always have io_remap_pfn_range() set pgprot_decrypted()
- gfs2: Wake up when sd_glock_disposal becomes zero
- ftrace: Fix recursion check for NMI test
- ftrace: Handle tracing when switching between context
- tracing: Fix out of bounds write in get_trace_buf
- futex: Handle transient "ownerless" rtmutex state correctly
- ARM: dts: sun4i-a10: fix cpu_alert temperature
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
- of: Fix reserved-memory overlap detection
- blk-cgroup: Fix memleak on error path
- blk-cgroup: Pre-allocate tree node on blkg_conf_prep
- scsi: core: Don't start concurrent async scan on same host
- vsock: use ns_capable_noaudit() on socket create
- drm/vc4: drv: Add error handding for bind
- ACPI: NFIT: Fix comparison to '-ENXIO'
- vt: Disable KD_FONT_OP_COPY
- fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent
- serial: 8250_mtk: Fix uart_get_baud_rate warning
- serial: txx9: add missing platform_driver_unregister() on error in
serial_txx9_init
- USB: serial: cyberjack: fix write-URB completion race
- USB: serial: option: add Quectel EC200T module support
- USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231
- USB: serial: option: add Telit FN980 composition 0x1055
- USB: Add NO_LPM quirk for Kingston flash drive
- usb: mtu3: fix panic in mtu3_gadget_stop()
- ARC: stack unwinding: avoid indefinite looping
- Revert "ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE"
- PM: runtime: Resume the device earlier in __device_release_driver()
- btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io()
- Btrfs: fix unwritten extent buffers and hangs on future writeback attempts
- btrfs: tree-checker: fix the error message for transid error
- mm: mempolicy: fix potential pte_unmap_unlock pte error
- tools: perf: Fix build error in v4.19.y
- net: dsa: read mac address from DT for slave device
- arm64: dts: marvell: espressobin: Add ethernet switch aliases
* Bionic update: upstream stable patchset 2020-11-23 (LP: #1905333) //
CVE-2019-19770 which shows this issue is not a core debugfs issue, but
- blktrace: fix debugfs use after free
* Bionic update: upstream stable patchset 2020-11-18 (LP: #1904791)
- scripts/setlocalversion: make git describe output more reliable
- arm64: link with -z norelro regardless of CONFIG_RELOCATABLE
- gtp: fix an use-before-init in gtp_newlink()
- ravb: Fix bit fields checking in ravb_hwtstamp_get()
- tipc: fix memory leak caused by tipc_buf_append()
- arch/x86/amd/ibs: Fix re-arming IBS Fetch
- x86/xen: disable Firmware First mode for correctable memory errors
- fuse: fix page dereference after free
- p54: avoid accessing the data mapped to streaming DMA
- mtd: lpddr: Fix bad logic in print_drs_error
- ata: sata_rcar: Fix DMA boundary mask
- fscrypt: return -EXDEV for incompatible rename or link into encrypted dir
- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10
compiled kernels
- mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish()
- futex: Fix incorrect should_fail_futex() handling
- powerpc/powernv/smp: Fix spurious DBG() warning
- powerpc: select ARCH_WANT_IRQS_OFF_ACTIVATE_MM
- sparc64: remove mm_cpumask clearing to fix kthread_use_mm race
- f2fs: add trace exit in exception path
- f2fs: fix to check segment boundary during SIT page readahead
- um: change sigio_spinlock to a mutex
- ARM: 8997/2: hw_breakpoint: Handle inexact watchpoint addresses
- xfs: fix realtime bitmap/summary file truncation when growing rt volume
- video: fbdev: pvr2fb: initialize variables
- ath10k: start recovery process when payload length exceeds max htc length
for sdio
- ath10k: fix VHT NSS calculation when STBC is enabled
- drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working
correctly
- media: videodev2.h: RGB BT2020 and HSV are always full range
- media: platform: Improve queue set up flow for bug fixing
- usb: typec: tcpm: During PR_SWAP, source caps should be sent only after
tSwapSourceStart
- media: tw5864: check status of tw5864_frameinterval_get
- mmc: via-sdmmc: Fix data race bug
- drm/bridge/synopsys: dsi: add support for non-continuous HS clock
- printk: reduce LOG_BUF_SHIFT range for H8300
- kgdb: Make "kgdbcon" work properly with "kgdb_earlycon"
- cpufreq: sti-cpufreq: add stih418 support
- USB: adutux: fix debugging
- uio: free uio id after uio file node is freed
- arm64/mm: return cpu_all_mask when node is NUMA_NO_NODE
- ACPI: Add out of bounds and numa_off protections to pxm_to_node()
- drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values
- bus/fsl_mc: Do not rely on caller to provide non NULL mc_io
- power: supply: test_power: add missing newlines when printing parameters by
sysfs
- md/bitmap: md_bitmap_get_counter returns wrong blocks
- bnxt_en: Log unknown link speed appropriately.
- clk: ti: clockdomain: fix static checker warning
- net: 9p: initialize sun_server.sun_path to have addr's value only when addr
is valid
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
- ext4: Detect already used quota file early
- gfs2: add validation checks for size of superblock
- arm64: dts: renesas: ulcb: add full-pwr-cycle-in-suspend into eMMC nodes
- memory: emif: Remove bogus debugfs error handling
- ARM: dts: s5pv210: remove DMA controller bus node name to fix dtschema
warnings
- ARM: dts: s5pv210: move PMU node out of clock controller
- ARM: dts: s5pv210: remove dedicated 'audio-subsystem' node
- nbd: make the config put is called before the notifying the waiter
- sgl_alloc_order: fix memory leak
- nvme-rdma: fix crash when connect rejected
- md/raid5: fix oops during stripe resizing
- perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count()
- perf/x86/amd/ibs: Fix raw sample data accumulation
- leds: bcm6328, bcm6358: use devres LED registering function
- fs: Don't invalidate page buffers in block_write_full_page()
- NFS: fix nfs_path in case of a rename retry
- ACPI / extlog: Check for RDMSR failure
- ACPI: debug: don't allow debugging when ACPI is disabled
- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs
- w1: mxc_w1: Fix timeout resolution problem leading to bus error
- scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
- btrfs: reschedule if necessary when logging directory items
- btrfs: send, recompute reference path after orphanization of a directory
- btrfs: use kvzalloc() to allocate clone_roots in btrfs_ioctl_send()
- btrfs: cleanup cow block on error
- btrfs: fix use-after-free on readahead extent after failure to create it
- usb: dwc3: ep0: Fix ZLP for OUT ep0 requests
- usb: dwc3: core: add phy cleanup for probe error handling
- usb: dwc3: core: don't trigger runtime pm when remove driver
- usb: cdc-acm: fix cooldown mechanism
- usb: host: fsl-mph-dr-of: check return of dma_set_mask()
- drm/i915: Force VT'd workarounds when running as a guest OS
- vt: keyboard, simplify vt_kdgkbsent
- vt: keyboard, extend func_buf_lock to readers
- dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status
- iio:light:si1145: Fix timestamp alignment and prevent data leak.
- iio:adc:ti-adc0832 Fix alignment issue with timestamp
- iio:adc:ti-adc12138 Fix alignment issue with timestamp
- iio:gyro:itg3200: Fix timestamp alignment and prevent data leak.
- s390/stp: add locking to sysfs functions
- [Config] update config for PPC_RTAS_FILTER
- powerpc/rtas: Restrict RTAS requests from userspace
- powerpc: Warn about use of smt_snooze_delay
- powerpc/powernv/elog: Fix race while processing OPAL error log event.
- NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag
- NFSD: Add missing NFSv2 .pc_func methods
- ubifs: dent: Fix some potential memory leaks while iterating entries
- perf python scripting: Fix printable strings in python3 scripts
- ubi: check kthread_should_stop() after the setting of task state
- ia64: fix build error with !COREDUMP
- drm/amdgpu: don't map BO in reserved region
- ceph: promote to unsigned long long before shifting
- libceph: clear con->out_msg on Policy::stateful_server faults
- 9P: Cast to loff_t before multiplying
- ring-buffer: Return 0 on success from ring_buffer_resize()
- vringh: fix __vringh_iov() when riov and wiov are different
- ext4: fix leaking sysfs kobject after failed mount
- ext4: fix error handling code in add_new_gdb
- ext4: fix invalid inode checksum
- drm/ttm: fix eviction valuable range check.
- rtc: rx8010: don't modify the global rtc ops
- tty: make FONTX ioctl use the tty pointer they were actually passed
- arm64: berlin: Select DW_APB_TIMER_OF
- [Config] update annotations for DW_APB_TIMER
- cachefiles: Handle readpage error correctly
- hil/parisc: Disable HIL driver when it gets stuck
- arm: dts: mt7623: add missing pause for switchport
- ARM: samsung: fix PM debug build with DEBUG_LL but !MMU
- ARM: s3c24xx: fix missing system reset
- device property: Keep secondary firmware node secondary by type
- device property: Don't clear secondary pointer for shared primary firmware
node
- KVM: arm64: Fix AArch32 handling of DBGD{CCINT,SCRext} and DBGVCR
- staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice
- staging: octeon: repair "fixed-link" support
- staging: octeon: Drop on uncorrectable alignment or FCS error
- objtool: Support Clang non-section symbols in ORC generation
- arm64: Run ARCH_WORKAROUND_1 enabling code on all CPUs
- x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled
- cxgb4: set up filter action after rewrites
- cxl: Rework error message for incompatible slots
- serial: pl011: Fix lockdep splat when handling magic-sysrq interrupt
- fscrypt: only set dentry_operations on ciphertext dentries
- xen/events: don't use chip_data for legacy IRQs
- xen/events: avoid removing an event channel while handling it
- xen/events: add a proper barrier to 2-level uevent unmasking
- xen/events: fix race in evtchn_fifo_unmask()
- xen/events: add a new "late EOI" evtchn framework
- xen/blkback: use lateeoi irq binding
- xen/netback: use lateeoi irq binding
- xen/scsiback: use lateeoi irq binding
- xen/pvcallsback: use lateeoi irq binding
- xen/pciback: use lateeoi irq binding
- xen/events: switch user event channels to lateeoi model
- xen/events: use a common cpu hotplug hook for event channels
- xen/events: defer eoi in case of excessive number of events
- xen/events: block rogue events for some time
- RDMA/qedr: Fix memory leak in iWARP CM
- [Config] update config for ARCH_WANT_IRQS_OFF_ACTIVATE_MM
- mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race
- f2fs: fix uninit-value in f2fs_lookup
- power: supply: bq27xxx: report "not charging" on all types
- media: imx274: fix frame interval handling
- arm64: topology: Stop using MPIDR for topology information
- ia64: kprobes: Use generic kretprobe trampoline handler
- media: uvcvideo: Fix dereference of out-of-bound list iterator
- riscv: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
- usb: xhci: omit duplicate actions when suspending a runtime suspended host.
- drm/amd/display: HDMI remote sink need mode validation for Linux
- btrfs: fix replace of seed device
- rpmsg: glink: Use complete_all for open states
- cifs: handle -EINTR in cifs_setattr
- ACPI: button: fix handling lid state changes when input device closed
- scsi: qla2xxx: Fix crash on session cleanup with unload
- btrfs: improve device scanning messages
- usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC
- usb: typec: tcpm: reset hard_reset_count for any disconnect
- powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation
- drm/amd/display: Don't invoke kgdb_breakpoint() unconditionally
* [HP 635] Radeon 6310 brightness control does not work (LP: #1894667) //
Bionic update: upstream stable patchset 2020-11-18 (LP: #1904791)
- ACPI: video: use ACPI backlight for HP 635 Notebook
* Bionic update: upstream stable patchset 2020-11-17 (LP: #1904613)
- RDMA/cma: Remove dead code for kernel rdmacm multicast
- RDMA/hns: Fix missing sq_sig_type when querying QP
- rpmsg: smd: Fix a kobj leak in in qcom_smd_parse_edge()
- pwm: img: Fix null pointer access in probe
- watchdog: Fix memleak in watchdog_cdev_register
- watchdog: Use put_device on error
- SUNRPC: fix copying of multiple pages in gss_read_proxy_verf()
- netfilter: conntrack: connection timeout after re-register
- netfilter: nf_fwd_netdev: clear timestamp in forwarding path
- ARM: dts: imx6sl: fix rng node
- ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator
- memory: omap-gpmc: Fix build error without CONFIG_OF
- arm64: dts: qcom: pm8916: Remove invalid reg size from wcd_codec
- ip_gre: set dev->hard_header_len and dev->needed_headroom properly
- usb: dwc3: simple: add support for Hikey 970
* Bionic: btrfs: kernel BUG at /build/linux-
eTBZpZ/linux-4.15.0/fs/btrfs/ctree.c:3233! (LP: #1902254)
- btrfs: tree-checker: fix incorrect printk format
* Bionic update: upstream stable patchset 2020-11-10 (LP: #1903768)
- Bluetooth: fix kernel oops in store_pending_adv_report
- Bluetooth: Consolidate encryption handling in hci_encrypt_cfm
- Bluetooth: Fix update of connection state in `hci_encrypt_cfm`
- Bluetooth: Disconnect if E0 is used for Level 4
- media: usbtv: Fix refcounting mixup
- USB: serial: option: add Cellient MPL200 card
- USB: serial: option: Add Telit FT980-KS composition
- staging: comedi: check validity of wMaxPacketSize of usb endpoints found
- USB: serial: pl2303: add device-id for HP GC device
- USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters
- reiserfs: Initialize inode keys properly
- reiserfs: Fix oops during mount
- drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case
- crypto: bcm - Verify GCM/CCM key length in setkey
- crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA
- ARM: 8858/1: vdso: use $(LD) instead of $(CC) to link VDSO
- ARM: 8939/1: kbuild: use correct nm executable
- ARM: 8867/1: vdso: pass --be8 to linker if necessary
- ibmveth: Switch order of ibmveth_helper calls.
- ibmveth: Identify ingress large send packets.
- ipv4: Restore flowi4_oif update before call to xfrm_lookup_route
- mlx4: handle non-napi callers to napi_poll
- net: usb: qmi_wwan: add Cellient MPL200 card
- tipc: fix the skb_unshare() in tipc_buf_append()
- net/ipv4: always honour route mtu during forwarding
- r8169: fix data corruption issue on RTL8402
- binder: fix UAF when releasing todo list
- ALSA: bebob: potential info leak in hwdep_read()
- net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device
- net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling
ether_setup
- nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in
nfc_genl_fw_download()
- tcp: fix to update snd_wl1 in bulk receiver fast path
- icmp: randomize the global rate limiter
- cifs: remove bogus debug code
- cifs: Return the error from crypt_message when enc/dec key not found.
- KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages
- KVM: SVM: Initialize prev_ga_tag before use
- ima: Don't ignore errors from crypto_shash_update()
- crypto: algif_aead - Do not set MAY_BACKLOG on the async path
- EDAC/i5100: Fix error handling order in i5100_init_one()
- x86/fpu: Allow multiple bits in clearcpuid= parameter
- drivers/perf: xgene_pmu: Fix uninitialized resource struct
- crypto: algif_skcipher - EBUSY on aio should be an error
- crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc()
- crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call
- media: tuner-simple: fix regression in simple_set_radio_freq
- media: Revert "media: exynos4-is: Add missed check for
pinctrl_lookup_state()"
- media: m5mols: Check function pointer in m5mols_sensor_power
- media: uvcvideo: Set media controller entity functions
- media: omap3isp: Fix memleak in isp_probe
- crypto: omap-sham - fix digcnt register handling with export/import
- cypto: mediatek - fix leaks in mtk_desc_ring_alloc
- media: mx2_emmaprp: Fix memleak in emmaprp_probe
- media: tc358743: initialize variable
- media: platform: fcp: Fix a reference count leak.
- media: s5p-mfc: Fix a reference count leak
- media: ti-vpe: Fix a missing check and reference count leak
- regulator: resolve supply after creating regulator
- ath10k: provide survey info as accumulated data
- Bluetooth: hci_uart: Cancel init work before unregistering
- ath6kl: prevent potential array overflow in ath6kl_add_new_sta()
- ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb()
- wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680
- ASoC: qcom: lpass-platform: fix memory leak
- ASoC: qcom: lpass-cpu: fix concurrency issue
- brcmfmac: check ndev pointer
- mwifiex: Do not use GFP_KERNEL in atomic context
- drm/gma500: fix error check
- scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()'
- scsi: csiostor: Fix wrong return value in csio_hw_prep_fw()
- backlight: sky81452-backlight: Fix refcount imbalance on error
- VMCI: check return value of get_user_pages_fast() for errors
- tty: serial: earlycon dependency
- pty: do tty_flip_buffer_push without port->lock in pty_write
- pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare()
- pwm: lpss: Add range limit check for the base_unit register value
- drivers/virt/fsl_hypervisor: Fix error handling path
- video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error
- video: fbdev: sis: fix null ptr dereference
- HID: roccat: add bounds checking in kone_sysfs_write_settings()
- pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser
- pinctrl: mcp23s08: Fix mcp23x17 precious range
- ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd()
- misc: mic: scif: Fix error handling path
- ALSA: seq: oss: Avoid mutex lock for a long-time ioctl
- usb: dwc2: Fix parameter type in function pointer prototype
- quota: clear padding in v2r1_mem2diskdqb()
- HID: hid-input: fix stylus battery reporting
- qtnfmac: fix resource leaks on unsupported iftype error return path
- net: enic: Cure the enic api locking trainwreck
- mfd: sm501: Fix leaks in probe()
- iwlwifi: mvm: split a print to avoid a WARNING in ROC
- usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above.
- usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well
- nl80211: fix non-split wiphy information
- usb: dwc2: Fix INTR OUT transfers in DDMA mode.
- scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs()
- mwifiex: fix double free
- net: korina: fix kfree of rx/tx descriptor array
- mm/memcg: fix device private memcg accounting
- mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary
- IB/mlx4: Fix starvation in paravirt mux/demux
- IB/mlx4: Adjust delayed work when a dup is observed
- powerpc/pseries: Fix missing of_node_put() in rng_init()
- powerpc/icp-hv: Fix missing of_node_put() in success path
- mtd: lpddr: fix excessive stack usage with clang
- mtd: mtdoops: Don't write panic data twice
- ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values
- arc: plat-hsdk: fix kconfig dependency warning when !RESET_CONTROLLER
- xfs: limit entries returned when counting fsmap records
- RDMA/qedr: Fix use of uninitialized field
- powerpc/tau: Use appropriate temperature sample interval
- powerpc/tau: Remove duplicated set_thresholds() call
- powerpc/tau: Disable TAU between measurements
- perf intel-pt: Fix "context_switch event has no tid" error
- RDMA/hns: Set the unsupported wr opcode
- kdb: Fix pager search for multi-line strings
- overflow: Include header file with SIZE_MAX declaration
- powerpc/perf: Exclude pmc5/6 from the irrelevant PMU group constraints
- powerpc/perf/hv-gpci: Fix starting index value
- cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier
- IB/rdmavt: Fix sizeof mismatch
- f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info
- lib/crc32.c: fix trivial typo in preprocessor condition
- ramfs: fix nommu mmap with gaps in the page cache
- rapidio: fix error handling path
- rapidio: fix the missed put_device() for rio_mport_add_riodev
- mailbox: avoid timer start from callback
- i2c: rcar: Auto select RESET_CONTROLLER
- PCI: iproc: Set affinity mask on MSI interrupts
- clk: at91: clk-main: update key before writing AT91_CKGR_MOR
- clk: bcm2835: add missing release if devm_clk_hw_register fails
- ext4: limit entries returned when counting fsmap records
- vfio/pci: Clear token on bypass registration failure
- vfio iommu type1: Fix memory leak in vfio_iommu_type1_pin_pages
- Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume()
- Input: stmfts - fix a & vs && typo
- Input: ep93xx_keypad - fix handling of platform_get_irq() error
- Input: omap4-keypad - fix handling of platform_get_irq() error
- Input: twl4030_keypad - fix handling of platform_get_irq() error
- Input: sun4i-ps2 - fix handling of platform_get_irq() error
- KVM: x86: emulating RDPID failure shall return #UD rather than #GP
- memory: omap-gpmc: Fix a couple off by ones
- memory: fsl-corenet-cf: Fix handling of platform_get_irq() error
- arm64: dts: qcom: msm8916: Fix MDP/DSI interrupts
- ARM: dts: owl-s500: Fix incorrect PPI interrupt specifiers
- arm64: dts: zynqmp: Remove additional compatible string for i2c IPs
- powerpc/powernv/dump: Fix race while processing OPAL dump
- nvmet: fix uninitialized work for zero kato
- NTB: hw: amd: fix an issue about leak system resources
- perf: correct SNOOPX field offset
- i2c: core: Restore acpi_walk_dep_device_list() getting called after
registering the ACPI i2c devs
- crypto: ccp - fix error handling
- media: firewire: fix memory leak
- media: ati_remote: sanity check for both endpoints
- media: st-delta: Fix reference count leak in delta_run_work
- media: sti: Fix reference count leaks
- media: exynos4-is: Fix several reference count leaks due to
pm_runtime_get_sync
- media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync
- media: exynos4-is: Fix a reference count leak
- media: vsp1: Fix runtime PM imbalance on error
- media: platform: s3c-camif: Fix runtime PM imbalance on error
- media: platform: sti: hva: Fix runtime PM imbalance on error
- media: bdisp: Fix runtime PM imbalance on error
- media: media/pci: prevent memory leak in bttv_probe
- media: uvcvideo: Ensure all probed info is returned to v4l2
- mmc: sdio: Check for CISTPL_VERS_1 buffer size
- media: saa7134: avoid a shift overflow
- fs: dlm: fix configfs memory leak
- media: venus: core: Fix runtime PM imbalance in venus_probe
- ntfs: add check for mft record size in superblock
- mac80211: handle lack of sband->bitrates in rates
- PM: hibernate: remove the bogus call to get_gendisk() in software_resume()
- scsi: mvumi: Fix error return in mvumi_io_attach()
- scsi: target: core: Add CONTROL field for trace events
- mic: vop: copy data to kernel space then write to io memory
- misc: vop: add round_up(x,4) for vring_size to avoid kernel panic
- usb: gadget: function: printer: fix use-after-free in __lock_acquire
- udf: Limit sparing table size
- udf: Avoid accessing uninitialized data on failed inode read
- USB: cdc-acm: handle broken union descriptors
- can: flexcan: flexcan_chip_stop(): add error handling and propagate error
value
- ath9k: hif_usb: fix race condition between usb_get_urb() and
usb_kill_anchored_urbs()
- misc: rtsx: Fix memory leak in rtsx_pci_probe
- reiserfs: only call unlock_new_inode() if I_NEW
- xfs: make sure the rt allocator doesn't run off the end
- usb: ohci: Default to per-port over-current protection
- Bluetooth: Only mark socket zapped after unlocking
- scsi: ibmvfc: Fix error return in ibmvfc_probe()
- brcmsmac: fix memory leak in wlc_phy_attach_lcnphy
- rtl8xxxu: prevent potential memory leak
- Fix use after free in get_capset_info callback.
- scsi: qedi: Protect active command list to avoid list corruption
- scsi: qedi: Fix list_del corruption while removing active I/O
- tty: ipwireless: fix error handling
- ipvs: Fix uninit-value in do_ip_vs_set_ctl()
- reiserfs: Fix memory leak in reiserfs_parse_options()
- mwifiex: don't call del_timer_sync() on uninitialized timer
- brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach
- usb: core: Solve race condition in anchor cleanup functions
- scsi: ufs: ufs-qcom: Fix race conditions caused by ufs_qcom_testbus_config()
- ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n()
- net: korina: cast KSEG0 address to pointer in kfree
- tty: serial: fsl_lpuart: fix lpuart32_poll_get_char
- usb: cdc-acm: add quirk to blacklist ETAS ES58X devices
- USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
- eeprom: at25: set minimum read/write access stride to 1
- usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets.
- powerpc/powernv/opal-dump : Use IRQ_HANDLED instead of numbers in interrupt
handler
- net: fix pos incrementment in ipv6_route_seq_next
- ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887
- x86/nmi: Fix nmi_handle() duration miscalculation
- x86/events/amd/iommu: Fix sizeof mismatch
- media: uvcvideo: Silence shift-out-of-bounds warning
- hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61}
- media: tc358743: cleanup tc358743_cec_isr
- pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB
- spi: spi-s3c64xx: swap s3c64xx_spi_set_cs() and s3c64xx_enable_datapath()
- staging: rtl8192u: Do not use GFP_KERNEL in atomic context
- net: stmmac: use netif_tx_start|stop_all_queues() function
- scsi: target: tcmu: Fix warning: 'page' may be used uninitialized
- ipvs: clear skb->tstamp in forwarding path
- netfilter: nf_log: missing vlan offload tag and proto
- RDMA/ucma: Fix locking for ctx->events_reported
- RDMA/ucma: Add missing locking around rdma_leave_multicast()
- RDMA/qedr: Fix inline size returned for iWARP
-- William Breathitt Gray <email address hidden> Mon, 14 Dec 2020 13:17:31 -0500
-
linux-aws (4.15.0-1090.95) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1090.95 -proposed tracker (LP: #1907335)
[ Ubuntu: 4.15.0-128.131 ]
* bionic/linux: 4.15.0-128.131 -proposed tracker (LP: #1907354)
* Packaging resync (LP: #1786013)
- update dkms package versions
* raid10: discard leads to corrupted file system (LP: #1907262)
- Revert "md/raid10: improve discard request for far layout"
- Revert "md/raid10: improve raid10 discard request"
- Revert "md/raid10: pull codes that wait for blocked dev into one function"
- Revert "md/raid10: extend r10bio devs to raid disks"
- Revert "md: add md_submit_discard_bio() for submitting discard bio"
[ Ubuntu: 4.15.0-126.129 ]
* bionic/linux: 4.15.0-126.129 -proposed tracker (LP: #1905305)
* CVE-2020-4788
- SAUCE: powerpc/64s: Define MASKABLE_RELON_EXCEPTION_PSERIES_OOL
- SAUCE: powerpc/64s: move some exception handlers out of line
- powerpc/64s: flush L1D on kernel entry
- SAUCE: powerpc: Add a framework for user access tracking
- powerpc: Implement user_access_begin and friends
- powerpc: Fix __clear_user() with KUAP enabled
- powerpc/uaccess: Evaluate macro arguments once, before user access is
allowed
- powerpc/64s: flush L1D after user accesses
-- Khalid Elmously <email address hidden> Wed, 09 Dec 2020 15:03:45 -0500
-
linux-aws (4.15.0-1089.94) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1089.94 -proposed tracker (LP: #1906008)
* Bionic update: upstream stable patchset 2020-11-18 (LP: #1904791)
- [Config] updateconfigs for DW_APB_TIMER
[ Ubuntu: 4.15.0-127.130 ]
* bionic/linux: 4.15.0-127.130 -proposed tracker (LP: #1906027)
* Packaging resync (LP: #1786013)
- update dkms package versions
* Ubuntu 18.04- call trace in kernel buffer when unloading ib_ipoib module
(LP: #1904848)
- SAUCE: net/mlx5e: IPoIB, initialize update_stat_work for ipoib devices
* memory is leaked when tasks are moved to net_prio (LP: #1886859)
- netprio_cgroup: Fix unlimited memory leak of v2 cgroups
* s390: dbginfo.sh triggers kernel panic, reading from
/sys/kernel/mm/page_idle/bitmap (LP: #1904884)
- mm/page_idle.c: skip offline pages
* Bionic update: upstream stable patchset 2020-11-23 (LP: #1905333)
- drm/i915: Break up error capture compression loops with cond_resched()
- tipc: fix use-after-free in tipc_bcast_get_mode
- gianfar: Replace skb_realloc_headroom with skb_cow_head for PTP
- gianfar: Account for Tx PTP timestamp in the skb headroom
- net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition
- sctp: Fix COMM_LOST/CANT_STR_ASSOC err reporting on big-endian platforms
- sfp: Fix error handing in sfp_probe()
- Blktrace: bail out early if block debugfs is not configured
- i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c
- Fonts: Replace discarded const qualifier
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
- lib/crc32test: remove extra local_irq_disable/enable
- kthread_worker: prevent queuing delayed work from timer_fn when it is being
canceled
- mm: always have io_remap_pfn_range() set pgprot_decrypted()
- gfs2: Wake up when sd_glock_disposal becomes zero
- ftrace: Fix recursion check for NMI test
- ftrace: Handle tracing when switching between context
- tracing: Fix out of bounds write in get_trace_buf
- futex: Handle transient "ownerless" rtmutex state correctly
- ARM: dts: sun4i-a10: fix cpu_alert temperature
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
- of: Fix reserved-memory overlap detection
- blk-cgroup: Fix memleak on error path
- blk-cgroup: Pre-allocate tree node on blkg_conf_prep
- scsi: core: Don't start concurrent async scan on same host
- vsock: use ns_capable_noaudit() on socket create
- drm/vc4: drv: Add error handding for bind
- ACPI: NFIT: Fix comparison to '-ENXIO'
- vt: Disable KD_FONT_OP_COPY
- fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent
- serial: 8250_mtk: Fix uart_get_baud_rate warning
- serial: txx9: add missing platform_driver_unregister() on error in
serial_txx9_init
- USB: serial: cyberjack: fix write-URB completion race
- USB: serial: option: add Quectel EC200T module support
- USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231
- USB: serial: option: add Telit FN980 composition 0x1055
- USB: Add NO_LPM quirk for Kingston flash drive
- usb: mtu3: fix panic in mtu3_gadget_stop()
- ARC: stack unwinding: avoid indefinite looping
- Revert "ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE"
- PM: runtime: Resume the device earlier in __device_release_driver()
- btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io()
- Btrfs: fix unwritten extent buffers and hangs on future writeback attempts
- btrfs: tree-checker: fix the error message for transid error
- mm: mempolicy: fix potential pte_unmap_unlock pte error
- tools: perf: Fix build error in v4.19.y
- net: dsa: read mac address from DT for slave device
- arm64: dts: marvell: espressobin: Add ethernet switch aliases
* Bionic update: upstream stable patchset 2020-11-23 (LP: #1905333) //
CVE-2019-19770 which shows this issue is not a core debugfs issue, but
- blktrace: fix debugfs use after free
* Bionic update: upstream stable patchset 2020-11-18 (LP: #1904791)
- scripts/setlocalversion: make git describe output more reliable
- arm64: link with -z norelro regardless of CONFIG_RELOCATABLE
- gtp: fix an use-before-init in gtp_newlink()
- ravb: Fix bit fields checking in ravb_hwtstamp_get()
- tipc: fix memory leak caused by tipc_buf_append()
- arch/x86/amd/ibs: Fix re-arming IBS Fetch
- x86/xen: disable Firmware First mode for correctable memory errors
- fuse: fix page dereference after free
- p54: avoid accessing the data mapped to streaming DMA
- mtd: lpddr: Fix bad logic in print_drs_error
- ata: sata_rcar: Fix DMA boundary mask
- fscrypt: return -EXDEV for incompatible rename or link into encrypted dir
- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10
compiled kernels
- mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish()
- futex: Fix incorrect should_fail_futex() handling
- powerpc/powernv/smp: Fix spurious DBG() warning
- powerpc: select ARCH_WANT_IRQS_OFF_ACTIVATE_MM
- sparc64: remove mm_cpumask clearing to fix kthread_use_mm race
- f2fs: add trace exit in exception path
- f2fs: fix to check segment boundary during SIT page readahead
- um: change sigio_spinlock to a mutex
- ARM: 8997/2: hw_breakpoint: Handle inexact watchpoint addresses
- xfs: fix realtime bitmap/summary file truncation when growing rt volume
- video: fbdev: pvr2fb: initialize variables
- ath10k: start recovery process when payload length exceeds max htc length
for sdio
- ath10k: fix VHT NSS calculation when STBC is enabled
- drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working
correctly
- media: videodev2.h: RGB BT2020 and HSV are always full range
- media: platform: Improve queue set up flow for bug fixing
- usb: typec: tcpm: During PR_SWAP, source caps should be sent only after
tSwapSourceStart
- media: tw5864: check status of tw5864_frameinterval_get
- mmc: via-sdmmc: Fix data race bug
- drm/bridge/synopsys: dsi: add support for non-continuous HS clock
- printk: reduce LOG_BUF_SHIFT range for H8300
- kgdb: Make "kgdbcon" work properly with "kgdb_earlycon"
- cpufreq: sti-cpufreq: add stih418 support
- USB: adutux: fix debugging
- uio: free uio id after uio file node is freed
- arm64/mm: return cpu_all_mask when node is NUMA_NO_NODE
- ACPI: Add out of bounds and numa_off protections to pxm_to_node()
- drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values
- bus/fsl_mc: Do not rely on caller to provide non NULL mc_io
- power: supply: test_power: add missing newlines when printing parameters by
sysfs
- md/bitmap: md_bitmap_get_counter returns wrong blocks
- bnxt_en: Log unknown link speed appropriately.
- clk: ti: clockdomain: fix static checker warning
- net: 9p: initialize sun_server.sun_path to have addr's value only when addr
is valid
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
- ext4: Detect already used quota file early
- gfs2: add validation checks for size of superblock
- arm64: dts: renesas: ulcb: add full-pwr-cycle-in-suspend into eMMC nodes
- memory: emif: Remove bogus debugfs error handling
- ARM: dts: s5pv210: remove DMA controller bus node name to fix dtschema
warnings
- ARM: dts: s5pv210: move PMU node out of clock controller
- ARM: dts: s5pv210: remove dedicated 'audio-subsystem' node
- nbd: make the config put is called before the notifying the waiter
- sgl_alloc_order: fix memory leak
- nvme-rdma: fix crash when connect rejected
- md/raid5: fix oops during stripe resizing
- perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count()
- perf/x86/amd/ibs: Fix raw sample data accumulation
- leds: bcm6328, bcm6358: use devres LED registering function
- fs: Don't invalidate page buffers in block_write_full_page()
- NFS: fix nfs_path in case of a rename retry
- ACPI / extlog: Check for RDMSR failure
- ACPI: debug: don't allow debugging when ACPI is disabled
- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs
- w1: mxc_w1: Fix timeout resolution problem leading to bus error
- scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
- btrfs: reschedule if necessary when logging directory items
- btrfs: send, recompute reference path after orphanization of a directory
- btrfs: use kvzalloc() to allocate clone_roots in btrfs_ioctl_send()
- btrfs: cleanup cow block on error
- btrfs: fix use-after-free on readahead extent after failure to create it
- usb: dwc3: ep0: Fix ZLP for OUT ep0 requests
- usb: dwc3: core: add phy cleanup for probe error handling
- usb: dwc3: core: don't trigger runtime pm when remove driver
- usb: cdc-acm: fix cooldown mechanism
- usb: host: fsl-mph-dr-of: check return of dma_set_mask()
- drm/i915: Force VT'd workarounds when running as a guest OS
- vt: keyboard, simplify vt_kdgkbsent
- vt: keyboard, extend func_buf_lock to readers
- dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status
- iio:light:si1145: Fix timestamp alignment and prevent data leak.
- iio:adc:ti-adc0832 Fix alignment issue with timestamp
- iio:adc:ti-adc12138 Fix alignment issue with timestamp
- iio:gyro:itg3200: Fix timestamp alignment and prevent data leak.
- s390/stp: add locking to sysfs functions
- [Config] update config for PPC_RTAS_FILTER
- powerpc/rtas: Restrict RTAS requests from userspace
- powerpc: Warn about use of smt_snooze_delay
- powerpc/powernv/elog: Fix race while processing OPAL error log event.
- NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag
- NFSD: Add missing NFSv2 .pc_func methods
- ubifs: dent: Fix some potential memory leaks while iterating entries
- perf python scripting: Fix printable strings in python3 scripts
- ubi: check kthread_should_stop() after the setting of task state
- ia64: fix build error with !COREDUMP
- drm/amdgpu: don't map BO in reserved region
- ceph: promote to unsigned long long before shifting
- libceph: clear con->out_msg on Policy::stateful_server faults
- 9P: Cast to loff_t before multiplying
- ring-buffer: Return 0 on success from ring_buffer_resize()
- vringh: fix __vringh_iov() when riov and wiov are different
- ext4: fix leaking sysfs kobject after failed mount
- ext4: fix error handling code in add_new_gdb
- ext4: fix invalid inode checksum
- drm/ttm: fix eviction valuable range check.
- rtc: rx8010: don't modify the global rtc ops
- tty: make FONTX ioctl use the tty pointer they were actually passed
- arm64: berlin: Select DW_APB_TIMER_OF
- [Config] update annotations for DW_APB_TIMER
- cachefiles: Handle readpage error correctly
- hil/parisc: Disable HIL driver when it gets stuck
- arm: dts: mt7623: add missing pause for switchport
- ARM: samsung: fix PM debug build with DEBUG_LL but !MMU
- ARM: s3c24xx: fix missing system reset
- device property: Keep secondary firmware node secondary by type
- device property: Don't clear secondary pointer for shared primary firmware
node
- KVM: arm64: Fix AArch32 handling of DBGD{CCINT,SCRext} and DBGVCR
- staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice
- staging: octeon: repair "fixed-link" support
- staging: octeon: Drop on uncorrectable alignment or FCS error
- objtool: Support Clang non-section symbols in ORC generation
- arm64: Run ARCH_WORKAROUND_1 enabling code on all CPUs
- x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled
- cxgb4: set up filter action after rewrites
- cxl: Rework error message for incompatible slots
- serial: pl011: Fix lockdep splat when handling magic-sysrq interrupt
- fscrypt: only set dentry_operations on ciphertext dentries
- xen/events: don't use chip_data for legacy IRQs
- xen/events: avoid removing an event channel while handling it
- xen/events: add a proper barrier to 2-level uevent unmasking
- xen/events: fix race in evtchn_fifo_unmask()
- xen/events: add a new "late EOI" evtchn framework
- xen/blkback: use lateeoi irq binding
- xen/netback: use lateeoi irq binding
- xen/scsiback: use lateeoi irq binding
- xen/pvcallsback: use lateeoi irq binding
- xen/pciback: use lateeoi irq binding
- xen/events: switch user event channels to lateeoi model
- xen/events: use a common cpu hotplug hook for event channels
- xen/events: defer eoi in case of excessive number of events
- xen/events: block rogue events for some time
- RDMA/qedr: Fix memory leak in iWARP CM
- [Config] update config for ARCH_WANT_IRQS_OFF_ACTIVATE_MM
- mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race
- f2fs: fix uninit-value in f2fs_lookup
- power: supply: bq27xxx: report "not charging" on all types
- media: imx274: fix frame interval handling
- arm64: topology: Stop using MPIDR for topology information
- ia64: kprobes: Use generic kretprobe trampoline handler
- media: uvcvideo: Fix dereference of out-of-bound list iterator
- riscv: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
- usb: xhci: omit duplicate actions when suspending a runtime suspended host.
- drm/amd/display: HDMI remote sink need mode validation for Linux
- btrfs: fix replace of seed device
- rpmsg: glink: Use complete_all for open states
- cifs: handle -EINTR in cifs_setattr
- ACPI: button: fix handling lid state changes when input device closed
- scsi: qla2xxx: Fix crash on session cleanup with unload
- btrfs: improve device scanning messages
- usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC
- usb: typec: tcpm: reset hard_reset_count for any disconnect
- powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation
- drm/amd/display: Don't invoke kgdb_breakpoint() unconditionally
* [HP 635] Radeon 6310 brightness control does not work (LP: #1894667) //
Bionic update: upstream stable patchset 2020-11-18 (LP: #1904791)
- ACPI: video: use ACPI backlight for HP 635 Notebook
* Bionic update: upstream stable patchset 2020-11-17 (LP: #1904613)
- RDMA/cma: Remove dead code for kernel rdmacm multicast
- RDMA/hns: Fix missing sq_sig_type when querying QP
- rpmsg: smd: Fix a kobj leak in in qcom_smd_parse_edge()
- pwm: img: Fix null pointer access in probe
- watchdog: Fix memleak in watchdog_cdev_register
- watchdog: Use put_device on error
- SUNRPC: fix copying of multiple pages in gss_read_proxy_verf()
- netfilter: conntrack: connection timeout after re-register
- netfilter: nf_fwd_netdev: clear timestamp in forwarding path
- ARM: dts: imx6sl: fix rng node
- ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator
- memory: omap-gpmc: Fix build error without CONFIG_OF
- arm64: dts: qcom: pm8916: Remove invalid reg size from wcd_codec
- ip_gre: set dev->hard_header_len and dev->needed_headroom properly
- usb: dwc3: simple: add support for Hikey 970
* Bionic: btrfs: kernel BUG at /build/linux-
eTBZpZ/linux-4.15.0/fs/btrfs/ctree.c:3233! (LP: #1902254)
- btrfs: tree-checker: fix incorrect printk format
* Bionic update: upstream stable patchset 2020-11-10 (LP: #1903768)
- Bluetooth: fix kernel oops in store_pending_adv_report
- Bluetooth: Consolidate encryption handling in hci_encrypt_cfm
- Bluetooth: Fix update of connection state in `hci_encrypt_cfm`
- Bluetooth: Disconnect if E0 is used for Level 4
- media: usbtv: Fix refcounting mixup
- USB: serial: option: add Cellient MPL200 card
- USB: serial: option: Add Telit FT980-KS composition
- staging: comedi: check validity of wMaxPacketSize of usb endpoints found
- USB: serial: pl2303: add device-id for HP GC device
- USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters
- reiserfs: Initialize inode keys properly
- reiserfs: Fix oops during mount
- drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case
- crypto: bcm - Verify GCM/CCM key length in setkey
- crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA
- ARM: 8858/1: vdso: use $(LD) instead of $(CC) to link VDSO
- ARM: 8939/1: kbuild: use correct nm executable
- ARM: 8867/1: vdso: pass --be8 to linker if necessary
- ibmveth: Switch order of ibmveth_helper calls.
- ibmveth: Identify ingress large send packets.
- ipv4: Restore flowi4_oif update before call to xfrm_lookup_route
- mlx4: handle non-napi callers to napi_poll
- net: usb: qmi_wwan: add Cellient MPL200 card
- tipc: fix the skb_unshare() in tipc_buf_append()
- net/ipv4: always honour route mtu during forwarding
- r8169: fix data corruption issue on RTL8402
- binder: fix UAF when releasing todo list
- ALSA: bebob: potential info leak in hwdep_read()
- net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device
- net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling
ether_setup
- nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in
nfc_genl_fw_download()
- tcp: fix to update snd_wl1 in bulk receiver fast path
- icmp: randomize the global rate limiter
- cifs: remove bogus debug code
- cifs: Return the error from crypt_message when enc/dec key not found.
- KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages
- KVM: SVM: Initialize prev_ga_tag before use
- ima: Don't ignore errors from crypto_shash_update()
- crypto: algif_aead - Do not set MAY_BACKLOG on the async path
- EDAC/i5100: Fix error handling order in i5100_init_one()
- x86/fpu: Allow multiple bits in clearcpuid= parameter
- drivers/perf: xgene_pmu: Fix uninitialized resource struct
- crypto: algif_skcipher - EBUSY on aio should be an error
- crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc()
- crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call
- media: tuner-simple: fix regression in simple_set_radio_freq
- media: Revert "media: exynos4-is: Add missed check for
pinctrl_lookup_state()"
- media: m5mols: Check function pointer in m5mols_sensor_power
- media: uvcvideo: Set media controller entity functions
- media: omap3isp: Fix memleak in isp_probe
- crypto: omap-sham - fix digcnt register handling with export/import
- cypto: mediatek - fix leaks in mtk_desc_ring_alloc
- media: mx2_emmaprp: Fix memleak in emmaprp_probe
- media: tc358743: initialize variable
- media: platform: fcp: Fix a reference count leak.
- media: s5p-mfc: Fix a reference count leak
- media: ti-vpe: Fix a missing check and reference count leak
- regulator: resolve supply after creating regulator
- ath10k: provide survey info as accumulated data
- Bluetooth: hci_uart: Cancel init work before unregistering
- ath6kl: prevent potential array overflow in ath6kl_add_new_sta()
- ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb()
- wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680
- ASoC: qcom: lpass-platform: fix memory leak
- ASoC: qcom: lpass-cpu: fix concurrency issue
- brcmfmac: check ndev pointer
- mwifiex: Do not use GFP_KERNEL in atomic context
- drm/gma500: fix error check
- scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()'
- scsi: csiostor: Fix wrong return value in csio_hw_prep_fw()
- backlight: sky81452-backlight: Fix refcount imbalance on error
- VMCI: check return value of get_user_pages_fast() for errors
- tty: serial: earlycon dependency
- pty: do tty_flip_buffer_push without port->lock in pty_write
- pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare()
- pwm: lpss: Add range limit check for the base_unit register value
- drivers/virt/fsl_hypervisor: Fix error handling path
- video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error
- video: fbdev: sis: fix null ptr dereference
- HID: roccat: add bounds checking in kone_sysfs_write_settings()
- pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser
- pinctrl: mcp23s08: Fix mcp23x17 precious range
- ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd()
- misc: mic: scif: Fix error handling path
- ALSA: seq: oss: Avoid mutex lock for a long-time ioctl
- usb: dwc2: Fix parameter type in function pointer prototype
- quota: clear padding in v2r1_mem2diskdqb()
- HID: hid-input: fix stylus battery reporting
- qtnfmac: fix resource leaks on unsupported iftype error return path
- net: enic: Cure the enic api locking trainwreck
- mfd: sm501: Fix leaks in probe()
- iwlwifi: mvm: split a print to avoid a WARNING in ROC
- usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above.
- usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well
- nl80211: fix non-split wiphy information
- usb: dwc2: Fix INTR OUT transfers in DDMA mode.
- scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs()
- mwifiex: fix double free
- net: korina: fix kfree of rx/tx descriptor array
- mm/memcg: fix device private memcg accounting
- mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary
- IB/mlx4: Fix starvation in paravirt mux/demux
- IB/mlx4: Adjust delayed work when a dup is observed
- powerpc/pseries: Fix missing of_node_put() in rng_init()
- powerpc/icp-hv: Fix missing of_node_put() in success path
- mtd: lpddr: fix excessive stack usage with clang
- mtd: mtdoops: Don't write panic data twice
- ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values
- arc: plat-hsdk: fix kconfig dependency warning when !RESET_CONTROLLER
- xfs: limit entries returned when counting fsmap records
- RDMA/qedr: Fix use of uninitialized field
- powerpc/tau: Use appropriate temperature sample interval
- powerpc/tau: Remove duplicated set_thresholds() call
- powerpc/tau: Disable TAU between measurements
- perf intel-pt: Fix "context_switch event has no tid" error
- RDMA/hns: Set the unsupported wr opcode
- kdb: Fix pager search for multi-line strings
- overflow: Include header file with SIZE_MAX declaration
- powerpc/perf: Exclude pmc5/6 from the irrelevant PMU group constraints
- powerpc/perf/hv-gpci: Fix starting index value
- cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier
- IB/rdmavt: Fix sizeof mismatch
- f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info
- lib/crc32.c: fix trivial typo in preprocessor condition
- ramfs: fix nommu mmap with gaps in the page cache
- rapidio: fix error handling path
- rapidio: fix the missed put_device() for rio_mport_add_riodev
- mailbox: avoid timer start from callback
- i2c: rcar: Auto select RESET_CONTROLLER
- PCI: iproc: Set affinity mask on MSI interrupts
- clk: at91: clk-main: update key before writing AT91_CKGR_MOR
- clk: bcm2835: add missing release if devm_clk_hw_register fails
- ext4: limit entries returned when counting fsmap records
- vfio/pci: Clear token on bypass registration failure
- vfio iommu type1: Fix memory leak in vfio_iommu_type1_pin_pages
- Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume()
- Input: stmfts - fix a & vs && typo
- Input: ep93xx_keypad - fix handling of platform_get_irq() error
- Input: omap4-keypad - fix handling of platform_get_irq() error
- Input: twl4030_keypad - fix handling of platform_get_irq() error
- Input: sun4i-ps2 - fix handling of platform_get_irq() error
- KVM: x86: emulating RDPID failure shall return #UD rather than #GP
- memory: omap-gpmc: Fix a couple off by ones
- memory: fsl-corenet-cf: Fix handling of platform_get_irq() error
- arm64: dts: qcom: msm8916: Fix MDP/DSI interrupts
- ARM: dts: owl-s500: Fix incorrect PPI interrupt specifiers
- arm64: dts: zynqmp: Remove additional compatible string for i2c IPs
- powerpc/powernv/dump: Fix race while processing OPAL dump
- nvmet: fix uninitialized work for zero kato
- NTB: hw: amd: fix an issue about leak system resources
- perf: correct SNOOPX field offset
- i2c: core: Restore acpi_walk_dep_device_list() getting called after
registering the ACPI i2c devs
- crypto: ccp - fix error handling
- media: firewire: fix memory leak
- media: ati_remote: sanity check for both endpoints
- media: st-delta: Fix reference count leak in delta_run_work
- media: sti: Fix reference count leaks
- media: exynos4-is: Fix several reference count leaks due to
pm_runtime_get_sync
- media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync
- media: exynos4-is: Fix a reference count leak
- media: vsp1: Fix runtime PM imbalance on error
- media: platform: s3c-camif: Fix runtime PM imbalance on error
- media: platform: sti: hva: Fix runtime PM imbalance on error
- media: bdisp: Fix runtime PM imbalance on error
- media: media/pci: prevent memory leak in bttv_probe
- media: uvcvideo: Ensure all probed info is returned to v4l2
- mmc: sdio: Check for CISTPL_VERS_1 buffer size
- media: saa7134: avoid a shift overflow
- fs: dlm: fix configfs memory leak
- media: venus: core: Fix runtime PM imbalance in venus_probe
- ntfs: add check for mft record size in superblock
- mac80211: handle lack of sband->bitrates in rates
- PM: hibernate: remove the bogus call to get_gendisk() in software_resume()
- scsi: mvumi: Fix error return in mvumi_io_attach()
- scsi: target: core: Add CONTROL field for trace events
- mic: vop: copy data to kernel space then write to io memory
- misc: vop: add round_up(x,4) for vring_size to avoid kernel panic
- usb: gadget: function: printer: fix use-after-free in __lock_acquire
- udf: Limit sparing table size
- udf: Avoid accessing uninitialized data on failed inode read
- USB: cdc-acm: handle broken union descriptors
- can: flexcan: flexcan_chip_stop(): add error handling and propagate error
value
- ath9k: hif_usb: fix race condition between usb_get_urb() and
usb_kill_anchored_urbs()
- misc: rtsx: Fix memory leak in rtsx_pci_probe
- reiserfs: only call unlock_new_inode() if I_NEW
- xfs: make sure the rt allocator doesn't run off the end
- usb: ohci: Default to per-port over-current protection
- Bluetooth: Only mark socket zapped after unlocking
- scsi: ibmvfc: Fix error return in ibmvfc_probe()
- brcmsmac: fix memory leak in wlc_phy_attach_lcnphy
- rtl8xxxu: prevent potential memory leak
- Fix use after free in get_capset_info callback.
- scsi: qedi: Protect active command list to avoid list corruption
- scsi: qedi: Fix list_del corruption while removing active I/O
- tty: ipwireless: fix error handling
- ipvs: Fix uninit-value in do_ip_vs_set_ctl()
- reiserfs: Fix memory leak in reiserfs_parse_options()
- mwifiex: don't call del_timer_sync() on uninitialized timer
- brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach
- usb: core: Solve race condition in anchor cleanup functions
- scsi: ufs: ufs-qcom: Fix race conditions caused by ufs_qcom_testbus_config()
- ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n()
- net: korina: cast KSEG0 address to pointer in kfree
- tty: serial: fsl_lpuart: fix lpuart32_poll_get_char
- usb: cdc-acm: add quirk to blacklist ETAS ES58X devices
- USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
- eeprom: at25: set minimum read/write access stride to 1
- usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets.
- powerpc/powernv/opal-dump : Use IRQ_HANDLED instead of numbers in interrupt
handler
- net: fix pos incrementment in ipv6_route_seq_next
- ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887
- x86/nmi: Fix nmi_handle() duration miscalculation
- x86/events/amd/iommu: Fix sizeof mismatch
- media: uvcvideo: Silence shift-out-of-bounds warning
- hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61}
- media: tc358743: cleanup tc358743_cec_isr
- pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB
- spi: spi-s3c64xx: swap s3c64xx_spi_set_cs() and s3c64xx_enable_datapath()
- staging: rtl8192u: Do not use GFP_KERNEL in atomic context
- net: stmmac: use netif_tx_start|stop_all_queues() function
- scsi: target: tcmu: Fix warning: 'page' may be used uninitialized
- ipvs: clear skb->tstamp in forwarding path
- netfilter: nf_log: missing vlan offload tag and proto
- RDMA/ucma: Fix locking for ctx->events_reported
- RDMA/ucma: Add missing locking around rdma_leave_multicast()
- RDMA/qedr: Fix inline size returned for iWARP
[ Ubuntu: 4.15.0-126.129 ]
* bionic/linux: 4.15.0-126.129 -proposed tracker (LP: #1905305)
* CVE-2020-4788
- SAUCE: powerpc/64s: Define MASKABLE_RELON_EXCEPTION_PSERIES_OOL
- SAUCE: powerpc/64s: move some exception handlers out of line
- powerpc/64s: flush L1D on kernel entry
- SAUCE: powerpc: Add a framework for user access tracking
- powerpc: Implement user_access_begin and friends
- powerpc: Fix __clear_user() with KUAP enabled
- powerpc/uaccess: Evaluate macro arguments once, before user access is
allowed
- powerpc/64s: flush L1D after user accesses
-- William Breathitt Gray <email address hidden> Wed, 02 Dec 2020 12:55:20 -0500
-
linux-aws (4.15.0-1088.93) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1088.93 -proposed tracker (LP: #1903118)
* Bionic update: upstream stable patchset 2020-09-30 (LP: #1897977)
- [Config] aws: updateconfigs for VGACON_SOFT_SCROLLBACK
* aws: disable strict IOMMU TLB invalidation by default (LP: #1902281)
- SAUCE: [aws] iommu: set the default iommu-dma mode as non-strict
[ Ubuntu: 4.15.0-125.128 ]
* bionic/linux: 4.15.0-125.128 -proposed tracker (LP: #1903137)
* Update kernel packaging to support forward porting kernels (LP: #1902957)
- [Debian] Update for leader included in BACKPORT_SUFFIX
* Avoid double newline when running insertchanges (LP: #1903293)
- [Packaging] insertchanges: avoid double newline
* EFI: Fails when BootCurrent entry does not exist (LP: #1899993)
- efivarfs: Replace invalid slashes with exclamation marks in dentries.
* CVE-2020-14351
- perf/core: Fix race in the perf_mmap_close() function
* raid10: Block discard is very slow, causing severe delays for mkfs and
fstrim operations (LP: #1896578)
- md: add md_submit_discard_bio() for submitting discard bio
- md/raid10: extend r10bio devs to raid disks
- md/raid10: pull codes that wait for blocked dev into one function
- md/raid10: improve raid10 discard request
- md/raid10: improve discard request for far layout
* Bionic: btrfs: kernel BUG at /build/linux-
eTBZpZ/linux-4.15.0/fs/btrfs/ctree.c:3233! (LP: #1902254)
- btrfs: use offset_in_page instead of open-coding it
- btrfs: use BUG() instead of BUG_ON(1)
- btrfs: drop unnecessary offset_in_page in extent buffer helpers
- btrfs: extent_io: do extra check for extent buffer read write functions
- btrfs: extent-tree: kill BUG_ON() in __btrfs_free_extent()
- btrfs: extent-tree: kill the BUG_ON() in insert_inline_extent_backref()
- btrfs: ctree: check key order before merging tree blocks
* Bionic update: upstream stable patchset 2020-11-04 (LP: #1902943)
- USB: gadget: f_ncm: Fix NDP16 datagram validation
- gpio: tc35894: fix up tc35894 interrupt configuration
- vsock/virtio: use RCU to avoid use-after-free on the_virtio_vsock
- vsock/virtio: stop workers during the .remove()
- vsock/virtio: add transport parameter to the
virtio_transport_reset_no_sock()
- net: virtio_vsock: Enhance connection semantics
- Input: i8042 - add nopnp quirk for Acer Aspire 5 A515
- ftrace: Move RCU is watching check after recursion check
- drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config
- drivers/net/wan/hdlc_fr: Add needed_headroom for PVC devices
- drm/sun4i: mixer: Extend regmap max_register
- net: dec: de2104x: Increase receive ring size for Tulip
- rndis_host: increase sleep time in the query-response loop
- nvme-core: get/put ctrl and transport module in nvme_dev_open/release()
- drivers/net/wan/lapbether: Make skb->protocol consistent with the header
- drivers/net/wan/hdlc: Set skb->protocol before transmitting
- mac80211: do not allow bigger VHT MPDUs than the hardware supports
- spi: fsl-espi: Only process interrupts for expected events
- nvme-fc: fail new connections to a deleted host or remote port
- pinctrl: mvebu: Fix i2c sda definition for 98DX3236
- nfs: Fix security label length not being reset
- clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED
- iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate()
- i2c: cpm: Fix i2c_ram structure
- Input: trackpoint - enable Synaptics trackpoints
- random32: Restore __latent_entropy attribute on net_rand_state
- epoll: do not insert into poll queues until all sanity checks are done
- epoll: replace ->visited/visited_list with generation count
- epoll: EPOLL_CTL_ADD: close the race in decision to take fast path
- ep_create_wakeup_source(): dentry name can change under you...
- netfilter: ctnetlink: add a range check for l3/l4 protonum
- drm/syncobj: Fix drm_syncobj_handle_to_fd refcount leak
- fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h
- Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts
- Revert "ravb: Fixed to be able to unload modules"
- fbcon: Fix global-out-of-bounds read in fbcon_get_font()
- net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
- usermodehelper: reset umask to default before executing user process
- platform/x86: thinkpad_acpi: initialize tp_nvram_state variable
- platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse
- driver core: Fix probe_count imbalance in really_probe()
- perf top: Fix stdio interface input handling with glibc 2.28+
- mtd: rawnand: sunxi: Fix the probe error path
- macsec: avoid use-after-free in macsec_handle_frame()
- mm/khugepaged: fix filemap page_to_pgoff(page) != offset
- cifs: Fix incomplete memory allocation on setxattr path
- i2c: meson: fix clock setting overwrite
- sctp: fix sctp_auth_init_hmacs() error path
- team: set dev->needed_headroom in team_setup_by_port()
- net: team: fix memory leak in __team_options_register
- openvswitch: handle DNAT tuple collision
- drm/amdgpu: prevent double kfree ttm->sg
- xfrm: clone XFRMA_REPLAY_ESN_VAL in xfrm_do_migrate
- xfrm: clone XFRMA_SEC_CTX in xfrm_do_migrate
- xfrm: clone whole liftime_cur structure in xfrm_do_migrate
- net: stmmac: removed enabling eee in EEE set callback
- platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP
- xfrm: Use correct address family in xfrm_state_find
- bonding: set dev->needed_headroom in bond_setup_by_slave()
- mdio: fix mdio-thunder.c dependency & build error
- net: usb: ax88179_178a: fix missing stop entry in driver_info
- rxrpc: Fix rxkad token xdr encoding
- rxrpc: Downgrade the BUG() for unsupported token type in rxrpc_read()
- rxrpc: Fix some missing _bh annotations on locking conn->state_lock
- rxrpc: Fix server keyring leak
- perf: Fix task_function_call() error handling
- mmc: core: don't set limits.discard_granularity as 0
- mm: khugepaged: recalculate min_free_kbytes after memory hotplug as expected
by khugepaged
- net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
- drm/nouveau/mem: guard against NULL pointer access in mem_del
- i2c: i801: Exclude device from suspend direct complete optimization
- nvme-core: put ctrl ref when module ref get fail
- i2c: meson: fixup rate calculation with filter delay
- xfrm: clone XFRMA_SET_MARK in xfrm_do_migrate
- net/mlx5e: Fix VLAN cleanup flow
- net/mlx5e: Fix VLAN create flow
* kci_test_encap_fou() in rtnetlink.sh from kselftests/net failed with "FAIL:
can't add fou port 7777, skipping test" (LP: #1891421)
- selftests: rtnetlink: load fou module for kci_test_encap_fou() test
* Bionic update: upstream stable patchset 2020-10-23 (LP: #1901257)
- af_key: pfkey_dump needs parameter validation
- KVM: fix memory leak in kvm_io_bus_unregister_dev()
- kprobes: fix kill kprobe which has been marked as gone
- mm/thp: fix __split_huge_pmd_locked() for migration PMD
- cxgb4: Fix offset when clearing filter byte counters
- geneve: add transport ports in route lookup for geneve
- hdlc_ppp: add range checks in ppp_cp_parse_cr()
- ip: fix tos reflection in ack and reset packets
- net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC
- nfp: use correct define to return NONE fec
- tipc: Fix memory leak in tipc_group_create_member()
- tipc: fix shutdown() of connection oriented socket
- tipc: use skb_unshare() instead in tipc_buf_append()
- bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex.
- net: phy: Avoid NPD upon phy_detach() when driver is unbound
- net: qrtr: check skb_put_padto() return value
- net: add __must_check to skb_put_padto()
- ipv4: Update exception handling for multipath routes via same device
- MAINTAINERS: add CLANG/LLVM BUILD SUPPORT info
- Documentation/llvm: add documentation on building w/ Clang/LLVM
- Documentation/llvm: fix the name of llvm-size
- net: wan: wanxl: use allow to pass CROSS_COMPILE_M68k for rebuilding
firmware
- net: wan: wanxl: use $(M68KCC) instead of $(M68KAS) for rebuilding firmware
- kbuild: replace AS=clang with LLVM_IAS=1
- tcp_bbr: refactor bbr_target_cwnd() for general inflight provisioning
- tcp_bbr: adapt cwnd based on ack aggregation estimation
- serial: 8250: Avoid error message on reprobe
- RDMA/ucma: ucma_context reference leak in error path
- mm: fix double page fault on arm64 if PTE_AF is cleared
- scsi: aacraid: fix illegal IO beyond last LBA
- m68k: q40: Fix info-leak in rtc_ioctl
- gma/gma500: fix a memory disclosure bug due to uninitialized bytes
- ASoC: kirkwood: fix IRQ error handling
- media: smiapp: Fix error handling at NVM reading
- arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache writeback
- x86/ioapic: Unbreak check_timer()
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged
- PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
- scsi: fnic: fix use after free
- clk/ti/adpll: allocate room for terminating null
- mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of
cfi_amdstd_setup()
- mfd: mfd-core: Protect against NULL call-back function pointer
- tracing: Adding NULL checks for trace_array descriptor pointer
- bcache: fix a lost wake-up problem caused by mca_cannibalize_lock
- RDMA/i40iw: Fix potential use after free
- xfs: fix attr leaf header freemap.size underflow
- RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()'
- mmc: core: Fix size overflow for mmc partitions
- gfs2: clean up iopen glock mess in gfs2_create_inode
- debugfs: Fix !DEBUG_FS debugfs_create_automount
- CIFS: Properly process SMB3 lease breaks
- kernel/sys.c: avoid copying possible padding bytes in copy_to_user
- neigh_stat_seq_next() should increase position index
- rt_cpu_seq_next should increase position index
- seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier
- media: ti-vpe: cal: Restrict DMA to avoid memory corruption
- ACPI: EC: Reference count query handlers under lock
- dmaengine: zynqmp_dma: fix burst length configuration
- powerpc/eeh: Only dump stack once if an MMIO loop is detected
- tracing: Set kernel_stack's caller size properly
- ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter
- selftests/ftrace: fix glob selftest
- tools/power/x86/intel_pstate_tracer: changes for python 3 compatibility
- Bluetooth: Fix refcount use-after-free issue
- mm: pagewalk: fix termination condition in walk_pte_range()
- Bluetooth: prefetch channel before killing sock
- ALSA: hda: Clear RIRB status before reading WP
- skbuff: fix a data race in skb_queue_len()
- audit: CONFIG_CHANGE don't log internal bookkeeping as an event
- selinux: sel_avc_get_stat_idx should increase position index
- scsi: lpfc: Fix RQ buffer leakage when no IOCBs available
- scsi: lpfc: Fix coverity errors in fmdi attribute handling
- drm/omap: fix possible object reference leak
- perf test: Fix test trace+probe_vfs_getname.sh on s390
- RDMA/rxe: Fix configuration of atomic queue pair attributes
- KVM: x86: fix incorrect comparison in trace event
- media: staging/imx: Missing assignment in
imx_media_capture_device_register()
- x86/pkeys: Add check for pkey "overflow"
- bpf: Remove recursion prevention from rcu free callback
- dmaengine: tegra-apb: Prevent race conditions on channel's freeing
- media: go7007: Fix URB type for interrupt handling
- Bluetooth: guard against controllers sending zero'd events
- timekeeping: Prevent 32bit truncation in scale64_check_overflow()
- ext4: fix a data race at inode->i_disksize
- mm: avoid data corruption on CoW fault into PFN-mapped VMA
- drm/amdgpu: increase atombios cmd timeout
- ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read
- scsi: aacraid: Disabling TM path and only processing IOP reset
- Bluetooth: L2CAP: handle l2cap config request during open state
- media: tda10071: fix unsigned sign extension overflow
- xfs: don't ever return a stale pointer from __xfs_dir3_free_read
- tpm: ibmvtpm: Wait for buffer to be set before proceeding
- rtc: ds1374: fix possible race condition
- tracing: Use address-of operator on section symbols
- serial: 8250_port: Don't service RX FIFO if throttled
- serial: 8250_omap: Fix sleeping function called from invalid context during
probe
- serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout
- perf cpumap: Fix snprintf overflow check
- cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn
- tools: gpio-hammer: Avoid potential overflow in main
- RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices
- SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()'
- svcrdma: Fix leak of transport addresses
- ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len
- ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra
endpoint descriptor
- NFS: Fix races nfs_page_group_destroy() vs
nfs_destroy_unlinked_subrequests()
- mm/kmemleak.c: use address-of operator on section symbols
- mm/filemap.c: clear page error before actual read
- mm/vmscan.c: fix data races using kswapd_classzone_idx
- mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area
- scsi: qedi: Fix termination timeouts in session logout
- serial: uartps: Wait for tx_empty in console setup
- KVM: Remove CREATE_IRQCHIP/SET_PIT2 race
- bdev: Reduce time holding bd_mutex in sync in blkdev_close()
- drivers: char: tlclk.c: Avoid data race between init and interrupt handler
- staging:r8188eu: avoid skb_clone for amsdu to msdu conversion
- sparc64: vcc: Fix error return code in vcc_probe()
- arm64: cpufeature: Relax checks for AArch32 support at EL[0-2]
- dt-bindings: sound: wm8994: Correct required supplies based on actual
implementaion
- atm: fix a memory leak of vcc->user_back
- power: supply: max17040: Correct voltage reading
- phy: samsung: s5pv210-usb2: Add delay after reset
- Bluetooth: Handle Inquiry Cancel error after Inquiry Complete
- USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe()
- tty: serial: samsung: Correct clock selection logic
- ALSA: hda: Fix potential race in unsol event handler
- powerpc/traps: Make unrecoverable NMIs die instead of panic
- fuse: don't check refcount after stealing page
- USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int
- arm64/cpufeature: Drop TraceFilt feature exposure from ID_DFR0 register
- e1000: Do not perform reset in reset_task if we are already down
- drm/nouveau/debugfs: fix runtime pm imbalance on error
- printk: handle blank console arguments passed in.
- usb: dwc3: Increase timeout for CmdAct cleared by device controller
- btrfs: don't force read-only after error in drop snapshot
- vfio/pci: fix memory leaks of eventfd ctx
- perf util: Fix memory leak of prefix_if_not_in
- perf kcore_copy: Fix module map when there are no modules loaded
- mtd: rawnand: omap_elm: Fix runtime PM imbalance on error
- ceph: fix potential race in ceph_check_caps
- mm/swap_state: fix a data race in swapin_nr_pages
- rapidio: avoid data race between file operation callbacks and
mport_cdev_add().
- mtd: parser: cmdline: Support MTD names containing one or more colons
- x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline
- vfio/pci: Clear error and request eventfd ctx after releasing
- cifs: Fix double add page to memcg when cifs_readpages
- scsi: libfc: Handling of extra kref
- scsi: libfc: Skip additional kref updating work event
- selftests/x86/syscall_nt: Clear weird flags after each test
- vfio/pci: fix racy on error and request eventfd ctx
- btrfs: qgroup: fix data leak caused by race between writeback and truncate
- s390/init: add missing __init annotations
- i2c: core: Call i2c_acpi_install_space_handler() before
i2c_acpi_register_devices()
- objtool: Fix noreturn detection for ignored functions
- ieee802154: fix one possible memleak in ca8210_dev_com_init
- ieee802154/adf7242: check status of adf7242_read_reg
- clocksource/drivers/h8300_timer8: Fix wrong return value in
h8300_8timer_init()
- batman-adv: bla: fix type misuse for backbone_gw hash indexing
- atm: eni: fix the missed pci_disable_device() for eni_init_one()
- batman-adv: mcast/TT: fix wrongly dropped or rerouted packets
- mac802154: tx: fix use-after-free
- drm/vc4/vc4_hdmi: fill ASoC card owner
- net: qed: RDMA personality shouldn't fail VF load
- batman-adv: Add missing include for in_interrupt()
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh
- ALSA: asihpi: fix iounmap in error handler
- MIPS: Add the missing 'CPU_1074K' into __get_cpu_type()
- s390/dasd: Fix zero write for FBA devices
- kprobes: Fix to check probe enabled before disarm_kprobe_ftrace()
- mm, THP, swap: fix allocating cluster for swapfile by mistake
- lib/string.c: implement stpcpy
- ata: define AC_ERR_OK
- ata: make qc_prep return ata_completion_errors
- ata: sata_mv, avoid trigerrable BUG_ON
- media: mc-device.c: fix memleak in media_device_register_entity
- tpm_crb: fix fTPM on AMD Zen+ CPUs
- RDMA/qedr: Fix potential use after free
- fix dget_parent() fastpath race
- scsi: pm80xx: Cleanup command when a reset times out
- ASoC: max98090: remove msleep in PLL unlocked workaround
- ipv6_route_seq_next should increase position index
- scsi: ufs: Fix a race condition in the tracing code
- s390/cpum_sf: Use kzalloc and minor changes
- ceph: ensure we have a new cap before continuing in fill_inode
- mm/swapfile.c: swap_next should increase position index
- dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all
- dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all
- drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic
- firmware: arm_sdei: Use cpus_read_lock() to avoid races with cpuhp
- random: fix data races at timer_rand_state
- bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host
removal
- perf jevents: Fix leak of mapfile memory
- xfs: mark dir corrupt when lookup-by-hash fails
- rtc: sa1100: fix possible race condition
- nfsd: Don't add locks to closed or closing open stateids
- KVM: PPC: Book3S HV: Treat TM-related invalid form instructions on P9 like
the valid ones
- thermal: rcar_thermal: Handle probe error gracefully
- nvme: Fix controller creation races with teardown flow
- scsi: hpsa: correct race condition in offload enabled
- PCI: Use ioremap(), not phys_to_virt() for platform ROM
- KVM: arm64: vgic-its: Fix memory leak on the error path of vgic_add_lpi()
- net: openvswitch: use u64 for meter bucket
- scsi: aacraid: Fix error handling paths in aac_probe_one()
- scsi: cxlflash: Fix error return code in cxlflash_probe()
- drm/nouveau: fix runtime pm imbalance on error
- perf evsel: Fix 2 memory leaks
- perf stat: Fix duration_time value for higher intervals
- perf metricgroup: Free metric_events on error
- ASoC: img-i2s-out: Fix runtime PM imbalance on error
- wlcore: fix runtime pm imbalance in wl1271_tx_work
- nvme: fix possible deadlock when I/O is blocked
- net: openvswitch: use div_u64() for 64-by-32 divisions
- nvme: explicitly update mpath disk capacity on revalidation
- ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811
- drm/amdkfd: fix a memory leak issue
- batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh
- KVM: x86: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE
- KVM: SVM: Add a dedicated INVD intercept routine
- s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl
- kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE
- KVM: arm64: Assume write fault on S1PTW permission fault on instruction
fetch
* bcache: Issues with large IO wait in bch_mca_scan() when shrinker is enabled
(LP: #1898786)
- bcache: remove member accessed from struct btree
- bcache: reap c->btree_cache_freeable from the tail in bch_mca_scan()
- bcache: reap from tail of c->btree_cache in bch_mca_scan()
* *-tools-common packages descriptions have typo "PGKVER" (LP: #1898903)
- [Packaging] Fix typo in -tools template s/PGKVER/PKGVER/
* [hns3-0901]add hns3_gro_complete for HW GRO process (LP: #1893711)
- net: hns3: add rx multicast packets statistic
- net: hns3: minor refactor for hns3_rx_checksum
- net: hns3: add hns3_gro_complete for HW GRO process
* mwifiex stops working after kernel upgrade (LP: #1897299)
- mwifiex: Increase AES key storage size to 256 bits
* Bionic update: upstream stable patchset 2020-09-30 (LP: #1897977)
- ARM: dts: socfpga: fix register entry for timer3 on Arria10
- RDMA/rxe: Fix memleak in rxe_mem_init_user
- RDMA/rxe: Drop pointless checks in rxe_init_ports
- scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA
- RDMA/core: Fix reported speed and width
- mmc: sdhci-msm: Add retries when all tuning phases are found valid
- ARM: dts: BCM5301X: Fixed QSPI compatible string
- arm64: dts: ns2: Fixed QSPI compatible string
- ARC: HSDK: wireup perf irq
- dmaengine: acpi: Put the CSRT table after using it
- drivers/net/wan/lapbether: Added needed_tailroom
- NFC: st95hf: Fix memleak in st95hf_in_send_cmd
- firestream: Fix memleak in fs_open
- ALSA: hda: Fix 2 channel swapping for Tegra
- drivers/net/wan/lapbether: Set network_header before transmitting
- xfs: initialize the shortform attr header padding entry
- irqchip/eznps: Fix build error for !ARC700 builds
- drivers/net/wan/hdlc_cisco: Add hard_header_len
- ARC: [plat-hsdk]: Switch ethernet phy-mode to rgmii-id
- cpufreq: intel_pstate: Refuse to turn off with HWP enabled
- ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled
- gcov: Disable gcov build with GCC 10
- iio: adc: mcp3422: fix locking scope
- iio: adc: mcp3422: fix locking on error path
- iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set
- iio:light:ltr501 Fix timestamp alignment issue.
- iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak.
- iio:adc:ti-adc084s021 Fix alignment and data leak issues.
- iio:adc:ina2xx Fix timestamp alignment issue.
- iio:adc:max1118 Fix alignment of timestamp and data leak issues
- iio:adc:ti-adc081c Fix alignment and data leak issues
- iio:magnetometer:ak8975 Fix alignment and data leak issues.
- iio:light:max44000 Fix timestamp alignment and prevent data leak.
- iio:chemical:ccs811: Fix timestamp alignment and prevent data leak.
- iio: accel: kxsd9: Fix alignment of local buffer.
- iio:accel:mma7455: Fix timestamp alignment and prevent data leak.
- iio:accel:mma8452: Fix timestamp alignment and prevent data leak.
- staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
- btrfs: require only sector size alignment for parent eb bytenr
- btrfs: fix lockdep splat in add_missing_dev
- btrfs: fix wrong address when faulting in pages in the search ioctl
- regulator: push allocation in set_consumer_device_supply() out of lock
- scsi: target: iscsi: Fix data digest calculation
- scsi: target: iscsi: Fix hang in iscsit_access_np() when getting
tpg->np_login_sem
- rbd: require global CAP_SYS_ADMIN for mapping and unmapping
- RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars
- fbcon: remove soft scrollback code
- fbcon: remove now unusued 'softback_lines' cursor() argument
- vgacon: remove software scrollback support
- [Config] updateconfigs for VGACON_SOFT_SCROLLBACK
- KVM: VMX: Don't freeze guest when event delivery causes an APIC-access exit
- ARM: dts: vfxxx: Add syscon compatible with OCOTP
- video: fbdev: fix OOB read in vga_8planes_imageblit()
- staging: greybus: audio: fix uninitialized value issue
- usb: core: fix slab-out-of-bounds Read in read_descriptors
- USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter
- USB: serial: option: support dynamic Quectel USB compositions
- USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules
- usb: Fix out of sync data toggle if a configured device is reconfigured
- usb: typec: ucsi: acpi: Check the _DEP dependencies
- gcov: add support for GCC 10.1
- gfs2: initialize transaction tr_ailX_lists earlier
- net: handle the return value of pskb_carve_frag_list() correctly
- hv_netvsc: Remove "unlikely" from netvsc_select_queue
- NFSv4.1 handle ERR_DELAY error reclaiming locking state on delegation recall
- scsi: pm8001: Fix memleak in pm8001_exec_internal_task_abort
- scsi: libfc: Fix for double free()
- scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery
- spi: spi-loopback-test: Fix out-of-bounds read
- SUNRPC: stop printk reading past end of string
- rapidio: Replace 'select' DMAENGINES 'with depends on'
- nvme-fc: cancel async events before freeing event struct
- f2fs: fix indefinite loop scanning for free nid
- i2c: algo: pca: Reapply i2c bus settings after reset
- spi: Fix memory leak on splited transfers
- KVM: MIPS: Change the definition of kvm type
- clk: rockchip: Fix initialization of mux_pll_src_4plls_p
- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
- MIPS: SNI: Fix MIPS_L1_CACHE_SHIFT
- perf test: Free formats for perf pmu parse test
- fbcon: Fix user font detection test at fbcon_resize().
- MIPS: SNI: Fix spurious interrupts
- drm/mediatek: Add exception handing in mtk_drm_probe() if component init
fail
- drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata()
- USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin
notebook
- USB: UAS: fix disconnect by unplugging a hub
- usblp: fix race between disconnect() and read()
- i2c: i801: Fix resume bug
- percpu: fix first chunk size calculation for populated bitmap
- Input: trackpoint - add new trackpoint variant IDs
- Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists
- serial: 8250_pci: Add Realtek 816a and 816b
- ehci-hcd: Move include to keep CRC stable
- powerpc/dma: Fix dma_map_ops::get_required_mask
- x86/defconfig: Enable CONFIG_USB_XHCI_HCD=y
- RDMA/bnxt_re: Do not report transparent vlan from QP1
- ARM: dts: bcm: HR2: Fixed QSPI compatible string
- ARM: dts: NSP: Fixed QSPI compatible string
- netfilter: conntrack: allow sctp hearbeat after connection re-use
- cpufreq: intel_pstate: Fix intel_pstate_get_hwp_max() for turbo disabled
- iommu/amd: Do not use IOMMUv2 functionality when SME is active
- drm/tve200: Stabilize enable/disable
- drm/msm: Disable preemption on all 5xx targets
- phy: qcom-qmp: Use correct values for ipq8074 PCIe Gen2 PHY init
- dsa: Allow forwarding of redirected IGMP traffic
- RDMA/bnxt_re: Restrict the max_gids to 256
- regulator: pwm: Fix machine constraints application
- openrisc: Fix cache API compile issue when not inlining
- f2fs: Return EOF on unaligned end of file DIO read
- ASoC: qcom: Set card->owner to avoid warnings
- perf test: Fix the "signal" test inline assembly
- x86/boot/compressed: Disable relocation relaxation
* Bionic update: upstream stable patchset 2020-09-23 (LP: #1896817)
- HID: core: Correctly handle ReportSize being zero
- HID: core: Sanitize event code and type when mapping input
- perf record/stat: Explicitly call out event modifiers in the documentation
- drm/msm: add shutdown support for display platform_driver
- hwmon: (applesmc) check status earlier.
- nvmet: Disable keep-alive timer when kato is cleared to 0h
- ceph: don't allow setlease on cephfs
- cpuidle: Fixup IRQ state
- s390: don't trace preemption in percpu macros
- xen/xenbus: Fix granting of vmalloc'd memory
- dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling
- batman-adv: Avoid uninitialized chaddr when handling DHCP
- batman-adv: Fix own OGM check in aggregated OGMs
- batman-adv: bla: use netif_rx_ni when not in interrupt context
- dmaengine: at_hdmac: check return value of of_find_device_by_node() in
at_dma_xlate()
- MIPS: mm: BMIPS5000 has inclusive physical caches
- MIPS: BMIPS: Also call bmips_cpu_setup() for secondary cores
- netfilter: nf_tables: add NFTA_SET_USERDATA if not null
- netfilter: nf_tables: incorrect enum nft_list_attributes definition
- netfilter: nf_tables: fix destination register zeroing
- net: hns: Fix memleak in hns_nic_dev_probe
- net: systemport: Fix memleak in bcm_sysport_probe
- ravb: Fixed to be able to unload modules
- net: arc_emac: Fix memleak in arc_mdio_probe
- dmaengine: pl330: Fix burst length if burst size is smaller than bus width
- bnxt_en: Check for zero dir entries in NVRAM.
- bnxt_en: Fix PCI AER error recovery flow
- nvmet-fc: Fix a missed _irqsave version of spin_lock in
'nvmet_fc_fod_op_done()'
- perf tools: Correct SNOOPX field offset
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init()
- fix regression in "epoll: Keep a reference on files added to the check list"
- tg3: Fix soft lockup when tg3_reset_task() fails.
- iommu/vt-d: Serialize IOMMU GCMD register modifications
- thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430
- include/linux/log2.h: add missing () around n in roundup_pow_of_two()
- btrfs: drop path before adding new uuid tree entry
- btrfs: Remove redundant extent_buffer_get in get_old_root
- btrfs: Remove extraneous extent_buffer_get from tree_mod_log_rewind
- btrfs: set the lockdep class for log tree extent buffers
- uaccess: Add non-pagefault user-space read functions
- uaccess: Add non-pagefault user-space write function
- btrfs: fix potential deadlock in the search ioctl
- net: usb: qmi_wwan: add Telit 0x1050 composition
- usb: qmi_wwan: add D-Link DWM-222 A2 device ID
- ALSA: ca0106: fix error code handling
- ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
- ALSA: hda/hdmi: always check pin power status in i915 pin fixup
- ALSA: firewire-digi00x: exclude Avid Adrenaline from detection
- affs: fix basic permission bits to actually work
- block: allow for_each_bvec to support zero len bvec
- block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
- libata: implement ATA_HORKAGE_MAX_TRIM_128M and apply to Sandisks
- dm cache metadata: Avoid returning cmd->bm wild pointer on error
- dm thin metadata: Avoid returning cmd->bm wild pointer on error
- mm: slub: fix conversion of freelist_corrupted()
- KVM: arm64: Add kvm_extable for vaxorcism code
- KVM: arm64: Defer guest entry when an asynchronous exception is pending
- KVM: arm64: Survive synchronous exceptions caused by AT instructions
- KVM: arm64: Set HCR_EL2.PTW to prevent AT taking synchronous exception
- checkpatch: fix the usage of capture group ( ... )
- mm/hugetlb: fix a race between hugetlb sysctl handlers
- cfg80211: regulatory: reject invalid hints
- net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
- ALSA; firewire-tascam: exclude Tascam FE-8 from detection
- block: ensure bdi->io_pages is always initialized
- vfio/pci: Fix SR-IOV VF handling with MMIO blocking
- bnxt: don't enable NAPI until rings are ready
- netlabel: fix problems with mapping removal
- net: usb: dm9601: Add USB ID of Keenetic Plus DSL
- sctp: not disable bh in the whole sctp_get_port_local()
- tipc: fix shutdown() of connectionless socket
- net: disable netpoll on fresh napis
- scsi: target: tcmu: Fix size in calls to tcmu_flush_dcache_range
- scsi: target: tcmu: Optimize use of flush_dcache_page
- selftests/bpf: Fix massive output from test_maps
- netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS
- perf jevents: Fix suspicious code in fixregex()
- ext2: don't update mtime on COW faults
- xfs: don't update mtime on COW faults
[ Ubuntu: 4.15.0-124.127 ]
* Packaging resync (LP: #1786013)
- update dkms package versions
* Introduce the new NVIDIA 455 series (LP: #1902093)
- [Packaging] NVIDIA -- Add the NVIDIA 455 driver
[ Ubuntu: 4.15.0-123.126 ]
* CVE-2020-8694
- powercap: make attributes only readable by root
-- Stefan Bader <email address hidden> Fri, 13 Nov 2020 15:42:46 +0100
-
linux-aws (4.15.0-1087.92) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1087.92 -proposed tracker (LP: #1900674)
* CVE-2020-12351 // CVE-2020-12352 // CVE-2020-24490
- [Config] aws: Disable BlueZ highspeed support
* EFA: add support for 0xefa1 devices (LP: #1896791)
- RDMA/efa: Expose maximum TX doorbell batch
- RDMA/efa: Expose minimum SQ size
- RDMA/efa: User/kernel compatibility handshake mechanism
- RDMA/efa: Add EFA 0xefa1 PCI ID
* aws: enable PCI write-combine for arm64 (LP: #1893817)
- SAUCE: arm64: Enable PCI write-combine resources under sysfs
[ Ubuntu: 4.15.0-122.124 ]
* bionic/linux: 4.15.0-122.124 -proposed tracker (LP: #1899941)
* CVE-2020-12351 // CVE-2020-12352 // CVE-2020-24490
- Bluetooth: Disable High Speed by default
- Bluetooth: MGMT: Fix not checking if BT_HS is enabled
- [Config] Disable BlueZ highspeed support
* CVE-2020-12351
- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel
* CVE-2020-12352
- Bluetooth: A2MP: Fix not initializing all members
-- Stefan Bader <email address hidden> Tue, 20 Oct 2020 12:01:06 +0200
-
linux-aws (4.15.0-1086.91) bionic; urgency=medium
[ Ubuntu: 4.15.0-121.123 ]
* Packaging resync (LP: #1786013)
- update dkms package versions
linux-aws (4.15.0-1085.90) bionic; urgency=medium
[ Ubuntu: 4.15.0-120.122 ]
* CVE-2020-16119
- SAUCE: dccp: avoid double free of ccid on child socket
* CVE-2020-16120
- Revert "UBUNTU: SAUCE: overlayfs: ensure mounter privileges when reading
directories"
- ovl: pass correct flags for opening real directory
- ovl: switch to mounter creds in readdir
- ovl: verify permissions in ovl_path_open()
linux-aws (4.15.0-1084.88) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1084.88 -proposed tracker (LP: #1896021)
* Bionic update: upstream stable patchset 2020-09-11 (LP: #1895328)
- aws: [Config] updateconfigs for CONFIG_SPI_DYNAMIC
[ Ubuntu: 4.15.0-119.120 ]
* bionic/linux: 4.15.0-119.120 -proposed tracker (LP: #1896040)
* gtp: unable to associate contextes to interfaces (LP: #1894605)
- gtp: add GTPA_LINK info to msg sent to userspace
* uvcvideo: add mapping for HEVC payloads (LP: #1895803)
- media: videodev2.h: Add v4l2 definition for HEVC
- SAUCE: media: uvcvideo: Add mapping for HEVC payloads
* Novalink (mkvterm command failure) (LP: #1892546)
- tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup()
* rtnetlink.sh in net from ubuntu_kernel_selftests is returning 1 for a
skipped test (LP: #1895258)
- selftests: net: return Kselftest Skip code for skipped tests
* Bionic update: upstream stable patchset 2020-09-16 (LP: #1895873)
- net: Fix potential wrong skb->protocol in skb_vlan_untag()
- tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
- ipvlan: fix device features
- gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY
- ALSA: pci: delete repeated words in comments
- ASoC: tegra: Fix reference count leaks.
- mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs
- arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep
- powerpc/xive: Ignore kmemleak false positives
- media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA
value in debiirq()
- blktrace: ensure our debugfs dir exists
- scsi: target: tcmu: Fix crash on ARM during cmd completion
- iommu/iova: Don't BUG on invalid PFNs
- drm/amdkfd: Fix reference count leaks.
- drm/radeon: fix multiple reference count leak
- drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms
- drm/amd/display: fix ref count leak in amdgpu_drm_ioctl
- drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config
- drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
- selftests/powerpc: Purge extra count_pmc() calls of ebb selftests
- omapfb: fix multiple reference count leaks due to pm_runtime_get_sync
- PCI: Fix pci_create_slot() reference count leak
- rtlwifi: rtl8192cu: Prevent leaking urb
- mips/vdso: Fix resource leaks in genvdso.c
- cec-api: prevent leaking memory through hole in structure
- f2fs: fix use-after-free issue
- drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open
- drm/nouveau: Fix reference count leak in nouveau_connector_detect
- locking/lockdep: Fix overflow in presentation of average lock-time
- scsi: iscsi: Do not put host in iscsi_set_flashnode_param()
- ceph: fix potential mdsc use-after-free crash
- scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del()
- EDAC/ie31200: Fallback if host bridge device is already initialized
- media: davinci: vpif_capture: fix potential double free
- KVM: arm64: Fix symbol dependency in __hyp_call_panic_nvhe
- powerpc/spufs: add CONFIG_COREDUMP dependency
- USB: sisusbvga: Fix a potential UB casued by left shifting a negative value
- efi: provide empty efi_enter_virtual_mode implementation
- Revert "ath10k: fix DMA related firmware crashes on multiple devices"
- media: gpio-ir-tx: improve precision of transmitted signal due to scheduling
- nvme-fc: Fix wrong return value in __nvme_fc_init_request()
- null_blk: fix passing of REQ_FUA flag in null_handle_rq
- i2c: rcar: in slave mode, clear NACK earlier
- usb: gadget: f_tcm: Fix some resource leaks in some error paths
- jbd2: make sure jh have b_transaction set in refile/unfile_buffer
- ext4: don't BUG on inconsistent journal feature
- jbd2: abort journal if free a async write error metadata buffer
- fs: prevent BUG_ON in submit_bh_wbc()
- spi: stm32: fix stm32_spi_prepare_mbr in case of odd clk_rate
- s390/cio: add cond_resched() in the slow_eval_known_fn() loop
- scsi: ufs: Fix possible infinite loop in ufshcd_hold
- scsi: ufs: Improve interrupt handling for shared interrupts
- scsi: ufs: Clean up completed request without interrupt notification
- net: gianfar: Add of_node_put() before goto statement
- powerpc/perf: Fix soft lockups due to missed interrupt accounting
- HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands
- btrfs: fix space cache memory leak after transaction abort
- fbcon: prevent user font height or width change from causing potential out-
of-bounds access
- USB: lvtest: return proper error code in probe
- vt: defer kfree() of vc_screenbuf in vc_do_resize()
- vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
- serial: samsung: Removes the IRQ not found warning
- serial: pl011: Fix oops on -EPROBE_DEFER
- serial: pl011: Don't leak amba_ports entry on driver register error
- serial: 8250_exar: Fix number of ports for Commtech PCIe cards
- serial: 8250: change lock order in serial8250_do_startup()
- writeback: Protect inode->i_io_list with inode->i_lock
- writeback: Avoid skipping inode writeback
- writeback: Fix sync livelock due to b_dirty_time processing
- XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN
data pointer which contains XEN specific information.
- xhci: Do warm-reset when both CAS and XDEV_RESUME are set
- PM: sleep: core: Fix the handling of pending runtime resume requests
- device property: Fix the secondary firmware node handling in
set_primary_fwnode()
- drm/amdgpu: Fix buffer overflow in INFO ioctl
- USB: yurex: Fix bad gfp argument
- usb: uas: Add quirk for PNY Pro Elite
- USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge
- usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe()
- overflow.h: Add allocation size calculation helpers
- USB: gadget: u_f: add overflow checks to VLA macros
- USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb()
- USB: gadget: u_f: Unbreak offset calculation in VLAs
- USB: cdc-acm: rework notification_buffer resizing
- usb: storage: Add unusual_uas entry for Sony PSZ drives
- btrfs: check the right error variable in btrfs_del_dir_entries_in_log
- tpm: Unify the mismatching TPM space buffer sizes
- HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
- ALSA: usb-audio: Update documentation comment for MS2109 quirk
- net: ena: Make missed_tx stat incremental
- ASoC: img: Fix a reference count leak in img_i2s_in_set_fmt
- ASoC: img-parallel-out: Fix a reference count leak
- xfs: Don't allow logging of XFS_ISTALE inodes
- HID: quirks: add NOGET quirk for Logitech GROUP
- drm/msm/adreno: fix updating ring fence
- ext4: handle read only external journal device
- ext4: handle option set by mount flags correctly
- ext4: handle error of ext4_setup_system_zone() on remount
- scsi: qla2xxx: Check if FW supports MQ before enabling
- scsi: qla2xxx: Fix null pointer access during disconnect from subsystem
- macvlan: validate setting of multiple remote source MAC addresses
- block: loop: set discard granularity and alignment for block device backed
loop
- blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART
- btrfs: reset compression level for lzo on remount
- usb: host: xhci: fix ep context print mismatch in debugfs
- genirq/matrix: Deal with the sillyness of for_each_cpu() on UP
- drm/amd/pm: correct Vega10 swctf limit setting
- USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D
* DELL LATITUDE 5491 touchscreen doesn't work (LP: #1889446) // Bionic update:
upstream stable patchset 2020-09-16 (LP: #1895873)
- USB: quirks: Add no-lpm quirk for another Raydium touchscreen
* Bionic update: upstream stable patchset 2020-09-11 (LP: #1895328)
- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset()
- perf probe: Fix memory leakage when the probe point is not found
- khugepaged: khugepaged_test_exit() check mmget_still_valid()
- khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
- powerpc/mm: Only read faulting instruction when necessary in do_page_fault()
- btrfs: export helpers for subvolume name/id resolution
- btrfs: don't show full path of bind mounts in subvol=
- btrfs: Move free_pages_out label in inline extent handling branch in
compress_file_range
- btrfs: inode: fix NULL pointer dereference if inode doesn't need compression
- btrfs: sysfs: use NOFS for device creation
- romfs: fix uninitialized memory leak in romfs_dev_read()
- kernel/relay.c: fix memleak on destroy relay channel
- mm: include CMA pages in lowmem_reserve at boot
- mm, page_alloc: fix core hung in free_pcppages_bulk()
- ext4: fix checking of directory entry validity for inline directories
- jbd2: add the missing unlock_buffer() in the error path of
jbd2_write_superblock()
- [Config] updateconfigs for CONFIG_SPI_DYNAMIC
- spi: Prevent adding devices below an unregistering controller
- scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices
- media: budget-core: Improve exception handling in budget_register()
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
- media: vpss: clean up resources in init
- Input: psmouse - add a newline when printing 'proto' by sysfs
- m68knommu: fix overwriting of bits in ColdFire V3 cache control
- xfs: fix inode quota reservation checks
- jffs2: fix UAF problem
- cpufreq: intel_pstate: Fix cpuinfo_max_freq when MSR_TURBO_RATIO_LIMIT is 0
- scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases
- virtio_ring: Avoid loop when vq is broken in virtqueue_poll
- xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init
- alpha: fix annotation of io{read,write}{16,32}be()
- ext4: fix potential negative array index in do_split()
- i40e: Set RX_ONLY mode for unicast promiscuous on VLAN
- i40e: Fix crash during removing i40e driver
- net: fec: correct the error path for regulator disable in probe
- bonding: show saner speed for broadcast mode
- bonding: fix a potential double-unregister
- ASoC: msm8916-wcd-analog: fix register Interrupt offset
- ASoC: intel: Fix memleak in sst_media_open
- vfio/type1: Add proper error unwind for vfio_iommu_replay()
- bonding: fix active-backup failover for current ARP slave
- hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit()
- net: dsa: b53: check for timeout
- powerpc/pseries: Do not initiate shutdown when system is running on UPS
- epoll: Keep a reference on files added to the check list
- do_epoll_ctl(): clean the failure exits up a bit
- mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible
- xen: don't reschedule in preemption off sections
- clk: Evict unregistered clks from parent caches
- KVM: arm/arm64: Don't reschedule in unmap_stage2_range()
- scsi: zfcp: Fix use-after-free in request timeout handlers
- ext4: don't allow overlapping system zones
- s390/runtime_instrumentation: fix storage key handling
- s390/ptrace: fix storage key handling
- kvm: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode
- kvm: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode
- Fix build error when CONFIG_ACPI is not set/enabled:
- net: ena: Prevent reset after device destruction
* Bionic update: upstream stable patchset 2020-09-02 (LP: #1893986)
- net/mlx5e: Don't support phys switch id if not in switchdev mode
- tracepoint: Mark __tracepoint_string's __used
- HID: input: Fix devices that return multiple bytes in battery report
- x86/mce/inject: Fix a wrong assignment of i_mce.status
- sched: correct SD_flags returned by tl->sd_flags()
- arm64: dts: rockchip: fix rk3399-puma vcc5v0-host gpio
- arm64: dts: rockchip: fix rk3399-puma gmac reset gpio
- EDAC: Fix reference count leaks
- arm64: dts: qcom: msm8916: Replace invalid bias-pull-none property
- arm64: dts: exynos: Fix silent hang after boot on Espresso
- m68k: mac: Don't send IOP message until channel is idle
- m68k: mac: Fix IOP status/control register writes
- platform/x86: intel-hid: Fix return value check in check_acpi_dev()
- platform/x86: intel-vbtn: Fix return value check in check_acpi_dev()
- ARM: at91: pm: add missing put_device() call in at91_pm_sram_init()
- spi: lantiq: fix: Rx overflow error in full duplex mode
- ARM: socfpga: PM: add missing put_device() call in
socfpga_setup_ocram_self_refresh()
- drm/tilcdc: fix leak & null ref in panel_connector_get_modes
- Bluetooth: add a mutex lock to avoid UAF in do_enale_set
- fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls
- drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync
- video: fbdev: neofb: fix memory leak in neo_scan_monitor()
- md-cluster: fix wild pointer of unlock_all_bitmaps()
- arm64: dts: hisilicon: hikey: fixes to comply with adi, adv7533 DT binding
- drm/nouveau: fix multiple instances of reference count leaks
- drm/debugfs: fix plain echo to connector "force" attribute
- irqchip/irq-mtk-sysirq: Replace spinlock with raw_spinlock
- mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls
- brcmfmac: To fix Bss Info flag definition Bug
- brcmfmac: set state of hanger slot to FREE when flushing PSQ
- iwlegacy: Check the return value of pcie_capability_read_*()
- gpu: host1x: debug: Fix multiple channels emitting messages simultaneously
- usb: gadget: net2280: fix memory leak on probe error handling paths
- bdc: Fix bug causing crash after multiple disconnects
- usb: bdc: Halt controller on suspend
- dyndbg: fix a BUG_ON in ddebug_describe_flags
- bcache: fix super block seq numbers comparision in register_cache_set()
- ACPICA: Do not increment operation_region reference counts for field units
- agp/intel: Fix a memory leak on module initialisation failure
- video: fbdev: sm712fb: fix an issue about iounmap for a wrong address
- console: newport_con: fix an issue about leak related system resources
- video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call
- iio: improve IIO_CONCENTRATION channel type description
- drm/arm: fix unintentional integer overflow on left shift
- leds: lm355x: avoid enum conversion warning
- media: omap3isp: Add missed v4l2_ctrl_handler_free() for
preview_init_entities()
- ASoC: Intel: bxt_rt298: add missing .owner field
- scsi: cumana_2: Fix different dev_id between request_irq() and free_irq()
- drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline
- cxl: Fix kobject memleak
- drm/radeon: fix array out-of-bounds read and write issues
- scsi: powertec: Fix different dev_id between request_irq() and free_irq()
- scsi: eesox: Fix different dev_id between request_irq() and free_irq()
- ipvs: allow connection reuse for unconfirmed conntrack
- media: firewire: Using uninitialized values in node_probe()
- media: exynos4-is: Add missed check for pinctrl_lookup_state()
- xfs: fix reflink quota reservation accounting error
- PCI: Fix pci_cfg_wait queue locking problem
- leds: core: Flush scheduled work for system suspend
- drm: panel: simple: Fix bpc for LG LB070WV8 panel
- drm/bridge: sil_sii8620: initialize return of sii8620_readb
- scsi: scsi_debug: Add check for sdebug_max_queue during module init
- mwifiex: Prevent memory corruption handling keys
- powerpc/vdso: Fix vdso cpu truncation
- staging: rtl8192u: fix a dubious looking mask before a shift
- PCI/ASPM: Add missing newline in sysfs 'policy'
- drm/imx: tve: fix regulator_disable error path
- USB: serial: iuu_phoenix: fix led-activity helpers
- thermal: ti-soc-thermal: Fix reversed condition in
ti_thermal_expose_sensor()
- coresight: tmc: Fix TMC mode read in tmc_read_unprepare_etb()
- MIPS: OCTEON: add missing put_device() call in dwc3_octeon_device_init()
- usb: dwc2: Fix error path in gadget registration
- scsi: mesh: Fix panic after host or bus reset
- net: dsa: mv88e6xxx: MV88E6097 does not support jumbo configuration
- Smack: fix another vsscanf out of bounds
- Smack: prevent underflow in smk_set_cipso()
- power: supply: check if calc_soc succeeded in pm860x_init_battery
- Bluetooth: hci_serdev: Only unregister device if it was registered
- selftests/powerpc: Fix CPU affinity for child process
- PCI: Release IVRS table in AMD ACS quirk
- selftests/powerpc: Fix online CPU selection
- s390/qeth: don't process empty bridge port events
- wl1251: fix always return 0 error
- tools, build: Propagate build failures from tools/build/Makefile.build
- net: ethernet: aquantia: Fix wrong return value
- liquidio: Fix wrong return value in cn23xx_get_pf_num()
- net: spider_net: Fix the size used in a 'dma_free_coherent()' call
- fsl/fman: use 32-bit unsigned integer
- fsl/fman: fix dereference null return value
- fsl/fman: fix unreachable code
- fsl/fman: check dereferencing null pointer
- fsl/fman: fix eth hash table allocation
- dlm: Fix kobject memleak
- pinctrl-single: fix pcs_parse_pinconf() return value
- x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task
- crypto: aesni - add compatibility with IAS
- af_packet: TPACKET_V3: fix fill status rwlock imbalance
- drivers/net/wan/lapbether: Added needed_headroom and a skb->len check
- net/nfc/rawsock.c: add CAP_NET_RAW check.
- net: refactor bind_bucket fastreuse into helper
- net: Set fput_needed iff FDPUT_FPUT is set
- USB: serial: cp210x: re-enable auto-RTS on open
- USB: serial: cp210x: enable usb generic throttle/unthrottle
- ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support
- ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109
- ALSA: usb-audio: add quirk for Pioneer DDJ-RB
- crypto: qat - fix double free in qat_uclo_create_batch_init_list
- crypto: ccp - Fix use of merged scatterlists
- crypto: cpt - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified
- bitfield.h: don't compile-time validate _val in FIELD_FIT
- fs/minix: check return value of sb_getblk()
- fs/minix: don't allow getting deleted inodes
- fs/minix: reject too-large maximum file size
- ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109
- 9p: Fix memory leak in v9fs_mount
- spi: spidev: Align buffers for DMA
- mtd: rawnand: qcom: avoid write to unavailable register
- parisc: Implement __smp_store_release and __smp_load_acquire barriers
- parisc: mask out enable and reserved bits from sba imask
- ARM: 8992/1: Fix unwind_frame for clang-built kernels
- irqdomain/treewide: Free firmware node after domain removal
- xen/balloon: fix accounting in alloc_xenballooned_pages error path
- xen/balloon: make the balloon wait interruptible
- net: initialize fastreuse on inet_inherit_port
- smb3: warn on confusing error scenario with sec=krb5
- PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context()
- btrfs: don't allocate anonymous block device for user invisible roots
- btrfs: only search for left_info if there is no right_info in
try_merge_free_space
- btrfs: fix memory leaks after failure to lookup checksums during inode
logging
- dt-bindings: iio: io-channel-mux: Fix compatible string in example code
- iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw()
- xtensa: fix xtensa_pmu_setup prototype
- powerpc: Fix circular dependency between percpu.h and mmu.h
- net: ethernet: stmmac: Disable hardware multicast filter
- net: stmmac: dwmac1000: provide multicast filter fallback
- net/compat: Add missing sock updates for SCM_RIGHTS
- md/raid5: Fix Force reconstruct-write io stuck in degraded raid5
- bcache: allocate meta data pages as compound pages
- mac80211: fix misplaced while instead of if
- MIPS: CPU#0 is not hotpluggable
- ext2: fix missing percpu_counter_inc
- ocfs2: change slot number type s16 to u16
- ftrace: Setup correct FTRACE_FL_REGS flags for module
- kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler
- tracing/hwlat: Honor the tracing_cpumask
- tracing: Use trace_sched_process_free() instead of exit() for pid tracing
- watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in
watchdog_info.options
- watchdog: f71808e_wdt: remove use of wrong watchdog_info option
- watchdog: f71808e_wdt: clear watchdog timeout occurred flag
- pseries: Fix 64 bit logical memory block panic
- perf intel-pt: Fix FUP packet state
- drm/imx: imx-ldb: Disable both channels for split mode in enc->disable()
- mfd: arizona: Ensure 32k clock is put on driver unbind and error
- RDMA/ipoib: Return void from ipoib_ib_dev_stop()
- USB: serial: ftdi_sio: make process-packet buffer unsigned
- USB: serial: ftdi_sio: clean up receive processing
- gpu: ipu-v3: image-convert: Combine rotate/no-rotate irq handlers
- dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue()
- iommu/omap: Check for failure of a call to omap_iommu_dump_ctx
- iommu/vt-d: Enforce PASID devTLB field mask
- i2c: rcar: slave: only send STOP event when we have been addressed
- clk: clk-atlas6: fix return value check in atlas6_clk_init()
- pwm: bcm-iproc: handle clk_get_rate() return
- tools build feature: Use CC and CXX from parent
- i2c: rcar: avoid race when unregistering slave
- Input: sentelic - fix error return when fsp_reg_write fails
- drm/vmwgfx: Use correct vmw_legacy_display_unit pointer
- drm/vmwgfx: Fix two list_for_each loop exit tests
- net: qcom/emac: add missed clk_disable_unprepare in error path of
emac_clks_phase1_init
- nfs: Fix getxattr kernel panic and memory overflow
- fs/ufs: avoid potential u32 multiplication overflow
- test_kmod: avoid potential double free in trigger_config_run_type()
- mfd: dln2: Run event handler loop under spinlock
- ALSA: echoaudio: Fix potential Oops in snd_echo_resume()
- perf bench mem: Always memset source before memcpy
- tools build feature: Quote CC and CXX for their arguments
- sh: landisk: Add missing initialization of sh_io_port_base
- khugepaged: retract_page_tables() remember to test exit
- genirq/affinity: Make affinity setting if activated opt-in
- ARM: dts: gose: Fix ports node name for adv7180
- ARM: dts: gose: Fix ports node name for adv7612
- drm/amdgpu: avoid dereferencing a NULL pointer
- usb: mtu3: clear dual mode of u3port when disable device
- drm/radeon: disable AGP by default
- brcmfmac: keep SDIO watchdog running when console_interval is non-zero
- ath10k: Acquire tx_lock in tx error paths
- xfs: don't eat an EIO/ENOSPC writeback error when scrubbing data fork
- RDMA/rxe: Skip dgid check in loopback mode
- RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send queue
- usb: core: fix quirks_param_set() writing to a const pointer
- powerpc/boot: Fix CONFIG_PPC_MPC52XX references
- include/asm-generic/vmlinux.lds.h: align ro_after_init
- PCI: Mark AMD Navi10 GPU rev 0x00 ATS as broken
- PCI: Add device even if driver attach failed
- PCI: qcom: Define some PARF params needed for ipq8064 SoC
- PCI: qcom: Add support for tx term offset for rev 2.1.0
- PCI: Probe bridge window attributes once at enumeration-time
- btrfs: ref-verify: fix memory leak in add_block_entry
- btrfs: don't traverse into the seed devices in show_devname
- btrfs: fix messages after changing compression level by remount
- btrfs: fix return value mixup in btrfs_get_extent
- powerpc: Allow 4224 bytes of stack expansion for the signal frame
- driver core: Avoid binding drivers to dead devices
- RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah()
- media: rockchip: rga: Introduce color fmt macros and refactor CSC mode logic
- media: rockchip: rga: Only set output CSC mode for RGB input
- mmc: renesas_sdhi_internal_dmac: clean up the code for dma complete
- openrisc: Fix oops caused when dumping stack
- scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying
targetport
- watchdog: initialize device before misc_register
- fs/minix: set s_maxbytes correctly
- fs/minix: fix block limit check for V1 filesystems
- fs/minix: remove expected error message in block_to_path()
- arm64: dts: marvell: espressobin: add ethernet alias
- drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume
* [UBUNTU 20.04] kernel: s390/cpum_cf,perf: changeDFLT_CCERROR counter name
(LP: #1891454)
- s390/cpum_cf: Add new extended counters for IBM z15
* CVE-2018-10322
- xfs: move inode fork verifiers to xfs_dinode_verify
- xfs: enhance dinode verifier
-- Marcelo Henrique Cerri <email address hidden> Tue, 06 Oct 2020 10:44:11 -0300
-
linux-aws (4.15.0-1084.88) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1084.88 -proposed tracker (LP: #1896021)
* Bionic update: upstream stable patchset 2020-09-11 (LP: #1895328)
- aws: [Config] updateconfigs for CONFIG_SPI_DYNAMIC
[ Ubuntu: 4.15.0-119.120 ]
* bionic/linux: 4.15.0-119.120 -proposed tracker (LP: #1896040)
* gtp: unable to associate contextes to interfaces (LP: #1894605)
- gtp: add GTPA_LINK info to msg sent to userspace
* uvcvideo: add mapping for HEVC payloads (LP: #1895803)
- media: videodev2.h: Add v4l2 definition for HEVC
- SAUCE: media: uvcvideo: Add mapping for HEVC payloads
* Novalink (mkvterm command failure) (LP: #1892546)
- tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup()
* rtnetlink.sh in net from ubuntu_kernel_selftests is returning 1 for a
skipped test (LP: #1895258)
- selftests: net: return Kselftest Skip code for skipped tests
* Bionic update: upstream stable patchset 2020-09-16 (LP: #1895873)
- net: Fix potential wrong skb->protocol in skb_vlan_untag()
- tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
- ipvlan: fix device features
- gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY
- ALSA: pci: delete repeated words in comments
- ASoC: tegra: Fix reference count leaks.
- mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs
- arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep
- powerpc/xive: Ignore kmemleak false positives
- media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA
value in debiirq()
- blktrace: ensure our debugfs dir exists
- scsi: target: tcmu: Fix crash on ARM during cmd completion
- iommu/iova: Don't BUG on invalid PFNs
- drm/amdkfd: Fix reference count leaks.
- drm/radeon: fix multiple reference count leak
- drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms
- drm/amd/display: fix ref count leak in amdgpu_drm_ioctl
- drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config
- drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
- selftests/powerpc: Purge extra count_pmc() calls of ebb selftests
- omapfb: fix multiple reference count leaks due to pm_runtime_get_sync
- PCI: Fix pci_create_slot() reference count leak
- rtlwifi: rtl8192cu: Prevent leaking urb
- mips/vdso: Fix resource leaks in genvdso.c
- cec-api: prevent leaking memory through hole in structure
- f2fs: fix use-after-free issue
- drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open
- drm/nouveau: Fix reference count leak in nouveau_connector_detect
- locking/lockdep: Fix overflow in presentation of average lock-time
- scsi: iscsi: Do not put host in iscsi_set_flashnode_param()
- ceph: fix potential mdsc use-after-free crash
- scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del()
- EDAC/ie31200: Fallback if host bridge device is already initialized
- media: davinci: vpif_capture: fix potential double free
- KVM: arm64: Fix symbol dependency in __hyp_call_panic_nvhe
- powerpc/spufs: add CONFIG_COREDUMP dependency
- USB: sisusbvga: Fix a potential UB casued by left shifting a negative value
- efi: provide empty efi_enter_virtual_mode implementation
- Revert "ath10k: fix DMA related firmware crashes on multiple devices"
- media: gpio-ir-tx: improve precision of transmitted signal due to scheduling
- nvme-fc: Fix wrong return value in __nvme_fc_init_request()
- null_blk: fix passing of REQ_FUA flag in null_handle_rq
- i2c: rcar: in slave mode, clear NACK earlier
- usb: gadget: f_tcm: Fix some resource leaks in some error paths
- jbd2: make sure jh have b_transaction set in refile/unfile_buffer
- ext4: don't BUG on inconsistent journal feature
- jbd2: abort journal if free a async write error metadata buffer
- fs: prevent BUG_ON in submit_bh_wbc()
- spi: stm32: fix stm32_spi_prepare_mbr in case of odd clk_rate
- s390/cio: add cond_resched() in the slow_eval_known_fn() loop
- scsi: ufs: Fix possible infinite loop in ufshcd_hold
- scsi: ufs: Improve interrupt handling for shared interrupts
- scsi: ufs: Clean up completed request without interrupt notification
- net: gianfar: Add of_node_put() before goto statement
- powerpc/perf: Fix soft lockups due to missed interrupt accounting
- HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands
- btrfs: fix space cache memory leak after transaction abort
- fbcon: prevent user font height or width change from causing potential out-
of-bounds access
- USB: lvtest: return proper error code in probe
- vt: defer kfree() of vc_screenbuf in vc_do_resize()
- vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
- serial: samsung: Removes the IRQ not found warning
- serial: pl011: Fix oops on -EPROBE_DEFER
- serial: pl011: Don't leak amba_ports entry on driver register error
- serial: 8250_exar: Fix number of ports for Commtech PCIe cards
- serial: 8250: change lock order in serial8250_do_startup()
- writeback: Protect inode->i_io_list with inode->i_lock
- writeback: Avoid skipping inode writeback
- writeback: Fix sync livelock due to b_dirty_time processing
- XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN
data pointer which contains XEN specific information.
- xhci: Do warm-reset when both CAS and XDEV_RESUME are set
- PM: sleep: core: Fix the handling of pending runtime resume requests
- device property: Fix the secondary firmware node handling in
set_primary_fwnode()
- drm/amdgpu: Fix buffer overflow in INFO ioctl
- USB: yurex: Fix bad gfp argument
- usb: uas: Add quirk for PNY Pro Elite
- USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge
- usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe()
- overflow.h: Add allocation size calculation helpers
- USB: gadget: u_f: add overflow checks to VLA macros
- USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb()
- USB: gadget: u_f: Unbreak offset calculation in VLAs
- USB: cdc-acm: rework notification_buffer resizing
- usb: storage: Add unusual_uas entry for Sony PSZ drives
- btrfs: check the right error variable in btrfs_del_dir_entries_in_log
- tpm: Unify the mismatching TPM space buffer sizes
- HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
- ALSA: usb-audio: Update documentation comment for MS2109 quirk
- net: ena: Make missed_tx stat incremental
- ASoC: img: Fix a reference count leak in img_i2s_in_set_fmt
- ASoC: img-parallel-out: Fix a reference count leak
- xfs: Don't allow logging of XFS_ISTALE inodes
- HID: quirks: add NOGET quirk for Logitech GROUP
- drm/msm/adreno: fix updating ring fence
- ext4: handle read only external journal device
- ext4: handle option set by mount flags correctly
- ext4: handle error of ext4_setup_system_zone() on remount
- scsi: qla2xxx: Check if FW supports MQ before enabling
- scsi: qla2xxx: Fix null pointer access during disconnect from subsystem
- macvlan: validate setting of multiple remote source MAC addresses
- block: loop: set discard granularity and alignment for block device backed
loop
- blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART
- btrfs: reset compression level for lzo on remount
- usb: host: xhci: fix ep context print mismatch in debugfs
- genirq/matrix: Deal with the sillyness of for_each_cpu() on UP
- drm/amd/pm: correct Vega10 swctf limit setting
- USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D
* DELL LATITUDE 5491 touchscreen doesn't work (LP: #1889446) // Bionic update:
upstream stable patchset 2020-09-16 (LP: #1895873)
- USB: quirks: Add no-lpm quirk for another Raydium touchscreen
* Bionic update: upstream stable patchset 2020-09-11 (LP: #1895328)
- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset()
- perf probe: Fix memory leakage when the probe point is not found
- khugepaged: khugepaged_test_exit() check mmget_still_valid()
- khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
- powerpc/mm: Only read faulting instruction when necessary in do_page_fault()
- btrfs: export helpers for subvolume name/id resolution
- btrfs: don't show full path of bind mounts in subvol=
- btrfs: Move free_pages_out label in inline extent handling branch in
compress_file_range
- btrfs: inode: fix NULL pointer dereference if inode doesn't need compression
- btrfs: sysfs: use NOFS for device creation
- romfs: fix uninitialized memory leak in romfs_dev_read()
- kernel/relay.c: fix memleak on destroy relay channel
- mm: include CMA pages in lowmem_reserve at boot
- mm, page_alloc: fix core hung in free_pcppages_bulk()
- ext4: fix checking of directory entry validity for inline directories
- jbd2: add the missing unlock_buffer() in the error path of
jbd2_write_superblock()
- [Config] updateconfigs for CONFIG_SPI_DYNAMIC
- spi: Prevent adding devices below an unregistering controller
- scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices
- media: budget-core: Improve exception handling in budget_register()
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
- media: vpss: clean up resources in init
- Input: psmouse - add a newline when printing 'proto' by sysfs
- m68knommu: fix overwriting of bits in ColdFire V3 cache control
- xfs: fix inode quota reservation checks
- jffs2: fix UAF problem
- cpufreq: intel_pstate: Fix cpuinfo_max_freq when MSR_TURBO_RATIO_LIMIT is 0
- scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases
- virtio_ring: Avoid loop when vq is broken in virtqueue_poll
- xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init
- alpha: fix annotation of io{read,write}{16,32}be()
- ext4: fix potential negative array index in do_split()
- i40e: Set RX_ONLY mode for unicast promiscuous on VLAN
- i40e: Fix crash during removing i40e driver
- net: fec: correct the error path for regulator disable in probe
- bonding: show saner speed for broadcast mode
- bonding: fix a potential double-unregister
- ASoC: msm8916-wcd-analog: fix register Interrupt offset
- ASoC: intel: Fix memleak in sst_media_open
- vfio/type1: Add proper error unwind for vfio_iommu_replay()
- bonding: fix active-backup failover for current ARP slave
- hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit()
- net: dsa: b53: check for timeout
- powerpc/pseries: Do not initiate shutdown when system is running on UPS
- epoll: Keep a reference on files added to the check list
- do_epoll_ctl(): clean the failure exits up a bit
- mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible
- xen: don't reschedule in preemption off sections
- clk: Evict unregistered clks from parent caches
- KVM: arm/arm64: Don't reschedule in unmap_stage2_range()
- scsi: zfcp: Fix use-after-free in request timeout handlers
- ext4: don't allow overlapping system zones
- s390/runtime_instrumentation: fix storage key handling
- s390/ptrace: fix storage key handling
- kvm: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode
- kvm: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode
- Fix build error when CONFIG_ACPI is not set/enabled:
- net: ena: Prevent reset after device destruction
* Bionic update: upstream stable patchset 2020-09-02 (LP: #1893986)
- net/mlx5e: Don't support phys switch id if not in switchdev mode
- tracepoint: Mark __tracepoint_string's __used
- HID: input: Fix devices that return multiple bytes in battery report
- x86/mce/inject: Fix a wrong assignment of i_mce.status
- sched: correct SD_flags returned by tl->sd_flags()
- arm64: dts: rockchip: fix rk3399-puma vcc5v0-host gpio
- arm64: dts: rockchip: fix rk3399-puma gmac reset gpio
- EDAC: Fix reference count leaks
- arm64: dts: qcom: msm8916: Replace invalid bias-pull-none property
- arm64: dts: exynos: Fix silent hang after boot on Espresso
- m68k: mac: Don't send IOP message until channel is idle
- m68k: mac: Fix IOP status/control register writes
- platform/x86: intel-hid: Fix return value check in check_acpi_dev()
- platform/x86: intel-vbtn: Fix return value check in check_acpi_dev()
- ARM: at91: pm: add missing put_device() call in at91_pm_sram_init()
- spi: lantiq: fix: Rx overflow error in full duplex mode
- ARM: socfpga: PM: add missing put_device() call in
socfpga_setup_ocram_self_refresh()
- drm/tilcdc: fix leak & null ref in panel_connector_get_modes
- Bluetooth: add a mutex lock to avoid UAF in do_enale_set
- fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls
- drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync
- video: fbdev: neofb: fix memory leak in neo_scan_monitor()
- md-cluster: fix wild pointer of unlock_all_bitmaps()
- arm64: dts: hisilicon: hikey: fixes to comply with adi, adv7533 DT binding
- drm/nouveau: fix multiple instances of reference count leaks
- drm/debugfs: fix plain echo to connector "force" attribute
- irqchip/irq-mtk-sysirq: Replace spinlock with raw_spinlock
- mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls
- brcmfmac: To fix Bss Info flag definition Bug
- brcmfmac: set state of hanger slot to FREE when flushing PSQ
- iwlegacy: Check the return value of pcie_capability_read_*()
- gpu: host1x: debug: Fix multiple channels emitting messages simultaneously
- usb: gadget: net2280: fix memory leak on probe error handling paths
- bdc: Fix bug causing crash after multiple disconnects
- usb: bdc: Halt controller on suspend
- dyndbg: fix a BUG_ON in ddebug_describe_flags
- bcache: fix super block seq numbers comparision in register_cache_set()
- ACPICA: Do not increment operation_region reference counts for field units
- agp/intel: Fix a memory leak on module initialisation failure
- video: fbdev: sm712fb: fix an issue about iounmap for a wrong address
- console: newport_con: fix an issue about leak related system resources
- video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call
- iio: improve IIO_CONCENTRATION channel type description
- drm/arm: fix unintentional integer overflow on left shift
- leds: lm355x: avoid enum conversion warning
- media: omap3isp: Add missed v4l2_ctrl_handler_free() for
preview_init_entities()
- ASoC: Intel: bxt_rt298: add missing .owner field
- scsi: cumana_2: Fix different dev_id between request_irq() and free_irq()
- drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline
- cxl: Fix kobject memleak
- drm/radeon: fix array out-of-bounds read and write issues
- scsi: powertec: Fix different dev_id between request_irq() and free_irq()
- scsi: eesox: Fix different dev_id between request_irq() and free_irq()
- ipvs: allow connection reuse for unconfirmed conntrack
- media: firewire: Using uninitialized values in node_probe()
- media: exynos4-is: Add missed check for pinctrl_lookup_state()
- xfs: fix reflink quota reservation accounting error
- PCI: Fix pci_cfg_wait queue locking problem
- leds: core: Flush scheduled work for system suspend
- drm: panel: simple: Fix bpc for LG LB070WV8 panel
- drm/bridge: sil_sii8620: initialize return of sii8620_readb
- scsi: scsi_debug: Add check for sdebug_max_queue during module init
- mwifiex: Prevent memory corruption handling keys
- powerpc/vdso: Fix vdso cpu truncation
- staging: rtl8192u: fix a dubious looking mask before a shift
- PCI/ASPM: Add missing newline in sysfs 'policy'
- drm/imx: tve: fix regulator_disable error path
- USB: serial: iuu_phoenix: fix led-activity helpers
- thermal: ti-soc-thermal: Fix reversed condition in
ti_thermal_expose_sensor()
- coresight: tmc: Fix TMC mode read in tmc_read_unprepare_etb()
- MIPS: OCTEON: add missing put_device() call in dwc3_octeon_device_init()
- usb: dwc2: Fix error path in gadget registration
- scsi: mesh: Fix panic after host or bus reset
- net: dsa: mv88e6xxx: MV88E6097 does not support jumbo configuration
- Smack: fix another vsscanf out of bounds
- Smack: prevent underflow in smk_set_cipso()
- power: supply: check if calc_soc succeeded in pm860x_init_battery
- Bluetooth: hci_serdev: Only unregister device if it was registered
- selftests/powerpc: Fix CPU affinity for child process
- PCI: Release IVRS table in AMD ACS quirk
- selftests/powerpc: Fix online CPU selection
- s390/qeth: don't process empty bridge port events
- wl1251: fix always return 0 error
- tools, build: Propagate build failures from tools/build/Makefile.build
- net: ethernet: aquantia: Fix wrong return value
- liquidio: Fix wrong return value in cn23xx_get_pf_num()
- net: spider_net: Fix the size used in a 'dma_free_coherent()' call
- fsl/fman: use 32-bit unsigned integer
- fsl/fman: fix dereference null return value
- fsl/fman: fix unreachable code
- fsl/fman: check dereferencing null pointer
- fsl/fman: fix eth hash table allocation
- dlm: Fix kobject memleak
- pinctrl-single: fix pcs_parse_pinconf() return value
- x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task
- crypto: aesni - add compatibility with IAS
- af_packet: TPACKET_V3: fix fill status rwlock imbalance
- drivers/net/wan/lapbether: Added needed_headroom and a skb->len check
- net/nfc/rawsock.c: add CAP_NET_RAW check.
- net: refactor bind_bucket fastreuse into helper
- net: Set fput_needed iff FDPUT_FPUT is set
- USB: serial: cp210x: re-enable auto-RTS on open
- USB: serial: cp210x: enable usb generic throttle/unthrottle
- ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support
- ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109
- ALSA: usb-audio: add quirk for Pioneer DDJ-RB
- crypto: qat - fix double free in qat_uclo_create_batch_init_list
- crypto: ccp - Fix use of merged scatterlists
- crypto: cpt - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified
- bitfield.h: don't compile-time validate _val in FIELD_FIT
- fs/minix: check return value of sb_getblk()
- fs/minix: don't allow getting deleted inodes
- fs/minix: reject too-large maximum file size
- ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109
- 9p: Fix memory leak in v9fs_mount
- spi: spidev: Align buffers for DMA
- mtd: rawnand: qcom: avoid write to unavailable register
- parisc: Implement __smp_store_release and __smp_load_acquire barriers
- parisc: mask out enable and reserved bits from sba imask
- ARM: 8992/1: Fix unwind_frame for clang-built kernels
- irqdomain/treewide: Free firmware node after domain removal
- xen/balloon: fix accounting in alloc_xenballooned_pages error path
- xen/balloon: make the balloon wait interruptible
- net: initialize fastreuse on inet_inherit_port
- smb3: warn on confusing error scenario with sec=krb5
- PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context()
- btrfs: don't allocate anonymous block device for user invisible roots
- btrfs: only search for left_info if there is no right_info in
try_merge_free_space
- btrfs: fix memory leaks after failure to lookup checksums during inode
logging
- dt-bindings: iio: io-channel-mux: Fix compatible string in example code
- iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw()
- xtensa: fix xtensa_pmu_setup prototype
- powerpc: Fix circular dependency between percpu.h and mmu.h
- net: ethernet: stmmac: Disable hardware multicast filter
- net: stmmac: dwmac1000: provide multicast filter fallback
- net/compat: Add missing sock updates for SCM_RIGHTS
- md/raid5: Fix Force reconstruct-write io stuck in degraded raid5
- bcache: allocate meta data pages as compound pages
- mac80211: fix misplaced while instead of if
- MIPS: CPU#0 is not hotpluggable
- ext2: fix missing percpu_counter_inc
- ocfs2: change slot number type s16 to u16
- ftrace: Setup correct FTRACE_FL_REGS flags for module
- kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler
- tracing/hwlat: Honor the tracing_cpumask
- tracing: Use trace_sched_process_free() instead of exit() for pid tracing
- watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in
watchdog_info.options
- watchdog: f71808e_wdt: remove use of wrong watchdog_info option
- watchdog: f71808e_wdt: clear watchdog timeout occurred flag
- pseries: Fix 64 bit logical memory block panic
- perf intel-pt: Fix FUP packet state
- drm/imx: imx-ldb: Disable both channels for split mode in enc->disable()
- mfd: arizona: Ensure 32k clock is put on driver unbind and error
- RDMA/ipoib: Return void from ipoib_ib_dev_stop()
- USB: serial: ftdi_sio: make process-packet buffer unsigned
- USB: serial: ftdi_sio: clean up receive processing
- gpu: ipu-v3: image-convert: Combine rotate/no-rotate irq handlers
- dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue()
- iommu/omap: Check for failure of a call to omap_iommu_dump_ctx
- iommu/vt-d: Enforce PASID devTLB field mask
- i2c: rcar: slave: only send STOP event when we have been addressed
- clk: clk-atlas6: fix return value check in atlas6_clk_init()
- pwm: bcm-iproc: handle clk_get_rate() return
- tools build feature: Use CC and CXX from parent
- i2c: rcar: avoid race when unregistering slave
- Input: sentelic - fix error return when fsp_reg_write fails
- drm/vmwgfx: Use correct vmw_legacy_display_unit pointer
- drm/vmwgfx: Fix two list_for_each loop exit tests
- net: qcom/emac: add missed clk_disable_unprepare in error path of
emac_clks_phase1_init
- nfs: Fix getxattr kernel panic and memory overflow
- fs/ufs: avoid potential u32 multiplication overflow
- test_kmod: avoid potential double free in trigger_config_run_type()
- mfd: dln2: Run event handler loop under spinlock
- ALSA: echoaudio: Fix potential Oops in snd_echo_resume()
- perf bench mem: Always memset source before memcpy
- tools build feature: Quote CC and CXX for their arguments
- sh: landisk: Add missing initialization of sh_io_port_base
- khugepaged: retract_page_tables() remember to test exit
- genirq/affinity: Make affinity setting if activated opt-in
- ARM: dts: gose: Fix ports node name for adv7180
- ARM: dts: gose: Fix ports node name for adv7612
- drm/amdgpu: avoid dereferencing a NULL pointer
- usb: mtu3: clear dual mode of u3port when disable device
- drm/radeon: disable AGP by default
- brcmfmac: keep SDIO watchdog running when console_interval is non-zero
- ath10k: Acquire tx_lock in tx error paths
- xfs: don't eat an EIO/ENOSPC writeback error when scrubbing data fork
- RDMA/rxe: Skip dgid check in loopback mode
- RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send queue
- usb: core: fix quirks_param_set() writing to a const pointer
- powerpc/boot: Fix CONFIG_PPC_MPC52XX references
- include/asm-generic/vmlinux.lds.h: align ro_after_init
- PCI: Mark AMD Navi10 GPU rev 0x00 ATS as broken
- PCI: Add device even if driver attach failed
- PCI: qcom: Define some PARF params needed for ipq8064 SoC
- PCI: qcom: Add support for tx term offset for rev 2.1.0
- PCI: Probe bridge window attributes once at enumeration-time
- btrfs: ref-verify: fix memory leak in add_block_entry
- btrfs: don't traverse into the seed devices in show_devname
- btrfs: fix messages after changing compression level by remount
- btrfs: fix return value mixup in btrfs_get_extent
- powerpc: Allow 4224 bytes of stack expansion for the signal frame
- driver core: Avoid binding drivers to dead devices
- RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah()
- media: rockchip: rga: Introduce color fmt macros and refactor CSC mode logic
- media: rockchip: rga: Only set output CSC mode for RGB input
- mmc: renesas_sdhi_internal_dmac: clean up the code for dma complete
- openrisc: Fix oops caused when dumping stack
- scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying
targetport
- watchdog: initialize device before misc_register
- fs/minix: set s_maxbytes correctly
- fs/minix: fix block limit check for V1 filesystems
- fs/minix: remove expected error message in block_to_path()
- arm64: dts: marvell: espressobin: add ethernet alias
- drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume
* [UBUNTU 20.04] kernel: s390/cpum_cf,perf: changeDFLT_CCERROR counter name
(LP: #1891454)
- s390/cpum_cf: Add new extended counters for IBM z15
* CVE-2018-10322
- xfs: move inode fork verifiers to xfs_dinode_verify
- xfs: enhance dinode verifier
-- William Breathitt Gray <email address hidden> Mon, 21 Sep 2020 14:17:05 -0400
-
linux-aws (4.15.0-1083.87) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1083.87 -proposed tracker (LP: #1894678)
[ Ubuntu: 4.15.0-118.119 ]
* bionic/linux: 4.15.0-118.119 -proposed tracker (LP: #1894697)
* Packaging resync (LP: #1786013)
- update dkms package versions
* Introduce the new NVIDIA 450-server and the 450 UDA series (LP: #1887674)
- [packaging] add signed modules for nvidia 450 and 450-server
* cgroup refcount is bogus when cgroup_sk_alloc is disabled (LP: #1886860)
- cgroup: add missing skcd->no_refcnt check in cgroup_sk_clone()
* CVE-2020-12888
- vfio/type1: Support faulting PFNMAP vmas
- vfio-pci: Fault mmaps to enable vma tracking
- vfio-pci: Invalidate mmaps and block MMIO access on disabled memory
* [Hyper-V] VSS and File Copy daemons intermittently fails to start
(LP: #1891224)
- [Packaging] Bind hv_vss_daemon startup to hv_vss device
- [Packaging] bind hv_fcopy_daemon startup to hv_fcopy device
* KVM: Fix zero_page reference counter overflow when using KSM on KVM compute
host (LP: #1837810)
- KVM: fix overflow of zero page refcount with ksm running
* Fix false-negative return value for rtnetlink.sh in kselftests/net
(LP: #1890136)
- selftests: rtnetlink: correct the final return value for the test
- selftests: rtnetlink: make kci_test_encap() return sub-test result
* Bionic update: upstream stable patchset 2020-08-18 (LP: #1892091)
- USB: serial: qcserial: add EM7305 QDL product ID
- USB: iowarrior: fix up report size handling for some devices
- usb: xhci: define IDs for various ASMedia host controllers
- usb: xhci: Fix ASMedia ASM1142 DMA addressing
- Revert "ALSA: hda: call runtime_allow() for all hda controllers"
- ALSA: seq: oss: Serialize ioctls
- staging: android: ashmem: Fix lockdep warning for write operation
- Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt()
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
- omapfb: dss: Fix max fclk divider for omap36xx
- binder: Prevent context manager from incrementing ref 0
- vgacon: Fix for missing check in scrollback handling
- mtd: properly check all write ioctls for permissions
- leds: wm831x-status: fix use-after-free on unbind
- leds: da903x: fix use-after-free on unbind
- leds: lm3533: fix use-after-free on unbind
- leds: 88pm860x: fix use-after-free on unbind
- net/9p: validate fds in p9_fd_open
- drm/nouveau/fbcon: fix module unload when fbcon init has failed for some
reason
- drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure
- i2c: slave: improve sanity check when registering
- i2c: slave: add sanity check when unregistering
- usb: hso: check for return value in hso_serial_common_create()
- firmware: Fix a reference count leak.
- cfg80211: check vendor command doit pointer before use
- igb: reinit_locked() should be called with rtnl_lock
- atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent
- tools lib traceevent: Fix memory leak in process_dynamic_array_len
- Drivers: hv: vmbus: Ignore CHANNELMSG_TL_CONNECT_RESULT(23)
- xattr: break delegations in {set,remove}xattr
- ipv4: Silence suspicious RCU usage warning
- ipv6: fix memory leaks on IPV6_ADDRFORM path
- net: ethernet: mtk_eth_soc: fix MTU warnings
- vxlan: Ensure FDB dump is performed under RCU
- net: lan78xx: replace bogus endpoint lookup
- hv_netvsc: do not use VF device if link is down
- net: gre: recompute gre csum for sctp over gre tunnels
- openvswitch: Prevent kernel-infoleak in ovs_ct_put_key()
- Revert "vxlan: fix tos value before xmit"
- selftests/net: relax cpu affinity requirement in msg_zerocopy test
- rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
- i40e: add num_vectors checker in iwarp handler
- i40e: Wrong truncation from u16 to u8
- i40e: Memory leak in i40e_config_iwarp_qvlist
- Smack: fix use-after-free in smk_write_relabel_self()
* Bionic update: upstream stable patchset 2020-08-11 (LP: #1891228)
- AX.25: Fix out-of-bounds read in ax25_connect()
- AX.25: Prevent out-of-bounds read in ax25_sendmsg()
- dev: Defer free of skbs in flush_backlog
- drivers/net/wan/x25_asy: Fix to make it work
- net-sysfs: add a newline when printing 'tx_timeout' by sysfs
- net: udp: Fix wrong clean up for IS_UDPLITE macro
- rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA
- AX.25: Prevent integer overflows in connect and sendmsg
- ip6_gre: fix null-ptr-deref in ip6gre_init_net()
- rtnetlink: Fix memory(net_device) leak when ->newlink fails
- tcp: allow at most one TLP probe per flight
- regmap: debugfs: check count when read regmap file
- qrtr: orphan socket in qrtr_release()
- sctp: shrink stream outq only when new outcnt < old outcnt
- sctp: shrink stream outq when fails to do addstream reconf
- crypto: ccp - Release all allocated memory if sha type is invalid
- media: rc: prevent memory leak in cx23888_ir_probe
- iio: imu: adis16400: fix memory leak
- ath9k_htc: release allocated buffer if timed out
- ath9k: release allocated buffer if timed out
- PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge
- wireless: Use offsetof instead of custom macro.
- ARM: 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess
watchpoints
- drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl()
- drm: hold gem reference until object is no longer accessed
- f2fs: check memory boundary by insane namelen
- f2fs: check if file namelen exceeds max value
- 9p/trans_fd: abort p9_read_work if req status changed
- 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work
- x86/build/lto: Fix truncated .bss with -fdata-sections
- rds: Prevent kernel-infoleak in rds_notify_queue_get()
- xfs: fix missed wakeup on l_flush_wait
- net/x25: Fix x25_neigh refcnt leak when x25 disconnect
- net/x25: Fix null-ptr-deref in x25_disconnect
- selftests/net: rxtimestamp: fix clang issues for target arch PowerPC
- sh: Fix validation of system call number
- net: lan78xx: add missing endpoint sanity check
- net: lan78xx: fix transfer-buffer memory leak
- mlx4: disable device on shutdown
- mlxsw: core: Increase scope of RCU read-side critical section
- mlxsw: core: Free EMAD transactions using kfree_rcu()
- ibmvnic: Fix IRQ mapping disposal in error path
- bpf: Fix map leak in HASH_OF_MAPS map
- mac80211: mesh: Free ie data when leaving mesh
- mac80211: mesh: Free pending skb when destroying a mpath
- arm64/alternatives: move length validation inside the subsection
- arm64: csum: Fix handling of bad packets
- usb: hso: Fix debug compile warning on sparc32
- qed: Disable "MFW indication via attention" SPAM every 5 minutes
- nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame
- parisc: add support for cmpxchg on u8 pointers
- net: ethernet: ravb: exit if re-initialization fails in tx timeout
- Revert "i2c: cadence: Fix the hold bit setting"
- x86/unwind/orc: Fix ORC for newly forked tasks
- cxgb4: add missing release on skb in uld_send()
- xen-netfront: fix potential deadlock in xennet_remove()
- KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw
disabled
- x86/i8259: Use printk_deferred() to prevent deadlock
- drm/amdgpu: fix multiple memory leaks in acp_hw_init
- selftests/net: psock_fanout: fix clang issues for target arch PowerPC
- net/mlx5: Verify Hardware supports requested ptp function on a given pin
- random32: update the net random state on interrupt and activity
- ARM: percpu.h: fix build error
- random: fix circular include dependency on arm64 after addition of percpu.h
- random32: remove net_rand_state from the latent entropy gcc plugin
- random32: move the pseudo-random 32-bit definitions to prandom.h
- ext4: fix direct I/O read error
-- Ian May <email address hidden> Tue, 08 Sep 2020 13:50:08 -0500
-
linux-aws (4.15.0-1082.86) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1082.86 -proposed tracker (LP: #1894258)
[ Ubuntu: 4.15.0-117.118 ]
* bionic/linux: 4.15.0-117.118 -proposed tracker (LP: #1894277)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CVE-2020-14386
- SAUCE: net/packet: fix overflow in tpacket_rcv
[ Ubuntu: 4.15.0-115.116 ]
* bionic/linux: 4.15.0-115.116 -proposed tracker (LP: #1893055)
* [Potential Regression] dscr_inherit_exec_test from powerpc in
ubuntu_kernel_selftests failed on B/E/F (LP: #1888332)
- powerpc/64s: Don't init FSCR_DSCR in __init_FSCR()
-- Ian May <email address hidden> Fri, 04 Sep 2020 19:25:40 -0500
-
linux-aws (4.15.0-1081.85) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1081.85 -proposed tracker (LP: #1893383)
[ Ubuntu: 4.15.0-116.117 ]
* bionic/linux: 4.15.0-116.117 -proposed tracker (LP: #1893402)
* Packaging resync (LP: #1786013)
- update dkms package versions
- [Packaging] update helper scripts
- update dkms package versions
* Introduce the new NVIDIA 450-server and the 450 UDA series (LP: #1887674)
- [packaging] add signed modules for nvidia 450 and 450-server
* cgroup refcount is bogus when cgroup_sk_alloc is disabled (LP: #1886860)
- cgroup: add missing skcd->no_refcnt check in cgroup_sk_clone()
* CVE-2020-12888
- vfio/type1: Support faulting PFNMAP vmas
- vfio-pci: Fault mmaps to enable vma tracking
- vfio-pci: Invalidate mmaps and block MMIO access on disabled memory
* [Hyper-V] VSS and File Copy daemons intermittently fails to start
(LP: #1891224)
- [Packaging] Bind hv_vss_daemon startup to hv_vss device
- [Packaging] bind hv_fcopy_daemon startup to hv_fcopy device
* KVM: Fix zero_page reference counter overflow when using KSM on KVM compute
host (LP: #1837810)
- KVM: fix overflow of zero page refcount with ksm running
* Fix false-negative return value for rtnetlink.sh in kselftests/net
(LP: #1890136)
- selftests: rtnetlink: correct the final return value for the test
- selftests: rtnetlink: make kci_test_encap() return sub-test result
* Bionic update: upstream stable patchset 2020-08-18 (LP: #1892091)
- USB: serial: qcserial: add EM7305 QDL product ID
- USB: iowarrior: fix up report size handling for some devices
- usb: xhci: define IDs for various ASMedia host controllers
- usb: xhci: Fix ASMedia ASM1142 DMA addressing
- Revert "ALSA: hda: call runtime_allow() for all hda controllers"
- ALSA: seq: oss: Serialize ioctls
- staging: android: ashmem: Fix lockdep warning for write operation
- Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt()
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
- omapfb: dss: Fix max fclk divider for omap36xx
- binder: Prevent context manager from incrementing ref 0
- vgacon: Fix for missing check in scrollback handling
- mtd: properly check all write ioctls for permissions
- leds: wm831x-status: fix use-after-free on unbind
- leds: da903x: fix use-after-free on unbind
- leds: lm3533: fix use-after-free on unbind
- leds: 88pm860x: fix use-after-free on unbind
- net/9p: validate fds in p9_fd_open
- drm/nouveau/fbcon: fix module unload when fbcon init has failed for some
reason
- drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure
- i2c: slave: improve sanity check when registering
- i2c: slave: add sanity check when unregistering
- usb: hso: check for return value in hso_serial_common_create()
- firmware: Fix a reference count leak.
- cfg80211: check vendor command doit pointer before use
- igb: reinit_locked() should be called with rtnl_lock
- atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent
- tools lib traceevent: Fix memory leak in process_dynamic_array_len
- Drivers: hv: vmbus: Ignore CHANNELMSG_TL_CONNECT_RESULT(23)
- xattr: break delegations in {set,remove}xattr
- ipv4: Silence suspicious RCU usage warning
- ipv6: fix memory leaks on IPV6_ADDRFORM path
- net: ethernet: mtk_eth_soc: fix MTU warnings
- vxlan: Ensure FDB dump is performed under RCU
- net: lan78xx: replace bogus endpoint lookup
- hv_netvsc: do not use VF device if link is down
- net: gre: recompute gre csum for sctp over gre tunnels
- openvswitch: Prevent kernel-infoleak in ovs_ct_put_key()
- Revert "vxlan: fix tos value before xmit"
- selftests/net: relax cpu affinity requirement in msg_zerocopy test
- rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
- i40e: add num_vectors checker in iwarp handler
- i40e: Wrong truncation from u16 to u8
- i40e: Memory leak in i40e_config_iwarp_qvlist
- Smack: fix use-after-free in smk_write_relabel_self()
* Bionic update: upstream stable patchset 2020-08-11 (LP: #1891228)
- AX.25: Fix out-of-bounds read in ax25_connect()
- AX.25: Prevent out-of-bounds read in ax25_sendmsg()
- dev: Defer free of skbs in flush_backlog
- drivers/net/wan/x25_asy: Fix to make it work
- net-sysfs: add a newline when printing 'tx_timeout' by sysfs
- net: udp: Fix wrong clean up for IS_UDPLITE macro
- rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA
- AX.25: Prevent integer overflows in connect and sendmsg
- ip6_gre: fix null-ptr-deref in ip6gre_init_net()
- rtnetlink: Fix memory(net_device) leak when ->newlink fails
- tcp: allow at most one TLP probe per flight
- regmap: debugfs: check count when read regmap file
- qrtr: orphan socket in qrtr_release()
- sctp: shrink stream outq only when new outcnt < old outcnt
- sctp: shrink stream outq when fails to do addstream reconf
- crypto: ccp - Release all allocated memory if sha type is invalid
- media: rc: prevent memory leak in cx23888_ir_probe
- iio: imu: adis16400: fix memory leak
- ath9k_htc: release allocated buffer if timed out
- ath9k: release allocated buffer if timed out
- PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge
- wireless: Use offsetof instead of custom macro.
- ARM: 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess
watchpoints
- drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl()
- drm: hold gem reference until object is no longer accessed
- f2fs: check memory boundary by insane namelen
- f2fs: check if file namelen exceeds max value
- 9p/trans_fd: abort p9_read_work if req status changed
- 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work
- x86/build/lto: Fix truncated .bss with -fdata-sections
- rds: Prevent kernel-infoleak in rds_notify_queue_get()
- xfs: fix missed wakeup on l_flush_wait
- net/x25: Fix x25_neigh refcnt leak when x25 disconnect
- net/x25: Fix null-ptr-deref in x25_disconnect
- selftests/net: rxtimestamp: fix clang issues for target arch PowerPC
- sh: Fix validation of system call number
- net: lan78xx: add missing endpoint sanity check
- net: lan78xx: fix transfer-buffer memory leak
- mlx4: disable device on shutdown
- mlxsw: core: Increase scope of RCU read-side critical section
- mlxsw: core: Free EMAD transactions using kfree_rcu()
- ibmvnic: Fix IRQ mapping disposal in error path
- bpf: Fix map leak in HASH_OF_MAPS map
- mac80211: mesh: Free ie data when leaving mesh
- mac80211: mesh: Free pending skb when destroying a mpath
- arm64/alternatives: move length validation inside the subsection
- arm64: csum: Fix handling of bad packets
- usb: hso: Fix debug compile warning on sparc32
- qed: Disable "MFW indication via attention" SPAM every 5 minutes
- nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame
- parisc: add support for cmpxchg on u8 pointers
- net: ethernet: ravb: exit if re-initialization fails in tx timeout
- Revert "i2c: cadence: Fix the hold bit setting"
- x86/unwind/orc: Fix ORC for newly forked tasks
- cxgb4: add missing release on skb in uld_send()
- xen-netfront: fix potential deadlock in xennet_remove()
- KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw
disabled
- x86/i8259: Use printk_deferred() to prevent deadlock
- drm/amdgpu: fix multiple memory leaks in acp_hw_init
- selftests/net: psock_fanout: fix clang issues for target arch PowerPC
- net/mlx5: Verify Hardware supports requested ptp function on a given pin
- random32: update the net random state on interrupt and activity
- ARM: percpu.h: fix build error
- random: fix circular include dependency on arm64 after addition of percpu.h
- random32: remove net_rand_state from the latent entropy gcc plugin
- random32: move the pseudo-random 32-bit definitions to prandom.h
- ext4: fix direct I/O read error
[ Ubuntu: 4.15.0-115.116 ]
* bionic/linux: 4.15.0-115.116 -proposed tracker (LP: #1893055)
* [Potential Regression] dscr_inherit_exec_test from powerpc in
ubuntu_kernel_selftests failed on B/E/F (LP: #1888332)
- powerpc/64s: Don't init FSCR_DSCR in __init_FSCR()
-- Stefan Bader <email address hidden> Thu, 03 Sep 2020 18:19:24 +0200
-
linux-aws (4.15.0-1080.84) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1080.84 -proposed tracker (LP: #1890686)
* Bionic update: upstream stable patchset 2020-07-17 (LP: #1887990)
- [Config] aws: updateconfigs for EFI_CUSTOM_SSDT_OVERLAYS
* Bionic update: upstream stable patchset 2020-07-24 (LP: #1888907)
- [Config] aws: updateconfigs for BLK_DEV_SR_VENDOR
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
- [Packaging] update update.conf
* overlayfs regression - internal getxattr operations without sepolicy
checking (LP: #1864669)
- SAUCE: overlayfs: internal getxattr operations without sepolicy checking
[ Ubuntu: 4.15.0-114.115 ]
* bionic/linux: 4.15.0-114.115 -proposed tracker (LP: #1891052)
* ipsec: policy priority management is broken (LP: #1890796)
- xfrm: policy: match with both mark and mask on user interfaces
[ Ubuntu: 4.15.0-113.114 ]
* bionic/linux: 4.15.0-113.114 -proposed tracker (LP: #1890705)
* Packaging resync (LP: #1786013)
- update dkms package versions
* Reapply "usb: handle warm-reset port requests on hub resume" (LP: #1859873)
- usb: handle warm-reset port requests on hub resume
* Bionic update: upstream stable patchset 2020-07-29 (LP: #1889474)
- gpio: arizona: handle pm_runtime_get_sync failure case
- gpio: arizona: put pm_runtime in case of failure
- pinctrl: amd: fix npins for uart0 in kerncz_groups
- mac80211: allow rx of mesh eapol frames with default rx key
- scsi: scsi_transport_spi: Fix function pointer check
- xtensa: fix __sync_fetch_and_{and,or}_4 declarations
- xtensa: update *pos in cpuinfo_op.next
- drivers/net/wan/lapbether: Fixed the value of hard_header_len
- net: sky2: initialize return of gm_phy_read
- drm/nouveau/i2c/g94-: increase NV_PMGR_DP_AUXCTL_TRANSACTREQ timeout
- irqdomain/treewide: Keep firmware node unconditionally allocated
- SUNRPC reverting d03727b248d0 ("NFSv4 fix CLOSE not waiting for direct IO
compeletion")
- spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours
- IB/umem: fix reference count leak in ib_umem_odp_get()
- uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix
GDB regression
- ALSA: info: Drop WARN_ON() from buffer NULL sanity check
- ASoC: rt5670: Correct RT5670_LDO_SEL_MASK
- btrfs: fix double free on ulist after backref resolution failure
- btrfs: fix mount failure caused by race with umount
- btrfs: fix page leaks after failure to lock page for delalloc
- bnxt_en: Fix race when modifying pause settings.
- hippi: Fix a size used in a 'pci_free_consistent()' in an error handling
path
- ax88172a: fix ax88172a_unbind() failures
- net: dp83640: fix SIOCSHWTSTAMP to update the struct with actual
configuration
- drm: sun4i: hdmi: Fix inverted HPD result
- net: smc91x: Fix possible memory leak in smc_drv_probe()
- bonding: check error value of register_netdevice() immediately
- mlxsw: destroy workqueue when trap_register in mlxsw_emad_init
- ipvs: fix the connection sync failed in some cases
- i2c: rcar: always clear ICSAR to avoid side effects
- bonding: check return value of register_netdevice() in bond_newlink()
- serial: exar: Fix GPIO configuration for Sealevel cards based on XR17V35X
- scripts/decode_stacktrace: strip basepath from all paths
- HID: i2c-hid: add Mediacom FlexBook edge13 to descriptor override
- HID: apple: Disable Fn-key key-re-mapping on clone keyboards
- dmaengine: tegra210-adma: Fix runtime PM imbalance on error
- Input: add `SW_MACHINE_COVER`
- spi: mediatek: use correct SPI_CFG2_REG MACRO
- regmap: dev_get_regmap_match(): fix string comparison
- hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow
- dmaengine: ioat setting ioat timeout as module parameter
- Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen
- usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init()
- arm64: Use test_tsk_thread_flag() for checking TIF_SINGLESTEP
- x86: math-emu: Fix up 'cmp' insn for clang ias
- binder: Don't use mmput() from shrinker function.
- usb: xhci-mtk: fix the failure of bandwidth allocation
- usb: xhci: Fix ASM2142/ASM3142 DMA addressing
- Revert "cifs: Fix the target file was deleted when rename failed."
- staging: wlan-ng: properly check endpoint types
- staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift
- staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support
- staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift
- staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift
- serial: 8250: fix null-ptr-deref in serial8250_start_tx()
- serial: 8250_mtk: Fix high-speed baud rates clamping
- fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
- vt: Reject zero-sized screen buffer size.
- Makefile: Fix GCC_TOOLCHAIN_DIR prefix for Clang cross compilation
- mm/memcg: fix refcount error while moving and swapping
- io-mapping: indicate mapping failure
- parisc: Add atomic64_set_release() define to avoid CPU soft lockups
- ath9k: Fix regression with Atheros 9271
- fuse: fix weird page warning
- qed: suppress "don't support RoCE & iWARP" flooding on HW init
- scripts/gdb: fix lx-symbols 'gdb.error' while loading modules
- HID: alps: support devices with report id 2
- RISC-V: Upgrade smp_mb__after_spinlock() to iorw,iorw
- x86, vmlinux.lds: Page-align end of ..page_aligned sections
- ASoC: rt5670: Add new gpio1_is_ext_spk_en quirk and enable it on the Lenovo
Miix 2 10
* Bionic update: upstream stable patchset 2020-07-24 (LP: #1888907)
- KVM: s390: reduce number of IO pins to 1
- spi: spi-fsl-dspi: Adding shutdown hook
- spi: spi-fsl-dspi: Fix lockup if device is removed during SPI transfer
- spi: spi-fsl-dspi: use IRQF_SHARED mode to request IRQ
- spi: spi-fsl-dspi: Fix external abort on interrupt in resume or exit paths
- ARM: dts: omap4-droid4: Fix spi configuration and increase rate
- gpu: host1x: Detach driver on unregister
- spi: spidev: fix a race between spidev_release and spidev_remove
- spi: spidev: fix a potential use-after-free in spidev_release()
- ixgbe: protect ring accesses with READ- and WRITE_ONCE
- s390/kasan: fix early pgm check handler execution
- cifs: update ctime and mtime during truncate
- ARM: imx6: add missing put_device() call in imx6q_suspend_init()
- scsi: mptscsih: Fix read sense data size
- nvme-rdma: assign completion vector correctly
- x86/entry: Increase entry_stack size to a full page
- net: cxgb4: fix return error value in t4_prep_fw
- smsc95xx: check return value of smsc95xx_reset
- smsc95xx: avoid memory leak in smsc95xx_bind
- ALSA: compress: fix partial_drain completion state
- arm64: kgdb: Fix single-step exception handling oops
- nbd: Fix memory leak in nbd_add_socket
- bnxt_en: fix NULL dereference in case SR-IOV configuration fails
- net: macb: mark device wake capable when "magic-packet" property present
- mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON()
- ALSA: opl3: fix infoleak in opl3
- ALSA: hda - let hs_mic be picked ahead of hp_mic
- ALSA: usb-audio: add quirk for MacroSilicon MS2109
- KVM: arm64: Fix definition of PAGE_HYP_DEVICE
- KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART
- KVM: x86: bit 8 of non-leaf PDPEs is not reserved
- KVM: x86: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit mode
- KVM: x86: Mark CR4.TSD as being possibly owned by the guest
- btrfs: fix fatal extent_buffer readahead vs releasepage race
- drm/radeon: fix double free
- dm: use noio when sending kobject event
- ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE
- ARC: elf: use right ELF_ARCH
- s390/mm: fix huge pte soft dirty copying
- genetlink: remove genl_bind
- ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg
- l2tp: remove skb_dst_set() from l2tp_xmit_skb()
- llc: make sure applications use ARPHRD_ETHER
- net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb
- tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key()
- tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers
- tcp: md5: allow changing MD5 keys in all socket states
- net_sched: fix a memory leak in atm_tc_init()
- tcp: make sure listeners don't initialize congestion-control state
- tcp: md5: do not send silly options in SYNCOOKIES
- cgroup: fix cgroup_sk_alloc() for sk_clone_lock()
- cgroup: Fix sock_cgroup_data on big-endian.
- drm/exynos: fix ref count leak in mic_pre_enable
- arm64/alternatives: use subsections for replacement sequences
- tpm_tis: extra chip->ops check on error path in tpm_tis_core_init
- gfs2: read-only mounts should grab the sd_freeze_gl glock
- i2c: eg20t: Load module automatically if ID matches
- arm64: alternative: Use true and false for boolean values
- arm64/alternatives: don't patch up internal branches
- iio:magnetometer:ak8974: Fix alignment and data leak issues
- iio:humidity:hdc100x Fix alignment and data leak issues
- iio: magnetometer: ak8974: Fix runtime PM imbalance on error
- iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe()
- iio: pressure: zpa2326: handle pm_runtime_get_sync failure
- iio:pressure:ms5611 Fix buffer element alignment
- iio:health:afe4403 Fix timestamp alignment and prevent data leak.
- spi: spi-fsl-dspi: Fix lockup if device is shutdown during SPI transfer
- spi: fix initial SPI_SR value in spi-fsl-dspi
- net: dsa: bcm_sf2: Fix node reference count
- of: of_mdio: Correct loop scanning logic
- Revert "usb/ohci-platform: Fix a warning when hibernating"
- Revert "usb/ehci-platform: Set PM runtime as active on resume"
- Revert "usb/xhci-plat: Set PM runtime as active on resume"
- doc: dt: bindings: usb: dwc3: Update entries for disabling SS instances in
park mode
- mmc: sdhci: do not enable card detect interrupt for gpio cd type
- ACPI: video: Use native backlight on Acer Aspire 5783z
- ACPI: video: Use native backlight on Acer TravelMate 5735Z
- iio:health:afe4404 Fix timestamp alignment and prevent data leak.
- phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked
- arm64: dts: meson: add missing gxl rng clock
- spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate
- usb: gadget: udc: atmel: fix uninitialized read in debug printk
- staging: comedi: verify array index is correct before using it
- Revert "thermal: mediatek: fix register index error"
- ARM: dts: socfpga: Align L2 cache-controller nodename with dtschema
- copy_xstate_to_kernel: Fix typo which caused GDB regression
- perf stat: Zero all the 'ena' and 'run' array slot stats for interval mode
- mtd: rawnand: brcmnand: fix CS0 layout
- mtd: rawnand: oxnas: Keep track of registered devices
- mtd: rawnand: oxnas: Unregister all devices on error
- mtd: rawnand: oxnas: Release all devices in the _remove() path
- HID: magicmouse: do not set up autorepeat
- ALSA: line6: Perform sanity check for each URB creation
- ALSA: usb-audio: Fix race against the error recovery URB submission
- USB: c67x00: fix use after free in c67x00_giveback_urb
- usb: dwc2: Fix shutdown callback in platform
- usb: chipidea: core: add wakeup support for extcon
- usb: gadget: function: fix missing spinlock in f_uac1_legacy
- USB: serial: iuu_phoenix: fix memory corruption
- USB: serial: cypress_m8: enable Simply Automated UPB PIM
- USB: serial: ch341: add new Product ID for CH340
- USB: serial: option: add GosunCn GM500 series
- virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial
- fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS
- Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()"
- mei: bus: don't clean driver pointer
- Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list
- uio_pdrv_genirq: fix use without device tree and no interrupt
- timer: Fix wheel index calculation on last level
- MIPS: Fix build for LTS kernel caused by backporting lpj adjustment
- hwmon: (emc2103) fix unable to change fan pwm1_enable attribute
- intel_th: pci: Add Jasper Lake CPU support
- intel_th: pci: Add Tiger Lake PCH-H support
- intel_th: pci: Add Emmitsburg PCH support
- dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler
- misc: atmel-ssc: lock with mutex instead of spinlock
- thermal/drivers/cpufreq_cooling: Fix wrong frequency converted from power
- arm64: ptrace: Override SPSR.SS when single-stepping is enabled
- sched/fair: handle case of task_h_load() returning 0
- libceph: don't omit recovery_deletes in target_copy()
- rxrpc: Fix trace string
- regmap: fix alignment issue
- i40e: protect ring accesses with READ- and WRITE_ONCE
- usb: dwc3: pci: Fix reference count leak in dwc3_pci_resume_work
- net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
- drm/mediatek: Check plane visibility in atomic_update
- net: hns3: fix use-after-free when doing self test
- cxgb4: fix all-mask IP address comparison
- perf: Make perf able to build with latest libbfd
- drm/msm: fix potential memleak in error branch
- HID: quirks: Remove ITE 8595 entry from hid_have_special_driver
- scsi: sr: remove references to BLK_DEV_SR_VENDOR, leave it enabled
- [Config] updateconfigs for BLK_DEV_SR_VENDOR
- ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp
(0951:16d8)
- ALSA: usb-audio: Rewrite registration quirk handling
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha S
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S
- regmap: debugfs: Don't sleep while atomic for fast_io regmaps
- HID: quirks: Always poll Obins Anne Pro 2 keyboard
- HID: quirks: Ignore Simply Automated UPB PIM
- ALSA: line6: Sync the pending work cancel at disconnection
- ALSA: hda/realtek - change to suitable link model for ASUS platform
- ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534
- timer: Prevent base->clk from moving backward
- riscv: use 16KB kernel stack on 64-bit
- intel_th: Fix a NULL dereference when hub driver is not loaded
- genirq/affinity: Handle affinity setting on inactive interrupts correctly
* NFSv4.1: Interrupted connections cause high bandwidth RPC ping-pong between
client and server (LP: #1887607)
- NFSv4.1: Avoid false retries when RPC calls are interrupted
- NFSv4.x: Handle bad/dead sessions correctly in nfs41_sequence_process()
- NFS: Fix interrupted slots by sending a solo SEQUENCE operation
* tap: use after free (LP: #1889735)
- tap: fix use-after-free
* Bionic update: upstream stable patchset 2020-07-17 (LP: #1887990)
- btrfs: fix a block group ref counter leak after failure to remove block
group
- btrfs: cow_file_range() num_bytes and disk_num_bytes are same
- btrfs: fix data block group relocation failure due to concurrent scrub
- mm: fix swap cache node allocation mask
- EDAC/amd64: Read back the scrub rate PCI register on F15h
- usbnet: smsc95xx: Fix use-after-free after removal
- mm/slub.c: fix corrupted freechain in deactivate_slab()
- mm/slub: fix stack overruns with SLUB_STATS
- usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect
- kgdb: Avoid suspicious RCU usage warning
- cxgb4: use unaligned conversion for fetching timestamp
- cxgb4: parse TC-U32 key values and masks natively
- hwmon: (max6697) Make sure the OVERT mask is set correctly
- hwmon: (acpi_power_meter) Fix potential memory leak in
acpi_power_meter_add()
- drm: sun4i: hdmi: Remove extra HPD polling
- virtio-blk: free vblk-vqs in error path of virtblk_probe()
- i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665
- nfsd: apply umask on fs without ACL support
- Revert "ALSA: usb-audio: Improve frames size computation"
- SMB3: Honor 'seal' flag for multiuser mounts
- SMB3: Honor persistent/resilient handle flags for multiuser mounts
- cifs: Fix the target file was deleted when rename failed.
- MIPS: Add missing EHB in mtc0 -> mfc0 sequence for DSPen
- irqchip/gic: Atomically update affinity
- dm zoned: assign max_io_len correctly
- [Config] updateconfigs for EFI_CUSTOM_SSDT_OVERLAYS
- efi: Make it possible to disable efivar_ssdt entirely
- s390/debug: avoid kernel warning on too large number of pages
- cxgb4: use correct type for all-mask IP address comparison
- SMB3: Honor lease disabling for multiuser mounts
* Enable Quectel EG95 LTE modem [2c7c:0195] (LP: #1886744)
- net: usb: qmi_wwan: add support for Quectel EG95 LTE modem
- USB: serial: option: add Quectel EG95 LTE modem
* kernel oops xr-usb-serial (LP: #1885271)
- SAUCE: Revert "xr-usb-serial: fix kbuild"
- SAUCE: Revert "xr-usb-serial: Changes to support updates in struct
gpio_chip"
- SAUCE: Revert "xr-usb-serial: re-initialise baudrate after resume from
S3/S4"
- SAUCE: Revert "xr-usb-serial: Update driver for Exar USB serial ports"
* [hns3-0115] add 8 BD limit for tx flow (LP: #1859756)
- net: hns3: add 8 BD limit for tx flow
- net: hns3: avoid mult + div op in critical data path
- net: hns3: remove some ops in struct hns3_nic_ops
- net: hns3: fix for not calculating tx bd num correctly
- net: hns3: unify maybe_stop_tx for TSO and non-TSO case
- net: hns3: add check for max TX BD num for tso and non-tso case
- net: hns3: fix for TX queue not restarted problem
- net: hns3: fix a use after free problem in hns3_nic_maybe_stop_tx()
* Regression in kernel 4.15.0-91 causes kernel panic with Bcache
(LP: #1867916)
- bcache: check and adjust logical block size for backing devices
* use-after-free in af_alg_accept() due to bh_lock_sock() (LP: #1884766)
- crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock()
* Bionic update: upstream stable patchset 2020-07-15 (LP: #1887715)
- net: be more gentle about silly gso requests coming from user
- block/bio-integrity: don't free 'buf' if bio_integrity_add_page() failed
- net: sched: export __netdev_watchdog_up()
- fix a braino in "sparc32: fix register window handling in
genregs32_[gs]et()"
- apparmor: don't try to replace stale label in ptraceme check
- ibmveth: Fix max MTU limit
- mld: fix memory leak in ipv6_mc_destroy_dev()
- net: bridge: enfore alignment for ethernet address
- net: fix memleak in register_netdevice()
- net: usb: ax88179_178a: fix packet alignment padding
- rocker: fix incorrect error handling in dma_rings_init
- rxrpc: Fix notification call on completion of discarded calls
- sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket
- tcp: grow window for OOO packets only for SACK flows
- tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes
- ip_tunnel: fix use-after-free in ip_tunnel_lookup()
- tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT
- ip6_gre: fix use-after-free in ip6gre_tunnel_lookup()
- net: Fix the arp error in some cases
- net: Do not clear the sock TX queue in sk_set_socket()
- net: core: reduce recursion limit value
- USB: ohci-sm501: Add missed iounmap() in remove
- usb: dwc2: Postponed gadget registration to the udc class driver
- usb: add USB_QUIRK_DELAY_INIT for Logitech C922
- USB: ehci: reopen solution for Synopsys HC bug
- usb: host: xhci-mtk: avoid runtime suspend when removing hcd
- usb: host: ehci-exynos: Fix error check in exynos_ehci_probe()
- ALSA: usb-audio: add quirk for Denon DCD-1500RE
- xhci: Fix incorrect EP_STATE_MASK
- xhci: Fix enumeration issue when setting max packet size for FS devices.
- cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip
- loop: replace kill_bdev with invalidate_bdev
- ALSA: usb-audio: Clean up mixer element list traverse
- ALSA: usb-audio: Fix OOB access of mixer element list
- xhci: Poll for U0 after disabling USB2 LPM
- cifs/smb3: Fix data inconsistent when punch hole
- cifs/smb3: Fix data inconsistent when zero file range
- efi/esrt: Fix reference count leak in esre_create_sysfs_entry.
- ARM: dts: NSP: Correct FA2 mailbox node
- rxrpc: Fix handling of rwind from an ACK packet
- RDMA/cma: Protect bind_list and listen_list while finding matching cm id
- ASoC: rockchip: Fix a reference count leak.
- RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads()
- net: qed: fix left elements count calculation
- net: qed: fix NVMe login fails over VFs
- net: qed: fix excessive QM ILT lines consumption
- ARM: imx5: add missing put_device() call in imx_suspend_alloc_ocram()
- usb: gadget: udc: Potential Oops in error handling code
- netfilter: ipset: fix unaligned atomic access
- net: bcmgenet: use hardware padding of runt frames
- sched/core: Fix PI boosting between RT and DEADLINE tasks
- ata/libata: Fix usage of page address by page_address in
ata_scsi_mode_select_xlat function
- net: alx: fix race condition in alx_remove
- s390/ptrace: fix setting syscall number
- kbuild: improve cc-option to clean up all temporary files
- blktrace: break out of blktrace setup on concurrent calls
- ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table
- ACPI: sysfs: Fix pm_profile_attr type
- KVM: X86: Fix MSR range of APIC registers in X2APIC mode
- KVM: nVMX: Plumb L2 GPA through to PML emulation
- btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof
- mm/slab: use memzero_explicit() in kzfree()
- ocfs2: load global_inode_alloc
- ocfs2: fix value of OCFS2_INVALID_SLOT
- ocfs2: fix panic on nfs server over ocfs2
- arm64: perf: Report the PC value in REGS_ABI_32 mode
- tracing: Fix event trigger to accept redundant spaces
- drm/radeon: fix fb_div check in ni_init_smc_spll_table()
- Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate()
- sunrpc: fixed rollback in rpc_gssd_dummy_populate()
- SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment()
- pNFS/flexfiles: Fix list corruption if the mirror count changes
- NFSv4 fix CLOSE not waiting for direct IO compeletion
- xfs: add agf freeblocks verify in xfs_agf_verify
- net: bcmgenet: remove HFB_CTRL access
- EDAC/amd64: Add Family 17h Model 30h PCI IDs
- i2c: tegra: Cleanup kerneldoc comments
- i2c: tegra: Add missing kerneldoc for some fields
- net: phy: Check harder for errors in get_phy_id()
- ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG)
- scsi: zfcp: Fix panic on ERP timeout for previously dismissed ERP action
- xhci: Return if xHCI doesn't support LPM
- IB/mad: Fix use after free when destroying MAD agent
- regmap: Fix memory leak from regmap_register_patch
- RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532
- cxgb4: move handling L2T ARP failures to caller
- sched/deadline: Initialize ->dl_boosted
- s390/vdso: fix vDSO clock_getres()
- arm64: sve: Fix build failure when ARM64_SVE=y and SYSCTL=n
- ALSA: hda/realtek - Add quirk for MSI GE63 laptop
* Bionic update: upstream stable patchset 2020-07-07 (LP: #1886710)
- s390: fix syscall_get_error for compat processes
- drm/i915: Whitelist context-local timestamp in the gen9 cmdparser
- power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select
- clk: sunxi: Fix incorrect usage of round_down()
- i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets
- iio: pressure: bmp280: Tolerate IRQ before registering
- remoteproc: Fix IDR initialisation in rproc_alloc()
- clk: qcom: msm8916: Fix the address location of pll->config_reg
- backlight: lp855x: Ensure regulators are disabled on probe failure
- ASoC: davinci-mcasp: Fix dma_chan refcnt leak when getting dma type
- ARM: integrator: Add some Kconfig selections
- scsi: qedi: Check for buffer overflow in qedi_set_path()
- ALSA: isa/wavefront: prevent out of bounds write in ioctl
- scsi: qla2xxx: Fix issue with adapter's stopping state
- iio: bmp280: fix compensation of humidity
- f2fs: report delalloc reserve as non-free in statfs for project quota
- i2c: pxa: clear all master action bits in i2c_pxa_stop_message()
- usblp: poison URBs upon disconnect
- dm mpath: switch paths in dm_blk_ioctl() code path
- PCI: aardvark: Don't blindly enable ASPM L0s and don't write to read-only
register
- ps3disk: use the default segment boundary
- vfio/pci: fix memory leaks in alloc_perm_bits()
- m68k/PCI: Fix a memory leak in an error handling path
- mfd: wm8994: Fix driver operation if loaded as modules
- scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event
- clk: clk-flexgen: fix clock-critical handling
- powerpc/perf/hv-24x7: Fix inconsistent output values incase multiple hv-24x7
events run
- nfsd: Fix svc_xprt refcnt leak when setup callback client failed
- powerpc/crashkernel: Take "mem=" option into account
- yam: fix possible memory leak in yam_init_driver
- NTB: Fix the default port and peer numbers for legacy drivers
- mksysmap: Fix the mismatch of '.L' symbols in System.map
- apparmor: fix introspection of of task mode for unconfined tasks
- scsi: sr: Fix sr_probe() missing deallocate of device minor
- scsi: ibmvscsi: Don't send host info in adapter info MAD after LPM
- staging: greybus: fix a missing-check bug in gb_lights_light_config()
- scsi: qedi: Do not flush offload work if ARP not resolved
- ALSA: usb-audio: Improve frames size computation
- s390/qdio: put thinint indicator after early error
- thermal/drivers/ti-soc-thermal: Avoid dereferencing ERR_PTR
- staging: sm750fb: add missing case while setting FB_VISUAL
- i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output
- serial: amba-pl011: Make sure we initialize the port.lock spinlock
- drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a
driver developer is foolish
- PCI: rcar: Fix incorrect programming of OB windows
- PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges
- scsi: qla2xxx: Fix warning after FC target reset
- power: supply: lp8788: Fix an error handling path in
'lp8788_charger_probe()'
- power: supply: smb347-charger: IRQSTAT_D is volatile
- scsi: mpt3sas: Fix double free warnings
- dlm: remove BUG() before panic()
- clk: ti: composite: fix memory leak
- PCI: Fix pci_register_host_bridge() device_register() error handling
- tty: n_gsm: Fix SOF skipping
- tty: n_gsm: Fix waking up upper tty layer when room available
- powerpc/pseries/ras: Fix FWNMI_VALID off by one
- powerpc/ps3: Fix kexec shutdown hang
- vfio-pci: Mask cap zero
- usb/ohci-platform: Fix a warning when hibernating
- drm/msm/mdp5: Fix mdp5_init error path for failed mdp5_kms allocation
- USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe()
- tty: n_gsm: Fix bogus i++ in gsm_data_kick
- clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1
- powerpc/64s/pgtable: fix an undefined behaviour
- dm zoned: return NULL if dmz_get_zone_for_reclaim() fails to find a zone
- PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port
- IB/cma: Fix ports memory leak in cma_configfs
- watchdog: da9062: No need to ping manually before setting timeout
- usb: dwc2: gadget: move gadget resume after the core is in L0 state
- USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in
s3c2410_udc_nuke
- usb: gadget: lpc32xx_udc: don't dereference ep pointer before null check
- usb: gadget: fix potential double-free in m66592_probe.
- usb: gadget: Fix issue with config_ep_by_speed function
- x86/apic: Make TSC deadline timer detection message visible
- clk: bcm2835: Fix return type of bcm2835_register_gate
- scsi: ufs-qcom: Fix scheduling while atomic issue
- net: sunrpc: Fix off-by-one issues in 'rpc_ntop6'
- NFSv4.1 fix rpc_call_done assignment for BIND_CONN_TO_SESSION
- powerpc/4xx: Don't unmap NULL mbase
- extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()'
- ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed
- vfio/mdev: Fix reference count leak in add_mdev_supported_type
- openrisc: Fix issue with argument clobbering for clone/fork
- gfs2: Allow lock_nolock mount to specify jid=X
- scsi: iscsi: Fix reference count leak in iscsi_boot_create_kobj
- scsi: ufs: Don't update urgent bkops level when toggling auto bkops
- pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()'
- pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()'
- crypto: omap-sham - add proper load balancing support for multicore
- geneve: change from tx_error to tx_dropped on missing metadata
- lib/zlib: remove outdated and incorrect pre-increment optimization
- include/linux/bitops.h: avoid clang shift-count-overflow warnings
- elfnote: mark all .note sections SHF_ALLOC
- selftests/vm/pkeys: fix alloc_random_pkey() to make it really random
- blktrace: use errno instead of bi_status
- blktrace: fix endianness in get_pdu_int()
- blktrace: fix endianness for blk_log_remap()
- gfs2: fix use-after-free on transaction ail lists
- selftests/net: in timestamping, strncpy needs to preserve null byte
- drm/sun4i: hdmi ddc clk: Fix size of m divider
- scsi: acornscsi: Fix an error handling path in acornscsi_probe()
- usb/xhci-plat: Set PM runtime as active on resume
- usb/ehci-platform: Set PM runtime as active on resume
- perf report: Fix NULL pointer dereference in
hists__fprintf_nr_sample_events()
- bcache: fix potential deadlock problem in btree_gc_coalesce
- block: Fix use-after-free in blkdev_get()
- arm64: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints
- drm: encoder_slave: fix refcouting error for modules
- drm/dp_mst: Reformat drm_dp_check_act_status() a bit
- drm/qxl: Use correct notify port address when creating cursor ring
- selinux: fix double free
- ext4: fix partial cluster initialization when splitting extent
- drm/dp_mst: Increase ACT retry timeout to 3s
- x86/boot/compressed: Relax sed symbol type regex for LLVM ld.lld
- block: nr_sects_write(): Disable preemption on seqcount write
- mtd: rawnand: Pass a nand_chip object to nand_release()
- mtd: rawnand: diskonchip: Fix the probe error path
- mtd: rawnand: sharpsl: Fix the probe error path
- mtd: rawnand: xway: Fix the probe error path
- mtd: rawnand: orion: Fix the probe error path
- mtd: rawnand: oxnas: Add of_node_put()
- mtd: rawnand: oxnas: Fix the probe error path
- mtd: rawnand: socrates: Fix the probe error path
- mtd: rawnand: plat_nand: Fix the probe error path
- mtd: rawnand: mtk: Fix the probe error path
- mtd: rawnand: tmio: Fix the probe error path
- crypto: algif_skcipher - Cap recv SG list at ctx->used
- crypto: algboss - don't wait during notifier callback
- kprobes: Fix to protect kick_kprobe_optimizer() by kprobe_mutex
- e1000e: Do not wake up the system via WOL if device wakeup is disabled
- kretprobe: Prevent triggering kretprobe from within kprobe_flush_task
- sched/rt, net: Use CONFIG_PREEMPTION.patch
- net: core: device_rename: Use rwsem instead of a seqcount
- kvm: x86: Move kvm_set_mmio_spte_mask() from x86.c to mmu.c
- kvm: x86: Fix reserved bits related calculation errors caused by MKTME
- KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated
- ASoC: tegra: tegra_wm8903: Support nvidia, headset property
- PCI: Allow pci_resize_resource() for devices on root bus
- clk: samsung: Mark top ISP and CAM clocks on Exynos542x as critical
- serial: 8250: Fix max baud limit in generic 8250 port
- gpio: dwapb: Call acpi_gpiochip_free_interrupts() on GPIO chip de-
registration
- pwm: img: Call pm_runtime_put() in pm_runtime_get_sync() failed case
- x86/purgatory: Disable various profiling and sanitizing options
- arm64: dts: mt8173: fix unit name warnings
- gpio: dwapb: Append MODULE_ALIAS for platform driver
- pinctrl: rza1: Fix wrong array assignment of rza1l_swio_entries
- ALSA: usb-audio: Fix racy list management in output queue
- PCI: v3-semi: Fix a memory leak in v3_pci_probe() error handling paths
- pinctrl: rockchip: fix memleak in rockchip_dt_node_to_map
- powerpc/64: Don't initialise init_task->thread.regs
- HID: Add quirks for Trust Panora Graphic Tablet
- RDMA/iw_cxgb4: cleanup device debugfs entries on ULD remove
- ASoC: fix incomplete error-handling in img_i2s_in_probe.
- of: Fix a refcounting bug in __of_attach_node_sysfs()
- NTB: Revert the change to use the NTB device dev for DMA allocations
- drivers/perf: hisi: Fix wrong value for all counters enable
- x86/idt: Keep spurious entries unset in system_vectors
- usb: host: ehci-platform: add a quirk to avoid stuck
- afs: Fix non-setting of mtime when writing into mmap
- afs: afs_write_end() should change i_size under the right lock
- drm/amdgpu: Replace invalid device ID with a valid device ID
- ext4: avoid race conditions when remounting with options that change dax
- net: octeon: mgmt: Repair filling of RX ring
- Revert "dpaa_eth: fix usage as DSA master, try 3"
* Computer is frozen after suspend (LP: #1867983) // Bionic update: upstream
stable patchset 2020-07-07 (LP: #1886710)
- libata: Use per port sync for detach
* The thread level parallelism would be a bottleneck when searching for the
shared pmd by using hugetlbfs (LP: #1882039)
- hugetlbfs: take read_lock on i_mmap for PMD sharing
* Bionic update: upstream stable patchset 2020-06-25 (LP: #1885176)
- ipv6: fix IPV6_ADDRFORM operation logic
- vxlan: Avoid infinite loop when suppressing NS messages with invalid options
- make 'user_access_begin()' do 'access_ok()'
- Fix 'acccess_ok()' on alpha and SH
- arch/openrisc: Fix issues with access_ok()
- x86: uaccess: Inhibit speculation past access_ok() in user_access_begin()
- lib: Reduce user_access_begin() boundaries in strncpy_from_user() and
strnlen_user()
- serial: imx: Fix handling of TC irq in combination with DMA
- crypto: talitos - fix ECB and CBC algs ivsize
- ARM: 8977/1: ptrace: Fix mask for thumb breakpoint hook
- sched/fair: Don't NUMA balance for kthreads
- Input: synaptics - add a second working PNP_ID for Lenovo T470s
- drivers/net/ibmvnic: Update VNIC protocol version reporting
- powerpc/xive: Clear the page tables for the ESB IO mapping
- ath9k_htc: Silence undersized packet warnings
- perf probe: Accept the instance number of kretprobe event
- mm: add kvfree_sensitive() for freeing sensitive data objects
- x86_64: Fix jiffies ODR violation
- x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs
- x86/speculation: Prevent rogue cross-process SSBD shutdown
- x86/reboot/quirks: Add MacBook6,1 reboot quirk
- efi/efivars: Add missing kobject_put() in sysfs entry creation error path
- ALSA: es1688: Add the missed snd_card_free()
- ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines
- ALSA: usb-audio: Fix inconsistent card PM state after resume
- ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile()
- ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe()
- ACPI: GED: add support for _Exx / _Lxx handler methods
- ACPI: PM: Avoid using power resources if there are none for D0
- cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages
- nilfs2: fix null pointer dereference at nilfs_segctor_do_construct()
- spi: bcm2835aux: Fix controller unregister order
- spi: bcm-qspi: when tx/rx buffer is NULL set to 0
- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is
fully iterated
- ALSA: pcm: disallow linking stream to itself
- kvm: x86: Fix L1TF mitigation for shadow MMU
- KVM: x86/mmu: Consolidate "is MMIO SPTE" code
- KVM: x86: only do L1TF workaround on affected processors
- x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced
IBRS.
- x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches.
- spi: dw: Fix controller unregister order
- spi: No need to assign dummy value in spi_unregister_controller()
- spi: Fix controller unregister order
- spi: pxa2xx: Fix controller unregister order
- spi: bcm2835: Fix controller unregister order
- crypto: virtio: Fix use-after-free in virtio_crypto_skcipher_finalize_req()
- crypto: virtio: Fix src/dst scatterlist calculation in
__virtio_crypto_skcipher_do_req()
- crypto: virtio: Fix dest length calculation in
__virtio_crypto_skcipher_do_req()
- selftests/net: in rxtimestamp getopt_long needs terminating null entry
- ovl: initialize error in ovl_copy_xattr
- proc: Use new_inode not new_inode_pseudo
- video: fbdev: w100fb: Fix a potential double free.
- KVM: nSVM: fix condition for filtering async PF
- KVM: nSVM: leave ASID aside in copy_vmcb_control_area
- KVM: nVMX: Consult only the "basic" exit reason when routing nested exit
- KVM: MIPS: Define KVM_ENTRYHI_ASID to cpu_asid_mask(&boot_cpu_data)
- KVM: MIPS: Fix VPN2_MASK definition for variable cpu_vmbits
- KVM: arm64: Make vcpu_cp1x() work on Big Endian hosts
- ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
- ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
- ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
- ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
- Smack: slab-out-of-bounds in vsscanf
- mm/slub: fix a memory leak in sysfs_slab_add()
- fat: don't allow to mount if the FAT length == 0
- perf: Add cond_resched() to task_function_call()
- agp/intel: Reinforce the barrier after GTT updates
- mmc: sdhci-msm: Clear tuning done flag while hs400 tuning
- mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card()
- can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices
- xen/pvcalls-back: test for errors when calling backend_connect()
- ACPI: GED: use correct trigger type field in _Exx / _Lxx handling
- drm: bridge: adv7511: Extend list of audio sample rates
- crypto: ccp -- don't "select" CONFIG_DMADEVICES
- media: si2157: Better check for running tuner in init
- objtool: Ignore empty alternatives
- spi: pxa2xx: Apply CS clk quirk to BXT
- net: ena: fix error returning in ena_com_get_hash_function()
- spi: dw: Zero DMA Tx and Rx configurations on stack
- ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K
- MIPS: Loongson: Build ATI Radeon GPU driver as module
- Bluetooth: Add SCO fallback for invalid LMP parameters error
- kgdb: Prevent infinite recursive entries to the debugger
- spi: dw: Enable interrupts in accordance with DMA xfer mode
- clocksource: dw_apb_timer: Make CPU-affiliation being optional
- clocksource: dw_apb_timer_of: Fix missing clockevent timers
- btrfs: do not ignore error from btrfs_next_leaf() when inserting checksums
- ARM: 8978/1: mm: make act_mm() respect THREAD_SIZE
- spi: dw: Fix Rx-only DMA transfers
- x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit
- net: vmxnet3: fix possible buffer overflow caused by bad DMA value in
vmxnet3_get_rss()
- staging: android: ion: use vmap instead of vm_map_ram
- brcmfmac: fix wrong location to get firmware feature
- tools api fs: Make xxx__mountpoint() more scalable
- e1000: Distribute switch variables for initialization
- dt-bindings: display: mediatek: control dpi pins mode to avoid leakage
- audit: fix a net reference leak in audit_send_reply()
- media: dvb: return -EREMOTEIO on i2c transfer failure.
- media: platform: fcp: Set appropriate DMA parameters
- MIPS: Make sparse_init() using top-down allocation
- audit: fix a net reference leak in audit_list_rules_send()
- netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported
- net: bcmgenet: set Rx mode before starting netif
- lib/mpi: Fix 64-bit MIPS build with Clang
- exit: Move preemption fixup up, move blocking operations down
- net: lpc-enet: fix error return code in lpc_mii_init()
- media: cec: silence shift wrapping warning in __cec_s_log_addrs()
- net: allwinner: Fix use correct return type for ndo_start_xmit()
- powerpc/spufs: fix copy_to_user while atomic
- Crypto/chcr: fix for ccm(aes) failed test
- MIPS: Truncate link address into 32bit for 32bit kernel
- mips: cm: Fix an invalid error code of INTVN_*_ERR
- kgdb: Fix spurious true from in_dbg_master()
- nvme: refine the Qemu Identify CNS quirk
- wcn36xx: Fix error handling path in 'wcn36xx_probe()'
- net: qed*: Reduce RX and TX default ring count when running inside kdump
kernel
- md: don't flush workqueue unconditionally in md_open
- rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup()
- mwifiex: Fix memory corruption in dump_station
- x86/boot: Correct relocation destination on old linkers
- mips: MAAR: Use more precise address mask
- mips: Add udelay lpj numbers adjustment
- x86/mm: Stop printing BRK addresses
- m68k: mac: Don't call via_flush_cache() on Mac IIfx
- macvlan: Skip loopback packets in RX handler
- PCI: Don't disable decoding when mmio_always_on is set
- MIPS: Fix IRQ tracing when call handle_fpe() and handle_msa_fpe()
- mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk
- staging: greybus: sdio: Respect the cmd->busy_timeout from the mmc core
- mmc: via-sdmmc: Respect the cmd->busy_timeout from the mmc core
- ixgbe: fix signed-integer-overflow warning
- mmc: sdhci-esdhc-imx: fix the mask for tuning start point
- spi: dw: Return any value retrieved from the dma_transfer callback
- cpuidle: Fix three reference count leaks
- platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32()
- string.h: fix incompatibility between FORTIFY_SOURCE and KASAN
- btrfs: send: emit file capabilities after chown
- mm: thp: make the THP mapcount atomic against __split_huge_pmd_locked()
- ima: Fix ima digest hash table key calculation
- ima: Directly assign the ima_default_policy pointer to ima_rules
- evm: Fix possible memory leak in evm_calc_hmac_or_hash()
- ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max
- ext4: fix error pointer dereference
- ext4: fix race between ext4_sync_parent() and rename()
- PCI: Add ACS quirk for iProc PAXB
- PCI: Add ACS quirk for Ampere root ports
- PCI: Make ACS quirk implementations more uniform
- vga_switcheroo: Deduplicate power state tracking
- vga_switcheroo: Use device link for HDA controller
- PCI: Generalize multi-function power dependency device links
- PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints
- PCI: Unify ACS quirk desired vs provided checking
- btrfs: fix error handling when submitting direct I/O bio
- btrfs: fix wrong file range cleanup after an error filling dealloc range
- blk-mq: move _blk_mq_update_nr_hw_queues synchronize_rcu call
- PCI: Program MPS for RCiEP devices
- e1000e: Relax condition to trigger reset for ME workaround
- carl9170: remove P2P_GO support
- media: go7007: fix a miss of snd_card_free
- b43legacy: Fix case where channel status is corrupted
- b43: Fix connection problem with WPA3
- b43_legacy: Fix connection problem with WPA3
- media: ov5640: fix use of destroyed mutex
- igb: Report speed and duplex as unknown when device is runtime suspended
- power: vexpress: add suppress_bind_attrs to true
- pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs
- sparc32: fix register window handling in genregs32_[gs]et()
- sparc64: fix misuses of access_process_vm() in genregs32_[sg]et()
- dm crypt: avoid truncating the logical block size
- kernel/cpu_pm: Fix uninitted local in cpu_pm
- ARM: tegra: Correct PL310 Auxiliary Control Register initialization
- drivers/macintosh: Fix memleak in windfarm_pm112 driver
- powerpc/64s: Don't let DT CPU features set FSCR_DSCR
- powerpc/64s: Save FSCR to init_task.thread.fscr after feature init
- kbuild: force to build vmlinux if CONFIG_MODVERSION=y
- sunrpc: svcauth_gss_register_pseudoflavor must reject duplicate
registrations.
- sunrpc: clean up properly in gss_mech_unregister()
- mtd: rawnand: brcmnand: fix hamming oob layout
- mtd: rawnand: pasemi: Fix the probe error path
- w1: omap-hdq: cleanup to add missing newline for some dev_dbg
- perf probe: Do not show the skipped events
- perf probe: Fix to check blacklist address correctly
- perf symbols: Fix debuginfo search for Ubuntu
- bridge: Avoid infinite loop when suppressing NS messages with invalid
options
- tun: correct header offsets in napi frags mode
- Input: mms114 - fix handling of mms345l
- x86/cpu/amd: Make erratum #1054 a legacy erratum
- ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt
Dock
- PM: runtime: clk: Fix clk_pm_runtime_get() error path
- net: atlantic: make hw_get_regs optional
- efi/libstub/x86: Work around LLVM ELF quirk build regression
- mmc: meson-mx-sdio: trigger a soft reset after a timeout or CRC error
- Bluetooth: btbcm: Add 2 missing models to subver tables
- sched/core: Fix illegal RCU from offline CPUs
- drivers/perf: hisi: Fix typo in events attribute array
- xfs: reset buffer write failure state on successful completion
- net/mlx5e: IPoIB, Drop multicast packets that this interface sent
- crypto: stm32/crc32 - fix ext4 chksum BUG_ON()
- crypto: stm32/crc32 - fix run-time self test issue.
- crypto: stm32/crc32 - fix multi-instance
- btrfs: qgroup: mark qgroup inconsistent if we're inherting snapshot to a new
qgroup
- bcache: fix refcount underflow in bcache_device_free()
- PCI: Avoid Pericom USB controller OHCI/EHCI PME# defect
- PCI: Remove unused NFP32xx IDs
- PCI: add USR vendor id and use it in r8169 and w6692 driver
- PCI: Move Rohm Vendor ID to generic list
- misc: pci_endpoint_test: Add the layerscape EP device support
- misc: pci_endpoint_test: Add support to test PCI EP in AM654x
- x86/amd_nb: Add PCI device IDs for family 17h, model 70h
- ALSA: lx6464es - add support for LX6464ESe pci express variant
- PCI: Add Genesys Logic, Inc. Vendor ID
- PCI: Add Amazon's Annapurna Labs vendor ID
- x86/amd_nb: Add Family 19h PCI IDs
- PCI: Add Loongson vendor ID
- serial: 8250_pci: Move Pericom IDs to pci_ids.h
- alpha: fix memory barriers so that they conform to the specification
- perf probe: Check address correctness by map instead of _etext
* Bionic update: upstream stable patchset 2020-06-12 (LP: #1883314)
- libnvdimm: Fix endian conversion issues
- spi: dw: use "smp_mb()" to avoid sending spi data error
- s390/ftrace: save traced function caller
- ARC: Fix ICCM & DCCM runtime size checks
- ARC: [plat-eznps]: Restrict to CONFIG_ISA_ARCOMPACT
- i2c: altera: Fix race between xfer_msg and isr thread
- x86/mmiotrace: Use cpumask_available() for cpumask_var_t variables
- net: bmac: Fix read of MAC address from ROM
- net/ethernet/freescale: rework quiesce/activate for ucc_geth
- net: ethernet: stmmac: Enable interface clocks on probe for IPQ806x
- net: smsc911x: Fix runtime PM imbalance on error
- HID: sony: Fix for broken buttons on DS3 USB dongles
- HID: i2c-hid: add Schneider SCL142ALM to descriptor override
- p54usb: add AirVasT USB stick device-id
- mmc: fix compilation of user API
- scsi: ufs: Release clock if DMA map fails
- airo: Fix read overflows sending packets
- devinet: fix memleak in inetdev_init()
- l2tp: do not use inet_hash()/inet_unhash()
- net: usb: qmi_wwan: add Telit LE910C1-EUX composition
- NFC: st21nfca: add missed kfree_skb() in an error path
- vsock: fix timeout in vsock_accept()
- net: check untrusted gso_size at kernel entry
- l2tp: add sk_family checks to l2tp_validate_socket
- USB: serial: qcserial: add DW5816e QDL support
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors
- USB: serial: option: add Telit LE910C1-EUX compositions
- usb: musb: start session in resume for host port
- usb: musb: Fix runtime PM imbalance on error
- vt: keyboard: avoid signed integer overflow in k_ascii
- tty: hvc_console, fix crashes on parallel open/close
- staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK
- CDC-ACM: heed quirk also in error handling
- nvmem: qfprom: remove incorrect write support
- iio: vcnl4000: Fix i2c swapped word reading.
- uprobes: ensure that uprobe->offset and ->ref_ctr_offset are properly
aligned
- drm/i915: fix port checks for MST support on gen >= 11
- s390/mm: fix set_huge_pte_at() for empty ptes
* Bionic update: upstream stable patchset 2020-06-11 (LP: #1883167)
- ax25: fix setsockopt(SO_BINDTODEVICE)
- net: ipip: fix wrong address family in init error path
- net/mlx5: Add command entry handling completion
- net: revert "net: get rid of an signed integer overflow in
ip_idents_reserve()"
- net sched: fix reporting the first-time use timestamp
- r8152: support additional Microsoft Surface Ethernet Adapter variant
- sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and
socket is closed
- net/mlx5e: Update netdev txq on completions during closure
- net: qrtr: Fix passing invalid reference to qrtr_local_enqueue()
- net: sun: fix missing release regions in cas_init_one().
- net/mlx4_core: fix a memory leak bug.
- ARM: dts: rockchip: fix phy nodename for rk3228-evb
- arm64: dts: rockchip: swap interrupts interrupt-names rk3399 gpu node
- ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi
- gpio: tegra: mask GPIO IRQs during IRQ shutdown
- net: microchip: encx24j600: add missed kthread_stop
- gfs2: move privileged user check to gfs2_quota_lock_check
- cachefiles: Fix race between read_waiter and read_copier involving op->to_do
- usb: gadget: legacy: fix redundant initialization warnings
- net: freescale: select CONFIG_FIXED_PHY where needed
- cifs: Fix null pointer check in cifs_read
- samples: bpf: Fix build error
- Input: usbtouchscreen - add support for BonXeon TP
- Input: evdev - call input_flush_device() on release(), not flush()
- Input: xpad - add custom init packet for Xbox One S controllers
- Input: dlink-dir685-touchkeys - fix a typo in driver name
- Input: i8042 - add ThinkPad S230u to i8042 reset list
- Input: synaptics-rmi4 - really fix attn_data use-after-free
- Input: synaptics-rmi4 - fix error return code in rmi_driver_probe()
- ARM: 8843/1: use unified assembler in headers
- ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h
- ARM: uaccess: integrate uaccess_save and uaccess_restore
- ARM: uaccess: fix DACR mismatch with nested exceptions
- gpio: exar: Fix bad handling for ida_simple_get error path
- IB/qib: Call kobject_put() when kobject_init_and_add() fails
- ARM: dts: imx6q-bx50v3: Add internal switch
- ARM: dts/imx6q-bx50v3: Set display interface clock parents
- ARM: dts: bcm2835-rpi-zero-w: Fix led polarity
- mmc: block: Fix use-after-free issue for rpmb
- RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe()
- ALSA: hwdep: fix a left shifting 1 by 31 UB bug
- ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC
- exec: Always set cap_ambient in cap_bprm_set_creds
- ALSA: hda/realtek - Add new codec supported for ALC287
- libceph: ignore pool overlay and cache logic on redirects
- mm: remove VM_BUG_ON(PageSlab()) from page_mapcount()
- fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
- include/asm-generic/topology.h: guard cpumask_of_node() macro argument
- iommu: Fix reference count leak in iommu_group_alloc.
- parisc: Fix kernel panic in mem_init()
- mac80211: mesh: fix discovery timer re-arming issue / crash
- x86/dma: Fix max PFN arithmetic overflow on 32 bit systems
- copy_xstate_to_kernel(): don't leave parts of destination uninitialized
- xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input
- xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output
- xfrm: fix a warning in xfrm_policy_insert_list
- xfrm: fix a NULL-ptr deref in xfrm_local_error
- xfrm: fix error in comment
- vti4: eliminated some duplicate code.
- ip_vti: receive ipip packet by calling ip_tunnel_rcv
- netfilter: nft_reject_bridge: enable reject with bridge vlan
- netfilter: ipset: Fix subcounter update skip
- netfilter: nfnetlink_cthelper: unbreak userspace helper support
- netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code
- esp6: get the right proto for transport mode in esp6_gso_encap
- qlcnic: fix missing release in qlcnic_83xx_interrupt_test.
- bonding: Fix reference count leak in bond_sysfs_slave_add.
- netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build
- mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap()
- KVM: VMX: check for existence of secondary exec controls before accessing
- dpaa_eth: fix usage as DSA master, try 3
- net: dsa: mt7530: fix roaming from DSA user ports
- net: inet_csk: Fix so_reuseport bind-address cache in tb->fast*
- sctp: Don't add the shutdown timer if its already been added
- arm64: dts: rockchip: fix status for &gmac2phy in rk3328-evb.dts
- ARM: dts: rockchip: swap clock-names of gpu nodes
- IB/i40iw: Remove bogus call to netdev_master_upper_dev_get()
- riscv: stacktrace: Fix undefined reference to `walk_stackframe'
- ARM: 8970/1: decompressor: increase tag size
- ARM: dts: bcm: HR2: Fix PPI interrupt types
- ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround
- ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio
- IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode
- bnxt_en: Fix accumulation of bp->net_stats_prev.
* apparmor reference leak causes refcount_t overflow with af_alg_accept()
(LP: #1883962)
- apparmor: check/put label on apparmor_sk_clone_security()
* Freezing on boot since kernel 4.15.0-72-generic release (LP: #1856387)
- x86/timer: Don't skip PIT setup when APIC is disabled or in legacy mode
* smpboot: don't call topology_sane() when Sub-NUMA-Clustering is enabled
(LP: #1882478)
- x86, sched: Allow topologies where NUMA nodes share an LLC
-- Ian May <email address hidden> Tue, 11 Aug 2020 19:51:24 -0500
-
linux-aws (4.15.0-1079.83) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1079.83 -proposed tracker (LP: #1887029)
[ Ubuntu: 4.15.0-112.113 ]
* bionic/linux: 4.15.0-112.113 -proposed tracker (LP: #1887048)
* Packaging resync (LP: #1786013)
- update dkms package versions
* CVE-2020-11935
- SAUCE: aufs: do not call i_readcount_inc()
- SAUCE: aufs: bugfix, IMA i_readcount
* CVE-2020-10757
- mm: Fix mremap not considering huge pmd devmap
* Update lockdown patches (LP: #1884159)
- efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
- efi: Restrict efivar_ssdt_load when the kernel is locked down
- powerpc/xmon: add read-only mode
- powerpc/xmon: Restrict when kernel is locked down
- [Config] CONFIG_XMON_DEFAULT_RO_MODE=y
- SAUCE: acpi: disallow loading configfs acpi tables when locked down
* seccomp_bpf fails on powerpc (LP: #1885757)
- SAUCE: selftests/seccomp: fix ptrace tests on powerpc
* Introduce the new NVIDIA 418-server and 440-server series, and update the
current NVIDIA drivers (LP: #1881137)
- [packaging] add signed modules for the 418-server and the 440-server
flavours
[ Ubuntu: 4.15.0-111.112 ]
* bionic/linux: 4.15.0-111.112 -proposed tracker (LP: #1886999)
* Bionic update: upstream stable patchset 2020-05-07 (LP: #1877461)
- SAUCE: mlxsw: Add missmerged ERR_PTR hunk
* linux 4.15.0-109-generic network DoS regression vs -108 (LP: #1886668)
- SAUCE: Revert "netprio_cgroup: Fix unlimited memory leak of v2 cgroups"
linux-aws (4.15.0-1078.82) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1078.82 -proposed tracker (LP: #1885795)
* Build and ship a signed wireguard.ko (LP: #1861284)
- [Config] aws: wireguard -- enable on all architectures
[ Ubuntu: 4.15.0-110.111 ]
* bionic/linux: 4.15.0-110.111 -proposed tracker (LP: #1885814)
* Packaging resync (LP: #1786013)
- update dkms package versions
* CVE-2020-11935
- SAUCE: aufs: do not call i_readcount_inc()
- SAUCE: aufs: bugfix, IMA i_readcount
* CVE-2020-10757
- mm: Fix mremap not considering huge pmd devmap
* Update lockdown patches (LP: #1884159)
- efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
- efi: Restrict efivar_ssdt_load when the kernel is locked down
- powerpc/xmon: add read-only mode
- powerpc/xmon: Restrict when kernel is locked down
- [Config] CONFIG_XMON_DEFAULT_RO_MODE=y
- SAUCE: acpi: disallow loading configfs acpi tables when locked down
* seccomp_bpf fails on powerpc (LP: #1885757)
- SAUCE: selftests/seccomp: fix ptrace tests on powerpc
* Introduce the new NVIDIA 418-server and 440-server series, and update the
current NVIDIA drivers (LP: #1881137)
- [packaging] add signed modules for the 418-server and the 440-server
flavours
-- Khalid Elmously <email address hidden> Thu, 09 Jul 2020 22:30:58 -0400
-
linux-aws (4.15.0-1077.81) bionic; urgency=medium
[ Ubuntu: 4.15.0-109.110 ]
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
- update dkms package versions
* Build and ship a signed wireguard.ko (LP: #1861284)
- [Packaging] wireguard -- add support for building signed .ko
* CVE-2019-16089
- SAUCE: nbd_genl_status: null check for nla_nest_start
* CVE-2019-19642
- kernel/relay.c: handle alloc_percpu returning NULL in relay_open
* CVE-2019-12380
- efi/x86/Add missing error handling to old_memmap 1:1 mapping code
* CVE-2019-19039 // CVE-2019-19377
- btrfs: sink flush_fn to extent_write_cache_pages
- btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up
- btrfs: Don't submit any btree write bio if the fs has errors
* CVE-2019-19036
- btrfs: volumes: Use more straightforward way to calculate map length
- btrfs: tree-checker: Try to detect missing INODE_ITEM
- Btrfs: tree-checker: detect file extent items with overlapping ranges
- Btrfs: make tree checker detect checksum items with overlapping ranges
- btrfs: harden agaist duplicate fsid on scanned devices
- Btrfs: fix missing data checksums after replaying a log tree
- btrfs: reloc: fix reloc root leak and NULL pointer dereference
- btrfs: Validate child tree block's level and first key
- btrfs: Detect unbalanced tree with empty leaf before crashing btree
operations
* CVE-2019-19318
- btrfs: tree-checker: Replace root parameter with fs_info
- btrfs: tree-checker: Check level for leaves and nodes
- btrfs: tree-checker: get fs_info from eb in generic_err
- btrfs: tree-checker: get fs_info from eb in file_extent_err
- btrfs: tree-checker: get fs_info from eb in check_csum_item
- btrfs: tree-checker: get fs_info from eb in dir_item_err
- btrfs: tree-checker: get fs_info from eb in check_dir_item
- btrfs: tree-checker: get fs_info from eb in block_group_err
- btrfs: tree-checker: get fs_info from eb in check_block_group_item
- btrfs: tree-checker: get fs_info from eb in check_extent_data_item
- btrfs: tree-checker: get fs_info from eb in check_leaf_item
- btrfs: tree-checker: get fs_info from eb in check_leaf
- btrfs: tree-checker: get fs_info from eb in chunk_err
- btrfs: tree-checker: get fs_info from eb in dev_item_err
- btrfs: tree-checker: get fs_info from eb in check_dev_item
- btrfs: tree-checker: get fs_info from eb in check_inode_item
- btrfs: tree-checker: Add ROOT_ITEM check
- btrfs: tree-checker: Add EXTENT_ITEM and METADATA_ITEM check
- btrfs: tree-checker: Add simple keyed refs check
- btrfs: tree-checker: Add EXTENT_DATA_REF check
- btrfs: tree-checker: Fix wrong check on max devid
- Btrfs: fix selftests failure due to uninitialized i_mode in test inodes
* CVE-2019-19813 // CVE-2019-19816
- btrfs: Refactor parameter of BTRFS_MAX_DEVS() from root to fs_info
- btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it
- btrfs: tree-checker: Make chunk item checker messages more readable
- btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead
of EIO
- btrfs: tree-checker: Check chunk item at tree block read time
- btrfs: tree-checker: Verify dev item
- btrfs: tree-checker: Enhance chunk checker to validate chunk profile
- btrfs: tree-checker: Verify inode item
- btrfs: inode: Verify inode mode to avoid NULL pointer dereference
* CVE-2020-0543
- UBUNTU/SAUCE: x86/speculation/srbds: do not try to turn mitigation off when
not supported
* Build Nvidia drivers in conjunction with kernel (LP: #1764792)
- [Packaging] disable nvidia dkms builds for mainline
* Bionic update: upstream stable patchset 2020-06-02 (LP: #1881801)
- i2c: dev: Fix the race between the release of i2c_dev and cdev
- ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash()
- evm: Check also if *tfm is an error pointer in init_desc()
- ima: Fix return value of ima_write_policy()
- fix multiplication overflow in copy_fdtable()
- iommu/amd: Fix over-read of ACPI UID from IVRS table
- i2c: mux: demux-pinctrl: Fix an error handling path in
'i2c_demux_pinctrl_probe()'
- ubi: Fix seq_file usage in detailed_erase_block_info debugfs file
- gcc-common.h: Update for GCC 10
- HID: multitouch: add eGalaxTouch P80H84 support
- scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV
- configfs: fix config_item refcnt leak in configfs_rmdir()
- vhost/vsock: fix packet delivery order to monitoring devices
- component: Silence bind error on -EPROBE_DEFER
- scsi: ibmvscsi: Fix WARN_ON during event pool release
- x86/apic: Move TSC deadline timer debug printk
- gtp: set NLM_F_MULTI flag in gtp_genl_dump_pdp()
- ceph: fix double unlock in handle_cap_export()
- USB: core: Fix misleading driver bug report
- platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA
- ARM: futex: Address build warning
- padata: Replace delayed timer with immediate workqueue in padata_reorder
- padata: initialize pd->cpu with effective cpumask
- padata: purge get_cpu and reorder_via_wq from padata_do_serial
- arm64: fix the flush_icache_range arguments in machine_kexec
- ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio
option
- ALSA: pcm: fix incorrect hw_base increase
- apparmor: Fix aa_label refcnt leak in policy_update
- dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()'
- powerpc: restore alphabetic order in Kconfig
- powerpc: Remove STRICT_KERNEL_RWX incompatibility with RELOCATABLE
- powerpc/64s: Disable STRICT_KERNEL_RWX
- x86/uaccess, ubsan: Fix UBSAN vs. SMAP
- ubsan: build ubsan.c more conservatively
- libnvdimm/btt: Remove unnecessary code in btt_freelist_init
- libnvdimm/btt: Fix LBA masking during 'free list' population
- media: fdp1: Fix R-Car M3-N naming in debug message
- cxgb4: free mac_hlist properly
- cxgb4/cxgb4vf: Fix mac_hlist initialization and free
- Revert "gfs2: Don't demote a glock until its revokes are written"
- staging: iio: ad2s1210: Fix SPI reading
- staging: greybus: Fix uninitialized scalar variable
- iio: sca3000: Remove an erroneous 'get_device()'
- iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()'
- mei: release me_cl object reference
- rapidio: fix an error in get_user_pages_fast() error handling
- rxrpc: Fix a memory leak in rxkad_verify_response()
- x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
- iio: adc: stm32-adc: Use dma_request_chan() instead
dma_request_slave_channel()
- iio: adc: stm32-adc: fix device used to request dma
- riscv: set max_pfn to the PFN of the last page
- ubifs: remove broken lazytime support
- HID: alps: Add AUI1657 device ID
- HID: alps: ALPS_1657 is too specific; use U1_UNICORN_LEGACY instead
- aquantia: Fix the media type of AQC100 ethernet controller in the driver
- HID: i2c-hid: reset Synaptics SYNA2393 on resume
- HID: quirks: Add HID_QUIRK_NO_INIT_REPORTS quirk for Dell K12A keyboard-dock
- stmmac: fix pointer check after utilization in stmmac_interrupt
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme
- ALSA: hda/realtek - Add more fixup entries for Clevo machines
- drm/etnaviv: fix perfmon domain interation
- nfit: Add Hyper-V NVDIMM DSM command set to white list
- thunderbolt: Drop duplicated get_switch_at_route()
- net: bcmgenet: code movement
- net: bcmgenet: abort suspend on error
- misc: rtsx: Add short delay after exit from ASPM
* Bionic update: upstream stable patchset 2020-05-21 (LP: #1880014)
- USB: serial: qcserial: Add DW5816e support
- dp83640: reverse arguments to list_add_tail
- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks
- net: macsec: preserve ingress frame ordering
- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc()
- net: usb: qmi_wwan: add support for DW5816e
- sch_choke: avoid potential panic in choke_reset()
- sch_sfq: validate silly quantum values
- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features().
- net/mlx5: Fix forced completion access non initialized command entry
- net/mlx5: Fix command entry leak in Internal Error State
- bnxt_en: Improve AER slot reset.
- bnxt_en: Fix VF anti-spoof filter setup.
- net: stricter validation of untrusted gso packets
- ipv6: fix cleanup ordering for ip6_mr failure
- HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices
- HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
- USB: uas: add quirk for LaCie 2Big Quadra
- USB: serial: garmin_gps: add sanity checking for data length
- tracing: Add a vmalloc_sync_mappings() for safe measure
- KVM: arm: vgic: Fix limit condition when writing to GICD_I[CS]ACTIVER
- mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous()
- coredump: fix crash when umh is disabled
- batman-adv: fix batadv_nc_random_weight_tq
- batman-adv: Fix refcnt leak in batadv_show_throughput_override
- batman-adv: Fix refcnt leak in batadv_store_throughput_override
- batman-adv: Fix refcnt leak in batadv_v_ogm_process
- x86/entry/64: Fix unwind hints in kernel exit path
- x86/entry/64: Fix unwind hints in rewind_stack_do_exit()
- x86/unwind/orc: Don't skip the first frame for inactive tasks
- x86/unwind/orc: Prevent unwinding before ORC initialization
- x86/unwind/orc: Fix error path for bad ORC entry type
- netfilter: nat: never update the UDP checksum when it's 0
- objtool: Fix stack offset tracking for indirect CFAs
- scripts/decodecode: fix trapping instruction formatting
- net: stmmac: Use mutex instead of spinlock
- shmem: fix possible deadlocks on shmlock_user_lock
- net/sonic: Fix a resource leak in an error handling path in
'jazz_sonic_probe()'
- net: moxa: Fix a potential double 'free_irq()'
- drop_monitor: work around gcc-10 stringop-overflow warning
- virtio-blk: handle block_device_operations callbacks after hot unplug
- scsi: sg: add sg_remove_request in sg_write
- dmaengine: pch_dma.c: Avoid data race between probe and irq handler
- dmaengine: mmp_tdma: Reset channel error on release
- cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once
- ALSA: hda/hdmi: fix race in monitor detection during probe
- drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper()
- ipc/util.c: sysvipc_find_ipc() incorrectly updates position index
- x86/entry/64: Fix unwind hints in register clearing code
- ipmi: Fix NULL pointer dereference in ssif_probe
- pinctrl: baytrail: Enable pin configuration setting for GPIO chip
- pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler
- i40iw: Fix error handling in i40iw_manage_arp_cache()
- netfilter: conntrack: avoid gcc-10 zero-length-bounds warning
- IB/mlx4: Test return value of calls to ib_get_cached_pkey
- hwmon: (da9052) Synchronize access with mfd
- pnp: Use list_for_each_entry() instead of open coding
- gcc-10 warnings: fix low-hanging fruit
- kbuild: compute false-positive -Wmaybe-uninitialized cases in Kconfig
- Stop the ad-hoc games with -Wno-maybe-initialized
- gcc-10: disable 'zero-length-bounds' warning for now
- gcc-10: disable 'array-bounds' warning for now
- gcc-10: disable 'stringop-overflow' warning for now
- gcc-10: disable 'restrict' warning for now
- gcc-10: avoid shadowing standard library 'free()' in crypto
- x86/asm: Add instruction suffixes to bitops
- net: phy: micrel: Use strlcpy() for ethtool::get_strings
- net: fix a potential recursive NETDEV_FEAT_CHANGE
- net: phy: fix aneg restart in phy_ethtool_set_eee
- Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu"
- hinic: fix a bug of ndo_stop
- net: dsa: loop: Add module soft dependency
- net: ipv4: really enforce backoff for redirects
- netprio_cgroup: Fix unlimited memory leak of v2 cgroups
- net: tcp: fix rx timestamp behavior for tcp_recvmsg
- ALSA: hda/realtek - Limit int mic boost for Thinkpad T530
- ALSA: rawmidi: Initialize allocated buffers
- ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
- ARM: dts: dra7: Fix bus_dma_limit for PCIe
- ARM: dts: imx27-phytec-phycard-s-rdk: Fix the I2C1 pinctrl entries
- x86: Fix early boot crash on gcc-10, third try
- ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset
- usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B
- usb: host: xhci-plat: keep runtime active when removing host
- usb: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list
- x86/unwind/orc: Fix error handling in __unwind_start()
- exec: Move would_dump into flush_old_exec
- clk: rockchip: fix incorrect configuration of rk3228 aclk_gpu* clocks
- usb: gadget: net2272: Fix a memory leak in an error handling path in
'net2272_plat_probe()'
- usb: gadget: audio: Fix a missing error return value in audio_bind()
- usb: gadget: legacy: fix error return code in gncm_bind()
- usb: gadget: legacy: fix error return code in cdc_bind()
- arm64: dts: rockchip: Replace RK805 PMIC node name with "pmic" on rk3328
boards
- arm64: dts: rockchip: Rename dwc3 device nodes on rk3399 to make dtc happy
- ARM: dts: r8a73a4: Add missing CMT1 interrupts
- ARM: dts: r8a7740: Add missing extal2 to CPG node
- KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce
- Makefile: disallow data races on gcc-10 as well
- sctp: Fix bundling of SHUTDOWN with COOKIE-ACK
- arm64: hugetlb: avoid potential NULL dereference
- net: dsa: Do not make user port errors fatal
- pppoe: only process PADT targeted at local interfaces
- riscv: fix vdso build with lld
- netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start()
- cifs: fix leaked reference on requeued write
- clk: Unlink clock if failed to prepare or enable
* upgrading to 4.15.0-99-generic breaks the sound and the trackpad
(LP: #1875916) // Bionic update: upstream stable patchset 2020-05-21
(LP: #1880014)
- Revert "ALSA: hda/realtek: Fix pop noise on ALC225"
* Pop sound from build-in speaker during cold boot and resume from S3
(LP: #1866357) // Bionic update: upstream stable patchset 2020-05-21
(LP: #1880014)
- ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse
* Bionic update: upstream stable patchset 2020-05-19 (LP: #1879536)
- vhost: vsock: kick send_pkt worker once device is started
- powerpc/pci/of: Parse unassigned resources
- ASoC: topology: Check return value of pcm_new_ver
- selftests/ipc: Fix test failure seen after initial test run
- ASoC: sgtl5000: Fix VAG power-on handling
- ASoC: rsnd: Fix HDMI channel mapping for multi-SSI mode
- ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry
- wimax/i2400m: Fix potential urb refcnt leak
- net: stmmac: fix enabling socfpga's ptp_ref_clock
- net: stmmac: Fix sub-second increment
- cifs: protect updating server->dstaddr with a spinlock
- s390/ftrace: fix potential crashes when switching tracers
- scripts/config: allow colons in option strings for sed
- lib/mpi: Fix building for powerpc with clang
- net: bcmgenet: suppress warnings on failed Rx SKB allocations
- net: systemport: suppress warnings on failed Rx SKB allocations
- sctp: Fix SHUTDOWN CTSN Ack in the peer restart case
- ALSA: hda: Match both PCI ID and SSID for driver blacklist
- mac80211: add ieee80211_is_any_nullfunc()
- cgroup, netclassid: remove double cond_resched
- ASoC: rsnd: Fix parent SSI start/stop in multi-SSI mode
- drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay
table v0 (e.g Hawaii)
- ASoC: rsnd: Don't treat master SSI in multi SSI setup as parent
- ASoC: rsnd: Fix "status check failed" spam for multi-SSI
- drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event
- hexagon: clean up ioremap
- hexagon: define ioremap_uc
- drm/atomic: Take the atomic toys away from X
* Performing function level reset of AMD onboard USB and audio devices causes
system lockup (LP: #1865988)
- SAUCE: PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0
- SAUCE: PCI: Avoid FLR for AMD Starship USB 3.0
* add 16-bit width registers support for EEPROM at24 device (LP: #1876699)
- SAUCE: at24-smbus-16bit-address
* qeth: utilize virtual MAC for Layer2 OSD devices (LP: #1880834)
- s390/qeth: improve fallback to random MAC address
- s390/qeth: utilize virtual MAC for Layer2 OSD devices
* Slow send speed with Intel I219-V on Ubuntu 18.04.1 (LP: #1802691)
- e1000e: Disable TSO for buffer overrun workaround
* CVE-2020-10711
- netlabel: cope with NULL catmap
* CVE-2020-13143
- USB: gadget: fix illegal array access in binding with UDC
* rtl8723bu wifi issue after being turned off (LP: #1878296)
- rtl8xxxu: Improve TX performance of RTL8723BU on rtl8xxxu driver
- rtl8xxxu: add bluetooth co-existence support for single antenna
- rtl8xxxu: remove set but not used variable 'rate_mask'
- rtl8xxxu: Remove set but not used variable 'vif', 'dev', 'len'
* Cannot create ipvlans with > 1500 MTU on recent Bionic kernels
(LP: #1879658)
- ipvlan: use ETH_MAX_MTU as max mtu
* Miscellaneous Ubuntu changes
- [Config] wireguard -- enable on all architectures
-- Marcelo Henrique Cerri <email address hidden> Wed, 24 Jun 2020 12:22:31 -0300
-
linux-aws (4.15.0-1076.80) bionic; urgency=medium
[ Ubuntu: 4.15.0-108.109 ]
* Packaging resync (LP: #1786013)
- update dkms package versions
* dkms-build: downloads fail in private PPAs (LP: #1883874)
- dkms-build: apt-cache policy elides username:password information
-- Marcelo Henrique Cerri <email address hidden> Fri, 19 Jun 2020 19:00:13 -0300
-
linux-aws (4.15.0-1074.78) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1074.78 -proposed tracker (LP: #1882734)
[ Ubuntu: 4.15.0-107.108 ]
* CVE-2020-0543
- UBUNTU/SAUCE: x86/speculation/srbds: do not try to turn mitigation off when
not supported
* Build Nvidia drivers in conjunction with kernel (LP: #1764792)
- [Packaging] disable nvidia dkms builds for mainline
* Bionic update: upstream stable patchset 2020-06-02 (LP: #1881801)
- i2c: dev: Fix the race between the release of i2c_dev and cdev
- ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash()
- evm: Check also if *tfm is an error pointer in init_desc()
- ima: Fix return value of ima_write_policy()
- fix multiplication overflow in copy_fdtable()
- iommu/amd: Fix over-read of ACPI UID from IVRS table
- i2c: mux: demux-pinctrl: Fix an error handling path in
'i2c_demux_pinctrl_probe()'
- ubi: Fix seq_file usage in detailed_erase_block_info debugfs file
- gcc-common.h: Update for GCC 10
- HID: multitouch: add eGalaxTouch P80H84 support
- scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV
- configfs: fix config_item refcnt leak in configfs_rmdir()
- vhost/vsock: fix packet delivery order to monitoring devices
- component: Silence bind error on -EPROBE_DEFER
- scsi: ibmvscsi: Fix WARN_ON during event pool release
- x86/apic: Move TSC deadline timer debug printk
- gtp: set NLM_F_MULTI flag in gtp_genl_dump_pdp()
- ceph: fix double unlock in handle_cap_export()
- USB: core: Fix misleading driver bug report
- platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA
- ARM: futex: Address build warning
- padata: Replace delayed timer with immediate workqueue in padata_reorder
- padata: initialize pd->cpu with effective cpumask
- padata: purge get_cpu and reorder_via_wq from padata_do_serial
- arm64: fix the flush_icache_range arguments in machine_kexec
- ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio
option
- ALSA: pcm: fix incorrect hw_base increase
- apparmor: Fix aa_label refcnt leak in policy_update
- dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()'
- powerpc: restore alphabetic order in Kconfig
- powerpc: Remove STRICT_KERNEL_RWX incompatibility with RELOCATABLE
- powerpc/64s: Disable STRICT_KERNEL_RWX
- x86/uaccess, ubsan: Fix UBSAN vs. SMAP
- ubsan: build ubsan.c more conservatively
- libnvdimm/btt: Remove unnecessary code in btt_freelist_init
- libnvdimm/btt: Fix LBA masking during 'free list' population
- media: fdp1: Fix R-Car M3-N naming in debug message
- cxgb4: free mac_hlist properly
- cxgb4/cxgb4vf: Fix mac_hlist initialization and free
- Revert "gfs2: Don't demote a glock until its revokes are written"
- staging: iio: ad2s1210: Fix SPI reading
- staging: greybus: Fix uninitialized scalar variable
- iio: sca3000: Remove an erroneous 'get_device()'
- iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()'
- mei: release me_cl object reference
- rapidio: fix an error in get_user_pages_fast() error handling
- rxrpc: Fix a memory leak in rxkad_verify_response()
- x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
- iio: adc: stm32-adc: Use dma_request_chan() instead
dma_request_slave_channel()
- iio: adc: stm32-adc: fix device used to request dma
- riscv: set max_pfn to the PFN of the last page
- ubifs: remove broken lazytime support
- HID: alps: Add AUI1657 device ID
- HID: alps: ALPS_1657 is too specific; use U1_UNICORN_LEGACY instead
- aquantia: Fix the media type of AQC100 ethernet controller in the driver
- HID: i2c-hid: reset Synaptics SYNA2393 on resume
- HID: quirks: Add HID_QUIRK_NO_INIT_REPORTS quirk for Dell K12A keyboard-dock
- stmmac: fix pointer check after utilization in stmmac_interrupt
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme
- ALSA: hda/realtek - Add more fixup entries for Clevo machines
- drm/etnaviv: fix perfmon domain interation
- nfit: Add Hyper-V NVDIMM DSM command set to white list
- thunderbolt: Drop duplicated get_switch_at_route()
- net: bcmgenet: code movement
- net: bcmgenet: abort suspend on error
- misc: rtsx: Add short delay after exit from ASPM
* Bionic update: upstream stable patchset 2020-05-21 (LP: #1880014)
- USB: serial: qcserial: Add DW5816e support
- dp83640: reverse arguments to list_add_tail
- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks
- net: macsec: preserve ingress frame ordering
- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc()
- net: usb: qmi_wwan: add support for DW5816e
- sch_choke: avoid potential panic in choke_reset()
- sch_sfq: validate silly quantum values
- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features().
- net/mlx5: Fix forced completion access non initialized command entry
- net/mlx5: Fix command entry leak in Internal Error State
- bnxt_en: Improve AER slot reset.
- bnxt_en: Fix VF anti-spoof filter setup.
- net: stricter validation of untrusted gso packets
- ipv6: fix cleanup ordering for ip6_mr failure
- HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices
- HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
- USB: uas: add quirk for LaCie 2Big Quadra
- USB: serial: garmin_gps: add sanity checking for data length
- tracing: Add a vmalloc_sync_mappings() for safe measure
- KVM: arm: vgic: Fix limit condition when writing to GICD_I[CS]ACTIVER
- mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous()
- coredump: fix crash when umh is disabled
- batman-adv: fix batadv_nc_random_weight_tq
- batman-adv: Fix refcnt leak in batadv_show_throughput_override
- batman-adv: Fix refcnt leak in batadv_store_throughput_override
- batman-adv: Fix refcnt leak in batadv_v_ogm_process
- x86/entry/64: Fix unwind hints in kernel exit path
- x86/entry/64: Fix unwind hints in rewind_stack_do_exit()
- x86/unwind/orc: Don't skip the first frame for inactive tasks
- x86/unwind/orc: Prevent unwinding before ORC initialization
- x86/unwind/orc: Fix error path for bad ORC entry type
- netfilter: nat: never update the UDP checksum when it's 0
- objtool: Fix stack offset tracking for indirect CFAs
- scripts/decodecode: fix trapping instruction formatting
- net: stmmac: Use mutex instead of spinlock
- shmem: fix possible deadlocks on shmlock_user_lock
- net/sonic: Fix a resource leak in an error handling path in
'jazz_sonic_probe()'
- net: moxa: Fix a potential double 'free_irq()'
- drop_monitor: work around gcc-10 stringop-overflow warning
- virtio-blk: handle block_device_operations callbacks after hot unplug
- scsi: sg: add sg_remove_request in sg_write
- dmaengine: pch_dma.c: Avoid data race between probe and irq handler
- dmaengine: mmp_tdma: Reset channel error on release
- cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once
- ALSA: hda/hdmi: fix race in monitor detection during probe
- drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper()
- ipc/util.c: sysvipc_find_ipc() incorrectly updates position index
- x86/entry/64: Fix unwind hints in register clearing code
- ipmi: Fix NULL pointer dereference in ssif_probe
- pinctrl: baytrail: Enable pin configuration setting for GPIO chip
- pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler
- i40iw: Fix error handling in i40iw_manage_arp_cache()
- netfilter: conntrack: avoid gcc-10 zero-length-bounds warning
- IB/mlx4: Test return value of calls to ib_get_cached_pkey
- hwmon: (da9052) Synchronize access with mfd
- pnp: Use list_for_each_entry() instead of open coding
- gcc-10 warnings: fix low-hanging fruit
- kbuild: compute false-positive -Wmaybe-uninitialized cases in Kconfig
- Stop the ad-hoc games with -Wno-maybe-initialized
- gcc-10: disable 'zero-length-bounds' warning for now
- gcc-10: disable 'array-bounds' warning for now
- gcc-10: disable 'stringop-overflow' warning for now
- gcc-10: disable 'restrict' warning for now
- gcc-10: avoid shadowing standard library 'free()' in crypto
- x86/asm: Add instruction suffixes to bitops
- net: phy: micrel: Use strlcpy() for ethtool::get_strings
- net: fix a potential recursive NETDEV_FEAT_CHANGE
- net: phy: fix aneg restart in phy_ethtool_set_eee
- Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu"
- hinic: fix a bug of ndo_stop
- net: dsa: loop: Add module soft dependency
- net: ipv4: really enforce backoff for redirects
- netprio_cgroup: Fix unlimited memory leak of v2 cgroups
- net: tcp: fix rx timestamp behavior for tcp_recvmsg
- ALSA: hda/realtek - Limit int mic boost for Thinkpad T530
- ALSA: rawmidi: Initialize allocated buffers
- ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
- ARM: dts: dra7: Fix bus_dma_limit for PCIe
- ARM: dts: imx27-phytec-phycard-s-rdk: Fix the I2C1 pinctrl entries
- x86: Fix early boot crash on gcc-10, third try
- ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset
- usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B
- usb: host: xhci-plat: keep runtime active when removing host
- usb: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list
- x86/unwind/orc: Fix error handling in __unwind_start()
- exec: Move would_dump into flush_old_exec
- clk: rockchip: fix incorrect configuration of rk3228 aclk_gpu* clocks
- usb: gadget: net2272: Fix a memory leak in an error handling path in
'net2272_plat_probe()'
- usb: gadget: audio: Fix a missing error return value in audio_bind()
- usb: gadget: legacy: fix error return code in gncm_bind()
- usb: gadget: legacy: fix error return code in cdc_bind()
- arm64: dts: rockchip: Replace RK805 PMIC node name with "pmic" on rk3328
boards
- arm64: dts: rockchip: Rename dwc3 device nodes on rk3399 to make dtc happy
- ARM: dts: r8a73a4: Add missing CMT1 interrupts
- ARM: dts: r8a7740: Add missing extal2 to CPG node
- KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce
- Makefile: disallow data races on gcc-10 as well
- sctp: Fix bundling of SHUTDOWN with COOKIE-ACK
- arm64: hugetlb: avoid potential NULL dereference
- net: dsa: Do not make user port errors fatal
- pppoe: only process PADT targeted at local interfaces
- riscv: fix vdso build with lld
- netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start()
- cifs: fix leaked reference on requeued write
- clk: Unlink clock if failed to prepare or enable
* upgrading to 4.15.0-99-generic breaks the sound and the trackpad
(LP: #1875916) // Bionic update: upstream stable patchset 2020-05-21
(LP: #1880014)
- Revert "ALSA: hda/realtek: Fix pop noise on ALC225"
* Pop sound from build-in speaker during cold boot and resume from S3
(LP: #1866357) // Bionic update: upstream stable patchset 2020-05-21
(LP: #1880014)
- ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse
* Bionic update: upstream stable patchset 2020-05-19 (LP: #1879536)
- vhost: vsock: kick send_pkt worker once device is started
- powerpc/pci/of: Parse unassigned resources
- ASoC: topology: Check return value of pcm_new_ver
- selftests/ipc: Fix test failure seen after initial test run
- ASoC: sgtl5000: Fix VAG power-on handling
- ASoC: rsnd: Fix HDMI channel mapping for multi-SSI mode
- ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry
- wimax/i2400m: Fix potential urb refcnt leak
- net: stmmac: fix enabling socfpga's ptp_ref_clock
- net: stmmac: Fix sub-second increment
- cifs: protect updating server->dstaddr with a spinlock
- s390/ftrace: fix potential crashes when switching tracers
- scripts/config: allow colons in option strings for sed
- lib/mpi: Fix building for powerpc with clang
- net: bcmgenet: suppress warnings on failed Rx SKB allocations
- net: systemport: suppress warnings on failed Rx SKB allocations
- sctp: Fix SHUTDOWN CTSN Ack in the peer restart case
- ALSA: hda: Match both PCI ID and SSID for driver blacklist
- mac80211: add ieee80211_is_any_nullfunc()
- cgroup, netclassid: remove double cond_resched
- ASoC: rsnd: Fix parent SSI start/stop in multi-SSI mode
- drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay
table v0 (e.g Hawaii)
- ASoC: rsnd: Don't treat master SSI in multi SSI setup as parent
- ASoC: rsnd: Fix "status check failed" spam for multi-SSI
- drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event
- hexagon: clean up ioremap
- hexagon: define ioremap_uc
- drm/atomic: Take the atomic toys away from X
* Performing function level reset of AMD onboard USB and audio devices causes
system lockup (LP: #1865988)
- SAUCE: PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0
- SAUCE: PCI: Avoid FLR for AMD Starship USB 3.0
* add 16-bit width registers support for EEPROM at24 device (LP: #1876699)
- SAUCE: at24-smbus-16bit-address
* qeth: utilize virtual MAC for Layer2 OSD devices (LP: #1880834)
- s390/qeth: improve fallback to random MAC address
- s390/qeth: utilize virtual MAC for Layer2 OSD devices
* Slow send speed with Intel I219-V on Ubuntu 18.04.1 (LP: #1802691)
- e1000e: Disable TSO for buffer overrun workaround
* CVE-2020-10711
- netlabel: cope with NULL catmap
* CVE-2020-13143
- USB: gadget: fix illegal array access in binding with UDC
* rtl8723bu wifi issue after being turned off (LP: #1878296)
- rtl8xxxu: Improve TX performance of RTL8723BU on rtl8xxxu driver
- rtl8xxxu: add bluetooth co-existence support for single antenna
- rtl8xxxu: remove set but not used variable 'rate_mask'
- rtl8xxxu: Remove set but not used variable 'vif', 'dev', 'len'
* Cannot create ipvlans with > 1500 MTU on recent Bionic kernels
(LP: #1879658)
- ipvlan: use ETH_MAX_MTU as max mtu
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
-- Sultan Alsawaf <email address hidden> Wed, 10 Jun 2020 14:44:28 -0700
-
linux-aws (4.15.0-1073.77) bionic; urgency=medium
[ Ubuntu: 4.15.0-106.107 ]
* CVE-2020-0543
- SAUCE: x86/cpu: Add a steppings field to struct x86_cpu_id
- SAUCE: x86/cpu: Add 'table' argument to cpu_matches()
- SAUCE: x86/speculation: Add Special Register Buffer Data Sampling (SRBDS)
mitigation
- SAUCE: x86/speculation: Add SRBDS vulnerability and mitigation documentation
- SAUCE: x86/speculation: Add Ivy Bridge to affected list
[ Ubuntu: 4.15.0-103.104 ]
* bionic/linux: 4.15.0-103.104 -proposed tracker (LP: #1881272)
* "BUG: unable to handle kernel paging request" when testing
ubuntu_kvm_smoke_test.kvm_smoke_test with B-KVM in proposed (LP: #1881072)
- KVM: VMX: Explicitly reference RCX as the vmx_vcpu pointer in asm blobs
- KVM: VMX: Mark RCX, RDX and RSI as clobbered in vmx_vcpu_run()'s asm blob
linux-aws (4.15.0-1068.72) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1068.72 -proposed tracker (LP: #1878836)
* Add support for Ambiq micro AM1805 RTC chip (LP: #1876667)
- [Config] CONFIG_RTC_DRV_AM1805=m
[ Ubuntu: 4.15.0-102.103 ]
* bionic/linux: 4.15.0-102.103 -proposed tracker (LP: #1878856)
* Packaging resync (LP: #1786013)
- update dkms package versions
* debian/scripts/file-downloader does not handle positive failures correctly
(LP: #1878897)
- [Packaging] file-downloader not handling positive failures correctly
* Kernel log flood "ceph: Failed to find inode for 1" (LP: #1875884)
- ceph: don't check quota for snap inode
- ceph: quota: cache inode pointer in ceph_snap_realm
* [UBUNTU 18.04] zpcictl --reset - contribution for kernel (LP: #1870320)
- s390/pci: Recover handle in clp_set_pci_fn()
- s390/pci: Fix possible deadlock in recover_store()
* Bionic update: upstream stable patchset 2020-05-12 (LP: #1878256)
- drm/edid: Fix off-by-one in DispID DTD pixel clock
- drm/qxl: qxl_release leak in qxl_draw_dirty_fb()
- drm/qxl: qxl_release leak in qxl_hw_surface_alloc()
- drm/qxl: qxl_release use after free
- btrfs: fix block group leak when removing fails
- btrfs: fix partial loss of prealloc extent past i_size after fsync
- mmc: sdhci-xenon: fix annoying 1.8V regulator warning
- mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers
- ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter
- ALSA: hda/hdmi: fix without unlocked before return
- ALSA: pcm: oss: Place the plugin buffer overflow checks correctly
- PM: ACPI: Output correct message on target power state
- PM: hibernate: Freeze kernel threads in software_resume()
- dm verity fec: fix hash block number in verity_fec_decode
- RDMA/mlx5: Set GRH fields in query QP on RoCE
- RDMA/mlx4: Initialize ib_spec on the stack
- vfio: avoid possible overflow in vfio_iommu_type1_pin_pages
- vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn()
- iommu/qcom: Fix local_base status check
- scsi: target/iblock: fix WRITE SAME zeroing
- iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system
- ALSA: opti9xx: shut up gcc-10 range warning
- nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl
- dmaengine: dmatest: Fix iteration non-stop logic
- selinux: properly handle multiple messages in selinux_netlink_send()
- ASoC: tas571x: disable regulators on failed probe
- ASoC: wm8960: Fix wrong clock after suspend & resume
- rxrpc: Fix DATA Tx to disable nofrag for UDP on AF_INET6 socket
- xfs: acquire superblock freeze protection on eofblocks scans
- cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled
- net: fec: set GPR bit on suspend by DT configuration.
- ALSA: hda: Keep the controller initialization even if no codecs found
- ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported
- ALSA: hda: call runtime_allow() for all hda controllers
- scsi: qla2xxx: check UNLOADING before posting async work
- RDMA/core: Fix race between destroy and release FD object
- btrfs: transaction: Avoid deadlock due to bad initialization timing of
fs_info::journal_info
- mmc: sdhci-msm: Enable host capabilities pertains to R1b response
- mmc: meson-mx-sdio: Set MMC_CAP_WAIT_WHILE_BUSY
- mmc: meson-mx-sdio: remove the broken ->card_busy() op
* Bionic update: upstream stable patchset 2020-05-07 (LP: #1877461)
- ext4: fix extent_status fragmentation for plain files
- net: ipv4: avoid unused variable warning for sysctl
- crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash'
static
- vti4: removed duplicate log message.
- watchdog: reset last_hw_keepalive time at start
- scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login
- ceph: return ceph_mdsc_do_request() errors from __get_parent()
- ceph: don't skip updating wanted caps when cap is stale
- pwm: rcar: Fix late Runtime PM enablement
- scsi: iscsi: Report unbind session event when the target has been removed
- ASoC: Intel: atom: Take the drv->lock mutex before calling
sst_send_slot_map()
- kernel/gcov/fs.c: gcov_seq_next() should increase position index
- selftests: kmod: fix handling test numbers above 9
- ipc/util.c: sysvipc_find_ipc() should increase position index
- s390/cio: avoid duplicated 'ADD' uevents
- pwm: renesas-tpu: Fix late Runtime PM enablement
- pwm: bcm2835: Dynamically allocate base
- perf/core: Disable page faults when getting phys address
- PCI/ASPM: Allow re-enabling Clock PM
- mm, slub: restore the original intention of prefetch_freepointer()
- cxgb4: fix large delays in PTP synchronization
- ipv6: fix restrict IPV6_ADDRFORM operation
- macsec: avoid to set wrong mtu
- macvlan: fix null dereference in macvlan_device_event()
- net: bcmgenet: correct per TX/RX ring statistics
- net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
- net/x25: Fix x25_neigh refcnt leak when receiving frame
- tcp: cache line align MAX_TCP_HEADER
- team: fix hang in team_mode_get()
- net: dsa: b53: Fix ARL register definitions
- xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish
- vrf: Check skb for XFRM_TRANSFORMED flag
- KEYS: Avoid false positive ENOMEM error on key read
- ALSA: hda: Remove ASUS ROG Zenith from the blacklist
- iio: adc: stm32-adc: fix sleep in atomic context
- iio: xilinx-xadc: Fix ADC-B powerdown
- iio: xilinx-xadc: Fix clearing interrupt when enabling trigger
- iio: xilinx-xadc: Fix sequencer configuration for aux channels in
simultaneous mode
- fs/namespace.c: fix mountpoint reference counter race
- USB: sisusbvga: Change port variable from signed to unsigned
- USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70
RGB RAPIDFIRE
- USB: early: Handle AMD's spec-compliant identifiers, too
- USB: core: Fix free-while-in-use bug in the USB S-Glibrary
- USB: hub: Fix handling of connect changes during sleep
- overflow.h: Add arithmetic shift helper
- vmalloc: fix remap_vmalloc_range() bounds checks
- mm/hugetlb: fix a addressing exception caused by huge_pte_offset
- mm/ksm: fix NULL pointer dereference when KSM zero page is enabled
- tools/vm: fix cross-compile build
- ALSA: usx2y: Fix potential NULL dereference
- ALSA: hda/realtek - Add new codec supported for ALC245
- ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif
- ALSA: usb-audio: Filter out unsupported sample rates on Focusrite devices
- tpm/tpm_tis: Free IRQ if probing fails
- tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send()
- KVM: Check validity of resolved slot when searching memslots
- KVM: VMX: Enable machine check support for 32bit targets
- tty: hvc: fix buffer overflow during hvc_alloc().
- tty: rocket, avoid OOB access
- usb-storage: Add unusual_devs entry for JMicron JMS566
- audit: check the length of userspace generated audit records
- ASoC: dapm: fixup dapm kcontrol widget
- iwlwifi: pcie: actually release queue memory in TVQM
- ARM: imx: provide v7_cpu_resume() only on ARM_CPU_SUSPEND=y
- powerpc/setup_64: Set cache-line-size based on cache-block-size
- staging: comedi: dt2815: fix writing hi byte of analog output
- staging: comedi: Fix comedi_device refcnt leak in comedi_open
- vt: don't hardcode the mem allocation upper bound
- staging: vt6656: Don't set RCR_MULTICAST or RCR_BROADCAST by default.
- staging: vt6656: Fix calling conditions of vnt_set_bss_mode
- staging: vt6656: Fix drivers TBTT timing counter.
- staging: vt6656: Fix pairwise key entry save.
- staging: vt6656: Power save stop wake_up_count wrap around.
- cdc-acm: close race betrween suspend() and acm_softint
- cdc-acm: introduce a cool down
- UAS: no use logging any details in case of ENODEV
- UAS: fix deadlock in error handling and PM flushing work
- usb: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset()
- serial: sh-sci: Make sure status register SCxSR is read in correct sequence
- xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT
- remoteproc: Fix wrong rvring index computation
- mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer
- binder: take read mode of mmap_sem in binder_alloc_free_page()
- usb: dwc3: gadget: Do link recovery for SS and SSP
- usb: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete
- iio:ad7797: Use correct attribute_group
- nfsd: memory corruption in nfsd4_lock()
- i2c: altera: use proper variable to hold errno
- net/cxgb4: Check the return from t4_query_params properly
- ARM: dts: bcm283x: Disable dsi0 node
- perf/core: fix parent pid/tid in task exit events
- mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy
path
- bpf, x86: Fix encoding for lower 8-bit registers in BPF_STX BPF_B
- x86: hyperv: report value of misc_features
- xfs: fix partially uninitialized structure in xfs_reflink_remap_extent
- scsi: target: fix PR IN / READ FULL STATUS for FC
- objtool: Fix CONFIG_UBSAN_TRAP unreachable warnings
- objtool: Support Clang non-section symbols in ORC dump
- xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status
- arm64: Delete the space separator in __emit_inst
- ext4: use matching invalidatepage in ext4_writepage
- ext4: increase wait time needed before reuse of deleted inode numbers
- ext4: convert BUG_ON's to WARN_ON's in mballoc.c
- hwmon: (jc42) Fix name to have no illegal characters
- qed: Fix use after free in qed_chain_free
- ext4: check for non-zero journal inum in ext4_calculate_overhead
- propagate_one(): mnt_set_mountpoint() needs mount_lock
- kconfig: qconf: Fix a few alignment issues
- loop: Better discard support for block devices
- drm/amd/display: Not doing optimize bandwidth if flip pending.
- virtio-blk: improve virtqueue error to BLK_STS
- scsi: smartpqi: fix call trace in device discovery
- net: ipv6: add net argument to ip6_dst_lookup_flow
- net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup
- f2fs: fix to avoid memory leakage in f2fs_listxattr
- KVM: VMX: Zero out *all* general purpose registers after VM-Exit
- KVM: Introduce a new guest mapping API
- kvm: fix compilation on aarch64
- kvm: fix compilation on s390
- kvm: fix compile on s390 part 2
- KVM: Properly check if "page" is valid in kvm_vcpu_unmap
- x86/kvm: Introduce kvm_(un)map_gfn()
- x86/kvm: Cache gfn to pfn translation
- vrf: Fix IPv6 with qdisc and xfrm
- net: dsa: b53: Lookup VID in ARL searches when VLAN is enabled
- net: dsa: b53: Rework ARL bin logic
- net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL
- mlxsw: Fix some IS_ERR() vs NULL bugs
- iio: core: remove extra semi-colon from devm_iio_device_register() macro
- iio: st_sensors: rely on odr mask to know if odr can be set
- iio: xilinx-xadc: Make sure not exceed maximum samplerate
- iwlwifi: mvm: beacon statistics shouldn't go backwards
- xhci: prevent bus suspend if a roothub port detected a over-current
condition
* Bionic update: upstream stable patchset 2020-04-27 (LP: #1875506)
- KVM: VMX: fix crash cleanup when KVM wasn't used
- amd-xgbe: Use __napi_schedule() in BH context
- hsr: check protocol version in hsr_newlink()
- net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin
- net: ipv6: do not consider routes via gateways for anycast address check
- net: qrtr: send msgs from local of same id as broadcast
- net: revert default NAPI poll timeout to 2 jiffies
- net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes
- scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic
- jbd2: improve comments about freeing data buffers whose page mapping is NULL
- pwm: pca9685: Fix PWM/GPIO inter-operation
- ext4: fix incorrect group count in ext4_fill_super error message
- ext4: fix incorrect inodes per group in error message
- ASoC: Intel: mrfld: fix incorrect check on p->sink
- ASoC: Intel: mrfld: return error codes when an error occurs
- ALSA: usb-audio: Don't override ignore_ctl_error value from the map
- tracing: Fix the race between registering 'snapshot' event trigger and
triggering 'snapshot' operation
- btrfs: check commit root generation in should_ignore_root
- mac80211_hwsim: Use kstrndup() in place of kasprintf()
- ext4: do not zeroout extents beyond i_disksize
- dm flakey: check for null arg_name in parse_features()
- kvm: x86: Host feature SSBD doesn't imply guest feature SPEC_CTRL_SSBD
- x86/microcode/AMD: Increase microcode PATCH_MAX_SIZE
- x86/intel_rdt: Add two new resources for L2 Code and Data Prioritization
(CDP)
- x86/intel_rdt: Enable L2 CDP in MSR IA32_L2_QOS_CFG
- x86/resctrl: Preserve CDP enable over CPU hotplug
- x86/resctrl: Fix invalid attempt at removing the default resource group
- mm/vmalloc.c: move 'area->pages' after if statement
- objtool: Fix switch table detection in .text.unlikely
- scsi: sg: add sg_remove_request in sg_common_write
- ext4: use non-movable memory for superblock readahead
- arm, bpf: Fix bugs with ALU64 {RSH, ARSH} BPF_K shift by 0
- netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object type
- irqchip/mbigen: Free msi_desc on device teardown
- ALSA: hda: Don't release card at firmware loading error
- lib/raid6: use vdupq_n_u8 to avoid endianness warnings
- video: fbdev: sis: Remove unnecessary parentheses and commented code
- drm: NULL pointer dereference [null-pointer-deref] (CWE 476) problem
- clk: Fix debugfs_create_*() usage
- Revert "gpio: set up initial state from .get_direction()"
- wil6210: increase firmware ready timeout
- wil6210: fix temperature debugfs
- scsi: ufs: make sure all interrupts are processed
- scsi: ufs: ufs-qcom: remove broken hci version quirk
- wil6210: rate limit wil_rx_refill error
- rpmsg: glink: use put_device() if device_register fail
- rtc: pm8xxx: Fix issue in RTC write path
- rpmsg: glink: Fix missing mutex_init() in qcom_glink_alloc_channel()
- rpmsg: glink: smem: Ensure ordering during tx
- wil6210: fix PCIe bus mastering in case of interface down
- wil6210: add block size checks during FW load
- wil6210: fix length check in __wmi_send
- wil6210: abort properly in cfg suspend
- rbd: avoid a deadlock on header_rwsem when flushing notifies
- rbd: call rbd_dev_unprobe() after unwatching and flushing notifies
- of: unittest: kmemleak in of_unittest_platform_populate()
- clk: at91: usb: continue if clk_hw_round_rate() return zero
- power: supply: bq27xxx_battery: Silence deferred-probe error
- clk: tegra: Fix Tegra PMC clock out parents
- soc: imx: gpc: fix power up sequencing
- rtc: 88pm860x: fix possible race condition
- NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid()
- NFS: direct.c: Fix memory leak of dreq when nfs_get_lock_context fails
- s390/cpuinfo: fix wrong output when CPU0 is offline
- powerpc/maple: Fix declaration made after definition
- ext4: do not commit super on read-only bdev
- include/linux/swapops.h: correct guards for non_swap_entry()
- percpu_counter: fix a data race at vm_committed_as
- compiler.h: fix error in BUILD_BUG_ON() reporting
- KVM: s390: vsie: Fix possible race when shadowing region 3 tables
- x86: ACPI: fix CPU hotplug deadlock
- drm/amdkfd: kfree the wrong pointer
- NFS: Fix memory leaks in nfs_pageio_stop_mirroring()
- iommu/vt-d: Fix mm reference leak
- ext2: fix empty body warnings when -Wextra is used
- ext2: fix debug reference to ext2_xattr_cache
- libnvdimm: Out of bounds read in __nd_ioctl()
- iommu/amd: Fix the configuration of GCR3 table root pointer
- net: dsa: bcm_sf2: Fix overflow checks
- fbdev: potential information leak in do_fb_ioctl()
- tty: evh_bytechan: Fix out of bounds accesses
- locktorture: Print ratio of acquisitions, not failures
- mtd: lpddr: Fix a double free in probe()
- mtd: phram: fix a double free issue in error path
- KEYS: Use individual pages in big_key for crypto buffers
- KEYS: Don't write out to userspace while holding key semaphore
- keys: Fix proc_keys_next to increase position index
- wil6210: ignore HALP ICR if already handled
- wil6210: remove reset file from debugfs
- ARM: dts: imx6: Use gpc for FEC interrupt controller to fix wake on LAN.
- of: unittest: kmemleak on changeset destroy
- of: overlay: kmemleak in dup_and_fixup_symbol_prop()
- s390/cpum_sf: Fix wrong page count in error message
- f2fs: fix NULL pointer dereference in f2fs_write_begin()
* psock_tpacket from the net test in ubuntu_kernel_selftests failed on KVM
kernels (LP: #1812176)
- selftests/net: skip psock_tpacket test if KALLSYMS was not enabled
* Bionic ubuntu ethtool doesn't check ring parameters boundaries
(LP: #1874444)
- ethtool: Ensure new ring parameters are within bounds during SRINGPARAM
* Improve TSC refinement (and calibration) reliability (LP: #1877858)
- x86/tsc: Make calibration refinement more robust
- x86/tsc: Use CPUID.0x16 to calculate missing crystal frequency
* Do not treat unresolved test case in ftrace from ubuntu_kernel_selftests as
failure (LP: #1877958)
- ftrace/selftest: make unresolved cases cause failure if --fail-unresolved
set
* Add support for Ambiq micro AM1805 RTC chip (LP: #1876667)
- SAUCE: rtc: add am-1805 RTC driver
* 'Elan touchpad' not detected on 'Lenovo ThinkBook 15 IIL' (LP: #1861610)
- SAUCE: Input: elan_i2c - add more hardware ID for Lenovo laptop
* Kdump broken since 4.15.0-65 on secureboot - purgatory cannot load
(LP: #1869672)
- SAUCE: x86/purgatory: Fix Makefile to prevent undefined symbols
[ Ubuntu: 4.15.0-101.102 ]
* bionic/linux: 4.15.0-101.102 -proposed tracker (LP: #1877262)
* 4.15.0-100.101 breaks userspace builds due to a bug in the headers
/usr/include/linux/swab.h of linux-libc-dev (LP: #1877123)
- include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for
swap
* bionic snapdragon 4.15 snap failed Certification testing (LP: #1877657)
- Revert "drm/msm: Use the correct dma_sync calls in msm_gem"
- Revert "drm/msm: stop abusing dma_map/unmap for cache"
-- Kleber Sacilotto de Souza <email address hidden> Fri, 05 Jun 2020 12:08:01 +0200
-
linux-aws (4.15.0-1068.72) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1068.72 -proposed tracker (LP: #1878836)
* Add support for Ambiq micro AM1805 RTC chip (LP: #1876667)
- [Config] CONFIG_RTC_DRV_AM1805=m
[ Ubuntu: 4.15.0-102.103 ]
* bionic/linux: 4.15.0-102.103 -proposed tracker (LP: #1878856)
* Packaging resync (LP: #1786013)
- update dkms package versions
* debian/scripts/file-downloader does not handle positive failures correctly
(LP: #1878897)
- [Packaging] file-downloader not handling positive failures correctly
* Kernel log flood "ceph: Failed to find inode for 1" (LP: #1875884)
- ceph: don't check quota for snap inode
- ceph: quota: cache inode pointer in ceph_snap_realm
* [UBUNTU 18.04] zpcictl --reset - contribution for kernel (LP: #1870320)
- s390/pci: Recover handle in clp_set_pci_fn()
- s390/pci: Fix possible deadlock in recover_store()
* Bionic update: upstream stable patchset 2020-05-12 (LP: #1878256)
- drm/edid: Fix off-by-one in DispID DTD pixel clock
- drm/qxl: qxl_release leak in qxl_draw_dirty_fb()
- drm/qxl: qxl_release leak in qxl_hw_surface_alloc()
- drm/qxl: qxl_release use after free
- btrfs: fix block group leak when removing fails
- btrfs: fix partial loss of prealloc extent past i_size after fsync
- mmc: sdhci-xenon: fix annoying 1.8V regulator warning
- mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers
- ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter
- ALSA: hda/hdmi: fix without unlocked before return
- ALSA: pcm: oss: Place the plugin buffer overflow checks correctly
- PM: ACPI: Output correct message on target power state
- PM: hibernate: Freeze kernel threads in software_resume()
- dm verity fec: fix hash block number in verity_fec_decode
- RDMA/mlx5: Set GRH fields in query QP on RoCE
- RDMA/mlx4: Initialize ib_spec on the stack
- vfio: avoid possible overflow in vfio_iommu_type1_pin_pages
- vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn()
- iommu/qcom: Fix local_base status check
- scsi: target/iblock: fix WRITE SAME zeroing
- iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system
- ALSA: opti9xx: shut up gcc-10 range warning
- nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl
- dmaengine: dmatest: Fix iteration non-stop logic
- selinux: properly handle multiple messages in selinux_netlink_send()
- ASoC: tas571x: disable regulators on failed probe
- ASoC: wm8960: Fix wrong clock after suspend & resume
- rxrpc: Fix DATA Tx to disable nofrag for UDP on AF_INET6 socket
- xfs: acquire superblock freeze protection on eofblocks scans
- cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled
- net: fec: set GPR bit on suspend by DT configuration.
- ALSA: hda: Keep the controller initialization even if no codecs found
- ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported
- ALSA: hda: call runtime_allow() for all hda controllers
- scsi: qla2xxx: check UNLOADING before posting async work
- RDMA/core: Fix race between destroy and release FD object
- btrfs: transaction: Avoid deadlock due to bad initialization timing of
fs_info::journal_info
- mmc: sdhci-msm: Enable host capabilities pertains to R1b response
- mmc: meson-mx-sdio: Set MMC_CAP_WAIT_WHILE_BUSY
- mmc: meson-mx-sdio: remove the broken ->card_busy() op
* Bionic update: upstream stable patchset 2020-05-07 (LP: #1877461)
- ext4: fix extent_status fragmentation for plain files
- net: ipv4: avoid unused variable warning for sysctl
- crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash'
static
- vti4: removed duplicate log message.
- watchdog: reset last_hw_keepalive time at start
- scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login
- ceph: return ceph_mdsc_do_request() errors from __get_parent()
- ceph: don't skip updating wanted caps when cap is stale
- pwm: rcar: Fix late Runtime PM enablement
- scsi: iscsi: Report unbind session event when the target has been removed
- ASoC: Intel: atom: Take the drv->lock mutex before calling
sst_send_slot_map()
- kernel/gcov/fs.c: gcov_seq_next() should increase position index
- selftests: kmod: fix handling test numbers above 9
- ipc/util.c: sysvipc_find_ipc() should increase position index
- s390/cio: avoid duplicated 'ADD' uevents
- pwm: renesas-tpu: Fix late Runtime PM enablement
- pwm: bcm2835: Dynamically allocate base
- perf/core: Disable page faults when getting phys address
- PCI/ASPM: Allow re-enabling Clock PM
- mm, slub: restore the original intention of prefetch_freepointer()
- cxgb4: fix large delays in PTP synchronization
- ipv6: fix restrict IPV6_ADDRFORM operation
- macsec: avoid to set wrong mtu
- macvlan: fix null dereference in macvlan_device_event()
- net: bcmgenet: correct per TX/RX ring statistics
- net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
- net/x25: Fix x25_neigh refcnt leak when receiving frame
- tcp: cache line align MAX_TCP_HEADER
- team: fix hang in team_mode_get()
- net: dsa: b53: Fix ARL register definitions
- xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish
- vrf: Check skb for XFRM_TRANSFORMED flag
- KEYS: Avoid false positive ENOMEM error on key read
- ALSA: hda: Remove ASUS ROG Zenith from the blacklist
- iio: adc: stm32-adc: fix sleep in atomic context
- iio: xilinx-xadc: Fix ADC-B powerdown
- iio: xilinx-xadc: Fix clearing interrupt when enabling trigger
- iio: xilinx-xadc: Fix sequencer configuration for aux channels in
simultaneous mode
- fs/namespace.c: fix mountpoint reference counter race
- USB: sisusbvga: Change port variable from signed to unsigned
- USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70
RGB RAPIDFIRE
- USB: early: Handle AMD's spec-compliant identifiers, too
- USB: core: Fix free-while-in-use bug in the USB S-Glibrary
- USB: hub: Fix handling of connect changes during sleep
- overflow.h: Add arithmetic shift helper
- vmalloc: fix remap_vmalloc_range() bounds checks
- mm/hugetlb: fix a addressing exception caused by huge_pte_offset
- mm/ksm: fix NULL pointer dereference when KSM zero page is enabled
- tools/vm: fix cross-compile build
- ALSA: usx2y: Fix potential NULL dereference
- ALSA: hda/realtek - Add new codec supported for ALC245
- ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif
- ALSA: usb-audio: Filter out unsupported sample rates on Focusrite devices
- tpm/tpm_tis: Free IRQ if probing fails
- tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send()
- KVM: Check validity of resolved slot when searching memslots
- KVM: VMX: Enable machine check support for 32bit targets
- tty: hvc: fix buffer overflow during hvc_alloc().
- tty: rocket, avoid OOB access
- usb-storage: Add unusual_devs entry for JMicron JMS566
- audit: check the length of userspace generated audit records
- ASoC: dapm: fixup dapm kcontrol widget
- iwlwifi: pcie: actually release queue memory in TVQM
- ARM: imx: provide v7_cpu_resume() only on ARM_CPU_SUSPEND=y
- powerpc/setup_64: Set cache-line-size based on cache-block-size
- staging: comedi: dt2815: fix writing hi byte of analog output
- staging: comedi: Fix comedi_device refcnt leak in comedi_open
- vt: don't hardcode the mem allocation upper bound
- staging: vt6656: Don't set RCR_MULTICAST or RCR_BROADCAST by default.
- staging: vt6656: Fix calling conditions of vnt_set_bss_mode
- staging: vt6656: Fix drivers TBTT timing counter.
- staging: vt6656: Fix pairwise key entry save.
- staging: vt6656: Power save stop wake_up_count wrap around.
- cdc-acm: close race betrween suspend() and acm_softint
- cdc-acm: introduce a cool down
- UAS: no use logging any details in case of ENODEV
- UAS: fix deadlock in error handling and PM flushing work
- usb: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset()
- serial: sh-sci: Make sure status register SCxSR is read in correct sequence
- xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT
- remoteproc: Fix wrong rvring index computation
- mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer
- binder: take read mode of mmap_sem in binder_alloc_free_page()
- usb: dwc3: gadget: Do link recovery for SS and SSP
- usb: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete
- iio:ad7797: Use correct attribute_group
- nfsd: memory corruption in nfsd4_lock()
- i2c: altera: use proper variable to hold errno
- net/cxgb4: Check the return from t4_query_params properly
- ARM: dts: bcm283x: Disable dsi0 node
- perf/core: fix parent pid/tid in task exit events
- mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy
path
- bpf, x86: Fix encoding for lower 8-bit registers in BPF_STX BPF_B
- x86: hyperv: report value of misc_features
- xfs: fix partially uninitialized structure in xfs_reflink_remap_extent
- scsi: target: fix PR IN / READ FULL STATUS for FC
- objtool: Fix CONFIG_UBSAN_TRAP unreachable warnings
- objtool: Support Clang non-section symbols in ORC dump
- xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status
- arm64: Delete the space separator in __emit_inst
- ext4: use matching invalidatepage in ext4_writepage
- ext4: increase wait time needed before reuse of deleted inode numbers
- ext4: convert BUG_ON's to WARN_ON's in mballoc.c
- hwmon: (jc42) Fix name to have no illegal characters
- qed: Fix use after free in qed_chain_free
- ext4: check for non-zero journal inum in ext4_calculate_overhead
- propagate_one(): mnt_set_mountpoint() needs mount_lock
- kconfig: qconf: Fix a few alignment issues
- loop: Better discard support for block devices
- drm/amd/display: Not doing optimize bandwidth if flip pending.
- virtio-blk: improve virtqueue error to BLK_STS
- scsi: smartpqi: fix call trace in device discovery
- net: ipv6: add net argument to ip6_dst_lookup_flow
- net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup
- f2fs: fix to avoid memory leakage in f2fs_listxattr
- KVM: VMX: Zero out *all* general purpose registers after VM-Exit
- KVM: Introduce a new guest mapping API
- kvm: fix compilation on aarch64
- kvm: fix compilation on s390
- kvm: fix compile on s390 part 2
- KVM: Properly check if "page" is valid in kvm_vcpu_unmap
- x86/kvm: Introduce kvm_(un)map_gfn()
- x86/kvm: Cache gfn to pfn translation
- vrf: Fix IPv6 with qdisc and xfrm
- net: dsa: b53: Lookup VID in ARL searches when VLAN is enabled
- net: dsa: b53: Rework ARL bin logic
- net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL
- mlxsw: Fix some IS_ERR() vs NULL bugs
- iio: core: remove extra semi-colon from devm_iio_device_register() macro
- iio: st_sensors: rely on odr mask to know if odr can be set
- iio: xilinx-xadc: Make sure not exceed maximum samplerate
- iwlwifi: mvm: beacon statistics shouldn't go backwards
- xhci: prevent bus suspend if a roothub port detected a over-current
condition
* Bionic update: upstream stable patchset 2020-04-27 (LP: #1875506)
- KVM: VMX: fix crash cleanup when KVM wasn't used
- amd-xgbe: Use __napi_schedule() in BH context
- hsr: check protocol version in hsr_newlink()
- net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin
- net: ipv6: do not consider routes via gateways for anycast address check
- net: qrtr: send msgs from local of same id as broadcast
- net: revert default NAPI poll timeout to 2 jiffies
- net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes
- scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic
- jbd2: improve comments about freeing data buffers whose page mapping is NULL
- pwm: pca9685: Fix PWM/GPIO inter-operation
- ext4: fix incorrect group count in ext4_fill_super error message
- ext4: fix incorrect inodes per group in error message
- ASoC: Intel: mrfld: fix incorrect check on p->sink
- ASoC: Intel: mrfld: return error codes when an error occurs
- ALSA: usb-audio: Don't override ignore_ctl_error value from the map
- tracing: Fix the race between registering 'snapshot' event trigger and
triggering 'snapshot' operation
- btrfs: check commit root generation in should_ignore_root
- mac80211_hwsim: Use kstrndup() in place of kasprintf()
- ext4: do not zeroout extents beyond i_disksize
- dm flakey: check for null arg_name in parse_features()
- kvm: x86: Host feature SSBD doesn't imply guest feature SPEC_CTRL_SSBD
- x86/microcode/AMD: Increase microcode PATCH_MAX_SIZE
- x86/intel_rdt: Add two new resources for L2 Code and Data Prioritization
(CDP)
- x86/intel_rdt: Enable L2 CDP in MSR IA32_L2_QOS_CFG
- x86/resctrl: Preserve CDP enable over CPU hotplug
- x86/resctrl: Fix invalid attempt at removing the default resource group
- mm/vmalloc.c: move 'area->pages' after if statement
- objtool: Fix switch table detection in .text.unlikely
- scsi: sg: add sg_remove_request in sg_common_write
- ext4: use non-movable memory for superblock readahead
- arm, bpf: Fix bugs with ALU64 {RSH, ARSH} BPF_K shift by 0
- netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object type
- irqchip/mbigen: Free msi_desc on device teardown
- ALSA: hda: Don't release card at firmware loading error
- lib/raid6: use vdupq_n_u8 to avoid endianness warnings
- video: fbdev: sis: Remove unnecessary parentheses and commented code
- drm: NULL pointer dereference [null-pointer-deref] (CWE 476) problem
- clk: Fix debugfs_create_*() usage
- Revert "gpio: set up initial state from .get_direction()"
- wil6210: increase firmware ready timeout
- wil6210: fix temperature debugfs
- scsi: ufs: make sure all interrupts are processed
- scsi: ufs: ufs-qcom: remove broken hci version quirk
- wil6210: rate limit wil_rx_refill error
- rpmsg: glink: use put_device() if device_register fail
- rtc: pm8xxx: Fix issue in RTC write path
- rpmsg: glink: Fix missing mutex_init() in qcom_glink_alloc_channel()
- rpmsg: glink: smem: Ensure ordering during tx
- wil6210: fix PCIe bus mastering in case of interface down
- wil6210: add block size checks during FW load
- wil6210: fix length check in __wmi_send
- wil6210: abort properly in cfg suspend
- rbd: avoid a deadlock on header_rwsem when flushing notifies
- rbd: call rbd_dev_unprobe() after unwatching and flushing notifies
- of: unittest: kmemleak in of_unittest_platform_populate()
- clk: at91: usb: continue if clk_hw_round_rate() return zero
- power: supply: bq27xxx_battery: Silence deferred-probe error
- clk: tegra: Fix Tegra PMC clock out parents
- soc: imx: gpc: fix power up sequencing
- rtc: 88pm860x: fix possible race condition
- NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid()
- NFS: direct.c: Fix memory leak of dreq when nfs_get_lock_context fails
- s390/cpuinfo: fix wrong output when CPU0 is offline
- powerpc/maple: Fix declaration made after definition
- ext4: do not commit super on read-only bdev
- include/linux/swapops.h: correct guards for non_swap_entry()
- percpu_counter: fix a data race at vm_committed_as
- compiler.h: fix error in BUILD_BUG_ON() reporting
- KVM: s390: vsie: Fix possible race when shadowing region 3 tables
- x86: ACPI: fix CPU hotplug deadlock
- drm/amdkfd: kfree the wrong pointer
- NFS: Fix memory leaks in nfs_pageio_stop_mirroring()
- iommu/vt-d: Fix mm reference leak
- ext2: fix empty body warnings when -Wextra is used
- ext2: fix debug reference to ext2_xattr_cache
- libnvdimm: Out of bounds read in __nd_ioctl()
- iommu/amd: Fix the configuration of GCR3 table root pointer
- net: dsa: bcm_sf2: Fix overflow checks
- fbdev: potential information leak in do_fb_ioctl()
- tty: evh_bytechan: Fix out of bounds accesses
- locktorture: Print ratio of acquisitions, not failures
- mtd: lpddr: Fix a double free in probe()
- mtd: phram: fix a double free issue in error path
- KEYS: Use individual pages in big_key for crypto buffers
- KEYS: Don't write out to userspace while holding key semaphore
- keys: Fix proc_keys_next to increase position index
- wil6210: ignore HALP ICR if already handled
- wil6210: remove reset file from debugfs
- ARM: dts: imx6: Use gpc for FEC interrupt controller to fix wake on LAN.
- of: unittest: kmemleak on changeset destroy
- of: overlay: kmemleak in dup_and_fixup_symbol_prop()
- s390/cpum_sf: Fix wrong page count in error message
- f2fs: fix NULL pointer dereference in f2fs_write_begin()
* psock_tpacket from the net test in ubuntu_kernel_selftests failed on KVM
kernels (LP: #1812176)
- selftests/net: skip psock_tpacket test if KALLSYMS was not enabled
* Bionic ubuntu ethtool doesn't check ring parameters boundaries
(LP: #1874444)
- ethtool: Ensure new ring parameters are within bounds during SRINGPARAM
* Improve TSC refinement (and calibration) reliability (LP: #1877858)
- x86/tsc: Make calibration refinement more robust
- x86/tsc: Use CPUID.0x16 to calculate missing crystal frequency
* Do not treat unresolved test case in ftrace from ubuntu_kernel_selftests as
failure (LP: #1877958)
- ftrace/selftest: make unresolved cases cause failure if --fail-unresolved
set
* Add support for Ambiq micro AM1805 RTC chip (LP: #1876667)
- SAUCE: rtc: add am-1805 RTC driver
* 'Elan touchpad' not detected on 'Lenovo ThinkBook 15 IIL' (LP: #1861610)
- SAUCE: Input: elan_i2c - add more hardware ID for Lenovo laptop
* Kdump broken since 4.15.0-65 on secureboot - purgatory cannot load
(LP: #1869672)
- SAUCE: x86/purgatory: Fix Makefile to prevent undefined symbols
[ Ubuntu: 4.15.0-101.102 ]
* bionic/linux: 4.15.0-101.102 -proposed tracker (LP: #1877262)
* 4.15.0-100.101 breaks userspace builds due to a bug in the headers
/usr/include/linux/swab.h of linux-libc-dev (LP: #1877123)
- include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for
swap
* bionic snapdragon 4.15 snap failed Certification testing (LP: #1877657)
- Revert "drm/msm: Use the correct dma_sync calls in msm_gem"
- Revert "drm/msm: stop abusing dma_map/unmap for cache"
-- Wen-chien Jesse Sung <email address hidden> Tue, 26 May 2020 14:10:48 +0800
-
linux-aws (4.15.0-1067.71) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1067.71 -proposed tracker (LP: #1874768)
* getitimer returns it_value=0 erroneously (LP: #1349028)
- aws: [Config] CONTEXT_TRACKING_FORCE policy should be unset
[ Ubuntu: 4.15.0-100.101 ]
* bionic/linux: 4.15.0-100.101 -proposed tracker (LP: #1875878)
* built-using constraints preventing uploads (LP: #1875601)
- temporarily drop Built-Using data
* Add debian/rules targets to compile/run kernel selftests (LP: #1874286)
- [Packaging] add support to compile/run selftests
* getitimer returns it_value=0 erroneously (LP: #1349028)
- [Config] CONTEXT_TRACKING_FORCE policy should be unset
* QEMU/KVM display is garbled when booting from kernel EFI stub due to missing
bochs-drm module (LP: #1872863)
- [Config] Enable CONFIG_DRM_BOCHS as module for all archs
* Backport MPLS patches from 5.3 to 4.15 (LP: #1851446)
- net/mlx5e: Report netdevice MPLS features
- net: vlan: Inherit MPLS features from parent device
- net: bonding: Inherit MPLS features from slave devices
- net/mlx5e: Move to HW checksumming advertising
* LIO hanging in iscsit_free_session and iscsit_stop_session (LP: #1871688)
- scsi: target: remove boilerplate code
- scsi: target: fix hang when multiple threads try to destroy the same iscsi
session
- scsi: target: iscsi: calling iscsit_stop_session() inside
iscsit_close_session() has no effect
* Add hw timestamps to received skbs in peak_canfd (LP: #1874124)
- can: peak_canfd: provide hw timestamps in rx skbs
* Bionic update: upstream stable patchset 2020-04-23 (LP: #1874502)
- ARM: dts: sun8i-a83t-tbs-a711: HM5065 doesn't like such a high voltage
- bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads
- net: vxge: fix wrong __VA_ARGS__ usage
- hinic: fix a bug of waitting for IO stopped
- hinic: fix wrong para of wait_for_completion_timeout
- cxgb4/ptp: pass the sign of offset delta in FW CMD
- qlcnic: Fix bad kzalloc null test
- i2c: st: fix missing struct parameter description
- firmware: arm_sdei: fix double-lock on hibernate with shared events
- null_blk: Fix the null_add_dev() error path
- null_blk: Handle null_add_dev() failures properly
- null_blk: fix spurious IO errors after failed past-wp access
- xhci: bail out early if driver can't accress host in resume
- x86: Don't let pgprot_modify() change the page encryption bit
- block: keep bdi->io_pages in sync with max_sectors_kb for stacked devices
- irqchip/versatile-fpga: Handle chained IRQs properly
- sched: Avoid scale real weight down to zero
- selftests/x86/ptrace_syscall_32: Fix no-vDSO segfault
- PCI/switchtec: Fix init_completion race condition with poll_wait()
- libata: Remove extra scsi_host_put() in ata_scsi_add_hosts()
- gfs2: Don't demote a glock until its revokes are written
- x86/boot: Use unsigned comparison for addresses
- efi/x86: Ignore the memory attributes table on i386
- genirq/irqdomain: Check pointer in irq_domain_alloc_irqs_hierarchy()
- block: Fix use-after-free issue accessing struct io_cq
- usb: dwc3: core: add support for disabling SS instances in park mode
- irqchip/gic-v4: Provide irq_retrigger to avoid circular locking dependency
- md: check arrays is suspended in mddev_detach before call quiesce operations
- locking/lockdep: Avoid recursion in lockdep_count_{for,back}ward_deps()
- block, bfq: fix use-after-free in bfq_idle_slice_timer_body
- btrfs: qgroup: ensure qgroup_rescan_running is only set when the worker is
at least queued
- btrfs: remove a BUG_ON() from merge_reloc_roots()
- btrfs: track reloc roots based on their commit root bytenr
- uapi: rename ext2_swab() to swab() and share globally in swab.h
- slub: improve bit diffusion for freelist ptr obfuscation
- ASoC: fix regwmask
- ASoC: dapm: connect virtual mux with default value
- ASoC: dpcm: allow start or stop during pause for backend
- ASoC: topology: use name_prefix for new kcontrol
- usb: gadget: f_fs: Fix use after free issue as part of queue failure
- usb: gadget: composite: Inform controller driver of self-powered
- ALSA: usb-audio: Add mixer workaround for TRX40 and co
- ALSA: hda: Add driver blacklist
- ALSA: hda: Fix potential access overflow in beep helper
- ALSA: ice1724: Fix invalid access for enumerated ctl items
- ALSA: pcm: oss: Fix regression by buffer overflow fix
- ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256
- ALSA: hda/realtek - Set principled PC Beep configuration for ALC256
- ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups
- ALSA: hda/realtek - Add quirk for MSI GL63
- media: ti-vpe: cal: fix disable_irqs to only the intended target
- acpi/x86: ignore unspecified bit positions in the ACPI global lock field
- thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n
- nvme-fc: Revert "add module to ops template to allow module references"
- nvme: Treat discovery subsystems as unique subsystems
- PCI/ASPM: Clear the correct bits when enabling L1 substates
- PCI: Add boot interrupt quirk mechanism for Xeon chipsets
- PCI: endpoint: Fix for concurrent memory allocation in OB address region
- irqchip/versatile-fpga: Apply clear-mask earlier
- pstore: pstore_ftrace_seq_next should increase position index
- MIPS/tlbex: Fix LDDIR usage in setup_pw() for Loongson-3
- MIPS: OCTEON: irq: Fix potential NULL pointer dereference
- ath9k: Handle txpower changes even when TPC is disabled
- signal: Extend exec_id to 64bits
- x86/entry/32: Add missing ASM_CLAC to general_protection entry
- KVM: nVMX: Properly handle userspace interrupt window request
- KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks
- KVM: s390: vsie: Fix delivery of addressing exceptions
- KVM: x86: Allocate new rmap and large page tracking when moving memslot
- KVM: VMX: Always VMCLEAR in-use VMCSes during crash with kexec support
- CIFS: Fix bug which the return value by asynchronous read is error
- Btrfs: fix crash during unmount due to race with delayed inode workers
- btrfs: set update the uuid generation as soon as possible
- btrfs: drop block from cache on error in relocation
- btrfs: fix missing semaphore unlock in btrfs_sync_file
- crypto: mxs-dcp - fix scatterlist linearization for hash
- powerpc/pseries: Drop pointless static qualifier in vpa_debugfs_init()
- x86/speculation: Remove redundant arch_smt_update() invocation
- tools: gpio: Fix out-of-tree build regression
- mm: Use fixed constant in page_frag_alloc instead of size + 1
- dm verity fec: fix memory leak in verity_fec_dtr
- scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point
- arm64: armv8_deprecated: Fix undef_hook mask for thumb setend
- selftests: vm: drop dependencies on page flags from mlock2 tests
- rtc: omap: Use define directive for PIN_CONFIG_ACTIVE_HIGH
- drm/etnaviv: rework perfmon query infrastructure
- NFS: Fix a page leak in nfs_destroy_unlinked_subrequests()
- ext4: fix a data race at inode->i_blocks
- fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once()
- ocfs2: no need try to truncate file beyond i_size
- perf tools: Support Python 3.8+ in Makefile
- s390/diag: fix display of diagnose call statistics
- Input: i8042 - add Acer Aspire 5738z to nomux list
- kmod: make request_module() return an error when autoloading is disabled
- cpufreq: powernv: Fix use-after-free
- hfsplus: fix crash and filesystem corruption when deleting files
- ipmi: fix hung processes in __get_guid()
- powerpc/powernv/idle: Restore AMR/UAMOR/AMOR after idle
- powerpc/64/tm: Don't let userspace set regs->trap via sigreturn
- powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE
entries
- powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs
- powerpc/kprobes: Ignore traps that happened in real mode
- scsi: mpt3sas: Fix kernel panic observed on soft HBA unplug
- powerpc: Add attributes for setjmp/longjmp
- powerpc: Make setjmp/longjmp signature standard
- btrfs: use nofs allocations for running delayed items
- dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone()
- crypto: caam - update xts sector size for large input length
- Revert "drm/dp_mst: Remove VCPI while disabling topology mgr"
- drm/dp_mst: Fix clearing payload state on topology disable
- drm: Remove PageReserved manipulation from drm_pci_alloc
- ftrace/kprobe: Show the maxactive number on kprobe_events
- powerpc/fsl_booke: Avoid creating duplicate tlb1 entry
- misc: echo: Remove unnecessary parentheses and simplify check for zero
- etnaviv: perfmon: fix total and idle HI cyleces readout
- mfd: dln2: Fix sanity checking for endpoints
- efi/x86: Fix the deletion of variables in mixed mode
* Panic on suspend/resume Kernel panic - not syncing: stack-protector: Kernel
stack is corrupted in: sata_pmp_eh_recover+0xa2b/0xa40 (LP: #1821434) //
Bionic update: upstream stable patchset 2020-04-23 (LP: #1874502)
- libata: Return correct status in sata_pmp_eh_recover_pm() when
ATA_DFLAG_DETACH is set
* Bionic update: upstream stable patchset 2020-04-15 (LP: #1873043)
- ipv4: fix a RCU-list lock in fib_triestat_seq_show
- net, ip_tunnel: fix interface lookup with no key
- sctp: fix refcount bug in sctp_wfree
- sctp: fix possibly using a bad saddr with a given dst
- drm/bochs: downgrade pci_request_region failure from error to warning
- initramfs: restore default compression behavior
- tools/power turbostat: Fix gcc build warnings
- drm/etnaviv: replace MMU flush marker with flush sequence
- blk-mq: sync the update nr_hw_queues with blk_mq_queue_tag_busy_iter
- blk-mq: Allow blocking queue tag iter callbacks
- misc: pci_endpoint_test: Fix to support > 10 pci-endpoint-test devices
- coresight: do not use the BIT() macro in the UAPI header
- padata: always acquire cpu_hotplug_lock before pinst->lock
- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
- ipv6: don't auto-add link-local address to lag ports
- net: dsa: bcm_sf2: Ensure correct sub-node is parsed
- net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before
accessing PHY registers
- net: stmmac: dwmac1000: fix out-of-bounds mac address reg setting
- mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE
- random: always use batched entropy for get_random_u{32,64}
- tools/accounting/getdelays.c: fix netlink attribute length
- hwrng: imx-rngc - fix an error path
- ASoC: jz4740-i2s: Fix divider written at incorrect offset in register
- IB/hfi1: Call kobject_put() when kobject_init_and_add() fails
- IB/hfi1: Fix memory leaks in sysfs registration and unregistration
- ceph: remove the extra slashes in the server path
- ceph: canonicalize server path in place
- Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
- RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow
- fbcon: fix null-ptr-deref in fbcon_switch
- clk: qcom: rcg: Return failure for RCG update
- drm/msm: stop abusing dma_map/unmap for cache
- arm64: Fix size of __early_cpu_boot_status
- rpmsg: glink: Remove chunk size word align warning
- usb: dwc3: don't set gadget->is_otg flag
- drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read()
- drm/msm: Use the correct dma_sync calls in msm_gem
- misc: rtsx: set correct pcr_ops for rts522A
- mei: me: add cedar fork device ids
- power: supply: axp288_charger: Add special handling for HP Pavilion x2 10
- rxrpc: Fix sendmsg(MSG_WAITALL) handling
- bitops: protect variables in set_mask_bits() macro
- RDMA/ucma: Put a lock around every call to the rdma_cm layer
- RDMA/cma: Teach lockdep about the order of rtnl and lock
* CVE-2020-11494
- slcan: Don't transmit uninitialized stack data in padding
* add_key05 from ubuntu_ltp_syscalls failed (LP: #1869644)
- KEYS: reaching the keys quotas correctly
[ Ubuntu: 4.15.0-99.100 ]
* CVE-2020-11884
- SAUCE: s390/mm: fix page table upgrade vs 2ndary address mode accesses
-- Kleber Sacilotto de Souza <email address hidden> Thu, 30 Apr 2020 14:01:20 +0200
-
linux-aws (4.15.0-1066.70) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1066.70 -proposed tracker (LP: #1870672)
* Bionic update: upstream stable patchset 2020-04-03 (LP: #1870604)
- [Config] aws: updateconfigs after DPAA_ERRATUM_A050385
* Packaging resync (LP: #1786013)
- [Packaging] update variants
[ Ubuntu: 4.15.0-97.98 ]
* bionic/linux: 4.15.0-97.98 -proposed tracker (LP: #1871312)
* All PS/2 ports on PS/2 Serial add-in bracket are not working after S3
(LP: #1866734)
- SAUCE: Input: i8042 - fix the selftest retry logic
* Bionic update: upstream stable patchset 2020-04-03 (LP: #1870604)
- spi: qup: call spi_qup_pm_resume_runtime before suspending
- powerpc: Include .BTF section
- ARM: dts: dra7: Add "dma-ranges" property to PCIe RC DT nodes
- spi: pxa2xx: Add CS control clock quirk
- spi/zynqmp: remove entry that causes a cs glitch
- drm/exynos: dsi: propagate error value and silence meaningless warning
- drm/exynos: dsi: fix workaround for the legacy clock name
- drivers/perf: arm_pmu_acpi: Fix incorrect checking of gicc pointer
- altera-stapl: altera_get_note: prevent write beyond end of 'key'
- dm bio record: save/restore bi_end_io and bi_integrity
- xenbus: req->body should be updated before req->state
- xenbus: req->err should be updated before req->state
- block, bfq: fix overwrite of bfq_group pointer in bfq_find_set_group()
- parse-maintainers: Mark as executable
- USB: Disable LPM on WD19's Realtek Hub
- usb: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters
- USB: serial: option: add ME910G1 ECM composition 0x110b
- usb: host: xhci-plat: add a shutdown
- USB: serial: pl2303: add device-id for HP LD381
- usb: xhci: apply XHCI_SUSPEND_DELAY to AMD XHCI controller 1022:145c
- ALSA: line6: Fix endless MIDI read loop
- ALSA: seq: virmidi: Fix running status after receiving sysex
- ALSA: seq: oss: Fix running status after receiving sysex
- ALSA: pcm: oss: Avoid plugin buffer overflow
- ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks
- iio: trigger: stm32-timer: disable master mode when stopping
- iio: magnetometer: ak8974: Fix negative raw values in sysfs
- mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2
- staging: rtl8188eu: Add device id for MERCUSYS MW150US v2
- staging/speakup: fix get_word non-space look-ahead
- intel_th: Fix user-visible error codes
- intel_th: pci: Add Elkhart Lake CPU support
- rtc: max8907: add missing select REGMAP_IRQ
- xhci: Do not open code __print_symbolic() in xhci trace events
- memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event
- mm: slub: be more careful about the double cmpxchg of freelist
- mm, slub: prevent kmalloc_node crashes and memory leaks
- page-flags: fix a crash at SetPageError(THP_SWAP)
- x86/mm: split vmalloc_sync_all()
- USB: cdc-acm: fix close_delay and closing_wait units in TIOCSSERIAL
- USB: cdc-acm: fix rounding error in TIOCSSERIAL
- iio: adc: at91-sama5d2_adc: fix channel configuration for differential
channels
- iio: adc: at91-sama5d2_adc: fix differential channels in triggered mode
- kbuild: Disable -Wpointer-to-enum-cast
- futex: Fix inode life-time issue
- futex: Unbreak futex hashing
- Revert "vrf: mark skb for multicast or link-local as enslaved to VRF"
- Revert "ipv6: Fix handling of LLA with VRF and sockets bound to VRF"
- arm64: smp: fix smp_send_stop() behaviour
- arm64: smp: fix crash_smp_send_stop() behaviour
- drm/bridge: dw-hdmi: fix AVI frame colorimetry
- staging: greybus: loopback_test: fix potential path truncation
- staging: greybus: loopback_test: fix potential path truncations
- Revert "drm/dp_mst: Skip validating ports during destruction, just ref"
- hsr: fix general protection fault in hsr_addr_is_self()
- macsec: restrict to ethernet devices
- net: dsa: Fix duplicate frames flooded by learning
- net: mvneta: Fix the case where the last poll did not process all rx
- net/packet: tpacket_rcv: avoid a producer race condition
- net: qmi_wwan: add support for ASKEY WWHC050
- net_sched: cls_route: remove the right filter from hashtable
- net_sched: keep alloc_hash updated after hash allocation
- net: stmmac: dwmac-rk: fix error path in rk_gmac_probe
- NFC: fdp: Fix a signedness bug in fdp_nci_send_patch()
- slcan: not call free_netdev before rtnl_unlock in slcan_open
- bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets()
- net: dsa: mt7530: Change the LINK bit to reflect the link status
- vxlan: check return value of gro_cells_init()
- hsr: use rcu_read_lock() in hsr_get_node_{list/status}()
- hsr: add restart routine into hsr_get_node_list()
- hsr: set .netnsok flag
- cgroup-v1: cgroup_pidlist_next should update position index
- cpupower: avoid multiple definition with gcc -fno-common
- drivers/of/of_mdio.c:fix of_mdiobus_register()
- cgroup1: don't call release_agent when it is ""
- updateconfigs for DPAA_ERRATUM_A050385
- dt-bindings: net: FMan erratum A050385
- arm64: dts: ls1043a: FMan erratum A050385
- fsl/fman: detect FMan erratum A050385
- scsi: ipr: Fix softlockup when rescanning devices in petitboot
- mac80211: Do not send mesh HWMP PREQ if HWMP is disabled
- dpaa_eth: Remove unnecessary boolean expression in dpaa_get_headroom
- sxgbe: Fix off by one in samsung driver strncpy size arg
- arm64: ptrace: map SPSR_ELx<->PSR for compat tasks
- arm64: compat: map SPSR_ELx<->PSR for signals
- ftrace/x86: Anotate text_mutex split between
ftrace_arch_code_modify_post_process() and ftrace_arch_code_modify_prepare()
- i2c: hix5hd2: add missed clk_disable_unprepare in remove
- Input: synaptics - enable RMI on HP Envy 13-ad105ng
- Input: avoid BIT() macro usage in the serio.h UAPI header
- ARM: dts: dra7: Add bus_dma_limit for L3 bus
- ARM: dts: omap5: Add bus_dma_limit for L3 bus
- perf probe: Do not depend on dwfl_module_addrsym()
- tools: Let O= makes handle a relative path with -C option
- scripts/dtc: Remove redundant YYLOC global declaration
- scsi: sd: Fix optimal I/O size for devices that change reported values
- mac80211: mark station unauthorized before key removal
- gpiolib: acpi: Correct comment for HP x2 10 honor_wakeup quirk
- gpiolib: acpi: Rework honor_wakeup option into an ignore_wake option
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 BYT + AXP288 model
- RDMA/core: Ensure security pkey modify is not lost
- genirq: Fix reference leaks on irq affinity notifiers
- xfrm: handle NETDEV_UNREGISTER for xfrm device
- vti[6]: fix packet tx through bpf_redirect() in XinY cases
- RDMA/mlx5: Block delay drop to unprivileged users
- xfrm: fix uctx len check in verify_sec_ctx_len
- xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
- xfrm: policy: Fix doulbe free in xfrm_policy_timer
- netfilter: nft_fwd_netdev: validate family and chain type
- vti6: Fix memory leak of skb if input policy check fails
- Input: raydium_i2c_ts - use true and false for boolean values
- Input: raydium_i2c_ts - fix error codes in raydium_i2c_boot_trigger()
- afs: Fix some tracing details
- USB: serial: option: add support for ASKEY WWHC050
- USB: serial: option: add BroadMobi BM806U
- USB: serial: option: add Wistron Neweb D19Q1
- USB: cdc-acm: restore capability check order
- USB: serial: io_edgeport: fix slab-out-of-bounds read in
edge_interrupt_callback
- usb: musb: fix crash with highmen PIO and usbmon
- media: flexcop-usb: fix endpoint sanity check
- media: usbtv: fix control-message timeouts
- staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table
- staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb
- staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
- libfs: fix infoleak in simple_attr_read()
- media: ov519: add missing endpoint sanity checks
- media: dib0700: fix rc endpoint lookup
- media: stv06xx: add missing descriptor sanity checks
- media: xirlink_cit: add missing descriptor sanity checks
- mac80211: Check port authorization in the ieee80211_tx_dequeue() case
- mac80211: fix authentication with iwlwifi/mvm
- vt: selection, introduce vc_is_sel
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines
- vt: switch vt_dont_switch to bool
- vt: vt_ioctl: remove unnecessary console allocation checks
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
- vt: vt_ioctl: fix use-after-free in vt_in_use()
- platform/x86: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table
- bpf: Explicitly memset the bpf_attr structure
- bpf: Explicitly memset some bpf info structures declared on the stack
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 CHT + AXP288 model
- net: ks8851-ml: Fix IO operations, again
- arm64: alternative: fix build with clang integrated assembler
- perf map: Fix off by one in strncpy() size argument
- ARM: dts: oxnas: Fix clear-mask property
- ARM: bcm2835-rpi-zero-w: Add missing pinctrl name
- arm64: dts: ls1043a-rdb: correct RGMII delay mode to rgmii-id
- arm64: dts: ls1046ardb: set RGMII interfaces to RGMII_ID mode
- dm integrity: use dm_bio_record and dm_bio_restore
- riscv: avoid the PIC offset of static percpu data in module beyond 2G limits
- drm/amd/display: Clear link settings on MST disable connector
- mmc: rtsx_pci: Fix support for speed-modes that relies on tuning
- drm/lease: fix WARNING in idr_destroy
- mmc: core: Allow host controllers to require R1B for CMD6
- mmc: core: Respect MMC_CAP_NEED_RSP_BUSY for erase/trim/discard
- mmc: core: Respect MMC_CAP_NEED_RSP_BUSY for eMMC sleep command
- mmc: sdhci-tegra: Fix busy detection by enabling MMC_CAP_NEED_RSP_BUSY
- mlxsw: spectrum_mr: Fix list iteration in error path
- bnxt_en: Reset rings if ring reservation fails during open()
- net: ip_gre: Separate ERSPAN newlink / changelink callbacks
- net: ip_gre: Accept IFLA_INFO_DATA-less configuration
- tcp: repair: fix TCP_QUEUE_SEQ implementation
- s390/qeth: handle error when backing RX buffer
- ahci: Add Intel Comet Lake H RAID PCI ID
* Pop sound from build-in speaker during cold boot and resume from S3
(LP: #1866357) // Bionic update: upstream stable patchset 2020-04-03
(LP: #1870604)
- ALSA: hda/realtek: Fix pop noise on ALC225
* Bionic update: upstream stable patchset 2020-03-30 (LP: #1869732)
- phy: Revert toggling reset changes.
- net: phy: Avoid multiple suspends
- cgroup, netclassid: periodically release file_lock on classid updating
- gre: fix uninit-value in __iptunnel_pull_header
- ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface
- ipvlan: add cond_resched_rcu() while processing muticast backlog
- ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast()
- netlink: Use netlink header as base to calculate bad attribute offset
- net: macsec: update SCI upon MAC address change.
- net: nfc: fix bounds checking bugs on "pipe"
- net/packet: tpacket_rcv: do not increment ring index on drop
- sfc: detach from cb_page in efx_copy_channel()
- bnxt_en: reinitialize IRQs when MTU is modified
- cgroup: memcg: net: do not associate sock with unrelated cgroup
- net: memcg: late association of sock to memcg
- net: memcg: fix lockdep splat in inet_csk_accept()
- fib: add missing attribute validation for tun_id
- nl802154: add missing attribute validation
- nl802154: add missing attribute validation for dev_type
- can: add missing attribute validation for termination
- macsec: add missing attribute validation for port
- net: fq: add missing attribute validation for orphan mask
- team: add missing attribute validation for port ifindex
- team: add missing attribute validation for array index
- nfc: add missing attribute validation for SE API
- nfc: add missing attribute validation for vendor subcommand
- net: phy: fix MDIO bus PM PHY resuming
- bonding/alb: make sure arp header is pulled before accessing it
- slip: make slhc_compress() more robust against malicious packets
- net: fec: validate the new settings in fec_enet_set_coalesce()
- macvlan: add cond_resched() during multicast processing
- inet_diag: return classid for all socket types
- ipvlan: do not add hardware address of master to its unicast filter list
- ipvlan: egress mcast packets are not exceptional
- ipvlan: don't deref eth hdr before checking it's set
- cgroup: cgroup_procs_next should increase position index
- cgroup: Iterate tasks that did not finish do_exit()
- virtio-blk: fix hw_queue stopped on arbitrary error
- iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn +
add_taint
- workqueue: don't use wq_select_unbound_cpu() for bound works
- drm/amd/display: remove duplicated assignment to grph_obj_type
- ktest: Add timeout for ssh sync testing
- cifs_atomic_open(): fix double-put on late allocation failure
- gfs2_atomic_open(): fix O_EXCL|O_CREAT handling on cold dcache
- KVM: x86: clear stale x86_emulate_ctxt->intercept value
- ARC: define __ALIGN_STR and __ALIGN symbols for ARC
- efi: Fix a race and a buffer overflow while reading efivars via sysfs
- x86/mce: Fix logic and comments around MSR_PPIN_CTL
- iommu/dma: Fix MSI reservation allocation
- iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint
- iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page
- pinctrl: meson-gxl: fix GPIOX sdio pins
- pinctrl: core: Remove extra kref_get which blocks hogs being freed
- nl80211: add missing attribute validation for critical protocol indication
- nl80211: add missing attribute validation for beacon report scanning
- nl80211: add missing attribute validation for channel switch
- netfilter: cthelper: add missing attribute validation for cthelper
- netfilter: nft_payload: add missing attribute validation for payload csum
flags
- iommu/vt-d: Fix the wrong printing in RHSA parsing
- iommu/vt-d: Ignore devices with out-of-spec domain number
- i2c: acpi: put device when verifying client fails
- ipv6: restrict IPV6_ADDRFORM operation
- net/smc: check for valid ib_client_data
- efi: Add a sanity check to efivar_store_raw()
- batman-adv: Fix internal interface indices types
- batman-adv: update data pointers after skb_cow()
- batman-adv: Avoid race in TT TVLV allocator helper
- batman-adv: Fix TT sync flags for intermediate TT responses
- batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs
- batman-adv: Avoid free/alloc race when handling OGM2 buffer
- batman-adv: Don't schedule OGM for disabled interface
- perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag
- ACPI: watchdog: Allow disabling WDAT at boot
- HID: apple: Add support for recent firmware on Magic Keyboards
- cfg80211: check reg_rule for NULL in handle_channel_custom()
- scsi: libfc: free response frame from GPN_ID
- net: usb: qmi_wwan: restore mtu min/max values after raw_ip switch
- net: ks8851-ml: Fix IRQ handling and locking
- mac80211: rx: avoid RCU list traversal under mutex
- signal: avoid double atomic counter increments for user accounting
- slip: not call free_netdev before rtnl_unlock in slip_open
- hinic: fix a bug of setting hw_ioctxt
- net: rmnet: fix NULL pointer dereference in rmnet_newlink()
- jbd2: fix data races at struct journal_head
- ARM: 8957/1: VDSO: Match ARMv8 timer in cntvct_functional()
- ARM: 8958/1: rename missed uaccess .fixup section
- mm: slub: add missing TID bump in kmem_cache_alloc_bulk()
- ipv4: ensure rcu_read_lock() in cipso_v4_error()
- nfc: add missing attribute validation for deactivate target
- netfilter: nf_conntrack: ct_cpu_seq_next should increase position index
- netfilter: synproxy: synproxy_cpu_seq_next should increase position index
- netfilter: xt_recent: recent_seq_next should increase position index
- macintosh: windfarm: fix MODINFO regression
- i2c: gpio: suppress error on probe defer
- net/smc: cancel event worker during device removal
- hinic: fix a irq affinity bug
- net: rmnet: fix suspicious RCU usage
- net: rmnet: remove rcu_read_lock in rmnet_force_unassociate_device()
- net: rmnet: fix packet forwarding in rmnet bridge mode
- sfc: fix timestamp reconstruction at 16-bit rollover points
- driver core: Fix adding device links to probing suppliers
- net: qrtr: fix len of skb_put_padto in qrtr_node_enqueue
* This laptop contains a touchpadwhich is not recognized. (LP: #1858299) //
Bionic update: upstream stable patchset 2020-03-30 (LP: #1869732)
- HID: i2c-hid: add Trekstor Surfbook E11B to descriptor override
* Bionic update: upstream stable patchset 2020-03-23 (LP: #1868623)
- iwlwifi: pcie: fix rb_allocator workqueue allocation
- ext4: fix potential race between online resizing and write operations
- ext4: fix potential race between s_flex_groups online resizing and access
- ext4: fix potential race between s_group_info online resizing and access
- ipmi:ssif: Handle a possible NULL pointer reference
- drm/msm: Set dma maximum segment size for mdss
- dax: pass NOWAIT flag to iomap_apply
- mac80211: consider more elements in parsing CRC
- cfg80211: check wiphy driver existence for drvinfo report
- qmi_wwan: re-add DW5821e pre-production variant
- qmi_wwan: unconditionally reject 2 ep interfaces
- net: ena: fix potential crash when rxfh key is NULL
- net: ena: fix uses of round_jiffies()
- net: ena: add missing ethtool TX timestamping indication
- net: ena: fix incorrect default RSS key
- net: ena: rss: fix failure to get indirection table
- net: ena: rss: store hash function as values and not bits
- net: ena: fix incorrectly saving queue numbers when setting RSS indirection
table
- net: ena: ethtool: use correct value for crc32 hash
- net: ena: ena-com.c: prevent NULL pointer dereference
- cifs: Fix mode output in debugging statements
- cfg80211: add missing policy for NL80211_ATTR_STATUS_CODE
- sysrq: Restore original console_loglevel when sysrq disabled
- sysrq: Remove duplicated sysrq message
- net: fib_rules: Correctly set table field when table number exceeds 8 bits
- net: phy: restore mdio regs in the iproc mdio driver
- nfc: pn544: Fix occasional HW initialization failure
- sctp: move the format error check out of __sctp_sf_do_9_1_abort
- ipv6: Fix nlmsg_flags when splitting a multipath route
- ipv6: Fix route replacement with dev-only route
- qede: Fix race between rdma destroy workqueue and link change event
- net: sched: correct flower port blocking
- ext4: potential crash on allocation error in ext4_alloc_flex_bg_array()
- audit: fix error handling in audit_data_to_entry()
- ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro
- ACPI: watchdog: Fix gas->access_width usage
- KVM: VMX: check descriptor table exits on instruction emulation
- HID: ite: Only bind to keyboard USB interface on Acer SW5-012 keyboard dock
- HID: core: fix off-by-one memset in hid_report_raw_event()
- HID: core: increase HID report buffer size to 8KiB
- tracing: Disable trace_printk() on post poned tests
- Revert "PM / devfreq: Modify the device name as devfreq(X) for sysfs"
- HID: hiddev: Fix race in in hiddev_disconnect()
- MIPS: VPE: Fix a double free and a memory leak in 'release_vpe()'
- i2c: altera: Fix potential integer overflow
- i2c: jz4780: silence log flood on txabrt
- drm/i915/gvt: Separate display reset from ALL_ENGINES reset
- usb: charger: assign specific number for enum value
- ecryptfs: Fix up bad backport of fe2e082f5da5b4a0a92ae32978f81507ef37ec66
- net: netlink: cap max groups which will be considered in netlink_bind()
- net: atlantic: fix potential error handling
- net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE
- namei: only return -ECHILD from follow_dotdot_rcu()
- mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame()
- KVM: SVM: Override default MMIO mask if memory encryption is enabled
- KVM: Check for a bad hva before dropping into the ghc slow path
- drivers: net: xgene: Fix the order of the arguments of
'alloc_etherdev_mqs()'
- kprobes: Set unoptimized flag after unoptimizing code
- perf hists browser: Restore ESC as "Zoom out" of DSO/thread/etc
- mm/huge_memory.c: use head to check huge zero page
- mm, thp: fix defrag setting if newline is not used
- audit: always check the netlink payload length in audit_receive_msg()
- vhost: Check docket sk_family instead of call getname
- EDAC/amd64: Set grain per DIMM
- net: dsa: bcm_sf2: Forcibly configure IMP port for 1Gb/sec
- RDMA/core: Fix pkey and port assignment in get_new_pps
- RDMA/core: Fix use of logical OR in get_new_pps
- kprobes: Fix optimize_kprobe()/unoptimize_kprobe() cancellation logic
- serial: ar933x_uart: set UART_CS_{RX,TX}_READY_ORIDE
- selftests: fix too long argument
- usb: gadget: composite: Support more than 500mA MaxPower
- usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flags
- usb: gadget: serial: fix Tx stall after buffer overflow
- drm/msm/mdp5: rate limit pp done timeout warnings
- drm: msm: Fix return type of dsi_mgr_connector_mode_valid for kCFI
- drm/msm/dsi: save pll state before dsi host is powered off
- net: ks8851-ml: Remove 8-bit bus accessors
- net: ks8851-ml: Fix 16-bit data access
- net: ks8851-ml: Fix 16-bit IO operation
- watchdog: da9062: do not ping the hw during stop()
- s390/cio: cio_ignore_proc_seq_next should increase position index
- x86/boot/compressed: Don't declare __force_order in kaslr_64.c
- nvme: Fix uninitialized-variable warning
- x86/xen: Distribute switch variables for initialization
- net: thunderx: workaround BGX TX Underflow issue
- cifs: don't leak -EAGAIN for stat() during reconnect
- usb: storage: Add quirk for Samsung Fit flash
- usb: quirks: add NO_LPM quirk for Logitech Screen Share
- usb: core: hub: fix unhandled return by employing a void function
- usb: core: hub: do error out if usb_autopm_get_interface() fails
- usb: core: port: do error out if usb_autopm_get_interface() fails
- vgacon: Fix a UAF in vgacon_invert_region
- mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking
page tables prot_numa
- fat: fix uninit-memory access for partial initialized inode
- arm: dts: dra76x: Fix mmc3 max-frequency
- tty:serial:mvebu-uart:fix a wrong return
- serial: 8250_exar: add support for ACCES cards
- vt: selection, close sel_buffer race
- vt: selection, push console lock down
- vt: selection, push sel_lock up
- x86/pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes
- dmaengine: tegra-apb: Fix use-after-free
- dmaengine: tegra-apb: Prevent race conditions of tasklet vs free list
- dm cache: fix a crash due to incorrect work item cancelling
- ARM: dts: ls1021a: Restore MDIO compatible to gianfar
- ASoC: topology: Fix memleak in soc_tplg_link_elems_load()
- ASoC: intel: skl: Fix pin debug prints
- ASoC: intel: skl: Fix possible buffer overflow in debug outputs
- ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output
- ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path
- ASoC: dapm: Correct DAPM handling of active widgets during shutdown
- RDMA/iwcm: Fix iwcm work deallocation
- RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen()
- IB/hfi1, qib: Ensure RCU is locked when accessing list
- ARM: imx: build v7_cpu_resume() unconditionally
- hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT()
- dmaengine: coh901318: Fix a double lock bug in dma_tc_handle()
- powerpc: fix hardware PMU exception bug on PowerVM compatibility mode
systems
- dm integrity: fix a deadlock due to offloading to an incorrect workqueue
- xhci: handle port status events for removed USB3 hcd
- ASoC: topology: Fix memleak in soc_tplg_manifest_load()
- ALSA: hda/realtek - Apply quirk for MSI GP63, too
- ALSA: hda/realtek - Apply quirk for yet another MSI laptop
- USB: core: add endpoint-blacklist quirk
- USB: quirks: blacklist duplicate ep on Sound Devices USBPre2
- powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal
delivery
- jbd2: fix ocfs2 corrupt when clearing block group bits
- x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF
- genirq/irqdomain: Make sure all irq domain flags are distinct
- btrfs: reset fs_root to NULL on error in open_ctree
- usb: dwc2: Fix in ISOC request length checking
- rxrpc: Fix call RCU cleanup using non-bh-safe locks
- s390/zcrypt: fix card and queue total counter wrap
- ARM: dts: sti: fixup sound frame-inversion for stihxxx-b2120.dtsi
- macintosh: therm_windtunnel: fix regression when instantiating devices
- HID: alps: Fix an error handling path in 'alps_input_configured()'
- hv_netvsc: Fix unwanted wakeup in netvsc_attach()
- s390/qeth: vnicc Fix EOPNOTSUPP precedence
- net: atlantic: fix use after free kasan warn
- sched/fair: Optimize update_blocked_averages()
- sched/fair: Fix O(nr_cgroups) in the load balancing path
- KVM: x86: Remove spurious kvm_mmu_unload() from vcpu destruction path
- KVM: x86: Remove spurious clearing of async #PF MSR
- thermal: brcmstb_thermal: Do not use DT coefficients
- scsi: megaraid_sas: silence a warning
- net: dsa: b53: Ensure the default VID is untagged
- s390: make 'install' not depend on vmlinux
- s390/qdio: fill SL with absolute addresses
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master
- efi/x86: Align GUIDs to their size in the mixed mode runtime wrapper
- efi/x86: Handle by-ref arguments covering multiple pages in mixed mode
- scsi: pm80xx: Fixed kernel panic during error recovery for SATA drive
* Bionic update: upstream stable patchset 2020-03-17 (LP: #1867837)
- iommu/qcom: Fix bogus detach logic
- ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs
- ASoC: sun8i-codec: Fix setting DAI data format
- ecryptfs: fix a memory leak bug in parse_tag_1_packet()
- ecryptfs: fix a memory leak bug in ecryptfs_init_messaging()
- arm64: nofpsimd: Handle TIF_FOREIGN_FPSTATE flag cleanly
- ARM: 8723/2: always assume the "unified" syntax for assembly code
- serial: imx: ensure that RX irqs are off if RX is off
- serial: imx: Only handle irqs that are actually enabled
- KVM: nVMX: Use correct root level for nested EPT shadow page tables
- drm/gma500: Fixup fbdev stolen size usage evaluation
- cpu/hotplug, stop_machine: Fix stop_machine vs hotplug order
- brcmfmac: Fix use after free in brcmf_sdio_readframes()
- leds: pca963x: Fix open-drain initialization
- ext4: fix ext4_dax_read/write inode locking sequence for IOCB_NOWAIT
- ALSA: ctl: allow TLV read operation for callback type of element in locked
case
- gianfar: Fix TX timestamping with a stacked DSA driver
- pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs
- pxa168fb: Fix the function used to release some memory in an error handling
path
- media: i2c: mt9v032: fix enum mbus codes and frame sizes
- powerpc/powernv/iov: Ensure the pdn for VFs always contains a valid PE
number
- gpio: gpio-grgpio: fix possible sleep-in-atomic-context bugs in
grgpio_irq_map/unmap()
- media: sti: bdisp: fix a possible sleep-in-atomic-context bug in
bdisp_device_run()
- pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins
- efi/x86: Map the entire EFI vendor string before copying it
- MIPS: Loongson: Fix potential NULL dereference in loongson3_platform_init()
- sparc: Add .exit.data section.
- uio: fix a sleep-in-atomic-context bug in uio_dmem_genirq_irqcontrol()
- usb: gadget: udc: fix possible sleep-in-atomic-context bugs in gr_probe()
- usb: dwc2: Fix IN FIFO allocation
- clocksource/drivers/bcm2835_timer: Fix memory leak of timer
- kselftest: Minimise dependency of get_size on C library interfaces
- jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info
when load journal
- x86/sysfb: Fix check for bad VRAM size
- tracing: Fix tracing_stat return values in error handling paths
- tracing: Fix very unlikely race of registering two stat tracers
- ext4, jbd2: ensure panic when aborting with zero errno
- nbd: add a flush_workqueue in nbd_start_device
- KVM: s390: ENOTSUPP -> EOPNOTSUPP fixups
- kconfig: fix broken dependency in randconfig-generated .config
- clk: qcom: rcg2: Don't crash if our parent can't be found; return an error
- drm/amdgpu: remove 4 set but not used variable in
amdgpu_atombios_get_connector_info_from_object_table
- regulator: rk808: Lower log level on optional GPIOs being not available
- net/wan/fsl_ucc_hdlc: reject muram offsets above 64K
- PCI/IOV: Fix memory leak in pci_iov_add_virtfn()
- NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use
le16_add_cpu().
- arm64: dts: qcom: msm8996: Disable USB2 PHY suspend by core
- ARM: dts: imx6: rdu2: Disable WP for USDHC2 and USDHC3
- media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in v4l2_device
macros
- reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling
- fore200e: Fix incorrect checks of NULL pointer dereference
- ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status
- b43legacy: Fix -Wcast-function-type
- ipw2x00: Fix -Wcast-function-type
- iwlegacy: Fix -Wcast-function-type
- rtlwifi: rtl_pci: Fix -Wcast-function-type
- orinoco: avoid assertion in case of NULL pointer
- ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1
- scsi: ufs: Complete pending requests in host reset and restore path
- scsi: aic7xxx: Adjust indentation in ahc_find_syncrate
- drm/mediatek: handle events when enabling/disabling crtc
- ARM: dts: r8a7779: Add device node for ARM global timer
- dmaengine: Store module owner in dma_device struct
- x86/vdso: Provide missing include file
- PM / devfreq: rk3399_dmc: Add COMPILE_TEST and HAVE_ARM_SMCCC dependency
- pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs
- RDMA/rxe: Fix error type of mmap_offset
- clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock
- ALSA: sh: Fix unused variable warnings
- ALSA: sh: Fix compile warning wrt const
- tools lib api fs: Fix gcc9 stringop-truncation compilation error
- drm: remove the newline for CRC source name.
- usbip: Fix unsafe unaligned pointer usage
- udf: Fix free space reporting for metadata and virtual partitions
- IB/hfi1: Add software counter for ctxt0 seq drop
- soc/tegra: fuse: Correct straps' address for older Tegra124 device trees
- efi/x86: Don't panic or BUG() on non-critical error conditions
- rcu: Use WRITE_ONCE() for assignments to ->pprev for hlist_nulls
- Input: edt-ft5x06 - work around first register access error
- wan: ixp4xx_hss: fix compile-testing on 64-bit
- ASoC: atmel: fix build error with CONFIG_SND_ATMEL_SOC_DMA=m
- tty: synclinkmp: Adjust indentation in several functions
- tty: synclink_gt: Adjust indentation in several functions
- driver core: platform: Prevent resouce overflow from causing infinite loops
- driver core: Print device when resources present in really_probe()
- vme: bridges: reduce stack usage
- drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new()
- drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw
- drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler
- drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add
- usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue
- iommu/arm-smmu-v3: Use WRITE_ONCE() when changing validity of an STE
- f2fs: free sysfs kobject
- scsi: iscsi: Don't destroy session if there are outstanding connections
- arm64: fix alternatives with LLVM's integrated assembler
- watchdog/softlockup: Enforce that timestamp is valid on boot
- f2fs: fix memleak of kobject
- x86/mm: Fix NX bit clearing issue in kernel_map_pages_in_pgd
- pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional
- cmd64x: potential buffer overflow in cmd64x_program_timings()
- ide: serverworks: potential overflow in svwks_set_pio_mode()
- pwm: Remove set but not set variable 'pwm'
- btrfs: fix possible NULL-pointer dereference in integrity checks
- btrfs: safely advance counter when looking up bio csums
- btrfs: device stats, log when stats are zeroed
- remoteproc: Initialize rproc_class before use
- irqchip/mbigen: Set driver .suppress_bind_attrs to avoid remove problems
- ALSA: hda/hdmi - add retry logic to parse_intel_hdmi()
- x86/decoder: Add TEST opcode to Group3-2
- s390/ftrace: generate traced function stack frame
- driver core: platform: fix u32 greater or equal to zero comparison
- ALSA: hda - Add docking station support for Lenovo Thinkpad T420s
- powerpc/sriov: Remove VF eeh_dev state when disabling SR-IOV
- jbd2: switch to use jbd2_journal_abort() when failed to submit the commit
record
- jbd2: make sure ESHUTDOWN to be recorded in the journal superblock
- ARM: 8951/1: Fix Kexec compilation issue.
- hostap: Adjust indentation in prism2_hostapd_add_sta
- iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop
- cifs: fix NULL dereference in match_prepath
- ceph: check availability of mds cluster on mount after wait timeout
- irqchip/gic-v3: Only provision redistributors that are enabled in ACPI
- drm/nouveau/disp/nv50-: prevent oops when no channel method map provided
- ftrace: fpid_next() should increase position index
- trigger_next should increase position index
- radeon: insert 10ms sleep in dce5_crtc_load_lut
- ocfs2: fix a NULL pointer dereference when call
ocfs2_update_inode_fsync_trans()
- lib/scatterlist.c: adjust indentation in __sg_alloc_table
- reiserfs: prevent NULL pointer dereference in reiserfs_insert_item()
- bcache: explicity type cast in bset_bkey_last()
- irqchip/gic-v3-its: Reference to its_invall_cmd descriptor when building
INVALL
- iwlwifi: mvm: Fix thermal zone registration
- microblaze: Prevent the overflow of the start
- brd: check and limit max_part par
- help_next should increase position index
- virtio_balloon: prevent pfn array overflow
- mlxsw: spectrum_dpipe: Add missing error path
- selinux: ensure we cleanup the internal AVC counters on error in
avc_update()
- enic: prevent waking up stopped tx queues over watchdog reset
- net: dsa: tag_qca: Make sure there is headroom for tag
- net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS
- net/sched: flower: add missing validation of TCA_FLOWER_FLAGS
- net/smc: fix leak of kernel memory to user space
- thunderbolt: Prevent crash if non-active NVMem file is read
- USB: misc: iowarrior: add support for 2 OEMed devices
- USB: misc: iowarrior: add support for the 28 and 28L devices
- USB: misc: iowarrior: add support for the 100 device
- floppy: check FDC index for errors before assigning it
- vt: selection, handle pending signals in paste_selection
- staging: android: ashmem: Disallow ashmem memory from being remapped
- staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi.
- xhci: Force Maximum Packet size for Full-speed bulk devices to valid range.
- xhci: fix runtime pm enabling for quirky Intel hosts
- usb: host: xhci: update event ring dequeue pointer on purpose
- usb: uas: fix a plug & unplug racing
- USB: Fix novation SourceControl XL after suspend
- USB: hub: Don't record a connect-change event during reset-resume
- USB: hub: Fix the broken detection of USB3 device in SMSC hub
- staging: rtl8188eu: Fix potential security hole
- staging: rtl8188eu: Fix potential overuse of kernel memory
- staging: rtl8723bs: Fix potential security hole
- staging: rtl8723bs: Fix potential overuse of kernel memory
- x86/mce/amd: Publish the bank pointer only after setup has succeeded
- x86/mce/amd: Fix kobject lifetime
- tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode
- tty: serial: imx: setup the correct sg entry for tx dma
- serdev: ttyport: restore client ops on deregistration
- MAINTAINERS: Update drm/i915 bug filing URL
- mm/vmscan.c: don't round up scan size for online memory cgroup
- drm/amdgpu/soc15: fix xclk for raven
- KVM: x86: don't notify userspace IOAPIC on edge-triggered interrupt EOI
- xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms
- vt: vt_ioctl: fix race in VT_RESIZEX
- serial: 8250: Check UPF_IRQ_SHARED in advance
- lib/stackdepot.c: fix global out-of-bounds in stack_slabs
- ext4: fix a data race in EXT4_I(inode)->i_disksize
- ext4: add cond_resched() to __ext4_find_entry()
- ext4: rename s_journal_flag_rwsem to s_writepages_rwsem
- ext4: fix race between writepages and enabling EXT4_EXTENTS_FL
- KVM: nVMX: handle nested posted interrupts when apicv is disabled for L1
- KVM: apic: avoid calculating pending eoi from an uninitialized val
- btrfs: fix bytes_may_use underflow in prealloc error condtition
- btrfs: do not check delayed items are empty for single transaction cleanup
- Btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered
extents
- scsi: Revert "RDMA/isert: Fix a recently introduced regression related to
logout"
- scsi: Revert "target: iscsi: Wait for all commands to finish before freeing
a session"
- usb: gadget: composite: Fix bMaxPower for SuperSpeedPlus
- staging: rtl8723bs: fix copy of overlapping memory
- staging: greybus: use after free in gb_audio_manager_remove_all()
- ecryptfs: replace BUG_ON with error handling code
- iommu/vt-d: Fix compile warning from intel-svm.h
- genirq/proc: Reject invalid affinity masks (again)
- ALSA: rawmidi: Avoid bit fields for state flags
- ALSA: seq: Avoid concurrent access to queue flags
- ALSA: seq: Fix concurrent access to queue current tick/time
- netfilter: xt_hashlimit: limit the max size of hashtable
- ata: ahci: Add shutdown to freeze hardware resources of ahci
- xen: Enable interrupts when calling _cond_resched()
- s390/mm: Explicitly compare PAGE_DEFAULT_KEY against zero in
storage_key_init_range
- arm: dts: allwinner: H3: Add PMU node
- ARM: dts: imx6: rdu2: Limit USBH1 to Full Speed
- PCI: iproc: Apply quirk_paxc_bridge() for module as well as built-in
- media: cx23885: Add support for AVerMedia CE310B
- staging: rtl8188: avoid excessive stack usage
- x86/nmi: Remove irq_work from the long duration NMI handler
- visorbus: fix uninitialized variable access
- drm/nouveau/drm/ttm: Remove set but not used variable 'mem'
- f2fs: set I_LINKABLE early to avoid wrong access by vfs
- s390: adjust -mpacked-stack support check for clang 10
- drm/nouveau/mmu: fix comptag memory leak
* Multiple Kexec in AWS Nitro instances fail (LP: #1869948)
- net: ena: Add PCI shutdown handler to allow safe kexec
* Support SMO8840 as LIS2DH12 (LP: #1869694)
- iio: st_sensors: remap SMO8840 to LIS2DH12
* CVE-2019-19768
- blktrace: Protect q->blk_trace with RCU
- blktrace: fix dereference after null check
* No audio output from Dell WD19 HDMI/DP after resumed from S3 or s2idle
(LP: #1869642)
- PM / runtime: Rework pm_runtime_force_suspend/resume()
* reuseport_bpf_numa in net from ubuntu_kernel_selftests failed on i386
(LP: #1812638)
- selftests: net: reuseport_bpf_numa: don't fail if no numa support
* Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
(LP: #1866772)
- SAUCE: ACPI: sysfs: copy ACPI data using io memory copying
* update-version-dkms doesn't add a BugLink (LP: #1867790)
- [Packaging] Add BugLink to update-version-dkms commit
* Packaging resync (LP: #1786013)
- update dkms package versions
[ Ubuntu: 4.15.0-96.97 ]
* CVE-2020-8834
- KVM: PPC: Book3S HV: Factor fake-suspend handling out of
kvmppc_save/restore_tm
- KVM: PPC: Book3S PR: Move kvmppc_save_tm/kvmppc_restore_tm to separate file
- KVM: PPC: Book3S PR: Add guest MSR parameter for
kvmppc_save_tm()/kvmppc_restore_tm()
-- Stefan Bader <email address hidden> Wed, 08 Apr 2020 17:14:00 +0200
-
linux-aws (4.15.0-1065.69) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1065.69 -proposed tracker (LP: #1868967)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
[ Ubuntu: 4.15.0-94.95 ]
* bionic/linux: 4.15.0-94.95 -proposed tracker (LP: #1868984)
* Missing wireless network interface after kernel 5.3.0-43 upgrade with eoan
(LP: #1868442)
- iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168 devices
[ Ubuntu: 4.15.0-93.94 ]
* bionic/linux: 4.15.0-93.94 -proposed tracker (LP: #1868764)
* quotactl04 from ubuntu_ltp_syscalls failed with B (LP: #1868665)
- ext4: fix mount failure with quota configured as module
linux-aws (4.15.0-1064.68) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1064.68 -proposed tracker (LP: #1867255)
[ Ubuntu: 4.15.0-92.93 ]
* bionic/linux: 4.15.0-92.93 -proposed tracker (LP: #1867272)
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
- [Packaging] update helper scripts
* Introduce the new NVIDIA 440 series, and add 5.4 Linux compatibility to the
340 and 390 series (LP: #1854485)
- [Packaging] NVIDIA -- add support for the 435 and the 440 series
* Stop using get_scalar_status command in Dell AIO uart backlight driver
(LP: #1865402)
- SAUCE: platform/x86: dell-uart-backlight: add get_display_mode command
* Bionic update: upstream stable patchset 2020-03-12 (LP: #1867194)
- RDMA/core: Fix locking in ib_uverbs_event_read
- gpio: zynq: Report gpio direction at boot
- arm64: ptrace: nofpsimd: Fail FP/SIMD regset operations
- KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests
- KVM: arm: Make inject_abt32() inject an external abort instead
- mtd: onenand_base: Adjust indentation in onenand_read_ops_nolock
- mtd: sharpslpart: Fix unsigned comparison to zero
- padata: fix null pointer deref of pd->pinst
- Input: synaptics - switch T470s to RMI4 by default
- Input: synaptics - enable SMBus on ThinkPad L470
- Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list
- ALSA: hda/realtek - Fix silent output on MSI-GL73
- ALSA: usb-audio: Apply sample rate quirk for Audioengine D1
- arm64: cpufeature: Set the FP/SIMD compat HWCAP bits properly
- ALSA: usb-audio: sound: usb: usb true/false for bool return type
- ext4: don't assume that mmp_nodename/bdevname have NUL
- ext4: fix support for inode sizes > 1024 bytes
- ext4: fix checksum errors with indexed dirs
- ext4: add cond_resched() to ext4_protect_reserved_inode
- ext4: improve explanation of a mount failure caused by a misconfigured
kernel
- Btrfs: fix race between using extent maps and merging them
- btrfs: ref-verify: fix memory leaks
- btrfs: print message when tree-log replay starts
- btrfs: log message when rw remount is attempted with unclean tree-log
- arm64: ssbs: Fix context-switch when SSBS is present on all CPUs
- perf/x86/amd: Add missing L2 misses event spec to AMD Family 17h's event map
- IB/hfi1: Close window for pq and request coliding
- IB/rdmavt: Reset all QPs when the device is shut down
- RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq
- RDMA/core: Fix protection fault in get_pkey_idx_qp_list
- s390/time: Fix clk type in get_tod_clock
- perf/x86/intel: Fix inaccurate period in context switch for auto-reload
- hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions.
- jbd2: move the clearing of b_modified flag to the journal_unmap_buffer()
- jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer
- KVM: x86/mmu: Fix struct guest_walker arrays for 5-level paging
* Bionic update: upstream stable patchset 2020-03-09 (LP: #1866678)
- kernel/module: Fix memleak in module_add_modinfo_attrs()
- media: iguanair: fix endpoint sanity check
- x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR
- iwlwifi: mvm: fix NVM check for 3168 devices
- sparc32: fix struct ipc64_perm type definition
- cls_rsvp: fix rsvp_policy
- gtp: use __GFP_NOWARN to avoid memalloc warning
- l2tp: Allow duplicate session creation with UDP
- net: hsr: fix possible NULL deref in hsr_handle_frame()
- net_sched: fix an OOB access in cls_tcindex
- bnxt_en: Fix TC queue mapping.
- tcp: clear tp->total_retrans in tcp_disconnect()
- tcp: clear tp->delivered in tcp_disconnect()
- tcp: clear tp->data_segs{in|out} in tcp_disconnect()
- tcp: clear tp->segs_{in|out} in tcp_disconnect()
- rxrpc: Fix insufficient receive notification generation
- rxrpc: Fix NULL pointer deref due to call->conn being cleared on disconnect
- media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
- mfd: dln2: More sanity checking for endpoints
- tracing: Fix sched switch start/stop refcount racy updates
- brcmfmac: Fix memory leak in brcmf_usbdev_qinit
- usb: gadget: legacy: set max_speed to super-speed
- usb: gadget: f_ncm: Use atomic_t to track in-flight request
- usb: gadget: f_ecm: Use atomic_t to track in-flight request
- ALSA: dummy: Fix PCM format loop in proc output
- media/v4l2-core: set pages dirty upon releasing DMA buffers
- media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments
- lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more()
- irqdomain: Fix a memory leak in irq_domain_push_irq()
- platform/x86: intel_scu_ipc: Fix interrupt support
- KVM: arm64: Only sign-extend MMIO up to register width
- MIPS: fix indentation of the 'RELOCS' message
- s390/mm: fix dynamic pagetable upgrade for hugetlbfs
- powerpc/xmon: don't access ASDR in VMs
- powerpc/pseries: Advance pfn if section is not present in lmb_is_removable()
- mmc: spi: Toggle SPI polarity, do not hardcode it
- ACPI: video: Do not export a non working backlight interface on MSI MS-7721
boards
- alarmtimer: Unregister wakeup source when module get fails
- ubifs: Reject unsupported ioctl flags explicitly
- ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag
- ubifs: Fix deadlock in concurrent bulk-read and writepage
- PCI: keystone: Fix link training retries initiation
- mmc: sdhci-of-at91: fix memleak on clk_get failure
- ubifs: don't trigger assertion on invalid no-key filename
- hv_balloon: Balloon up according to request page number
- crypto: api - Check spawn->alg under lock in crypto_drop_spawn
- scsi: qla2xxx: Fix mtcp dump collection failure
- power: supply: ltc2941-battery-gauge: fix use-after-free
- f2fs: choose hardlimit when softlimit is larger than hardlimit in
f2fs_statfs_project()
- f2fs: fix miscounted block limit in f2fs_statfs_project()
- f2fs: code cleanup for f2fs_statfs_project()
- PM: core: Fix handling of devices deleted during system-wide resume
- [Config] updateconfigs for CONFIG_OF_DMA_DEFAULT_COHERENT
- of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc
- dm zoned: support zone sizes smaller than 128MiB
- dm space map common: fix to ensure new block isn't already in use
- dm crypt: fix benbi IV constructor crash if used in authenticated mode
- tracing: Annotate ftrace_graph_hash pointer with __rcu
- tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu
- ftrace: Add comment to why rcu_dereference_sched() is open coded
- ftrace: Protect ftrace_graph_hash with ftrace_sync
- samples/bpf: Don't try to remove user's homedir on clean
- crypto: ccp - set max RSA modulus size for v3 platform devices as well
- crypto: pcrypt - Do not clear MAY_SLEEP flag in original request
- crypto: atmel-aes - Fix counter overflow in CTR mode
- crypto: api - Fix race condition in crypto_spawn_alg
- crypto: picoxcell - adjust the position of tasklet_init and fix missed
tasklet_kill
- scsi: qla2xxx: Fix unbound NVME response length
- NFS: Fix memory leaks and corruption in readdir
- NFS: Directory page cache pages need to be locked when read
- btrfs: set trans->drity in btrfs_commit_transaction
- ARM: tegra: Enable PLLP bypass during Tegra124 LP1
- iwlwifi: don't throw error when trying to remove IGTK
- mwifiex: fix unbalanced locking in mwifiex_process_country_ie()
- sunrpc: expiry_time should be seconds not timeval
- tools/kvm_stat: Fix kvm_exit filter name
- xen/balloon: Support xend-based toolstack take two
- KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks
- KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks
- KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks
- KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks
- KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF
attacks
- KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks
- KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF
attacks
- KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks
- KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks
in x86.c
- KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks
- KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit()
from Spectre-v1/L1TF attacks
- KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails
- KVM: PPC: Book3S PR: Free shared page if mmu initialization fails
- KVM: x86: Free wbinvd_dirty_mask if vCPU creation fails
- clk: tegra: Mark fuse clock as critical
- scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type
- scsi: csiostor: Adjust indentation in csio_device_reset
- scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free
- scsi: ufs: Recheck bkops level if bkops is disabled
- phy: qualcomm: Adjust indentation in read_poll_timeout
- ext2: Adjust indentation in ext2_fill_super
- powerpc/44x: Adjust indentation in ibm4xx_denali_fixup_memsize
- NFC: pn544: Adjust indentation in pn544_hci_check_presence
- ppp: Adjust indentation into ppp_async_input
- net: smc911x: Adjust indentation in smc911x_phy_configure
- net: tulip: Adjust indentation in {dmfe, uli526x}_init_module
- IB/mlx5: Fix outstanding_pi index for GSI qps
- IB/core: Fix ODP get user pages flow
- nfsd: fix delay timer on 32-bit architectures
- nfsd: fix jiffies/time_t mixup in LRU list
- ubi: fastmap: Fix inverted logic in seen selfcheck
- ubi: Fix an error pointer dereference in error handling code
- mfd: da9062: Fix watchdog compatible string
- mfd: rn5t618: Mark ADC control register volatile
- net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port
- net_sched: fix a resource leak in tcindex_set_parms()
- net: systemport: Avoid RBUF stuck in Wake-on-LAN mode
- net: macb: Remove unnecessary alignment check for TSO
- net: macb: Limit maximum GEM TX length in TSO
- bonding/alb: properly access headers in bond_alb_xmit()
- ext4: fix deadlock allocating crypto bounce page from mempool
- btrfs: Get rid of the confusing btrfs_file_extent_inline_len
- Btrfs: fix missing hole after hole punching and fsync when using NO_HOLES
- btrfs: use bool argument in free_root_pointers()
- btrfs: free block groups after free'ing fs trees
- btrfs: remove trivial locking wrappers of tree mod log
- Btrfs: fix race between adding and putting tree mod seq elements and nodes
- drm: atmel-hlcdc: enable clock before configuring timing engine
- KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks
- btrfs: flush write bio if we loop in extent_write_cache_pages
- KVM: x86: Fix potential put_fpu() w/o load_fpu() on MPX platform
- KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM
- KVM: nVMX: vmread should not set rflags to specify success in case of #PF
- KVM: Use vcpu-specific gva->hva translation when querying host page size
- KVM: Play nice with read-only memslots when querying host page size
- KVM: s390: do not clobber registers during guest reset/store status
- cifs: fail i/o on soft mounts if sessionsetup errors out
- clocksource: Prevent double add_timer_on() for watchdog_timer
- perf/core: Fix mlock accounting in perf_mmap()
- rxrpc: Fix service call disconnection
- ASoC: pcm: update FE/BE trigger order based on the command
- hv_sock: Remove the accept port restriction
- RDMA/netlink: Do not always generate an ACK for some netlink operations
- scsi: ufs: Fix ufshcd_probe_hba() reture value in case
ufshcd_scsi_add_wlus() fails
- PCI/switchtec: Fix vep_vector_number ioread width
- PCI: Don't disable bridge BARs when assigning bus resources
- nfs: NFS_SWAP should depend on SWAP
- NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes()
- NFSv4: try lease recovery on NFS4ERR_EXPIRED
- serial: uartps: Add a timeout to the tx empty wait
- rtc: hym8563: Return -EINVAL if the time is known to be invalid
- rtc: cmos: Stop using shared IRQ
- ARC: [plat-axs10x]: Add missing multicast filter number to GMAC node
- platform/x86: intel_mid_powerbtn: Take a copy of ddata
- ARM: dts: at91: sama5d3: fix maximum peripheral clock rates
- ARM: dts: at91: sama5d3: define clock rate range for tcb1
- tools/power/acpi: fix compilation error
- powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning
- powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce
for DDW
- KVM: arm/arm64: vgic-its: Fix restoration of unmapped collections
- ARM: 8949/1: mm: mark free_memmap as __init
- arm64: cpufeature: Fix the type of no FP/SIMD capability
- KVM: arm/arm64: Fix young bit from mmu notifier
- crypto: artpec6 - return correct error code for failed setkey()
- crypto: atmel-sha - fix error handling when setting hmac key
- media: i2c: adv748x: Fix unsafe macros
- pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B
- scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state
- serial: uartps: Move the spinlock after the read of the tx empty
- mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()
- mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()
- libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held
- libertas: make lbs_ibss_join_existing() return error code on rates overflow
- udf: Allow writing to 'Rewritable' partitions
- printk: fix exclusive_console replaying
- usb: typec: tcpci: mask event interrupts when remove driver
- ALSA: hda: Add Clevo W65_67SB the power_save blacklist
- KVM: arm/arm64: Correct AArch32 SPSR on exception entry
- crypto: geode-aes - convert to skcipher API and make thread-safe
- mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile
- scripts/find-unused-docs: Fix massive false positives
- padata: Remove broken queue flushing
- jbd2_seq_info_next should increase position index
- watchdog: fix UAF in reboot notifier handling in watchdog core code
- bcache: add readahead cache policy options via sysfs interface
- eventfd: track eventfd_signal() recursion depth
- x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
- drm/amd/dm/mst: Ignore payload update failures
- percpu: Separate decrypted varaibles anytime encryption can be enabled
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable
- net: dsa: b53: Always use dev->vlan_enabled in b53_configure_vlan()
- drm/dp_mst: Remove VCPI while disabling topology mgr
- KVM: x86: Use gpa_t for cr2/gpa to fix TDP support on 32-bit KVM
- x86/apic/msi: Plug non-maskable MSI affinity race
* 5.4.0-11 crash on cryptsetup open (LP: #1860231) // Bionic update: upstream
stable patchset 2020-03-09 (LP: #1866678)
- dm: fix potential for q->make_request_fn NULL pointer
* r8152 init may take up to 40 seconds at initialization with Dell WD19/WD19DC
during hotplug (LP: #1864284)
- UBUNTU SAUCE: r8152: check disconnect status after long sleep
* The voice recording function cannot work while connecting a headset on a
Dell machine (LP: #1866581)
- SAUCE: ALSA: hda/realtek - Add Headset Mic supported
* xfs fill_fs test in fallocate06 from ubuntu_ltp_syscalls failed
(LP: #1865967)
- xfs: Fix tail rounding in xfs_alloc_file_space()
* [hns3-0114]net: hns3: fix ETS bandwidth validation bug (LP: #1859569)
- net: hns3: fix ETS bandwidth validation bug
* alsa/hda/realtek: fix a mute led regression on Lenovo X1 Carbon
(LP: #1864576)
- SAUCE: ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1
* [hns3-0120]pad the short frame before sending to the hardware (LP: #1860320)
- net: hns3: pad the short frame before sending to the hardware
* ipc/sem.c : process loops infinitely in exit_sem() (LP: #1858834)
- Revert "ipc, sem: remove uneeded sem_undo_list lock usage in exit_sem()"
* ftrace test in ubuntu_kernel_selftests will timeout randomly (LP: #1864172)
- tracing/selftests: Turn off timeout setting
* quotactl07 from ubuntu_ltp_syscalls failed (LP: #1864092)
- xfs: Sanity check flags of Q_XQUOTARM call
* [bionic] updates to Exar USB serial driver (LP: #1863834)
- SAUCE: xr-usb-serial: Update driver for Exar USB serial ports
- SAUCE: xr-usb-serial: re-initialise baudrate after resume from S3/S4
- SAUCE: xr-usb-serial: Changes to support updates in struct gpio_chip
- SAUCE: xr-usb-serial: fix kbuild
* [bionic] hts221 sensor stops working after resume from S3/S4
(LP: #1863732)
- SAUCE: iio: humidity: hts221: Fix sensor reads after resume
* Bionic update: upstream stable patchset 2020-02-26 (LP: #1864904)
- orinoco_usb: fix interface sanity check
- rsi_91x_usb: fix interface sanity check
- USB: serial: ir-usb: add missing endpoint sanity check
- USB: serial: ir-usb: fix link-speed handling
- USB: serial: ir-usb: fix IrLAP framing
- usb: dwc3: turn off VBUS when leaving host mode
- staging: most: net: fix buffer overflow
- staging: wlan-ng: ensure error return is actually returned
- staging: vt6656: correct packet types for CTS protect, mode.
- staging: vt6656: use NULLFUCTION stack on mac80211
- staging: vt6656: Fix false Tx excessive retries reporting.
- serial: 8250_bcm2835aux: Fix line mismatch on driver unbind
- crypto: chelsio - fix writing tfm flags to wrong place
- ath9k: fix storage endpoint lookup
- brcmfmac: fix interface sanity check
- rtl8xxxu: fix interface sanity check
- zd1211rw: fix storage endpoint lookup
- arc: eznps: fix allmodconfig kconfig warning
- HID: ite: Add USB id match for Acer SW5-012 keyboard dock
- phy: cpcap-usb: Prevent USB line glitches from waking up modem
- watchdog: max77620_wdt: fix potential build errors
- watchdog: rn5t618_wdt: fix module aliases
- spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls
- drivers/net/b44: Change to non-atomic bit operations on pwol_mask
- net: wan: sdla: Fix cast from pointer to integer of different size
- gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP
- atm: eni: fix uninitialized variable warning
- PCI: Add DMA alias quirk for Intel VCA NTB
- usb-storage: Disable UAS on JMicron SATA enclosure
- net_sched: ematch: reject invalid TCF_EM_SIMPLE
- rsi: fix use-after-free on probe errors
- crypto: af_alg - Use bh_lock_sock in sk_destruct
- vfs: fix do_last() regression
- x86/resctrl: Fix use-after-free when deleting resource groups
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup
- x86/resctrl: Fix a deadlock due to inaccurate reference
- crypto: pcrypt - Fix user-after-free on module unload
- perf c2c: Fix return type for histogram sorting comparision functions
- PM / devfreq: Add new name attribute for sysfs
- tools lib: Fix builds when glibc contains strlcpy()
- arm64: kbuild: remove compressed images on 'make ARCH=arm64 (dist)clean'
- ext4: validate the debug_want_extra_isize mount option at parse time
- mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
- reiserfs: Fix memory leak of journal device string
- media: digitv: don't continue if remote control state can't be read
- media: af9005: uninitialized variable printked
- media: gspca: zero usb_buf
- media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
- ttyprintk: fix a potential deadlock in interrupt context issue
- Bluetooth: Fix race condition in hci_release_sock()
- cgroup: Prevent double killing of css when enabling threaded cgroup
- media: si470x-i2c: Move free() past last use of 'radio'
- ARM: dts: sun8i: a83t: Correct USB3503 GPIOs polarity
- ARM: dts: beagle-x15-common: Model 5V0 regulator
- soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot
- mac80211: mesh: restrict airtime metric to peered established plinks
- clk: mmp2: Fix the order of timer mux parents
- ixgbevf: Remove limit of 10 entries for unicast filter list
- ixgbe: Fix calculation of queue with VFs and flow director on interface flap
- igb: Fix SGMII SFP module discovery for 100FX/LX.
- ASoC: sti: fix possible sleep-in-atomic
- qmi_wwan: Add support for Quectel RM500Q
- wireless: fix enabling channel 12 for custom regulatory domain
- cfg80211: Fix radar event during another phy CAC
- mac80211: Fix TKIP replay protection immediately after key setup
- wireless: wext: avoid gcc -O3 warning
- net: dsa: bcm_sf2: Configure IMP port for 2Gb/sec
- bnxt_en: Fix ipv6 RFS filter matching logic.
- ARM: dts: am335x-boneblack-common: fix memory size
- vti[6]: fix packet tx through bpf_redirect()
- scsi: fnic: do not queue commands during fwreset
- ARM: 8955/1: virt: Relax arch timer version check during early boot
- tee: optee: Fix compilation issue with nommu
- airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE
- airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE
- r8152: get default setting of WOL before initializing
- qlcnic: Fix CPU soft lockup while collecting firmware dump
- powerpc/fsl/dts: add fsl,erratum-a011043
- net/fsl: treat fsl,erratum-a011043
- net: fsl/fman: rename IF_MODE_XGMII to IF_MODE_10G
- seq_tab_next() should increase position index
- l2t_seq_next should increase position index
- net: Fix skb->csum update in inet_proto_csum_replace16().
- btrfs: do not zero f_bavail if we have available space
- perf report: Fix no libunwind compiled warning break s390 issue
- iio: st_gyro: Correct data for LSM9DS0 gyro
- net_sched: fix ops->bind_class() implementations
- HID: Add quirk for Xin-Mo Dual Controller
- HID: Add quirk for incorrect input length on Lenovo Y720
- phy: qcom-qmp: Increase PHY ready timeout
- platform/x86: dell-laptop: disable kbd backlight on Inspiron 10xx
- sched/fair: Add tmp_alone_branch assertion
- sched/fair: Fix insertion in rq->leaf_cfs_rq_list
- random: try to actively add entropy rather than passively wait for it
- block: cleanup __blkdev_issue_discard()
- block: fix 32 bit overflow in __blkdev_issue_discard()
- media: vp7045: do not read uninitialized values if usb transfer fails
- tomoyo: Use atomic_t for statistics counter
- tools lib traceevent: Fix memory leakage in filter_event
- parisc: Use proper printk format for resource_size_t
- riscv: delete temporary files
- ARM: dts: am43x-epos-evm: set data pin directions for spi0 and spi1
* Bionic update: upstream stable patchset 2020-02-21 (LP: #1864261)
- firestream: fix memory leaks
- gtp: make sure only SOCK_DGRAM UDP sockets are accepted
- ipv6: sr: remove SKB_GSO_IPXIP6 on End.D* actions
- net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM
- net, ip6_tunnel: fix namespaces move
- net, ip_tunnel: fix namespaces move
- net_sched: fix datalen for ematch
- net-sysfs: Fix reference count leak in rx|netdev_queue_add_kobject
- net-sysfs: fix netdev_queue_add_kobject() breakage
- net-sysfs: Call dev_hold always in netdev_queue_add_kobject
- net-sysfs: Call dev_hold always in rx_queue_add_kobject
- net-sysfs: Fix reference count leak
- net: usb: lan78xx: Add .ndo_features_check
- tcp_bbr: improve arithmetic division in bbr_update_bw()
- net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
- hwmon: (adt7475) Make volt2reg return same reg as reg2volt input
- hwmon: (core) Do not use device managed functions for memory allocations
- Input: keyspan-remote - fix control-message timeouts
- Revert "Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers"
- ARM: 8950/1: ftrace/recordmcount: filter relocation types
- mmc: tegra: fix SDR50 tuning override
- mmc: sdhci: fix minimum clock rate for v3 controller
- Documentation: Document arm64 kpti control
- Input: pm8xxx-vib - fix handling of separate enable register
- Input: sur40 - fix interface sanity checks
- Input: gtco - fix endpoint sanity check
- Input: aiptek - fix endpoint sanity check
- Input: pegasus_notetaker - fix endpoint sanity check
- Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register
- hwmon: (nct7802) Fix voltage limits to wrong registers
- scsi: RDMA/isert: Fix a recently introduced regression related to logout
- tracing: xen: Ordered comparison of function pointers
- do_last(): fetch directory ->i_mode and ->i_uid before it's too late
- sd: Fix REQ_OP_ZONE_REPORT completion handling
- coresight: etb10: Do not call smp_processor_id from preemptible
- coresight: tmc-etf: Do not call smp_processor_id from preemptible
- libertas: Fix two buffer overflows at parsing bss descriptor
- media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT
- scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func
- md: Avoid namespace collision with bitmap API
- bitmap: Add bitmap_alloc(), bitmap_zalloc() and bitmap_free()
- netfilter: ipset: use bitmap infrastructure completely
- net/x25: fix nonblocking connect
- net: bcmgenet: Use netif_tx_napi_add() for TX NAPI
- Revert "udp: do rmem bulk free even if the rx sk queue is empty"
- tcp: do not leave dangling pointers in tp->highest_sack
- tun: add mutex_unlock() call and napi.skb clearing in tun_get_user()
- PCI: Mark AMD Navi14 GPU rev 0xc5 ATS as broken
- net/sonic: Add mutual exclusion for accessing shared state
- net/sonic: Clear interrupt flags immediately
- net/sonic: Use MMIO accessors
- net/sonic: Fix interface error stats collection
- net/sonic: Fix receive buffer handling
- net/sonic: Avoid needless receive descriptor EOL flag updates
- net/sonic: Improve receive descriptor status flag check
- net/sonic: Fix receive buffer replenishment
- net/sonic: Quiesce SONIC before re-initializing descriptor memory
- net/sonic: Fix command register usage
- net/sonic: Fix CAM initialization
- net/sonic: Prevent tx watchdog timeout
- crypto: geode-aes - switch to skcipher for cbc(aes) fallback
- mm, sparse: drop pgdat_resize_lock in sparse_add/remove_one_section()
- drivers/base/memory.c: remove an unnecessary check on NR_MEM_SECTIONS
- drivers/base/memory.c: clean up relics in function parameters
- mm, memory_hotplug: update a comment in unregister_memory()
- drivers/base/memory: pass a block_id to init_memory_block()
* Miscellaneous Ubuntu changes
- update dkms package versions
-- Khalid Elmously <email address hidden> Wed, 25 Mar 2020 21:34:16 -0400
-
linux-aws (4.15.0-1064.68) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1064.68 -proposed tracker (LP: #1867255)
[ Ubuntu: 4.15.0-92.93 ]
* bionic/linux: 4.15.0-92.93 -proposed tracker (LP: #1867272)
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
- [Packaging] update helper scripts
* Introduce the new NVIDIA 440 series, and add 5.4 Linux compatibility to the
340 and 390 series (LP: #1854485)
- [Packaging] NVIDIA -- add support for the 435 and the 440 series
* Stop using get_scalar_status command in Dell AIO uart backlight driver
(LP: #1865402)
- SAUCE: platform/x86: dell-uart-backlight: add get_display_mode command
* Bionic update: upstream stable patchset 2020-03-12 (LP: #1867194)
- RDMA/core: Fix locking in ib_uverbs_event_read
- gpio: zynq: Report gpio direction at boot
- arm64: ptrace: nofpsimd: Fail FP/SIMD regset operations
- KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests
- KVM: arm: Make inject_abt32() inject an external abort instead
- mtd: onenand_base: Adjust indentation in onenand_read_ops_nolock
- mtd: sharpslpart: Fix unsigned comparison to zero
- padata: fix null pointer deref of pd->pinst
- Input: synaptics - switch T470s to RMI4 by default
- Input: synaptics - enable SMBus on ThinkPad L470
- Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list
- ALSA: hda/realtek - Fix silent output on MSI-GL73
- ALSA: usb-audio: Apply sample rate quirk for Audioengine D1
- arm64: cpufeature: Set the FP/SIMD compat HWCAP bits properly
- ALSA: usb-audio: sound: usb: usb true/false for bool return type
- ext4: don't assume that mmp_nodename/bdevname have NUL
- ext4: fix support for inode sizes > 1024 bytes
- ext4: fix checksum errors with indexed dirs
- ext4: add cond_resched() to ext4_protect_reserved_inode
- ext4: improve explanation of a mount failure caused by a misconfigured
kernel
- Btrfs: fix race between using extent maps and merging them
- btrfs: ref-verify: fix memory leaks
- btrfs: print message when tree-log replay starts
- btrfs: log message when rw remount is attempted with unclean tree-log
- arm64: ssbs: Fix context-switch when SSBS is present on all CPUs
- perf/x86/amd: Add missing L2 misses event spec to AMD Family 17h's event map
- IB/hfi1: Close window for pq and request coliding
- IB/rdmavt: Reset all QPs when the device is shut down
- RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq
- RDMA/core: Fix protection fault in get_pkey_idx_qp_list
- s390/time: Fix clk type in get_tod_clock
- perf/x86/intel: Fix inaccurate period in context switch for auto-reload
- hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions.
- jbd2: move the clearing of b_modified flag to the journal_unmap_buffer()
- jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer
- KVM: x86/mmu: Fix struct guest_walker arrays for 5-level paging
* Bionic update: upstream stable patchset 2020-03-09 (LP: #1866678)
- kernel/module: Fix memleak in module_add_modinfo_attrs()
- media: iguanair: fix endpoint sanity check
- x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR
- iwlwifi: mvm: fix NVM check for 3168 devices
- sparc32: fix struct ipc64_perm type definition
- cls_rsvp: fix rsvp_policy
- gtp: use __GFP_NOWARN to avoid memalloc warning
- l2tp: Allow duplicate session creation with UDP
- net: hsr: fix possible NULL deref in hsr_handle_frame()
- net_sched: fix an OOB access in cls_tcindex
- bnxt_en: Fix TC queue mapping.
- tcp: clear tp->total_retrans in tcp_disconnect()
- tcp: clear tp->delivered in tcp_disconnect()
- tcp: clear tp->data_segs{in|out} in tcp_disconnect()
- tcp: clear tp->segs_{in|out} in tcp_disconnect()
- rxrpc: Fix insufficient receive notification generation
- rxrpc: Fix NULL pointer deref due to call->conn being cleared on disconnect
- media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
- mfd: dln2: More sanity checking for endpoints
- tracing: Fix sched switch start/stop refcount racy updates
- brcmfmac: Fix memory leak in brcmf_usbdev_qinit
- usb: gadget: legacy: set max_speed to super-speed
- usb: gadget: f_ncm: Use atomic_t to track in-flight request
- usb: gadget: f_ecm: Use atomic_t to track in-flight request
- ALSA: dummy: Fix PCM format loop in proc output
- media/v4l2-core: set pages dirty upon releasing DMA buffers
- media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments
- lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more()
- irqdomain: Fix a memory leak in irq_domain_push_irq()
- platform/x86: intel_scu_ipc: Fix interrupt support
- KVM: arm64: Only sign-extend MMIO up to register width
- MIPS: fix indentation of the 'RELOCS' message
- s390/mm: fix dynamic pagetable upgrade for hugetlbfs
- powerpc/xmon: don't access ASDR in VMs
- powerpc/pseries: Advance pfn if section is not present in lmb_is_removable()
- mmc: spi: Toggle SPI polarity, do not hardcode it
- ACPI: video: Do not export a non working backlight interface on MSI MS-7721
boards
- alarmtimer: Unregister wakeup source when module get fails
- ubifs: Reject unsupported ioctl flags explicitly
- ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag
- ubifs: Fix deadlock in concurrent bulk-read and writepage
- PCI: keystone: Fix link training retries initiation
- mmc: sdhci-of-at91: fix memleak on clk_get failure
- ubifs: don't trigger assertion on invalid no-key filename
- hv_balloon: Balloon up according to request page number
- crypto: api - Check spawn->alg under lock in crypto_drop_spawn
- scsi: qla2xxx: Fix mtcp dump collection failure
- power: supply: ltc2941-battery-gauge: fix use-after-free
- f2fs: choose hardlimit when softlimit is larger than hardlimit in
f2fs_statfs_project()
- f2fs: fix miscounted block limit in f2fs_statfs_project()
- f2fs: code cleanup for f2fs_statfs_project()
- PM: core: Fix handling of devices deleted during system-wide resume
- [Config] updateconfigs for CONFIG_OF_DMA_DEFAULT_COHERENT
- of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc
- dm zoned: support zone sizes smaller than 128MiB
- dm space map common: fix to ensure new block isn't already in use
- dm crypt: fix benbi IV constructor crash if used in authenticated mode
- tracing: Annotate ftrace_graph_hash pointer with __rcu
- tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu
- ftrace: Add comment to why rcu_dereference_sched() is open coded
- ftrace: Protect ftrace_graph_hash with ftrace_sync
- samples/bpf: Don't try to remove user's homedir on clean
- crypto: ccp - set max RSA modulus size for v3 platform devices as well
- crypto: pcrypt - Do not clear MAY_SLEEP flag in original request
- crypto: atmel-aes - Fix counter overflow in CTR mode
- crypto: api - Fix race condition in crypto_spawn_alg
- crypto: picoxcell - adjust the position of tasklet_init and fix missed
tasklet_kill
- scsi: qla2xxx: Fix unbound NVME response length
- NFS: Fix memory leaks and corruption in readdir
- NFS: Directory page cache pages need to be locked when read
- btrfs: set trans->drity in btrfs_commit_transaction
- ARM: tegra: Enable PLLP bypass during Tegra124 LP1
- iwlwifi: don't throw error when trying to remove IGTK
- mwifiex: fix unbalanced locking in mwifiex_process_country_ie()
- sunrpc: expiry_time should be seconds not timeval
- tools/kvm_stat: Fix kvm_exit filter name
- xen/balloon: Support xend-based toolstack take two
- KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks
- KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks
- KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks
- KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks
- KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF
attacks
- KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks
- KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF
attacks
- KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks
- KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks
in x86.c
- KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks
- KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit()
from Spectre-v1/L1TF attacks
- KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails
- KVM: PPC: Book3S PR: Free shared page if mmu initialization fails
- KVM: x86: Free wbinvd_dirty_mask if vCPU creation fails
- clk: tegra: Mark fuse clock as critical
- scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type
- scsi: csiostor: Adjust indentation in csio_device_reset
- scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free
- scsi: ufs: Recheck bkops level if bkops is disabled
- phy: qualcomm: Adjust indentation in read_poll_timeout
- ext2: Adjust indentation in ext2_fill_super
- powerpc/44x: Adjust indentation in ibm4xx_denali_fixup_memsize
- NFC: pn544: Adjust indentation in pn544_hci_check_presence
- ppp: Adjust indentation into ppp_async_input
- net: smc911x: Adjust indentation in smc911x_phy_configure
- net: tulip: Adjust indentation in {dmfe, uli526x}_init_module
- IB/mlx5: Fix outstanding_pi index for GSI qps
- IB/core: Fix ODP get user pages flow
- nfsd: fix delay timer on 32-bit architectures
- nfsd: fix jiffies/time_t mixup in LRU list
- ubi: fastmap: Fix inverted logic in seen selfcheck
- ubi: Fix an error pointer dereference in error handling code
- mfd: da9062: Fix watchdog compatible string
- mfd: rn5t618: Mark ADC control register volatile
- net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port
- net_sched: fix a resource leak in tcindex_set_parms()
- net: systemport: Avoid RBUF stuck in Wake-on-LAN mode
- net: macb: Remove unnecessary alignment check for TSO
- net: macb: Limit maximum GEM TX length in TSO
- bonding/alb: properly access headers in bond_alb_xmit()
- ext4: fix deadlock allocating crypto bounce page from mempool
- btrfs: Get rid of the confusing btrfs_file_extent_inline_len
- Btrfs: fix missing hole after hole punching and fsync when using NO_HOLES
- btrfs: use bool argument in free_root_pointers()
- btrfs: free block groups after free'ing fs trees
- btrfs: remove trivial locking wrappers of tree mod log
- Btrfs: fix race between adding and putting tree mod seq elements and nodes
- drm: atmel-hlcdc: enable clock before configuring timing engine
- KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks
- btrfs: flush write bio if we loop in extent_write_cache_pages
- KVM: x86: Fix potential put_fpu() w/o load_fpu() on MPX platform
- KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM
- KVM: nVMX: vmread should not set rflags to specify success in case of #PF
- KVM: Use vcpu-specific gva->hva translation when querying host page size
- KVM: Play nice with read-only memslots when querying host page size
- KVM: s390: do not clobber registers during guest reset/store status
- cifs: fail i/o on soft mounts if sessionsetup errors out
- clocksource: Prevent double add_timer_on() for watchdog_timer
- perf/core: Fix mlock accounting in perf_mmap()
- rxrpc: Fix service call disconnection
- ASoC: pcm: update FE/BE trigger order based on the command
- hv_sock: Remove the accept port restriction
- RDMA/netlink: Do not always generate an ACK for some netlink operations
- scsi: ufs: Fix ufshcd_probe_hba() reture value in case
ufshcd_scsi_add_wlus() fails
- PCI/switchtec: Fix vep_vector_number ioread width
- PCI: Don't disable bridge BARs when assigning bus resources
- nfs: NFS_SWAP should depend on SWAP
- NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes()
- NFSv4: try lease recovery on NFS4ERR_EXPIRED
- serial: uartps: Add a timeout to the tx empty wait
- rtc: hym8563: Return -EINVAL if the time is known to be invalid
- rtc: cmos: Stop using shared IRQ
- ARC: [plat-axs10x]: Add missing multicast filter number to GMAC node
- platform/x86: intel_mid_powerbtn: Take a copy of ddata
- ARM: dts: at91: sama5d3: fix maximum peripheral clock rates
- ARM: dts: at91: sama5d3: define clock rate range for tcb1
- tools/power/acpi: fix compilation error
- powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning
- powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce
for DDW
- KVM: arm/arm64: vgic-its: Fix restoration of unmapped collections
- ARM: 8949/1: mm: mark free_memmap as __init
- arm64: cpufeature: Fix the type of no FP/SIMD capability
- KVM: arm/arm64: Fix young bit from mmu notifier
- crypto: artpec6 - return correct error code for failed setkey()
- crypto: atmel-sha - fix error handling when setting hmac key
- media: i2c: adv748x: Fix unsafe macros
- pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B
- scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state
- serial: uartps: Move the spinlock after the read of the tx empty
- mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()
- mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()
- libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held
- libertas: make lbs_ibss_join_existing() return error code on rates overflow
- udf: Allow writing to 'Rewritable' partitions
- printk: fix exclusive_console replaying
- usb: typec: tcpci: mask event interrupts when remove driver
- ALSA: hda: Add Clevo W65_67SB the power_save blacklist
- KVM: arm/arm64: Correct AArch32 SPSR on exception entry
- crypto: geode-aes - convert to skcipher API and make thread-safe
- mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile
- scripts/find-unused-docs: Fix massive false positives
- padata: Remove broken queue flushing
- jbd2_seq_info_next should increase position index
- watchdog: fix UAF in reboot notifier handling in watchdog core code
- bcache: add readahead cache policy options via sysfs interface
- eventfd: track eventfd_signal() recursion depth
- x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
- drm/amd/dm/mst: Ignore payload update failures
- percpu: Separate decrypted varaibles anytime encryption can be enabled
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable
- net: dsa: b53: Always use dev->vlan_enabled in b53_configure_vlan()
- drm/dp_mst: Remove VCPI while disabling topology mgr
- KVM: x86: Use gpa_t for cr2/gpa to fix TDP support on 32-bit KVM
- x86/apic/msi: Plug non-maskable MSI affinity race
* 5.4.0-11 crash on cryptsetup open (LP: #1860231) // Bionic update: upstream
stable patchset 2020-03-09 (LP: #1866678)
- dm: fix potential for q->make_request_fn NULL pointer
* r8152 init may take up to 40 seconds at initialization with Dell WD19/WD19DC
during hotplug (LP: #1864284)
- UBUNTU SAUCE: r8152: check disconnect status after long sleep
* The voice recording function cannot work while connecting a headset on a
Dell machine (LP: #1866581)
- SAUCE: ALSA: hda/realtek - Add Headset Mic supported
* xfs fill_fs test in fallocate06 from ubuntu_ltp_syscalls failed
(LP: #1865967)
- xfs: Fix tail rounding in xfs_alloc_file_space()
* [hns3-0114]net: hns3: fix ETS bandwidth validation bug (LP: #1859569)
- net: hns3: fix ETS bandwidth validation bug
* alsa/hda/realtek: fix a mute led regression on Lenovo X1 Carbon
(LP: #1864576)
- SAUCE: ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1
* [hns3-0120]pad the short frame before sending to the hardware (LP: #1860320)
- net: hns3: pad the short frame before sending to the hardware
* ipc/sem.c : process loops infinitely in exit_sem() (LP: #1858834)
- Revert "ipc, sem: remove uneeded sem_undo_list lock usage in exit_sem()"
* ftrace test in ubuntu_kernel_selftests will timeout randomly (LP: #1864172)
- tracing/selftests: Turn off timeout setting
* quotactl07 from ubuntu_ltp_syscalls failed (LP: #1864092)
- xfs: Sanity check flags of Q_XQUOTARM call
* [bionic] updates to Exar USB serial driver (LP: #1863834)
- SAUCE: xr-usb-serial: Update driver for Exar USB serial ports
- SAUCE: xr-usb-serial: re-initialise baudrate after resume from S3/S4
- SAUCE: xr-usb-serial: Changes to support updates in struct gpio_chip
- SAUCE: xr-usb-serial: fix kbuild
* [bionic] hts221 sensor stops working after resume from S3/S4
(LP: #1863732)
- SAUCE: iio: humidity: hts221: Fix sensor reads after resume
* Bionic update: upstream stable patchset 2020-02-26 (LP: #1864904)
- orinoco_usb: fix interface sanity check
- rsi_91x_usb: fix interface sanity check
- USB: serial: ir-usb: add missing endpoint sanity check
- USB: serial: ir-usb: fix link-speed handling
- USB: serial: ir-usb: fix IrLAP framing
- usb: dwc3: turn off VBUS when leaving host mode
- staging: most: net: fix buffer overflow
- staging: wlan-ng: ensure error return is actually returned
- staging: vt6656: correct packet types for CTS protect, mode.
- staging: vt6656: use NULLFUCTION stack on mac80211
- staging: vt6656: Fix false Tx excessive retries reporting.
- serial: 8250_bcm2835aux: Fix line mismatch on driver unbind
- crypto: chelsio - fix writing tfm flags to wrong place
- ath9k: fix storage endpoint lookup
- brcmfmac: fix interface sanity check
- rtl8xxxu: fix interface sanity check
- zd1211rw: fix storage endpoint lookup
- arc: eznps: fix allmodconfig kconfig warning
- HID: ite: Add USB id match for Acer SW5-012 keyboard dock
- phy: cpcap-usb: Prevent USB line glitches from waking up modem
- watchdog: max77620_wdt: fix potential build errors
- watchdog: rn5t618_wdt: fix module aliases
- spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls
- drivers/net/b44: Change to non-atomic bit operations on pwol_mask
- net: wan: sdla: Fix cast from pointer to integer of different size
- gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP
- atm: eni: fix uninitialized variable warning
- PCI: Add DMA alias quirk for Intel VCA NTB
- usb-storage: Disable UAS on JMicron SATA enclosure
- net_sched: ematch: reject invalid TCF_EM_SIMPLE
- rsi: fix use-after-free on probe errors
- crypto: af_alg - Use bh_lock_sock in sk_destruct
- vfs: fix do_last() regression
- x86/resctrl: Fix use-after-free when deleting resource groups
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup
- x86/resctrl: Fix a deadlock due to inaccurate reference
- crypto: pcrypt - Fix user-after-free on module unload
- perf c2c: Fix return type for histogram sorting comparision functions
- PM / devfreq: Add new name attribute for sysfs
- tools lib: Fix builds when glibc contains strlcpy()
- arm64: kbuild: remove compressed images on 'make ARCH=arm64 (dist)clean'
- ext4: validate the debug_want_extra_isize mount option at parse time
- mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
- reiserfs: Fix memory leak of journal device string
- media: digitv: don't continue if remote control state can't be read
- media: af9005: uninitialized variable printked
- media: gspca: zero usb_buf
- media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
- ttyprintk: fix a potential deadlock in interrupt context issue
- Bluetooth: Fix race condition in hci_release_sock()
- cgroup: Prevent double killing of css when enabling threaded cgroup
- media: si470x-i2c: Move free() past last use of 'radio'
- ARM: dts: sun8i: a83t: Correct USB3503 GPIOs polarity
- ARM: dts: beagle-x15-common: Model 5V0 regulator
- soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot
- mac80211: mesh: restrict airtime metric to peered established plinks
- clk: mmp2: Fix the order of timer mux parents
- ixgbevf: Remove limit of 10 entries for unicast filter list
- ixgbe: Fix calculation of queue with VFs and flow director on interface flap
- igb: Fix SGMII SFP module discovery for 100FX/LX.
- ASoC: sti: fix possible sleep-in-atomic
- qmi_wwan: Add support for Quectel RM500Q
- wireless: fix enabling channel 12 for custom regulatory domain
- cfg80211: Fix radar event during another phy CAC
- mac80211: Fix TKIP replay protection immediately after key setup
- wireless: wext: avoid gcc -O3 warning
- net: dsa: bcm_sf2: Configure IMP port for 2Gb/sec
- bnxt_en: Fix ipv6 RFS filter matching logic.
- ARM: dts: am335x-boneblack-common: fix memory size
- vti[6]: fix packet tx through bpf_redirect()
- scsi: fnic: do not queue commands during fwreset
- ARM: 8955/1: virt: Relax arch timer version check during early boot
- tee: optee: Fix compilation issue with nommu
- airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE
- airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE
- r8152: get default setting of WOL before initializing
- qlcnic: Fix CPU soft lockup while collecting firmware dump
- powerpc/fsl/dts: add fsl,erratum-a011043
- net/fsl: treat fsl,erratum-a011043
- net: fsl/fman: rename IF_MODE_XGMII to IF_MODE_10G
- seq_tab_next() should increase position index
- l2t_seq_next should increase position index
- net: Fix skb->csum update in inet_proto_csum_replace16().
- btrfs: do not zero f_bavail if we have available space
- perf report: Fix no libunwind compiled warning break s390 issue
- iio: st_gyro: Correct data for LSM9DS0 gyro
- net_sched: fix ops->bind_class() implementations
- HID: Add quirk for Xin-Mo Dual Controller
- HID: Add quirk for incorrect input length on Lenovo Y720
- phy: qcom-qmp: Increase PHY ready timeout
- platform/x86: dell-laptop: disable kbd backlight on Inspiron 10xx
- sched/fair: Add tmp_alone_branch assertion
- sched/fair: Fix insertion in rq->leaf_cfs_rq_list
- random: try to actively add entropy rather than passively wait for it
- block: cleanup __blkdev_issue_discard()
- block: fix 32 bit overflow in __blkdev_issue_discard()
- media: vp7045: do not read uninitialized values if usb transfer fails
- tomoyo: Use atomic_t for statistics counter
- tools lib traceevent: Fix memory leakage in filter_event
- parisc: Use proper printk format for resource_size_t
- riscv: delete temporary files
- ARM: dts: am43x-epos-evm: set data pin directions for spi0 and spi1
* Bionic update: upstream stable patchset 2020-02-21 (LP: #1864261)
- firestream: fix memory leaks
- gtp: make sure only SOCK_DGRAM UDP sockets are accepted
- ipv6: sr: remove SKB_GSO_IPXIP6 on End.D* actions
- net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM
- net, ip6_tunnel: fix namespaces move
- net, ip_tunnel: fix namespaces move
- net_sched: fix datalen for ematch
- net-sysfs: Fix reference count leak in rx|netdev_queue_add_kobject
- net-sysfs: fix netdev_queue_add_kobject() breakage
- net-sysfs: Call dev_hold always in netdev_queue_add_kobject
- net-sysfs: Call dev_hold always in rx_queue_add_kobject
- net-sysfs: Fix reference count leak
- net: usb: lan78xx: Add .ndo_features_check
- tcp_bbr: improve arithmetic division in bbr_update_bw()
- net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
- hwmon: (adt7475) Make volt2reg return same reg as reg2volt input
- hwmon: (core) Do not use device managed functions for memory allocations
- Input: keyspan-remote - fix control-message timeouts
- Revert "Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers"
- ARM: 8950/1: ftrace/recordmcount: filter relocation types
- mmc: tegra: fix SDR50 tuning override
- mmc: sdhci: fix minimum clock rate for v3 controller
- Documentation: Document arm64 kpti control
- Input: pm8xxx-vib - fix handling of separate enable register
- Input: sur40 - fix interface sanity checks
- Input: gtco - fix endpoint sanity check
- Input: aiptek - fix endpoint sanity check
- Input: pegasus_notetaker - fix endpoint sanity check
- Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register
- hwmon: (nct7802) Fix voltage limits to wrong registers
- scsi: RDMA/isert: Fix a recently introduced regression related to logout
- tracing: xen: Ordered comparison of function pointers
- do_last(): fetch directory ->i_mode and ->i_uid before it's too late
- sd: Fix REQ_OP_ZONE_REPORT completion handling
- coresight: etb10: Do not call smp_processor_id from preemptible
- coresight: tmc-etf: Do not call smp_processor_id from preemptible
- libertas: Fix two buffer overflows at parsing bss descriptor
- media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT
- scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func
- md: Avoid namespace collision with bitmap API
- bitmap: Add bitmap_alloc(), bitmap_zalloc() and bitmap_free()
- netfilter: ipset: use bitmap infrastructure completely
- net/x25: fix nonblocking connect
- net: bcmgenet: Use netif_tx_napi_add() for TX NAPI
- Revert "udp: do rmem bulk free even if the rx sk queue is empty"
- tcp: do not leave dangling pointers in tp->highest_sack
- tun: add mutex_unlock() call and napi.skb clearing in tun_get_user()
- PCI: Mark AMD Navi14 GPU rev 0xc5 ATS as broken
- net/sonic: Add mutual exclusion for accessing shared state
- net/sonic: Clear interrupt flags immediately
- net/sonic: Use MMIO accessors
- net/sonic: Fix interface error stats collection
- net/sonic: Fix receive buffer handling
- net/sonic: Avoid needless receive descriptor EOL flag updates
- net/sonic: Improve receive descriptor status flag check
- net/sonic: Fix receive buffer replenishment
- net/sonic: Quiesce SONIC before re-initializing descriptor memory
- net/sonic: Fix command register usage
- net/sonic: Fix CAM initialization
- net/sonic: Prevent tx watchdog timeout
- crypto: geode-aes - switch to skcipher for cbc(aes) fallback
- mm, sparse: drop pgdat_resize_lock in sparse_add/remove_one_section()
- drivers/base/memory.c: remove an unnecessary check on NR_MEM_SECTIONS
- drivers/base/memory.c: clean up relics in function parameters
- mm, memory_hotplug: update a comment in unregister_memory()
- drivers/base/memory: pass a block_id to init_memory_block()
* Miscellaneous Ubuntu changes
- update dkms package versions
-- Kleber Sacilotto de Souza <email address hidden> Tue, 17 Mar 2020 17:49:41 +0100
-
linux-aws (4.15.0-1063.67) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1063.67 -proposed tracker (LP: #1865269)
[ Ubuntu: 4.15.0-91.92 ]
* bionic/linux: 4.15.0-91.92 -proposed tracker (LP: #1865109)
* CVE-2020-2732
- KVM: x86: emulate RDPID
- KVM: nVMX: Don't emulate instructions in guest mode
- KVM: nVMX: Refactor IO bitmap checks into helper function
- KVM: nVMX: Check IO instruction VM-exit conditions
linux-aws (4.15.0-1062.66) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1062.66 -proposed tracker (LP: #1864734)
[ Ubuntu: 4.15.0-90.91 ]
* bionic/linux: 4.15.0-90.91 -proposed tracker (LP: #1864753)
* dkms artifacts may expire from the pool (LP: #1850958)
- [Packaging] autoreconstruct -- manage executable debian files
- [packaging] handle downloads from the librarian better
[ Ubuntu: 4.15.0-90.90 ]
* bionic/linux: 4.15.0-90.90 -proposed tracker (LP: #1864753)
* vm-segv from ubuntu_stress_smoke_test failed on B (LP: #1864063)
- Revert "apparmor: don't try to replace stale label in ptrace access check"
linux-aws (4.15.0-1061.65) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1061.65 -proposed tracker (LP: #1863325)
* dkms artifacts may expire from the pool (LP: #1850958)
- [Packaging] autoreconstruct -- manage executable debian files
- [packaging] handle downloads from the librarian better
* Root can lift kernel lockdown via USB/IP (LP: #1861238)
- aws: [Config] Update config for sysrq lockdown revert
[ Ubuntu: 4.15.0-89.89 ]
* bionic/linux: 4.15.0-89.89 -proposed tracker (LP: #1863350)
* [SRU][B/OEM-B] Fix multitouch support on some devices (LP: #1862567)
- HID: core: move the dynamic quirks handling in core
- HID: quirks: move the list of special devices into a quirk
- HID: core: move the list of ignored devices in hid-quirks.c
- HID: core: remove the absolute need of hid_have_special_driver[]
* [linux] Patch to prevent possible data corruption (LP: #1848739)
- blk-mq: silence false positive warnings in hctx_unlock()
* Add bpftool to linux-tools-common (LP: #1774815)
- tools/bpftool: fix bpftool build with bintutils >= 2.9
- bpftool: make libbfd optional
- [Debian] Remove binutils-dev build dependency
- [Debian] package bpftool in linux-tools-common
* Root can lift kernel lockdown via USB/IP (LP: #1861238)
- Revert "UBUNTU: SAUCE: (efi-lockdown) Add a SysRq option to lift kernel
lockdown"
* [Bionic] i915 incomplete fix for CVE-2019-14615 (LP: #1862840) //
CVE-2020-8832
- drm/i915: Use same test for eviction and submitting kernel context
- drm/i915: Define an engine class enum for the uABI
- drm/i915: Force the switch to the i915->kernel_context
- drm/i915: Move GT powersaving init to i915_gem_init()
- drm/i915: Move intel_init_clock_gating() to i915_gem_init()
- drm/i915: Inline intel_modeset_gem_init()
- drm/i915: Mark the context state as dirty/written
- drm/i915: Record the default hw state after reset upon load
* Bionic update: upstream stable patchset 2020-02-12 (LP: #1863019)
- xfs: Sanity check flags of Q_XQUOTARM call
- mfd: intel-lpss: Add default I2C device properties for Gemini Lake
- powerpc/archrandom: fix arch_get_random_seed_int()
- tipc: fix wrong timeout input for tipc_wait_for_cond()
- mt7601u: fix bbp version check in mt7601u_wait_bbp_ready
- crypto: sun4i-ss - fix big endian issues
- drm/sti: do not remove the drm_bridge that was never added
- drm/virtio: fix bounds check in virtio_gpu_cmd_get_capset()
- ALSA: hda: fix unused variable warning
- apparmor: don't try to replace stale label in ptrace access check
- PCI: iproc: Remove PAXC slot check to allow VF support
- drm/hisilicon: hibmc: Don't overwrite fb helper surface depth
- IB/rxe: replace kvfree with vfree
- IB/hfi1: Add mtu check for operational data VLs
- ALSA: usb-audio: update quirk for B&W PX to remove microphone
- staging: comedi: ni_mio_common: protect register write overflow
- pwm: lpss: Release runtime-pm reference from the driver's remove callback
- drm/sun4i: hdmi: Fix double flag assignation
- mlxsw: reg: QEEC: Add minimum shaper fields
- NTB: ntb_hw_idt: replace IS_ERR_OR_NULL with regular NULL checks
- pcrypt: use format specifier in kobject_add
- exportfs: fix 'passing zero to ERR_PTR()' warning
- drm/dp_mst: Skip validating ports during destruction, just ref
- net: phy: Fix not to call phy_resume() if PHY is not attached
- IB/rxe: Fix incorrect cache cleanup in error flow
- staging: bcm2835-camera: Abort probe if there is no camera
- switchtec: Remove immediate status check after submitting MRPC command
- pinctrl: sh-pfc: r8a7740: Add missing REF125CK pin to gether_gmii group
- pinctrl: sh-pfc: r8a7740: Add missing LCD0 marks to lcd0_data24_1 group
- pinctrl: sh-pfc: r8a7791: Remove bogus ctrl marks from qspi_data4_b group
- pinctrl: sh-pfc: r8a7791: Remove bogus marks from vin1_b_data18 group
- pinctrl: sh-pfc: sh73a0: Add missing TO pin to tpu4_to3 group
- pinctrl: sh-pfc: r8a7794: Remove bogus IPSR9 field
- pinctrl: sh-pfc: sh7734: Add missing IPSR11 field
- pinctrl: sh-pfc: r8a77995: Remove bogus SEL_PWM[0-3]_3 configurations
- pinctrl: sh-pfc: sh7269: Add missing PCIOR0 field
- pinctrl: sh-pfc: sh7734: Remove bogus IPSR10 value
- vxlan: changelink: Fix handling of default remotes
- Input: nomadik-ske-keypad - fix a loop timeout test
- clk: highbank: fix refcount leak in hb_clk_init()
- clk: qoriq: fix refcount leak in clockgen_init()
- clk: socfpga: fix refcount leak
- clk: samsung: exynos4: fix refcount leak in exynos4_get_xom()
- clk: imx6q: fix refcount leak in imx6q_clocks_init()
- clk: imx6sx: fix refcount leak in imx6sx_clocks_init()
- clk: imx7d: fix refcount leak in imx7d_clocks_init()
- clk: vf610: fix refcount leak in vf610_clocks_init()
- clk: armada-370: fix refcount leak in a370_clk_init()
- clk: kirkwood: fix refcount leak in kirkwood_clk_init()
- clk: armada-xp: fix refcount leak in axp_clk_init()
- clk: mv98dx3236: fix refcount leak in mv98dx3236_clk_init()
- clk: dove: fix refcount leak in dove_clk_init()
- MIPS: BCM63XX: drop unused and broken DSP platform device
- IB/usnic: Fix out of bounds index check in query pkey
- RDMA/ocrdma: Fix out of bounds index check in query pkey
- RDMA/qedr: Fix out of bounds index check in query pkey
- drm/shmob: Fix return value check in shmob_drm_probe
- arm64: dts: apq8016-sbc: Increase load on l11 for SDCARD
- spi: cadence: Correct initialisation of runtime PM
- RDMA/iw_cxgb4: Fix the unchecked ep dereference
- drm/etnaviv: NULL vs IS_ERR() buf in etnaviv_core_dump()
- media: s5p-jpeg: Correct step and max values for
V4L2_CID_JPEG_RESTART_INTERVAL
- kbuild: mark prepare0 as PHONY to fix external module build
- crypto: brcm - Fix some set-but-not-used warning
- crypto: tgr192 - fix unaligned memory access
- ASoC: imx-sgtl5000: put of nodes if finding codec fails
- IB/iser: Pass the correct number of entries for dma mapped SGL
- rtc: cmos: ignore bogus century byte
- spi/topcliff_pch: Fix potential NULL dereference on allocation error
- clk: sunxi-ng: sun8i-a23: Enable PLL-MIPI LDOs when ungating it
- iwlwifi: mvm: avoid possible access out of array.
- net/mlx5: Take lock with IRQs disabled to avoid deadlock
- iwlwifi: mvm: fix A-MPDU reference assignment
- tty: ipwireless: Fix potential NULL pointer dereference
- driver: uio: fix possible memory leak in __uio_register_device
- driver: uio: fix possible use-after-free in __uio_register_device
- crypto: crypto4xx - Fix wrong ppc4xx_trng_probe()/ppc4xx_trng_remove()
arguments
- driver core: Do not resume suppliers under device_links_write_lock()
- ARM: dts: lpc32xx: add required clocks property to keypad device node
- ARM: dts: lpc32xx: reparent keypad controller to SIC1
- ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller variant
- ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller clocks property
- ARM: dts: lpc32xx: phy3250: fix SD card regulator voltage
- iwlwifi: mvm: fix RSS config command
- staging: most: cdev: add missing check for cdev_add failure
- rtc: ds1672: fix unintended sign extension
- thermal: mediatek: fix register index error
- net: phy: fixed_phy: Fix fixed_phy not checking GPIO
- rtc: ds1307: rx8130: Fix alarm handling
- rtc: 88pm860x: fix unintended sign extension
- rtc: 88pm80x: fix unintended sign extension
- rtc: pm8xxx: fix unintended sign extension
- fbdev: chipsfb: remove set but not used variable 'size'
- iw_cxgb4: use tos when importing the endpoint
- iw_cxgb4: use tos when finding ipv6 routes
- drm/etnaviv: potential NULL dereference
- pinctrl: sh-pfc: emev2: Add missing pinmux functions
- pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group
- pinctrl: sh-pfc: r8a7792: Fix vin1_data18_b pin group
- pinctrl: sh-pfc: sh73a0: Fix fsic_spdif pin groups
- PCI: endpoint: functions: Use memcpy_fromio()/memcpy_toio()
- usb: phy: twl6030-usb: fix possible use-after-free on remove
- block: don't use bio->bi_vcnt to figure out segment number
- keys: Timestamp new keys
- vfio_pci: Enable memory accesses before calling pci_map_rom
- hwmon: (pmbus/tps53679) Fix driver info initialization in probe routine
- KVM: PPC: Release all hardware TCE tables attached to a group
- staging: r8822be: check kzalloc return or bail
- dmaengine: mv_xor: Use correct device for DMA API
- cdc-wdm: pass return value of recover_from_urb_loss
- regulator: pv88060: Fix array out-of-bounds access
- regulator: pv88080: Fix array out-of-bounds access
- regulator: pv88090: Fix array out-of-bounds access
- net: dsa: qca8k: Enable delay for RGMII_ID mode
- drm/nouveau/bios/ramcfg: fix missing parentheses when calculating RON
- drm/nouveau/pmu: don't print reply values if exec is false
- ASoC: qcom: Fix of-node refcount unbalance in apq8016_sbc_parse_of()
- fs/nfs: Fix nfs_parse_devname to not modify it's argument
- staging: rtlwifi: Use proper enum for return in halmac_parse_psd_data_88xx
- powerpc/64s: Fix logic when handling unknown CPU features
- NFS: Fix a soft lockup in the delegation recovery code
- clocksource/drivers/sun5i: Fail gracefully when clock rate is unavailable
- clocksource/drivers/exynos_mct: Fix error path in timer resources
initialization
- platform/x86: wmi: fix potential null pointer dereference
- NFS/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount
- mmc: sdhci-brcmstb: handle mmc_of_parse() errors during probe
- ARM: 8847/1: pm: fix HYP/SVC mode mismatch when MCPM is used
- ARM: 8848/1: virt: Align GIC version check with arm64 counterpart
- regulator: wm831x-dcdc: Fix list of wm831x_dcdc_ilim from mA to uA
- netfilter: nft_set_hash: fix lookups with fixed size hash on big endian
- NFSv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE()
- net: aquantia: fixed instack structure overflow
- powerpc/mm: Check secondary hash page table
- nios2: ksyms: Add missing symbol exports
- x86/mm: Remove unused variable 'cpu'
- scsi: megaraid_sas: reduce module load time
- drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen()
- xen, cpu_hotplug: Prevent an out of bounds access
- net: sh_eth: fix a missing check of of_get_phy_mode
- regulator: lp87565: Fix missing register for LP87565_BUCK_0
- media: ivtv: update *pos correctly in ivtv_read_pos()
- media: cx18: update *pos correctly in cx18_read_pos()
- media: wl128x: Fix an error code in fm_download_firmware()
- media: cx23885: check allocation return
- regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB
- jfs: fix bogus variable self-initialization
- tipc: tipc clang warning
- m68k: mac: Fix VIA timer counter accesses
- arm64: dts: allwinner: a64: Add missing PIO clocks
- ARM: OMAP2+: Fix potentially uninitialized return value for _setup_reset()
- media: davinci-isif: avoid uninitialized variable use
- media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame
- spi: tegra114: clear packed bit for unpacked mode
- spi: tegra114: fix for unpacked mode transfers
- spi: tegra114: terminate dma and reset on transfer timeout
- spi: tegra114: flush fifos
- spi: tegra114: configure dma burst size to fifo trig level
- soc/fsl/qe: Fix an error code in qe_pin_request()
- spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios
- ehea: Fix a copy-paste err in ehea_init_port_res
- scsi: qla2xxx: Unregister chrdev if module initialization fails
- scsi: target/core: Fix a race condition in the LUN lookup code
- ARM: pxa: ssp: Fix "WARNING: invalid free of devm_ allocated data"
- net: hns3: fix for vport->bw_limit overflow problem
- hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses
- platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer
- tipc: set sysctl_tipc_rmem and named_timeout right range
- selftests/ipc: Fix msgque compiler warnings
- powerpc: vdso: Make vdso32 installation conditional in vdso_install
- ARM: dts: ls1021: Fix SGMII PCS link remaining down after PHY disconnect
- media: ov2659: fix unbalanced mutex_lock/unlock
- 6lowpan: Off by one handling ->nexthdr
- dmaengine: axi-dmac: Don't check the number of frames for alignment
- ALSA: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk()
- NFS: Don't interrupt file writeout due to fatal errors
- irqchip/gic-v3-its: fix some definitions of inner cacheability attributes
- scsi: qla2xxx: Fix a format specifier
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory
- packet: in recvmsg msg_name return at least sizeof sockaddr_ll
- ASoC: fix valid stream condition
- usb: gadget: fsl: fix link error against usb-gadget module
- dwc2: gadget: Fix completed transfer size calculation in DDMA
- IB/mlx5: Add missing XRC options to QP optional params mask
- iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU
- dmaengine: tegra210-adma: restore channel status
- mmc: core: fix possible use after free of host
- lightnvm: pblk: fix lock order in pblk_rb_tear_down_check
- afs: Fix the afs.cell and afs.volume xattr handlers
- vfio/mdev: Avoid release parent reference during error path
- vfio/mdev: Fix aborting mdev child device removal if one fails
- l2tp: Fix possible NULL pointer dereference
- media: omap_vout: potential buffer overflow in vidioc_dqbuf()
- media: davinci/vpbe: array underflow in vpbe_enum_outputs()
- platform/x86: alienware-wmi: printing the wrong error code
- crypto: caam - fix caam_dump_sg that iterates through scatterlist
- netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
- pwm: meson: Consider 128 a valid pre-divider
- pwm: meson: Don't disable PWM when setting duty repeatedly
- ARM: riscpc: fix lack of keyboard interrupts after irq conversion
- kdb: do a sanity check on the cpu in kdb_per_cpu()
- backlight: lm3630a: Return 0 on success in update_status functions
- thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power
- EDAC/mc: Fix edac_mc_find() in case no device is found
- ARM: dts: sun8i-h3: Fix wifi in Beelink X2 DT
- dmaengine: tegra210-adma: Fix crash during probe
- arm64: dts: meson: libretech-cc: set eMMC as removable
- RDMA/qedr: Fix incorrect device rate.
- spi: spi-fsl-spi: call spi_finalize_current_message() at the end
- crypto: ccp - fix AES CFB error exposed by new test vectors
- crypto: ccp - Fix 3DES complaint from ccp-crypto module
- serial: stm32: fix rx error handling
- serial: stm32: fix transmit_chars when tx is stopped
- serial: stm32: Add support of TC bit status check
- serial: stm32: fix wakeup source initialization
- misc: sgi-xp: Properly initialize buf in xpc_get_rsvd_page_pa
- iommu: Use right function to get group for device
- signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig
- inet: frags: call inet_frags_fini() after unregister_pernet_subsys()
- netvsc: unshare skb in VF rx handler
- cpufreq: brcmstb-avs-cpufreq: Fix initial command check
- cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency
- media: vivid: fix incorrect assignment operation when setting video mode
- mpls: fix warning with multi-label encap
- iommu/vt-d: Duplicate iommu_resv_region objects per device list
- qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state
- powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild
- powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration
- drm/msm/mdp5: Fix mdp5_cfg_init error return
- net: netem: fix backlog accounting for corrupted GSO frames
- net/af_iucv: always register net_device notifier
- ASoC: ti: davinci-mcasp: Fix slot mask settings when using multiple AXRs
- rtc: pcf8563: Fix interrupt trigger method
- rtc: pcf8563: Clear event flags and disable interrupts before requesting irq
- drm/msm/a3xx: remove TPL1 regs from snapshot
- perf/ioctl: Add check for the sample_period value
- dmaengine: hsu: Revert "set HSU_CH_MTSR to memory width"
- clk: qcom: Fix -Wunused-const-variable
- nvmem: imx-ocotp: Ensure WAIT bits are preserved when setting timing
- bnxt_en: Fix ethtool selftest crash under error conditions.
- iommu/amd: Make iommu_disable safer
- mfd: intel-lpss: Release IDA resources
- rxrpc: Fix uninitialized error code in rxrpc_send_data_packet()
- devres: allow const resource arguments
- net: pasemi: fix an use-after-free in pasemi_mac_phy_init()
- scsi: libfc: fix null pointer dereference on a null lport
- clk: sunxi-ng: v3s: add the missing PLL_DDR1
- PM: sleep: Fix possible overflow in pm_system_cancel_wakeup()
- libertas_tf: Use correct channel range in lbtf_geo_init
- qed: reduce maximum stack frame size
- usb: host: xhci-hub: fix extra endianness conversion
- mic: avoid statically declaring a 'struct device'.
- x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI
- crypto: ccp - Reduce maximum stack usage
- ALSA: aoa: onyx: always initialize register read value
- tipc: reduce risk of wakeup queue starvation
- ARM: dts: stm32: add missing vdda-supply to adc on stm32h743i-eval
- net/mlx5: Fix mlx5_ifc_query_lag_out_bits
- cifs: fix rmmod regression in cifs.ko caused by force_sig changes
- crypto: caam - free resources in case caam_rng registration failed
- ext4: set error return correctly when ext4_htree_store_dirent fails
- ASoC: es8328: Fix copy-paste error in es8328_right_line_controls
- ASoC: cs4349: Use PM ops 'cs4349_runtime_pm'
- ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls
- net/rds: Add a few missing rds_stat_names entries
- bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
- signal: Allow cifs and drbd to receive their terminating signals
- ASoC: sun4i-i2s: RX and TX counter registers are swapped
- dmaengine: dw: platform: Switch to acpi_dma_controller_register()
- mac80211: minstrel_ht: fix per-group max throughput rate initialization
- media: atmel: atmel-isi: fix timeout value for stop streaming
- rtc: pcf2127: bugfix: read rtc disables watchdog
- mips: avoid explicit UB in assignment of mips_io_port_base
- iommu/mediatek: Fix iova_to_phys PA start for 4GB mode
- ahci: Do not export local variable ahci_em_messages
- Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()"
- hwmon: (lm75) Fix write operations for negative temperatures
- power: supply: Init device wakeup after device_add()
- x86, perf: Fix the dependency of the x86 insn decoder selftest
- staging: greybus: light: fix a couple double frees
- irqdomain: Add the missing assignment of domain->fwnode for named fwnode
- bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
- iio: dac: ad5380: fix incorrect assignment to val
- ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init
- tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs
- net: sonic: return NETDEV_TX_OK if failed to map buffer
- scsi: fnic: fix msix interrupt allocation
- Btrfs: fix hang when loading existing inode cache off disk
- Btrfs: fix inode cache waiters hanging on failure to start caching thread
- Btrfs: fix inode cache waiters hanging on path allocation failure
- btrfs: use correct count in btrfs_file_write_iter()
- ixgbe: sync the first fragment unconditionally
- hwmon: (shtc1) fix shtc1 and shtw1 id mask
- net: sonic: replace dev_kfree_skb in sonic_send_packet
- pinctrl: iproc-gpio: Fix incorrect pinconf configurations
- ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet
- RDMA/cma: Fix false error message
- net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'
- iommu/amd: Wait for completion of IOTLB flush in attach_device
- net: aquantia: Fix aq_vec_isr_legacy() return value
- net: hisilicon: Fix signedness bug in hix5hd2_dev_probe()
- net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe()
- net: stmmac: dwmac-meson8b: Fix signedness bug in probe
- net: axienet: fix a signedness bug in probe
- of: mdio: Fix a signedness bug in of_phy_get_and_connect()
- net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse()
- nvme: retain split access workaround for capability reads
- net: stmmac: gmac4+: Not all Unicast addresses may be available
- mac80211: accept deauth frames in IBSS mode
- llc: fix another potential sk_buff leak in llc_ui_sendmsg()
- llc: fix sk_buff refcounting in llc_conn_state_process()
- net: stmmac: fix length of PTP clock's name string
- act_mirred: Fix mirred_init_module error handling
- net: avoid possible false sharing in sk_leave_memory_pressure()
- net: add {READ|WRITE}_ONCE() annotations on ->rskq_accept_head
- tcp: annotate lockless access to tcp_memory_pressure
- drm/msm/dsi: Implement reset correctly
- dmaengine: imx-sdma: fix size check for sdma script_number
- net: netem: fix error path for corrupted GSO frames
- net: netem: correct the parent's backlog when corrupted packet was dropped
- net: qca_spi: Move reset_count to struct qcaspi
- afs: Fix large file support
- MIPS: Loongson: Fix return value of loongson_hwmon_init
- hv_netvsc: flag software created hash value
- net: neigh: use long type to store jiffies delta
- packet: fix data-race in fanout_flow_is_huge()
- mmc: sdio: fix wl1251 vendor id
- mmc: core: fix wl1251 sdio quirks
- affs: fix a memory leak in affs_remount
- dmaengine: ti: edma: fix missed failure handling
- drm/radeon: fix bad DMA from INTERRUPT_CNTL2
- arm64: dts: juno: Fix UART frequency
- IB/iser: Fix dma_nents type definition
- serial: stm32: fix clearing interrupt error flags
- m68k: Call timer_interrupt() with interrupts disabled
- SUNRPC: Fix svcauth_gss_proxy_init()
- perf map: No need to adjust the long name of modules
- ipmi: Fix memory leak in __ipmi_bmc_register
- apparmor: Fix network performance issue in aa_label_sk_perm
- firmware: coreboot: Let OF core populate platform device
- bridge: br_arp_nd_proxy: set icmp6_router if neigh has NTF_ROUTER
- signal/ia64: Use the generic force_sigsegv in setup_frame
- ASoC: wm9712: fix unused variable warning
- genirq/debugfs: Reinstate full OF path for domain name
- usb: gadget: fsl_udc_core: check allocation return value and cleanup on
failure
- cfg80211: regulatory: make initialization more robust
- net: socionext: Add dummy PHY register read in phy_write()
- mlxsw: spectrum: Set minimum shaper on MC TCs
- pinctrl: meson-gxl: remove invalid GPIOX tsin_a pins
- drm: rcar-du: Fix vblank initialization
- arm64: dts: meson-gx: Add hdmi_5v regulator as hdmi tx supply
- IB/hfi1: Correctly process FECN and BECN in packets
- OPP: Fix missing debugfs supply directory for OPPs
- staging: bcm2835-camera: fix module autoloading
- fork,memcg: fix crash in free_thread_stack on memcg charge fail
- arm64: defconfig: Re-enable bcm2835-thermal driver
- remoteproc: qcom: q6v5-mss: Add missing clocks for MSM8996
- remoteproc: qcom: q6v5-mss: Add missing regulator for MSM8996
- drm: Fix error handling in drm_legacy_addctx
- ARM: dts: r8a7743: Remove generic compatible string from iic3
- drm/etnaviv: fix some off by one bugs
- fork, memcg: fix cached_stacks case
- net: hns3: fix wrong combined count returned by ethtool -l
- net: hns3: fix bug of ethtool_ops.get_channels for VF
- ARM: dts: sun8i-a23-a33: Move NAND controller device node to sort by address
- clk: ingenic: jz4740: Fix gating of UDC clock
- ntb_hw_switchtec: NT req id mapping table register entry number should be
512
- net: dsa: b53: Fix default VLAN ID
- net: dsa: b53: Properly account for VLAN filtering
- net: dsa: b53: Do not program CPU port's PVID
- drm/nouveau: fix missing break in switch statement
- net: dsa: fix unintended change of bridge interface STP state
- perf: Copy parent's address filter offsets on clone
- netfilter: nft_set_hash: bogus element self comparison from deactivation
path
- iommu/vt-d: Fix NULL pointer reference in intel_svm_bind_mm()
- NFS: Add missing encode / decode sequence_maxsz to v4.2 operations
- ARM: dts: sun8i: a33: Reintroduce default pinctrl muxing
- ARM: dts: sun9i: optimus: Fix fixed-regulators
- bus: ti-sysc: Fix sysc_unprepare() when no clocks have been allocated
- arm64/vdso: don't leak kernel addresses
- rtc: mt6397: Don't call irq_dispose_mapping.
- bpf: Add missed newline in verifier verbose log
- ACPI: button: reinitialize button state upon resume
- soc: amlogic: meson-gx-pwrc-vpu: Fix power on/off register bitmask
- net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info()
- afs: Fix AFS file locking to allow fine grained locks
- afs: Further fix file locking
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd()
- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
- vfio/mdev: Follow correct remove sequence
- ALSA: aica: Fix a long-time build breakage
- nfp: bpf: fix static check error through tightening shift amount adjustment
- thermal: rcar_gen3_thermal: fix interrupt type
- afs: Fix lock-wait/callback-break double locking
- afs: Fix double inc of vnode->cb_break
- clk: meson: gxbb: no spread spectrum on mpll0
- serial: stm32: fix word length configuration
- serial: stm32: fix rx data length when parity enabled
- net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector
- crypto: talitos - fix AEAD processing.
- net: don't clear sock->sk early to avoid trouble in strparser
- crypto: inside-secure - fix zeroing of the request in ahash_exit_inv
- arm64: dts: meson-gxm-khadas-vim2: fix gpio-keys-polled node
- arm64: dts: meson-gxm-khadas-vim2: fix Bluetooth support
- phy: usb: phy-brcm-usb: Remove sysfs attributes upon driver removal
- qed: iWARP - fix uninitialized callback
- IB/hfi1: Handle port down properly in pio
- net/af_iucv: build proper skbs for HiperTransport
- ARM: dts: iwg20d-q7-common: Fix SDHI1 VccQ regularor
- ip6_fib: Don't discard nodes with valid routing information in
fib6_locate_1()
- nvmem: imx-ocotp: Change TIMING calculation to u-boot algorithm
- fork,memcg: alloc_thread_stack_node needs to set tsk->stack
- PM: ACPI/PCI: Resume all devices during hibernation
- ACPI: PM: Simplify and fix PM domain hibernation callbacks
- ACPI: PM: Introduce "poweroff" callbacks for ACPI PM domain and LPSS
- drm/panel: make drm_panel.h self-contained
- cxgb4: smt: Add lock for atomic_dec_and_test
- powerpc/64s/radix: Fix memory hot-unplug page table split
- rtc: rv3029: revert error handling patch to rv3029_eeprom_write()
- i40e: reduce stack usage in i40e_set_fc
- ARM: 8896/1: VDSO: Don't leak kernel addresses
- rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
- usb: typec: tps6598x: Fix build error without CONFIG_REGMAP_I2C
- bcache: Fix an error code in bch_dump_read()
- ARM: dts: aspeed-g5: Fixe gpio-ranges upper limit
- net: hns3: fix error VF index when setting VLAN offload
- mailbox: qcom-apcs: fix max_register value
- powerpc/mm/mce: Keep irqs disabled during lockless page table walk
- net: netsec: Fix signedness bug in netsec_probe()
- s390/qeth: Fix error handling during VNICC initialization
- s390/qeth: Fix initialization of vnicc cmd masks during set online
- vhost/test: stop device before reset
- arm64: hibernate: check pgd table allocation
- afs: Fix missing timeout reset
- hwrng: omap3-rom - Fix missing clock by probing with device tree
- arm64: dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node
* Bionic update: upstream stable patchset 2020-02-06 (LP: #1862259)
- dt-bindings: reset: meson8b: fix duplicate reset IDs
- clk: Don't try to enable critical clocks if prepare failed
- ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1
- ALSA: seq: Fix racy access for queue timer in proc read
- Fix built-in early-load Intel microcode alignment
- block: fix an integer overflow in logical block size
- ARM: dts: am571x-idk: Fix gpios property to have the correct gpio number
- iio: buffer: align the size of scan bytes to size of the largest element
- USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx
- USB: serial: option: Add support for Quectel RM500Q
- USB: serial: opticon: fix control-message timeouts
- USB: serial: option: add support for Quectel RM500Q in QDL mode
- USB: serial: suppress driver bind attributes
- USB: serial: ch341: handle unbound port at reset_resume
- USB: serial: io_edgeport: add missing active-port sanity check
- USB: serial: keyspan: handle unbound ports
- USB: serial: quatech2: handle unbound ports
- scsi: fnic: fix invalid stack access
- scsi: mptfusion: Fix double fetch bug in ioctl
- ptrace: reintroduce usage of subjective credentials in ptrace_has_cap()
- usb: core: hub: Improved device recognition on remote wakeup
- x86/resctrl: Fix an imbalance in domain_remove_cpu()
- x86/efistub: Disable paging at mixed mode entry
- perf hists: Fix variable name's inconsistency in hists__for_each() macro
- perf report: Fix incorrectly added dimensions as switch perf data file
- mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD
alignment
- btrfs: fix memory leak in qgroup accounting
- mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio()
- net: stmmac: 16KB buffer must be 16 byte aligned
- net: stmmac: Enable 16KB buffer size
- USB: serial: io_edgeport: use irqsave() in USB's complete callback
- USB: serial: io_edgeport: handle unbound ports on URB completion
- mm/huge_memory.c: make __thp_get_unmapped_area static
- mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD
alignment
- arm64: dts: agilex/stratix10: fix pmu interrupt numbers
- cfg80211: fix page refcount issue in A-MSDU decap
- netfilter: fix a use-after-free in mtype_destroy()
- netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
- NFC: pn533: fix bulk-message timeout
- batman-adv: Fix DAT candidate selection on little endian systems
- macvlan: use skb_reset_mac_header() in macvlan_queue_xmit()
- hv_netvsc: Fix memory leak when removing rndis device
- net: dsa: tag_qca: fix doubled Tx statistics
- net: hns: fix soft lockup when there is not enough memory
- net: usb: lan78xx: limit size of local TSO packets
- net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info
- ptp: free ptp device pin descriptors properly
- r8152: add missing endpoint sanity check
- tcp: fix marked lost packets not being retransmitted
- xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk
- cw1200: Fix a signedness bug in cw1200_load_firmware()
- arm64: dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node
- cfg80211: check for set_wiphy_params
- tick/sched: Annotate lockless access to last_jiffies_update
- Revert "arm64: dts: juno: add dma-ranges property"
- reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr
- scsi: esas2r: unlock on error in esas2r_nvram_read_direct()
- scsi: qla4xxx: fix double free bug
- scsi: bnx2i: fix potential use after free
- scsi: target: core: Fix a pr_debug() argument
- scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI
- scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan
- scsi: core: scsi_trace: Use get_unaligned_be*()
- perf probe: Fix wrong address verification
- regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id
- ARM: dts: meson8: fix the size of the PMU registers
- LSM: generalize flag passing to security_capable
- drm/i915: Add missing include file <linux/math64.h>
- btrfs: do not delete mismatched root refs
- ARM: dts: imx6qdl: Add Engicam i.Core 1.5 MX6
- ARM: dts: imx7: Fix Toradex Colibri iMX7S 256MB NAND flash support
- mlxsw: spectrum: Wipe xstats.backlog of down ports
- tcp: refine rule to allow EPOLLOUT generation under mem pressure
- mtd: devices: fix mchp23k256 read and write
- drm/nouveau/bar/nv50: check bar1 vmm return value
- drm/nouveau/bar/gf100: ensure BAR is mapped
- drm/nouveau/mmu: qualify vmm during dtor
* Bionic update: upstream stable patchset 2020-02-04 (LP: #1861934)
- chardev: Avoid potential use-after-free in 'chrdev_open()'
- usb: chipidea: host: Disable port power only if previously enabled
- ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5
- ALSA: hda/realtek - Add new codec supported for ALCS1200A
- ALSA: hda/realtek - Set EAPD control to default for ALC222
- kernel/trace: Fix do not unregister tracepoints when register
sched_migrate_task fail
- tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined
- HID: Fix slab-out-of-bounds read in hid_field_extract
- HID: uhid: Fix returning EPOLLOUT from uhid_char_poll
- can: gs_usb: gs_usb_probe(): use descriptors of current altsetting
- can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling
to irq mode
- can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing
CAN sk_buffs
- gpiolib: acpi: Turn dmi_system_id table into a generic quirk table
- gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism
- staging: vt6656: set usb_set_intfdata on driver fail.
- USB: serial: option: add ZLP support for 0x1bc7/0x9010
- usb: musb: fix idling for suspend after disconnect interrupt
- usb: musb: Disable pullup at init
- usb: musb: dma: Correct parameter passed to IRQ handler
- staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713
- HID: hid-input: clear unmapped usages
- Input: add safety guards to input_set_keycode()
- drm/fb-helper: Round up bits_per_pixel if possible
- drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ
- staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
- tty: link tty and port before configuring it as console
- tty: always relink the port
- mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf
- scsi: bfa: release allocated memory in case of error
- rtl8xxxu: prevent leaking urb
- arm64: cpufeature: Avoid warnings due to unused symbols
- HID: hiddev: fix mess in hiddev_open()
- USB: Fix: Don't skip endpoint descriptors with maxpacket=0
- phy: cpcap-usb: Fix error path when no host driver is loaded
- phy: cpcap-usb: Fix flakey host idling and enumerating of devices
- netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
- netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
- ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen
- tracing: Change offset type to s32 in preempt/irq tracepoints
- serdev: Don't claim unsupported ACPI serial devices
- netfilter: conntrack: dccp, sctp: handle null timeout argument
- hidraw: Return EPOLLOUT from hidraw_poll
- HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
- HID: hidraw, uhid: Always report EPOLLOUT
- ethtool: reduce stack usage with clang
- fs/select: avoid clang stack usage warning
- arm64: don't open code page table entry creation
- arm64: mm: Change page table pointer name in p[md]_set_huge()
- arm64: Enforce BBM for huge IO/VMAP mappings
- arm64: Make sure permission updates happen for pmd/pud
- media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
- wimax: i2400: fix memory leak
- wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle
- iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
- rtc: mt6397: fix alarm register overwrite
- RDMA/bnxt_re: Fix Send Work Entry state check while polling completions
- ASoC: stm32: spdifrx: fix inconsistent lock state
- ASoC: stm32: spdifrx: fix race condition in irq handler
- gpio: zynq: Fix for bug in zynq_gpio_restore_context API
- iommu: Remove device link to group on failure
- gpio: Fix error message on out-of-range GPIO in lookup table
- hsr: reset network header when supervision frame is created
- cifs: Adjust indentation in smb2_open_file
- btrfs: simplify inode locking for RWF_NOWAIT
- RDMA/mlx5: Return proper error value
- RDMA/srpt: Report the SCSI residual to the initiator
- scsi: enclosure: Fix stale device oops with hot replug
- scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
- platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
- xprtrdma: Fix completion wait during device removal
- NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn
- iio: imu: adis16480: assign bias value only if operation succeeded
- mei: fix modalias documentation
- clk: samsung: exynos5420: Preserve CPU clocks configuration during
suspend/resume
- pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args
call
- pinctrl: lewisburg: Update pin list according to v1.1v6
- scsi: sd: enable compat ioctls for sed-opal
- arm64: dts: apq8096-db820c: Increase load on l21 for SDCARD
- af_unix: add compat_ioctl support
- compat_ioctl: handle SIOCOUTQNSD
- PCI/PTM: Remove spurious "d" from granularity message
- powerpc/powernv: Disable native PCIe port management
- tty: serial: imx: use the sg count from dma_map_sg
- tty: serial: pch_uart: correct usage of dma_unmap_sg
- media: ov6650: Fix incorrect use of JPEG colorspace
- media: ov6650: Fix some format attributes not under control
- media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support
- media: exynos4-is: Fix recursive locking in isp_video_release()
- mtd: spi-nor: fix silent truncation in spi_nor_read()
- mtd: spi-nor: fix silent truncation in spi_nor_read_raw()
- spi: atmel: fix handling of cs_change set on non-last xfer
- rtlwifi: Remove unnecessary NULL check in rtl_regd_init
- f2fs: fix potential overflow
- rtc: msm6242: Fix reading of 10-hour digit
- gpio: mpc8xxx: Add platform device to gpiochip->parent
- scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy()
- rseq/selftests: Turn off timeout setting
- mips: cacheinfo: report shared CPU map
- MIPS: Prevent link failure with kcov instrumentation
- dmaengine: k3dma: Avoid null pointer traversal
- ioat: ioat_alloc_ring() failure handling.
- hexagon: parenthesize registers in asm predicates
- hexagon: work around compiler crash
- ocfs2: call journal flush to mark journal as empty after journal recovery
when mount
- s390/qeth: Fix vnicc_is_in_use if rx_bcast not set
- drm/ttm: fix start page for huge page check in ttm_put_pages()
- drm/ttm: fix incrementing the page pointer for huge pages
- crypto: virtio - implement missing support for output IVs
- iommu/mediatek: Correct the flush_iotlb_all callback
- rtc: brcmstb-waketimer: add missed clk_disable_unprepare
* Bionic update: upstream stable patchset 2020-02-03 (LP: #1861739)
- USB: dummy-hcd: use usb_urb_dir_in instead of usb_pipein
- USB: dummy-hcd: increase max number of devices to 32
- locking/spinlock/debug: Fix various data races
- netfilter: ctnetlink: netns exit must wait for callbacks
- libtraceevent: Fix lib installation with O=
- x86/efi: Update e820 with reserved EFI boot services data to fix kexec
breakage
- efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs
- efi/gop: Return EFI_SUCCESS if a usable GOP was found
- efi/gop: Fix memory leak in __gop_query32/64()
- ARM: vexpress: Set-up shared OPP table instead of individual for each CPU
- netfilter: uapi: Avoid undefined left-shift in xt_sctp.h
- netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END
- ARM: dts: Cygnus: Fix MDIO node address/size cells
- spi: spi-cavium-thunderx: Add missing pci_release_regions()
- ASoC: topology: Check return value for soc_tplg_pcm_create()
- ARM: dts: bcm283x: Fix critical trip point
- bpf, mips: Limit to 33 tail calls
- ARM: dts: am437x-gp/epos-evm: fix panel compatible
- samples: bpf: Replace symbol compare of trace_event
- samples: bpf: fix syscall_tp due to unused syscall
- powerpc: Ensure that swiotlb buffer is allocated from low memory
- bnx2x: Do not handle requests from VFs after parity
- bnx2x: Fix logic to get total no. of PFs per engine
- net: usb: lan78xx: Fix error message format specifier
- rfkill: Fix incorrect check to avoid NULL pointer dereference
- ASoC: wm8962: fix lambda value
- regulator: rn5t618: fix module aliases
- kconfig: don't crash on NULL expressions in expr_eq()
- perf/x86/intel: Fix PT PMI handling
- fs: avoid softlockups in s_inodes iterators
- net: stmmac: Do not accept invalid MTU values
- net: stmmac: RX buffer size must be 16 byte aligned
- s390/dasd/cio: Interpret ccw_device_get_mdc return value correctly
- s390/dasd: fix memleak in path handling error case
- block: fix memleak when __blk_rq_map_user_iov() is failed
- parisc: Fix compiler warnings in debug_core.c
- llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c)
- hv_netvsc: Fix unwanted rx_table reset
- bpf: Fix passing modified ctx to ld/abs/ind instruction
- PCI/switchtec: Read all 64 bits of part_event_bitmap
- gtp: fix bad unlock balance in gtp_encap_enable_socket
- macvlan: do not assume mac_header is set in macvlan_broadcast()
- net: dsa: mv88e6xxx: Preserve priority when setting CPU port.
- net: stmmac: dwmac-sun8i: Allow all RGMII modes
- net: stmmac: dwmac-sunxi: Allow all RGMII modes
- net: usb: lan78xx: fix possible skb leak
- pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
- USB: core: fix check for duplicate endpoints
- USB: serial: option: add Telit ME910G1 0x110a composition
- sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
- tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK
- vxlan: fix tos value before xmit
- vlan: vlan_changelink() should propagate errors
- net: sch_prio: When ungrafting, replace with FIFO
- vlan: fix memory leak in vlan_dev_set_egress_priority
- regulator: fix use after free issue
- ASoC: max98090: fix possible race conditions
- netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()
- ARM: dts: BCM5301X: Fix MDIO node address/size cells
- bpf: Clear skb->tstamp in bpf_redirect when necessary
- parisc: add missing __init annotation
- iommu/iova: Init the struct iova to fix the possible memleak
- powerpc/spinlocks: Include correct header for static key
- ARM: dts: imx6ul: use nvmem-cells for cpu speed grading
* Sometimes can't adjust brightness on Dell AIO (LP: #1862885)
- SAUCE: platform/x86: dell-uart-backlight: increase retry times
* 4.15 kernel hard lockup about once a week (LP: #1799497)
- zram: correct flag name of ZRAM_ACCESS
- zram: fix lockdep warning of free block handling
* Prevent arm64 guest from accessing host debug registers (LP: #1860657)
- KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE
* pty03 from pty in ubuntu_ltp failed on Eoan (LP: #1862114)
- can, slip: Protect tty->disc_data in write_wakeup and close with RCU
-- Khalid Elmously <email address hidden> Mon, 02 Mar 2020 02:02:35 -0500
-
linux-aws (4.15.0-1062.66) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1062.66 -proposed tracker (LP: #1864734)
[ Ubuntu: 4.15.0-90.91 ]
* bionic/linux: 4.15.0-90.91 -proposed tracker (LP: #1864753)
* dkms artifacts may expire from the pool (LP: #1850958)
- [Packaging] autoreconstruct -- manage executable debian files
- [packaging] handle downloads from the librarian better
[ Ubuntu: 4.15.0-90.90 ]
* bionic/linux: 4.15.0-90.90 -proposed tracker (LP: #1864753)
* vm-segv from ubuntu_stress_smoke_test failed on B (LP: #1864063)
- Revert "apparmor: don't try to replace stale label in ptrace access check"
linux-aws (4.15.0-1061.65) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1061.65 -proposed tracker (LP: #1863325)
* dkms artifacts may expire from the pool (LP: #1850958)
- [Packaging] autoreconstruct -- manage executable debian files
- [packaging] handle downloads from the librarian better
* Root can lift kernel lockdown via USB/IP (LP: #1861238)
- aws: [Config] Update config for sysrq lockdown revert
[ Ubuntu: 4.15.0-89.89 ]
* bionic/linux: 4.15.0-89.89 -proposed tracker (LP: #1863350)
* [SRU][B/OEM-B] Fix multitouch support on some devices (LP: #1862567)
- HID: core: move the dynamic quirks handling in core
- HID: quirks: move the list of special devices into a quirk
- HID: core: move the list of ignored devices in hid-quirks.c
- HID: core: remove the absolute need of hid_have_special_driver[]
* [linux] Patch to prevent possible data corruption (LP: #1848739)
- blk-mq: silence false positive warnings in hctx_unlock()
* Add bpftool to linux-tools-common (LP: #1774815)
- tools/bpftool: fix bpftool build with bintutils >= 2.9
- bpftool: make libbfd optional
- [Debian] Remove binutils-dev build dependency
- [Debian] package bpftool in linux-tools-common
* Root can lift kernel lockdown via USB/IP (LP: #1861238)
- Revert "UBUNTU: SAUCE: (efi-lockdown) Add a SysRq option to lift kernel
lockdown"
* [Bionic] i915 incomplete fix for CVE-2019-14615 (LP: #1862840) //
CVE-2020-8832
- drm/i915: Use same test for eviction and submitting kernel context
- drm/i915: Define an engine class enum for the uABI
- drm/i915: Force the switch to the i915->kernel_context
- drm/i915: Move GT powersaving init to i915_gem_init()
- drm/i915: Move intel_init_clock_gating() to i915_gem_init()
- drm/i915: Inline intel_modeset_gem_init()
- drm/i915: Mark the context state as dirty/written
- drm/i915: Record the default hw state after reset upon load
* Bionic update: upstream stable patchset 2020-02-12 (LP: #1863019)
- xfs: Sanity check flags of Q_XQUOTARM call
- mfd: intel-lpss: Add default I2C device properties for Gemini Lake
- powerpc/archrandom: fix arch_get_random_seed_int()
- tipc: fix wrong timeout input for tipc_wait_for_cond()
- mt7601u: fix bbp version check in mt7601u_wait_bbp_ready
- crypto: sun4i-ss - fix big endian issues
- drm/sti: do not remove the drm_bridge that was never added
- drm/virtio: fix bounds check in virtio_gpu_cmd_get_capset()
- ALSA: hda: fix unused variable warning
- apparmor: don't try to replace stale label in ptrace access check
- PCI: iproc: Remove PAXC slot check to allow VF support
- drm/hisilicon: hibmc: Don't overwrite fb helper surface depth
- IB/rxe: replace kvfree with vfree
- IB/hfi1: Add mtu check for operational data VLs
- ALSA: usb-audio: update quirk for B&W PX to remove microphone
- staging: comedi: ni_mio_common: protect register write overflow
- pwm: lpss: Release runtime-pm reference from the driver's remove callback
- drm/sun4i: hdmi: Fix double flag assignation
- mlxsw: reg: QEEC: Add minimum shaper fields
- NTB: ntb_hw_idt: replace IS_ERR_OR_NULL with regular NULL checks
- pcrypt: use format specifier in kobject_add
- exportfs: fix 'passing zero to ERR_PTR()' warning
- drm/dp_mst: Skip validating ports during destruction, just ref
- net: phy: Fix not to call phy_resume() if PHY is not attached
- IB/rxe: Fix incorrect cache cleanup in error flow
- staging: bcm2835-camera: Abort probe if there is no camera
- switchtec: Remove immediate status check after submitting MRPC command
- pinctrl: sh-pfc: r8a7740: Add missing REF125CK pin to gether_gmii group
- pinctrl: sh-pfc: r8a7740: Add missing LCD0 marks to lcd0_data24_1 group
- pinctrl: sh-pfc: r8a7791: Remove bogus ctrl marks from qspi_data4_b group
- pinctrl: sh-pfc: r8a7791: Remove bogus marks from vin1_b_data18 group
- pinctrl: sh-pfc: sh73a0: Add missing TO pin to tpu4_to3 group
- pinctrl: sh-pfc: r8a7794: Remove bogus IPSR9 field
- pinctrl: sh-pfc: sh7734: Add missing IPSR11 field
- pinctrl: sh-pfc: r8a77995: Remove bogus SEL_PWM[0-3]_3 configurations
- pinctrl: sh-pfc: sh7269: Add missing PCIOR0 field
- pinctrl: sh-pfc: sh7734: Remove bogus IPSR10 value
- vxlan: changelink: Fix handling of default remotes
- Input: nomadik-ske-keypad - fix a loop timeout test
- clk: highbank: fix refcount leak in hb_clk_init()
- clk: qoriq: fix refcount leak in clockgen_init()
- clk: socfpga: fix refcount leak
- clk: samsung: exynos4: fix refcount leak in exynos4_get_xom()
- clk: imx6q: fix refcount leak in imx6q_clocks_init()
- clk: imx6sx: fix refcount leak in imx6sx_clocks_init()
- clk: imx7d: fix refcount leak in imx7d_clocks_init()
- clk: vf610: fix refcount leak in vf610_clocks_init()
- clk: armada-370: fix refcount leak in a370_clk_init()
- clk: kirkwood: fix refcount leak in kirkwood_clk_init()
- clk: armada-xp: fix refcount leak in axp_clk_init()
- clk: mv98dx3236: fix refcount leak in mv98dx3236_clk_init()
- clk: dove: fix refcount leak in dove_clk_init()
- MIPS: BCM63XX: drop unused and broken DSP platform device
- IB/usnic: Fix out of bounds index check in query pkey
- RDMA/ocrdma: Fix out of bounds index check in query pkey
- RDMA/qedr: Fix out of bounds index check in query pkey
- drm/shmob: Fix return value check in shmob_drm_probe
- arm64: dts: apq8016-sbc: Increase load on l11 for SDCARD
- spi: cadence: Correct initialisation of runtime PM
- RDMA/iw_cxgb4: Fix the unchecked ep dereference
- drm/etnaviv: NULL vs IS_ERR() buf in etnaviv_core_dump()
- media: s5p-jpeg: Correct step and max values for
V4L2_CID_JPEG_RESTART_INTERVAL
- kbuild: mark prepare0 as PHONY to fix external module build
- crypto: brcm - Fix some set-but-not-used warning
- crypto: tgr192 - fix unaligned memory access
- ASoC: imx-sgtl5000: put of nodes if finding codec fails
- IB/iser: Pass the correct number of entries for dma mapped SGL
- rtc: cmos: ignore bogus century byte
- spi/topcliff_pch: Fix potential NULL dereference on allocation error
- clk: sunxi-ng: sun8i-a23: Enable PLL-MIPI LDOs when ungating it
- iwlwifi: mvm: avoid possible access out of array.
- net/mlx5: Take lock with IRQs disabled to avoid deadlock
- iwlwifi: mvm: fix A-MPDU reference assignment
- tty: ipwireless: Fix potential NULL pointer dereference
- driver: uio: fix possible memory leak in __uio_register_device
- driver: uio: fix possible use-after-free in __uio_register_device
- crypto: crypto4xx - Fix wrong ppc4xx_trng_probe()/ppc4xx_trng_remove()
arguments
- driver core: Do not resume suppliers under device_links_write_lock()
- ARM: dts: lpc32xx: add required clocks property to keypad device node
- ARM: dts: lpc32xx: reparent keypad controller to SIC1
- ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller variant
- ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller clocks property
- ARM: dts: lpc32xx: phy3250: fix SD card regulator voltage
- iwlwifi: mvm: fix RSS config command
- staging: most: cdev: add missing check for cdev_add failure
- rtc: ds1672: fix unintended sign extension
- thermal: mediatek: fix register index error
- net: phy: fixed_phy: Fix fixed_phy not checking GPIO
- rtc: ds1307: rx8130: Fix alarm handling
- rtc: 88pm860x: fix unintended sign extension
- rtc: 88pm80x: fix unintended sign extension
- rtc: pm8xxx: fix unintended sign extension
- fbdev: chipsfb: remove set but not used variable 'size'
- iw_cxgb4: use tos when importing the endpoint
- iw_cxgb4: use tos when finding ipv6 routes
- drm/etnaviv: potential NULL dereference
- pinctrl: sh-pfc: emev2: Add missing pinmux functions
- pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group
- pinctrl: sh-pfc: r8a7792: Fix vin1_data18_b pin group
- pinctrl: sh-pfc: sh73a0: Fix fsic_spdif pin groups
- PCI: endpoint: functions: Use memcpy_fromio()/memcpy_toio()
- usb: phy: twl6030-usb: fix possible use-after-free on remove
- block: don't use bio->bi_vcnt to figure out segment number
- keys: Timestamp new keys
- vfio_pci: Enable memory accesses before calling pci_map_rom
- hwmon: (pmbus/tps53679) Fix driver info initialization in probe routine
- KVM: PPC: Release all hardware TCE tables attached to a group
- staging: r8822be: check kzalloc return or bail
- dmaengine: mv_xor: Use correct device for DMA API
- cdc-wdm: pass return value of recover_from_urb_loss
- regulator: pv88060: Fix array out-of-bounds access
- regulator: pv88080: Fix array out-of-bounds access
- regulator: pv88090: Fix array out-of-bounds access
- net: dsa: qca8k: Enable delay for RGMII_ID mode
- drm/nouveau/bios/ramcfg: fix missing parentheses when calculating RON
- drm/nouveau/pmu: don't print reply values if exec is false
- ASoC: qcom: Fix of-node refcount unbalance in apq8016_sbc_parse_of()
- fs/nfs: Fix nfs_parse_devname to not modify it's argument
- staging: rtlwifi: Use proper enum for return in halmac_parse_psd_data_88xx
- powerpc/64s: Fix logic when handling unknown CPU features
- NFS: Fix a soft lockup in the delegation recovery code
- clocksource/drivers/sun5i: Fail gracefully when clock rate is unavailable
- clocksource/drivers/exynos_mct: Fix error path in timer resources
initialization
- platform/x86: wmi: fix potential null pointer dereference
- NFS/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount
- mmc: sdhci-brcmstb: handle mmc_of_parse() errors during probe
- ARM: 8847/1: pm: fix HYP/SVC mode mismatch when MCPM is used
- ARM: 8848/1: virt: Align GIC version check with arm64 counterpart
- regulator: wm831x-dcdc: Fix list of wm831x_dcdc_ilim from mA to uA
- netfilter: nft_set_hash: fix lookups with fixed size hash on big endian
- NFSv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE()
- net: aquantia: fixed instack structure overflow
- powerpc/mm: Check secondary hash page table
- nios2: ksyms: Add missing symbol exports
- x86/mm: Remove unused variable 'cpu'
- scsi: megaraid_sas: reduce module load time
- drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen()
- xen, cpu_hotplug: Prevent an out of bounds access
- net: sh_eth: fix a missing check of of_get_phy_mode
- regulator: lp87565: Fix missing register for LP87565_BUCK_0
- media: ivtv: update *pos correctly in ivtv_read_pos()
- media: cx18: update *pos correctly in cx18_read_pos()
- media: wl128x: Fix an error code in fm_download_firmware()
- media: cx23885: check allocation return
- regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB
- jfs: fix bogus variable self-initialization
- tipc: tipc clang warning
- m68k: mac: Fix VIA timer counter accesses
- arm64: dts: allwinner: a64: Add missing PIO clocks
- ARM: OMAP2+: Fix potentially uninitialized return value for _setup_reset()
- media: davinci-isif: avoid uninitialized variable use
- media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame
- spi: tegra114: clear packed bit for unpacked mode
- spi: tegra114: fix for unpacked mode transfers
- spi: tegra114: terminate dma and reset on transfer timeout
- spi: tegra114: flush fifos
- spi: tegra114: configure dma burst size to fifo trig level
- soc/fsl/qe: Fix an error code in qe_pin_request()
- spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios
- ehea: Fix a copy-paste err in ehea_init_port_res
- scsi: qla2xxx: Unregister chrdev if module initialization fails
- scsi: target/core: Fix a race condition in the LUN lookup code
- ARM: pxa: ssp: Fix "WARNING: invalid free of devm_ allocated data"
- net: hns3: fix for vport->bw_limit overflow problem
- hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses
- platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer
- tipc: set sysctl_tipc_rmem and named_timeout right range
- selftests/ipc: Fix msgque compiler warnings
- powerpc: vdso: Make vdso32 installation conditional in vdso_install
- ARM: dts: ls1021: Fix SGMII PCS link remaining down after PHY disconnect
- media: ov2659: fix unbalanced mutex_lock/unlock
- 6lowpan: Off by one handling ->nexthdr
- dmaengine: axi-dmac: Don't check the number of frames for alignment
- ALSA: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk()
- NFS: Don't interrupt file writeout due to fatal errors
- irqchip/gic-v3-its: fix some definitions of inner cacheability attributes
- scsi: qla2xxx: Fix a format specifier
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory
- packet: in recvmsg msg_name return at least sizeof sockaddr_ll
- ASoC: fix valid stream condition
- usb: gadget: fsl: fix link error against usb-gadget module
- dwc2: gadget: Fix completed transfer size calculation in DDMA
- IB/mlx5: Add missing XRC options to QP optional params mask
- iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU
- dmaengine: tegra210-adma: restore channel status
- mmc: core: fix possible use after free of host
- lightnvm: pblk: fix lock order in pblk_rb_tear_down_check
- afs: Fix the afs.cell and afs.volume xattr handlers
- vfio/mdev: Avoid release parent reference during error path
- vfio/mdev: Fix aborting mdev child device removal if one fails
- l2tp: Fix possible NULL pointer dereference
- media: omap_vout: potential buffer overflow in vidioc_dqbuf()
- media: davinci/vpbe: array underflow in vpbe_enum_outputs()
- platform/x86: alienware-wmi: printing the wrong error code
- crypto: caam - fix caam_dump_sg that iterates through scatterlist
- netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
- pwm: meson: Consider 128 a valid pre-divider
- pwm: meson: Don't disable PWM when setting duty repeatedly
- ARM: riscpc: fix lack of keyboard interrupts after irq conversion
- kdb: do a sanity check on the cpu in kdb_per_cpu()
- backlight: lm3630a: Return 0 on success in update_status functions
- thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power
- EDAC/mc: Fix edac_mc_find() in case no device is found
- ARM: dts: sun8i-h3: Fix wifi in Beelink X2 DT
- dmaengine: tegra210-adma: Fix crash during probe
- arm64: dts: meson: libretech-cc: set eMMC as removable
- RDMA/qedr: Fix incorrect device rate.
- spi: spi-fsl-spi: call spi_finalize_current_message() at the end
- crypto: ccp - fix AES CFB error exposed by new test vectors
- crypto: ccp - Fix 3DES complaint from ccp-crypto module
- serial: stm32: fix rx error handling
- serial: stm32: fix transmit_chars when tx is stopped
- serial: stm32: Add support of TC bit status check
- serial: stm32: fix wakeup source initialization
- misc: sgi-xp: Properly initialize buf in xpc_get_rsvd_page_pa
- iommu: Use right function to get group for device
- signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig
- inet: frags: call inet_frags_fini() after unregister_pernet_subsys()
- netvsc: unshare skb in VF rx handler
- cpufreq: brcmstb-avs-cpufreq: Fix initial command check
- cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency
- media: vivid: fix incorrect assignment operation when setting video mode
- mpls: fix warning with multi-label encap
- iommu/vt-d: Duplicate iommu_resv_region objects per device list
- qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state
- powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild
- powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration
- drm/msm/mdp5: Fix mdp5_cfg_init error return
- net: netem: fix backlog accounting for corrupted GSO frames
- net/af_iucv: always register net_device notifier
- ASoC: ti: davinci-mcasp: Fix slot mask settings when using multiple AXRs
- rtc: pcf8563: Fix interrupt trigger method
- rtc: pcf8563: Clear event flags and disable interrupts before requesting irq
- drm/msm/a3xx: remove TPL1 regs from snapshot
- perf/ioctl: Add check for the sample_period value
- dmaengine: hsu: Revert "set HSU_CH_MTSR to memory width"
- clk: qcom: Fix -Wunused-const-variable
- nvmem: imx-ocotp: Ensure WAIT bits are preserved when setting timing
- bnxt_en: Fix ethtool selftest crash under error conditions.
- iommu/amd: Make iommu_disable safer
- mfd: intel-lpss: Release IDA resources
- rxrpc: Fix uninitialized error code in rxrpc_send_data_packet()
- devres: allow const resource arguments
- net: pasemi: fix an use-after-free in pasemi_mac_phy_init()
- scsi: libfc: fix null pointer dereference on a null lport
- clk: sunxi-ng: v3s: add the missing PLL_DDR1
- PM: sleep: Fix possible overflow in pm_system_cancel_wakeup()
- libertas_tf: Use correct channel range in lbtf_geo_init
- qed: reduce maximum stack frame size
- usb: host: xhci-hub: fix extra endianness conversion
- mic: avoid statically declaring a 'struct device'.
- x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI
- crypto: ccp - Reduce maximum stack usage
- ALSA: aoa: onyx: always initialize register read value
- tipc: reduce risk of wakeup queue starvation
- ARM: dts: stm32: add missing vdda-supply to adc on stm32h743i-eval
- net/mlx5: Fix mlx5_ifc_query_lag_out_bits
- cifs: fix rmmod regression in cifs.ko caused by force_sig changes
- crypto: caam - free resources in case caam_rng registration failed
- ext4: set error return correctly when ext4_htree_store_dirent fails
- ASoC: es8328: Fix copy-paste error in es8328_right_line_controls
- ASoC: cs4349: Use PM ops 'cs4349_runtime_pm'
- ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls
- net/rds: Add a few missing rds_stat_names entries
- bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
- signal: Allow cifs and drbd to receive their terminating signals
- ASoC: sun4i-i2s: RX and TX counter registers are swapped
- dmaengine: dw: platform: Switch to acpi_dma_controller_register()
- mac80211: minstrel_ht: fix per-group max throughput rate initialization
- media: atmel: atmel-isi: fix timeout value for stop streaming
- rtc: pcf2127: bugfix: read rtc disables watchdog
- mips: avoid explicit UB in assignment of mips_io_port_base
- iommu/mediatek: Fix iova_to_phys PA start for 4GB mode
- ahci: Do not export local variable ahci_em_messages
- Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()"
- hwmon: (lm75) Fix write operations for negative temperatures
- power: supply: Init device wakeup after device_add()
- x86, perf: Fix the dependency of the x86 insn decoder selftest
- staging: greybus: light: fix a couple double frees
- irqdomain: Add the missing assignment of domain->fwnode for named fwnode
- bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
- iio: dac: ad5380: fix incorrect assignment to val
- ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init
- tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs
- net: sonic: return NETDEV_TX_OK if failed to map buffer
- scsi: fnic: fix msix interrupt allocation
- Btrfs: fix hang when loading existing inode cache off disk
- Btrfs: fix inode cache waiters hanging on failure to start caching thread
- Btrfs: fix inode cache waiters hanging on path allocation failure
- btrfs: use correct count in btrfs_file_write_iter()
- ixgbe: sync the first fragment unconditionally
- hwmon: (shtc1) fix shtc1 and shtw1 id mask
- net: sonic: replace dev_kfree_skb in sonic_send_packet
- pinctrl: iproc-gpio: Fix incorrect pinconf configurations
- ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet
- RDMA/cma: Fix false error message
- net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'
- iommu/amd: Wait for completion of IOTLB flush in attach_device
- net: aquantia: Fix aq_vec_isr_legacy() return value
- net: hisilicon: Fix signedness bug in hix5hd2_dev_probe()
- net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe()
- net: stmmac: dwmac-meson8b: Fix signedness bug in probe
- net: axienet: fix a signedness bug in probe
- of: mdio: Fix a signedness bug in of_phy_get_and_connect()
- net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse()
- nvme: retain split access workaround for capability reads
- net: stmmac: gmac4+: Not all Unicast addresses may be available
- mac80211: accept deauth frames in IBSS mode
- llc: fix another potential sk_buff leak in llc_ui_sendmsg()
- llc: fix sk_buff refcounting in llc_conn_state_process()
- net: stmmac: fix length of PTP clock's name string
- act_mirred: Fix mirred_init_module error handling
- net: avoid possible false sharing in sk_leave_memory_pressure()
- net: add {READ|WRITE}_ONCE() annotations on ->rskq_accept_head
- tcp: annotate lockless access to tcp_memory_pressure
- drm/msm/dsi: Implement reset correctly
- dmaengine: imx-sdma: fix size check for sdma script_number
- net: netem: fix error path for corrupted GSO frames
- net: netem: correct the parent's backlog when corrupted packet was dropped
- net: qca_spi: Move reset_count to struct qcaspi
- afs: Fix large file support
- MIPS: Loongson: Fix return value of loongson_hwmon_init
- hv_netvsc: flag software created hash value
- net: neigh: use long type to store jiffies delta
- packet: fix data-race in fanout_flow_is_huge()
- mmc: sdio: fix wl1251 vendor id
- mmc: core: fix wl1251 sdio quirks
- affs: fix a memory leak in affs_remount
- dmaengine: ti: edma: fix missed failure handling
- drm/radeon: fix bad DMA from INTERRUPT_CNTL2
- arm64: dts: juno: Fix UART frequency
- IB/iser: Fix dma_nents type definition
- serial: stm32: fix clearing interrupt error flags
- m68k: Call timer_interrupt() with interrupts disabled
- SUNRPC: Fix svcauth_gss_proxy_init()
- perf map: No need to adjust the long name of modules
- ipmi: Fix memory leak in __ipmi_bmc_register
- apparmor: Fix network performance issue in aa_label_sk_perm
- firmware: coreboot: Let OF core populate platform device
- bridge: br_arp_nd_proxy: set icmp6_router if neigh has NTF_ROUTER
- signal/ia64: Use the generic force_sigsegv in setup_frame
- ASoC: wm9712: fix unused variable warning
- genirq/debugfs: Reinstate full OF path for domain name
- usb: gadget: fsl_udc_core: check allocation return value and cleanup on
failure
- cfg80211: regulatory: make initialization more robust
- net: socionext: Add dummy PHY register read in phy_write()
- mlxsw: spectrum: Set minimum shaper on MC TCs
- pinctrl: meson-gxl: remove invalid GPIOX tsin_a pins
- drm: rcar-du: Fix vblank initialization
- arm64: dts: meson-gx: Add hdmi_5v regulator as hdmi tx supply
- IB/hfi1: Correctly process FECN and BECN in packets
- OPP: Fix missing debugfs supply directory for OPPs
- staging: bcm2835-camera: fix module autoloading
- fork,memcg: fix crash in free_thread_stack on memcg charge fail
- arm64: defconfig: Re-enable bcm2835-thermal driver
- remoteproc: qcom: q6v5-mss: Add missing clocks for MSM8996
- remoteproc: qcom: q6v5-mss: Add missing regulator for MSM8996
- drm: Fix error handling in drm_legacy_addctx
- ARM: dts: r8a7743: Remove generic compatible string from iic3
- drm/etnaviv: fix some off by one bugs
- fork, memcg: fix cached_stacks case
- net: hns3: fix wrong combined count returned by ethtool -l
- net: hns3: fix bug of ethtool_ops.get_channels for VF
- ARM: dts: sun8i-a23-a33: Move NAND controller device node to sort by address
- clk: ingenic: jz4740: Fix gating of UDC clock
- ntb_hw_switchtec: NT req id mapping table register entry number should be
512
- net: dsa: b53: Fix default VLAN ID
- net: dsa: b53: Properly account for VLAN filtering
- net: dsa: b53: Do not program CPU port's PVID
- drm/nouveau: fix missing break in switch statement
- net: dsa: fix unintended change of bridge interface STP state
- perf: Copy parent's address filter offsets on clone
- netfilter: nft_set_hash: bogus element self comparison from deactivation
path
- iommu/vt-d: Fix NULL pointer reference in intel_svm_bind_mm()
- NFS: Add missing encode / decode sequence_maxsz to v4.2 operations
- ARM: dts: sun8i: a33: Reintroduce default pinctrl muxing
- ARM: dts: sun9i: optimus: Fix fixed-regulators
- bus: ti-sysc: Fix sysc_unprepare() when no clocks have been allocated
- arm64/vdso: don't leak kernel addresses
- rtc: mt6397: Don't call irq_dispose_mapping.
- bpf: Add missed newline in verifier verbose log
- ACPI: button: reinitialize button state upon resume
- soc: amlogic: meson-gx-pwrc-vpu: Fix power on/off register bitmask
- net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info()
- afs: Fix AFS file locking to allow fine grained locks
- afs: Further fix file locking
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd()
- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
- vfio/mdev: Follow correct remove sequence
- ALSA: aica: Fix a long-time build breakage
- nfp: bpf: fix static check error through tightening shift amount adjustment
- thermal: rcar_gen3_thermal: fix interrupt type
- afs: Fix lock-wait/callback-break double locking
- afs: Fix double inc of vnode->cb_break
- clk: meson: gxbb: no spread spectrum on mpll0
- serial: stm32: fix word length configuration
- serial: stm32: fix rx data length when parity enabled
- net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector
- crypto: talitos - fix AEAD processing.
- net: don't clear sock->sk early to avoid trouble in strparser
- crypto: inside-secure - fix zeroing of the request in ahash_exit_inv
- arm64: dts: meson-gxm-khadas-vim2: fix gpio-keys-polled node
- arm64: dts: meson-gxm-khadas-vim2: fix Bluetooth support
- phy: usb: phy-brcm-usb: Remove sysfs attributes upon driver removal
- qed: iWARP - fix uninitialized callback
- IB/hfi1: Handle port down properly in pio
- net/af_iucv: build proper skbs for HiperTransport
- ARM: dts: iwg20d-q7-common: Fix SDHI1 VccQ regularor
- ip6_fib: Don't discard nodes with valid routing information in
fib6_locate_1()
- nvmem: imx-ocotp: Change TIMING calculation to u-boot algorithm
- fork,memcg: alloc_thread_stack_node needs to set tsk->stack
- PM: ACPI/PCI: Resume all devices during hibernation
- ACPI: PM: Simplify and fix PM domain hibernation callbacks
- ACPI: PM: Introduce "poweroff" callbacks for ACPI PM domain and LPSS
- drm/panel: make drm_panel.h self-contained
- cxgb4: smt: Add lock for atomic_dec_and_test
- powerpc/64s/radix: Fix memory hot-unplug page table split
- rtc: rv3029: revert error handling patch to rv3029_eeprom_write()
- i40e: reduce stack usage in i40e_set_fc
- ARM: 8896/1: VDSO: Don't leak kernel addresses
- rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
- usb: typec: tps6598x: Fix build error without CONFIG_REGMAP_I2C
- bcache: Fix an error code in bch_dump_read()
- ARM: dts: aspeed-g5: Fixe gpio-ranges upper limit
- net: hns3: fix error VF index when setting VLAN offload
- mailbox: qcom-apcs: fix max_register value
- powerpc/mm/mce: Keep irqs disabled during lockless page table walk
- net: netsec: Fix signedness bug in netsec_probe()
- s390/qeth: Fix error handling during VNICC initialization
- s390/qeth: Fix initialization of vnicc cmd masks during set online
- vhost/test: stop device before reset
- arm64: hibernate: check pgd table allocation
- afs: Fix missing timeout reset
- hwrng: omap3-rom - Fix missing clock by probing with device tree
- arm64: dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node
* Bionic update: upstream stable patchset 2020-02-06 (LP: #1862259)
- dt-bindings: reset: meson8b: fix duplicate reset IDs
- clk: Don't try to enable critical clocks if prepare failed
- ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1
- ALSA: seq: Fix racy access for queue timer in proc read
- Fix built-in early-load Intel microcode alignment
- block: fix an integer overflow in logical block size
- ARM: dts: am571x-idk: Fix gpios property to have the correct gpio number
- iio: buffer: align the size of scan bytes to size of the largest element
- USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx
- USB: serial: option: Add support for Quectel RM500Q
- USB: serial: opticon: fix control-message timeouts
- USB: serial: option: add support for Quectel RM500Q in QDL mode
- USB: serial: suppress driver bind attributes
- USB: serial: ch341: handle unbound port at reset_resume
- USB: serial: io_edgeport: add missing active-port sanity check
- USB: serial: keyspan: handle unbound ports
- USB: serial: quatech2: handle unbound ports
- scsi: fnic: fix invalid stack access
- scsi: mptfusion: Fix double fetch bug in ioctl
- ptrace: reintroduce usage of subjective credentials in ptrace_has_cap()
- usb: core: hub: Improved device recognition on remote wakeup
- x86/resctrl: Fix an imbalance in domain_remove_cpu()
- x86/efistub: Disable paging at mixed mode entry
- perf hists: Fix variable name's inconsistency in hists__for_each() macro
- perf report: Fix incorrectly added dimensions as switch perf data file
- mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD
alignment
- btrfs: fix memory leak in qgroup accounting
- mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio()
- net: stmmac: 16KB buffer must be 16 byte aligned
- net: stmmac: Enable 16KB buffer size
- USB: serial: io_edgeport: use irqsave() in USB's complete callback
- USB: serial: io_edgeport: handle unbound ports on URB completion
- mm/huge_memory.c: make __thp_get_unmapped_area static
- mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD
alignment
- arm64: dts: agilex/stratix10: fix pmu interrupt numbers
- cfg80211: fix page refcount issue in A-MSDU decap
- netfilter: fix a use-after-free in mtype_destroy()
- netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
- NFC: pn533: fix bulk-message timeout
- batman-adv: Fix DAT candidate selection on little endian systems
- macvlan: use skb_reset_mac_header() in macvlan_queue_xmit()
- hv_netvsc: Fix memory leak when removing rndis device
- net: dsa: tag_qca: fix doubled Tx statistics
- net: hns: fix soft lockup when there is not enough memory
- net: usb: lan78xx: limit size of local TSO packets
- net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info
- ptp: free ptp device pin descriptors properly
- r8152: add missing endpoint sanity check
- tcp: fix marked lost packets not being retransmitted
- xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk
- cw1200: Fix a signedness bug in cw1200_load_firmware()
- arm64: dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node
- cfg80211: check for set_wiphy_params
- tick/sched: Annotate lockless access to last_jiffies_update
- Revert "arm64: dts: juno: add dma-ranges property"
- reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr
- scsi: esas2r: unlock on error in esas2r_nvram_read_direct()
- scsi: qla4xxx: fix double free bug
- scsi: bnx2i: fix potential use after free
- scsi: target: core: Fix a pr_debug() argument
- scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI
- scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan
- scsi: core: scsi_trace: Use get_unaligned_be*()
- perf probe: Fix wrong address verification
- regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id
- ARM: dts: meson8: fix the size of the PMU registers
- LSM: generalize flag passing to security_capable
- drm/i915: Add missing include file <linux/math64.h>
- btrfs: do not delete mismatched root refs
- ARM: dts: imx6qdl: Add Engicam i.Core 1.5 MX6
- ARM: dts: imx7: Fix Toradex Colibri iMX7S 256MB NAND flash support
- mlxsw: spectrum: Wipe xstats.backlog of down ports
- tcp: refine rule to allow EPOLLOUT generation under mem pressure
- mtd: devices: fix mchp23k256 read and write
- drm/nouveau/bar/nv50: check bar1 vmm return value
- drm/nouveau/bar/gf100: ensure BAR is mapped
- drm/nouveau/mmu: qualify vmm during dtor
* Bionic update: upstream stable patchset 2020-02-04 (LP: #1861934)
- chardev: Avoid potential use-after-free in 'chrdev_open()'
- usb: chipidea: host: Disable port power only if previously enabled
- ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5
- ALSA: hda/realtek - Add new codec supported for ALCS1200A
- ALSA: hda/realtek - Set EAPD control to default for ALC222
- kernel/trace: Fix do not unregister tracepoints when register
sched_migrate_task fail
- tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined
- HID: Fix slab-out-of-bounds read in hid_field_extract
- HID: uhid: Fix returning EPOLLOUT from uhid_char_poll
- can: gs_usb: gs_usb_probe(): use descriptors of current altsetting
- can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling
to irq mode
- can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing
CAN sk_buffs
- gpiolib: acpi: Turn dmi_system_id table into a generic quirk table
- gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism
- staging: vt6656: set usb_set_intfdata on driver fail.
- USB: serial: option: add ZLP support for 0x1bc7/0x9010
- usb: musb: fix idling for suspend after disconnect interrupt
- usb: musb: Disable pullup at init
- usb: musb: dma: Correct parameter passed to IRQ handler
- staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713
- HID: hid-input: clear unmapped usages
- Input: add safety guards to input_set_keycode()
- drm/fb-helper: Round up bits_per_pixel if possible
- drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ
- staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
- tty: link tty and port before configuring it as console
- tty: always relink the port
- mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf
- scsi: bfa: release allocated memory in case of error
- rtl8xxxu: prevent leaking urb
- arm64: cpufeature: Avoid warnings due to unused symbols
- HID: hiddev: fix mess in hiddev_open()
- USB: Fix: Don't skip endpoint descriptors with maxpacket=0
- phy: cpcap-usb: Fix error path when no host driver is loaded
- phy: cpcap-usb: Fix flakey host idling and enumerating of devices
- netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
- netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
- ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen
- tracing: Change offset type to s32 in preempt/irq tracepoints
- serdev: Don't claim unsupported ACPI serial devices
- netfilter: conntrack: dccp, sctp: handle null timeout argument
- hidraw: Return EPOLLOUT from hidraw_poll
- HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
- HID: hidraw, uhid: Always report EPOLLOUT
- ethtool: reduce stack usage with clang
- fs/select: avoid clang stack usage warning
- arm64: don't open code page table entry creation
- arm64: mm: Change page table pointer name in p[md]_set_huge()
- arm64: Enforce BBM for huge IO/VMAP mappings
- arm64: Make sure permission updates happen for pmd/pud
- media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
- wimax: i2400: fix memory leak
- wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle
- iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
- rtc: mt6397: fix alarm register overwrite
- RDMA/bnxt_re: Fix Send Work Entry state check while polling completions
- ASoC: stm32: spdifrx: fix inconsistent lock state
- ASoC: stm32: spdifrx: fix race condition in irq handler
- gpio: zynq: Fix for bug in zynq_gpio_restore_context API
- iommu: Remove device link to group on failure
- gpio: Fix error message on out-of-range GPIO in lookup table
- hsr: reset network header when supervision frame is created
- cifs: Adjust indentation in smb2_open_file
- btrfs: simplify inode locking for RWF_NOWAIT
- RDMA/mlx5: Return proper error value
- RDMA/srpt: Report the SCSI residual to the initiator
- scsi: enclosure: Fix stale device oops with hot replug
- scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
- platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
- xprtrdma: Fix completion wait during device removal
- NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn
- iio: imu: adis16480: assign bias value only if operation succeeded
- mei: fix modalias documentation
- clk: samsung: exynos5420: Preserve CPU clocks configuration during
suspend/resume
- pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args
call
- pinctrl: lewisburg: Update pin list according to v1.1v6
- scsi: sd: enable compat ioctls for sed-opal
- arm64: dts: apq8096-db820c: Increase load on l21 for SDCARD
- af_unix: add compat_ioctl support
- compat_ioctl: handle SIOCOUTQNSD
- PCI/PTM: Remove spurious "d" from granularity message
- powerpc/powernv: Disable native PCIe port management
- tty: serial: imx: use the sg count from dma_map_sg
- tty: serial: pch_uart: correct usage of dma_unmap_sg
- media: ov6650: Fix incorrect use of JPEG colorspace
- media: ov6650: Fix some format attributes not under control
- media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support
- media: exynos4-is: Fix recursive locking in isp_video_release()
- mtd: spi-nor: fix silent truncation in spi_nor_read()
- mtd: spi-nor: fix silent truncation in spi_nor_read_raw()
- spi: atmel: fix handling of cs_change set on non-last xfer
- rtlwifi: Remove unnecessary NULL check in rtl_regd_init
- f2fs: fix potential overflow
- rtc: msm6242: Fix reading of 10-hour digit
- gpio: mpc8xxx: Add platform device to gpiochip->parent
- scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy()
- rseq/selftests: Turn off timeout setting
- mips: cacheinfo: report shared CPU map
- MIPS: Prevent link failure with kcov instrumentation
- dmaengine: k3dma: Avoid null pointer traversal
- ioat: ioat_alloc_ring() failure handling.
- hexagon: parenthesize registers in asm predicates
- hexagon: work around compiler crash
- ocfs2: call journal flush to mark journal as empty after journal recovery
when mount
- s390/qeth: Fix vnicc_is_in_use if rx_bcast not set
- drm/ttm: fix start page for huge page check in ttm_put_pages()
- drm/ttm: fix incrementing the page pointer for huge pages
- crypto: virtio - implement missing support for output IVs
- iommu/mediatek: Correct the flush_iotlb_all callback
- rtc: brcmstb-waketimer: add missed clk_disable_unprepare
* Bionic update: upstream stable patchset 2020-02-03 (LP: #1861739)
- USB: dummy-hcd: use usb_urb_dir_in instead of usb_pipein
- USB: dummy-hcd: increase max number of devices to 32
- locking/spinlock/debug: Fix various data races
- netfilter: ctnetlink: netns exit must wait for callbacks
- libtraceevent: Fix lib installation with O=
- x86/efi: Update e820 with reserved EFI boot services data to fix kexec
breakage
- efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs
- efi/gop: Return EFI_SUCCESS if a usable GOP was found
- efi/gop: Fix memory leak in __gop_query32/64()
- ARM: vexpress: Set-up shared OPP table instead of individual for each CPU
- netfilter: uapi: Avoid undefined left-shift in xt_sctp.h
- netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END
- ARM: dts: Cygnus: Fix MDIO node address/size cells
- spi: spi-cavium-thunderx: Add missing pci_release_regions()
- ASoC: topology: Check return value for soc_tplg_pcm_create()
- ARM: dts: bcm283x: Fix critical trip point
- bpf, mips: Limit to 33 tail calls
- ARM: dts: am437x-gp/epos-evm: fix panel compatible
- samples: bpf: Replace symbol compare of trace_event
- samples: bpf: fix syscall_tp due to unused syscall
- powerpc: Ensure that swiotlb buffer is allocated from low memory
- bnx2x: Do not handle requests from VFs after parity
- bnx2x: Fix logic to get total no. of PFs per engine
- net: usb: lan78xx: Fix error message format specifier
- rfkill: Fix incorrect check to avoid NULL pointer dereference
- ASoC: wm8962: fix lambda value
- regulator: rn5t618: fix module aliases
- kconfig: don't crash on NULL expressions in expr_eq()
- perf/x86/intel: Fix PT PMI handling
- fs: avoid softlockups in s_inodes iterators
- net: stmmac: Do not accept invalid MTU values
- net: stmmac: RX buffer size must be 16 byte aligned
- s390/dasd/cio: Interpret ccw_device_get_mdc return value correctly
- s390/dasd: fix memleak in path handling error case
- block: fix memleak when __blk_rq_map_user_iov() is failed
- parisc: Fix compiler warnings in debug_core.c
- llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c)
- hv_netvsc: Fix unwanted rx_table reset
- bpf: Fix passing modified ctx to ld/abs/ind instruction
- PCI/switchtec: Read all 64 bits of part_event_bitmap
- gtp: fix bad unlock balance in gtp_encap_enable_socket
- macvlan: do not assume mac_header is set in macvlan_broadcast()
- net: dsa: mv88e6xxx: Preserve priority when setting CPU port.
- net: stmmac: dwmac-sun8i: Allow all RGMII modes
- net: stmmac: dwmac-sunxi: Allow all RGMII modes
- net: usb: lan78xx: fix possible skb leak
- pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
- USB: core: fix check for duplicate endpoints
- USB: serial: option: add Telit ME910G1 0x110a composition
- sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
- tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK
- vxlan: fix tos value before xmit
- vlan: vlan_changelink() should propagate errors
- net: sch_prio: When ungrafting, replace with FIFO
- vlan: fix memory leak in vlan_dev_set_egress_priority
- regulator: fix use after free issue
- ASoC: max98090: fix possible race conditions
- netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()
- ARM: dts: BCM5301X: Fix MDIO node address/size cells
- bpf: Clear skb->tstamp in bpf_redirect when necessary
- parisc: add missing __init annotation
- iommu/iova: Init the struct iova to fix the possible memleak
- powerpc/spinlocks: Include correct header for static key
- ARM: dts: imx6ul: use nvmem-cells for cpu speed grading
* Sometimes can't adjust brightness on Dell AIO (LP: #1862885)
- SAUCE: platform/x86: dell-uart-backlight: increase retry times
* 4.15 kernel hard lockup about once a week (LP: #1799497)
- zram: correct flag name of ZRAM_ACCESS
- zram: fix lockdep warning of free block handling
* Prevent arm64 guest from accessing host debug registers (LP: #1860657)
- KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE
* pty03 from pty in ubuntu_ltp failed on Eoan (LP: #1862114)
- can, slip: Protect tty->disc_data in write_wakeup and close with RCU
-- Khalid Elmously <email address hidden> Thu, 27 Feb 2020 00:37:30 -0500
-
linux-aws (4.15.0-1061.65) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1061.65 -proposed tracker (LP: #1863325)
* dkms artifacts may expire from the pool (LP: #1850958)
- [Packaging] autoreconstruct -- manage executable debian files
- [packaging] handle downloads from the librarian better
* Root can lift kernel lockdown via USB/IP (LP: #1861238)
- aws: [Config] Update config for sysrq lockdown revert
[ Ubuntu: 4.15.0-89.89 ]
* bionic/linux: 4.15.0-89.89 -proposed tracker (LP: #1863350)
* [SRU][B/OEM-B] Fix multitouch support on some devices (LP: #1862567)
- HID: core: move the dynamic quirks handling in core
- HID: quirks: move the list of special devices into a quirk
- HID: core: move the list of ignored devices in hid-quirks.c
- HID: core: remove the absolute need of hid_have_special_driver[]
* [linux] Patch to prevent possible data corruption (LP: #1848739)
- blk-mq: silence false positive warnings in hctx_unlock()
* Add bpftool to linux-tools-common (LP: #1774815)
- tools/bpftool: fix bpftool build with bintutils >= 2.9
- bpftool: make libbfd optional
- [Debian] Remove binutils-dev build dependency
- [Debian] package bpftool in linux-tools-common
* Root can lift kernel lockdown via USB/IP (LP: #1861238)
- Revert "UBUNTU: SAUCE: (efi-lockdown) Add a SysRq option to lift kernel
lockdown"
* [Bionic] i915 incomplete fix for CVE-2019-14615 (LP: #1862840) //
CVE-2020-8832
- drm/i915: Use same test for eviction and submitting kernel context
- drm/i915: Define an engine class enum for the uABI
- drm/i915: Force the switch to the i915->kernel_context
- drm/i915: Move GT powersaving init to i915_gem_init()
- drm/i915: Move intel_init_clock_gating() to i915_gem_init()
- drm/i915: Inline intel_modeset_gem_init()
- drm/i915: Mark the context state as dirty/written
- drm/i915: Record the default hw state after reset upon load
* Bionic update: upstream stable patchset 2020-02-12 (LP: #1863019)
- xfs: Sanity check flags of Q_XQUOTARM call
- mfd: intel-lpss: Add default I2C device properties for Gemini Lake
- powerpc/archrandom: fix arch_get_random_seed_int()
- tipc: fix wrong timeout input for tipc_wait_for_cond()
- mt7601u: fix bbp version check in mt7601u_wait_bbp_ready
- crypto: sun4i-ss - fix big endian issues
- drm/sti: do not remove the drm_bridge that was never added
- drm/virtio: fix bounds check in virtio_gpu_cmd_get_capset()
- ALSA: hda: fix unused variable warning
- apparmor: don't try to replace stale label in ptrace access check
- PCI: iproc: Remove PAXC slot check to allow VF support
- drm/hisilicon: hibmc: Don't overwrite fb helper surface depth
- IB/rxe: replace kvfree with vfree
- IB/hfi1: Add mtu check for operational data VLs
- ALSA: usb-audio: update quirk for B&W PX to remove microphone
- staging: comedi: ni_mio_common: protect register write overflow
- pwm: lpss: Release runtime-pm reference from the driver's remove callback
- drm/sun4i: hdmi: Fix double flag assignation
- mlxsw: reg: QEEC: Add minimum shaper fields
- NTB: ntb_hw_idt: replace IS_ERR_OR_NULL with regular NULL checks
- pcrypt: use format specifier in kobject_add
- exportfs: fix 'passing zero to ERR_PTR()' warning
- drm/dp_mst: Skip validating ports during destruction, just ref
- net: phy: Fix not to call phy_resume() if PHY is not attached
- IB/rxe: Fix incorrect cache cleanup in error flow
- staging: bcm2835-camera: Abort probe if there is no camera
- switchtec: Remove immediate status check after submitting MRPC command
- pinctrl: sh-pfc: r8a7740: Add missing REF125CK pin to gether_gmii group
- pinctrl: sh-pfc: r8a7740: Add missing LCD0 marks to lcd0_data24_1 group
- pinctrl: sh-pfc: r8a7791: Remove bogus ctrl marks from qspi_data4_b group
- pinctrl: sh-pfc: r8a7791: Remove bogus marks from vin1_b_data18 group
- pinctrl: sh-pfc: sh73a0: Add missing TO pin to tpu4_to3 group
- pinctrl: sh-pfc: r8a7794: Remove bogus IPSR9 field
- pinctrl: sh-pfc: sh7734: Add missing IPSR11 field
- pinctrl: sh-pfc: r8a77995: Remove bogus SEL_PWM[0-3]_3 configurations
- pinctrl: sh-pfc: sh7269: Add missing PCIOR0 field
- pinctrl: sh-pfc: sh7734: Remove bogus IPSR10 value
- vxlan: changelink: Fix handling of default remotes
- Input: nomadik-ske-keypad - fix a loop timeout test
- clk: highbank: fix refcount leak in hb_clk_init()
- clk: qoriq: fix refcount leak in clockgen_init()
- clk: socfpga: fix refcount leak
- clk: samsung: exynos4: fix refcount leak in exynos4_get_xom()
- clk: imx6q: fix refcount leak in imx6q_clocks_init()
- clk: imx6sx: fix refcount leak in imx6sx_clocks_init()
- clk: imx7d: fix refcount leak in imx7d_clocks_init()
- clk: vf610: fix refcount leak in vf610_clocks_init()
- clk: armada-370: fix refcount leak in a370_clk_init()
- clk: kirkwood: fix refcount leak in kirkwood_clk_init()
- clk: armada-xp: fix refcount leak in axp_clk_init()
- clk: mv98dx3236: fix refcount leak in mv98dx3236_clk_init()
- clk: dove: fix refcount leak in dove_clk_init()
- MIPS: BCM63XX: drop unused and broken DSP platform device
- IB/usnic: Fix out of bounds index check in query pkey
- RDMA/ocrdma: Fix out of bounds index check in query pkey
- RDMA/qedr: Fix out of bounds index check in query pkey
- drm/shmob: Fix return value check in shmob_drm_probe
- arm64: dts: apq8016-sbc: Increase load on l11 for SDCARD
- spi: cadence: Correct initialisation of runtime PM
- RDMA/iw_cxgb4: Fix the unchecked ep dereference
- drm/etnaviv: NULL vs IS_ERR() buf in etnaviv_core_dump()
- media: s5p-jpeg: Correct step and max values for
V4L2_CID_JPEG_RESTART_INTERVAL
- kbuild: mark prepare0 as PHONY to fix external module build
- crypto: brcm - Fix some set-but-not-used warning
- crypto: tgr192 - fix unaligned memory access
- ASoC: imx-sgtl5000: put of nodes if finding codec fails
- IB/iser: Pass the correct number of entries for dma mapped SGL
- rtc: cmos: ignore bogus century byte
- spi/topcliff_pch: Fix potential NULL dereference on allocation error
- clk: sunxi-ng: sun8i-a23: Enable PLL-MIPI LDOs when ungating it
- iwlwifi: mvm: avoid possible access out of array.
- net/mlx5: Take lock with IRQs disabled to avoid deadlock
- iwlwifi: mvm: fix A-MPDU reference assignment
- tty: ipwireless: Fix potential NULL pointer dereference
- driver: uio: fix possible memory leak in __uio_register_device
- driver: uio: fix possible use-after-free in __uio_register_device
- crypto: crypto4xx - Fix wrong ppc4xx_trng_probe()/ppc4xx_trng_remove()
arguments
- driver core: Do not resume suppliers under device_links_write_lock()
- ARM: dts: lpc32xx: add required clocks property to keypad device node
- ARM: dts: lpc32xx: reparent keypad controller to SIC1
- ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller variant
- ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller clocks property
- ARM: dts: lpc32xx: phy3250: fix SD card regulator voltage
- iwlwifi: mvm: fix RSS config command
- staging: most: cdev: add missing check for cdev_add failure
- rtc: ds1672: fix unintended sign extension
- thermal: mediatek: fix register index error
- net: phy: fixed_phy: Fix fixed_phy not checking GPIO
- rtc: ds1307: rx8130: Fix alarm handling
- rtc: 88pm860x: fix unintended sign extension
- rtc: 88pm80x: fix unintended sign extension
- rtc: pm8xxx: fix unintended sign extension
- fbdev: chipsfb: remove set but not used variable 'size'
- iw_cxgb4: use tos when importing the endpoint
- iw_cxgb4: use tos when finding ipv6 routes
- drm/etnaviv: potential NULL dereference
- pinctrl: sh-pfc: emev2: Add missing pinmux functions
- pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group
- pinctrl: sh-pfc: r8a7792: Fix vin1_data18_b pin group
- pinctrl: sh-pfc: sh73a0: Fix fsic_spdif pin groups
- PCI: endpoint: functions: Use memcpy_fromio()/memcpy_toio()
- usb: phy: twl6030-usb: fix possible use-after-free on remove
- block: don't use bio->bi_vcnt to figure out segment number
- keys: Timestamp new keys
- vfio_pci: Enable memory accesses before calling pci_map_rom
- hwmon: (pmbus/tps53679) Fix driver info initialization in probe routine
- KVM: PPC: Release all hardware TCE tables attached to a group
- staging: r8822be: check kzalloc return or bail
- dmaengine: mv_xor: Use correct device for DMA API
- cdc-wdm: pass return value of recover_from_urb_loss
- regulator: pv88060: Fix array out-of-bounds access
- regulator: pv88080: Fix array out-of-bounds access
- regulator: pv88090: Fix array out-of-bounds access
- net: dsa: qca8k: Enable delay for RGMII_ID mode
- drm/nouveau/bios/ramcfg: fix missing parentheses when calculating RON
- drm/nouveau/pmu: don't print reply values if exec is false
- ASoC: qcom: Fix of-node refcount unbalance in apq8016_sbc_parse_of()
- fs/nfs: Fix nfs_parse_devname to not modify it's argument
- staging: rtlwifi: Use proper enum for return in halmac_parse_psd_data_88xx
- powerpc/64s: Fix logic when handling unknown CPU features
- NFS: Fix a soft lockup in the delegation recovery code
- clocksource/drivers/sun5i: Fail gracefully when clock rate is unavailable
- clocksource/drivers/exynos_mct: Fix error path in timer resources
initialization
- platform/x86: wmi: fix potential null pointer dereference
- NFS/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount
- mmc: sdhci-brcmstb: handle mmc_of_parse() errors during probe
- ARM: 8847/1: pm: fix HYP/SVC mode mismatch when MCPM is used
- ARM: 8848/1: virt: Align GIC version check with arm64 counterpart
- regulator: wm831x-dcdc: Fix list of wm831x_dcdc_ilim from mA to uA
- netfilter: nft_set_hash: fix lookups with fixed size hash on big endian
- NFSv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE()
- net: aquantia: fixed instack structure overflow
- powerpc/mm: Check secondary hash page table
- nios2: ksyms: Add missing symbol exports
- x86/mm: Remove unused variable 'cpu'
- scsi: megaraid_sas: reduce module load time
- drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen()
- xen, cpu_hotplug: Prevent an out of bounds access
- net: sh_eth: fix a missing check of of_get_phy_mode
- regulator: lp87565: Fix missing register for LP87565_BUCK_0
- media: ivtv: update *pos correctly in ivtv_read_pos()
- media: cx18: update *pos correctly in cx18_read_pos()
- media: wl128x: Fix an error code in fm_download_firmware()
- media: cx23885: check allocation return
- regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB
- jfs: fix bogus variable self-initialization
- tipc: tipc clang warning
- m68k: mac: Fix VIA timer counter accesses
- arm64: dts: allwinner: a64: Add missing PIO clocks
- ARM: OMAP2+: Fix potentially uninitialized return value for _setup_reset()
- media: davinci-isif: avoid uninitialized variable use
- media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame
- spi: tegra114: clear packed bit for unpacked mode
- spi: tegra114: fix for unpacked mode transfers
- spi: tegra114: terminate dma and reset on transfer timeout
- spi: tegra114: flush fifos
- spi: tegra114: configure dma burst size to fifo trig level
- soc/fsl/qe: Fix an error code in qe_pin_request()
- spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios
- ehea: Fix a copy-paste err in ehea_init_port_res
- scsi: qla2xxx: Unregister chrdev if module initialization fails
- scsi: target/core: Fix a race condition in the LUN lookup code
- ARM: pxa: ssp: Fix "WARNING: invalid free of devm_ allocated data"
- net: hns3: fix for vport->bw_limit overflow problem
- hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses
- platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer
- tipc: set sysctl_tipc_rmem and named_timeout right range
- selftests/ipc: Fix msgque compiler warnings
- powerpc: vdso: Make vdso32 installation conditional in vdso_install
- ARM: dts: ls1021: Fix SGMII PCS link remaining down after PHY disconnect
- media: ov2659: fix unbalanced mutex_lock/unlock
- 6lowpan: Off by one handling ->nexthdr
- dmaengine: axi-dmac: Don't check the number of frames for alignment
- ALSA: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk()
- NFS: Don't interrupt file writeout due to fatal errors
- irqchip/gic-v3-its: fix some definitions of inner cacheability attributes
- scsi: qla2xxx: Fix a format specifier
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory
- packet: in recvmsg msg_name return at least sizeof sockaddr_ll
- ASoC: fix valid stream condition
- usb: gadget: fsl: fix link error against usb-gadget module
- dwc2: gadget: Fix completed transfer size calculation in DDMA
- IB/mlx5: Add missing XRC options to QP optional params mask
- iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU
- dmaengine: tegra210-adma: restore channel status
- mmc: core: fix possible use after free of host
- lightnvm: pblk: fix lock order in pblk_rb_tear_down_check
- afs: Fix the afs.cell and afs.volume xattr handlers
- vfio/mdev: Avoid release parent reference during error path
- vfio/mdev: Fix aborting mdev child device removal if one fails
- l2tp: Fix possible NULL pointer dereference
- media: omap_vout: potential buffer overflow in vidioc_dqbuf()
- media: davinci/vpbe: array underflow in vpbe_enum_outputs()
- platform/x86: alienware-wmi: printing the wrong error code
- crypto: caam - fix caam_dump_sg that iterates through scatterlist
- netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
- pwm: meson: Consider 128 a valid pre-divider
- pwm: meson: Don't disable PWM when setting duty repeatedly
- ARM: riscpc: fix lack of keyboard interrupts after irq conversion
- kdb: do a sanity check on the cpu in kdb_per_cpu()
- backlight: lm3630a: Return 0 on success in update_status functions
- thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power
- EDAC/mc: Fix edac_mc_find() in case no device is found
- ARM: dts: sun8i-h3: Fix wifi in Beelink X2 DT
- dmaengine: tegra210-adma: Fix crash during probe
- arm64: dts: meson: libretech-cc: set eMMC as removable
- RDMA/qedr: Fix incorrect device rate.
- spi: spi-fsl-spi: call spi_finalize_current_message() at the end
- crypto: ccp - fix AES CFB error exposed by new test vectors
- crypto: ccp - Fix 3DES complaint from ccp-crypto module
- serial: stm32: fix rx error handling
- serial: stm32: fix transmit_chars when tx is stopped
- serial: stm32: Add support of TC bit status check
- serial: stm32: fix wakeup source initialization
- misc: sgi-xp: Properly initialize buf in xpc_get_rsvd_page_pa
- iommu: Use right function to get group for device
- signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig
- inet: frags: call inet_frags_fini() after unregister_pernet_subsys()
- netvsc: unshare skb in VF rx handler
- cpufreq: brcmstb-avs-cpufreq: Fix initial command check
- cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency
- media: vivid: fix incorrect assignment operation when setting video mode
- mpls: fix warning with multi-label encap
- iommu/vt-d: Duplicate iommu_resv_region objects per device list
- qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state
- powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild
- powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration
- drm/msm/mdp5: Fix mdp5_cfg_init error return
- net: netem: fix backlog accounting for corrupted GSO frames
- net/af_iucv: always register net_device notifier
- ASoC: ti: davinci-mcasp: Fix slot mask settings when using multiple AXRs
- rtc: pcf8563: Fix interrupt trigger method
- rtc: pcf8563: Clear event flags and disable interrupts before requesting irq
- drm/msm/a3xx: remove TPL1 regs from snapshot
- perf/ioctl: Add check for the sample_period value
- dmaengine: hsu: Revert "set HSU_CH_MTSR to memory width"
- clk: qcom: Fix -Wunused-const-variable
- nvmem: imx-ocotp: Ensure WAIT bits are preserved when setting timing
- bnxt_en: Fix ethtool selftest crash under error conditions.
- iommu/amd: Make iommu_disable safer
- mfd: intel-lpss: Release IDA resources
- rxrpc: Fix uninitialized error code in rxrpc_send_data_packet()
- devres: allow const resource arguments
- net: pasemi: fix an use-after-free in pasemi_mac_phy_init()
- scsi: libfc: fix null pointer dereference on a null lport
- clk: sunxi-ng: v3s: add the missing PLL_DDR1
- PM: sleep: Fix possible overflow in pm_system_cancel_wakeup()
- libertas_tf: Use correct channel range in lbtf_geo_init
- qed: reduce maximum stack frame size
- usb: host: xhci-hub: fix extra endianness conversion
- mic: avoid statically declaring a 'struct device'.
- x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI
- crypto: ccp - Reduce maximum stack usage
- ALSA: aoa: onyx: always initialize register read value
- tipc: reduce risk of wakeup queue starvation
- ARM: dts: stm32: add missing vdda-supply to adc on stm32h743i-eval
- net/mlx5: Fix mlx5_ifc_query_lag_out_bits
- cifs: fix rmmod regression in cifs.ko caused by force_sig changes
- crypto: caam - free resources in case caam_rng registration failed
- ext4: set error return correctly when ext4_htree_store_dirent fails
- ASoC: es8328: Fix copy-paste error in es8328_right_line_controls
- ASoC: cs4349: Use PM ops 'cs4349_runtime_pm'
- ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls
- net/rds: Add a few missing rds_stat_names entries
- bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
- signal: Allow cifs and drbd to receive their terminating signals
- ASoC: sun4i-i2s: RX and TX counter registers are swapped
- dmaengine: dw: platform: Switch to acpi_dma_controller_register()
- mac80211: minstrel_ht: fix per-group max throughput rate initialization
- media: atmel: atmel-isi: fix timeout value for stop streaming
- rtc: pcf2127: bugfix: read rtc disables watchdog
- mips: avoid explicit UB in assignment of mips_io_port_base
- iommu/mediatek: Fix iova_to_phys PA start for 4GB mode
- ahci: Do not export local variable ahci_em_messages
- Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()"
- hwmon: (lm75) Fix write operations for negative temperatures
- power: supply: Init device wakeup after device_add()
- x86, perf: Fix the dependency of the x86 insn decoder selftest
- staging: greybus: light: fix a couple double frees
- irqdomain: Add the missing assignment of domain->fwnode for named fwnode
- bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
- iio: dac: ad5380: fix incorrect assignment to val
- ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init
- tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs
- net: sonic: return NETDEV_TX_OK if failed to map buffer
- scsi: fnic: fix msix interrupt allocation
- Btrfs: fix hang when loading existing inode cache off disk
- Btrfs: fix inode cache waiters hanging on failure to start caching thread
- Btrfs: fix inode cache waiters hanging on path allocation failure
- btrfs: use correct count in btrfs_file_write_iter()
- ixgbe: sync the first fragment unconditionally
- hwmon: (shtc1) fix shtc1 and shtw1 id mask
- net: sonic: replace dev_kfree_skb in sonic_send_packet
- pinctrl: iproc-gpio: Fix incorrect pinconf configurations
- ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet
- RDMA/cma: Fix false error message
- net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'
- iommu/amd: Wait for completion of IOTLB flush in attach_device
- net: aquantia: Fix aq_vec_isr_legacy() return value
- net: hisilicon: Fix signedness bug in hix5hd2_dev_probe()
- net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe()
- net: stmmac: dwmac-meson8b: Fix signedness bug in probe
- net: axienet: fix a signedness bug in probe
- of: mdio: Fix a signedness bug in of_phy_get_and_connect()
- net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse()
- nvme: retain split access workaround for capability reads
- net: stmmac: gmac4+: Not all Unicast addresses may be available
- mac80211: accept deauth frames in IBSS mode
- llc: fix another potential sk_buff leak in llc_ui_sendmsg()
- llc: fix sk_buff refcounting in llc_conn_state_process()
- net: stmmac: fix length of PTP clock's name string
- act_mirred: Fix mirred_init_module error handling
- net: avoid possible false sharing in sk_leave_memory_pressure()
- net: add {READ|WRITE}_ONCE() annotations on ->rskq_accept_head
- tcp: annotate lockless access to tcp_memory_pressure
- drm/msm/dsi: Implement reset correctly
- dmaengine: imx-sdma: fix size check for sdma script_number
- net: netem: fix error path for corrupted GSO frames
- net: netem: correct the parent's backlog when corrupted packet was dropped
- net: qca_spi: Move reset_count to struct qcaspi
- afs: Fix large file support
- MIPS: Loongson: Fix return value of loongson_hwmon_init
- hv_netvsc: flag software created hash value
- net: neigh: use long type to store jiffies delta
- packet: fix data-race in fanout_flow_is_huge()
- mmc: sdio: fix wl1251 vendor id
- mmc: core: fix wl1251 sdio quirks
- affs: fix a memory leak in affs_remount
- dmaengine: ti: edma: fix missed failure handling
- drm/radeon: fix bad DMA from INTERRUPT_CNTL2
- arm64: dts: juno: Fix UART frequency
- IB/iser: Fix dma_nents type definition
- serial: stm32: fix clearing interrupt error flags
- m68k: Call timer_interrupt() with interrupts disabled
- SUNRPC: Fix svcauth_gss_proxy_init()
- perf map: No need to adjust the long name of modules
- ipmi: Fix memory leak in __ipmi_bmc_register
- apparmor: Fix network performance issue in aa_label_sk_perm
- firmware: coreboot: Let OF core populate platform device
- bridge: br_arp_nd_proxy: set icmp6_router if neigh has NTF_ROUTER
- signal/ia64: Use the generic force_sigsegv in setup_frame
- ASoC: wm9712: fix unused variable warning
- genirq/debugfs: Reinstate full OF path for domain name
- usb: gadget: fsl_udc_core: check allocation return value and cleanup on
failure
- cfg80211: regulatory: make initialization more robust
- net: socionext: Add dummy PHY register read in phy_write()
- mlxsw: spectrum: Set minimum shaper on MC TCs
- pinctrl: meson-gxl: remove invalid GPIOX tsin_a pins
- drm: rcar-du: Fix vblank initialization
- arm64: dts: meson-gx: Add hdmi_5v regulator as hdmi tx supply
- IB/hfi1: Correctly process FECN and BECN in packets
- OPP: Fix missing debugfs supply directory for OPPs
- staging: bcm2835-camera: fix module autoloading
- fork,memcg: fix crash in free_thread_stack on memcg charge fail
- arm64: defconfig: Re-enable bcm2835-thermal driver
- remoteproc: qcom: q6v5-mss: Add missing clocks for MSM8996
- remoteproc: qcom: q6v5-mss: Add missing regulator for MSM8996
- drm: Fix error handling in drm_legacy_addctx
- ARM: dts: r8a7743: Remove generic compatible string from iic3
- drm/etnaviv: fix some off by one bugs
- fork, memcg: fix cached_stacks case
- net: hns3: fix wrong combined count returned by ethtool -l
- net: hns3: fix bug of ethtool_ops.get_channels for VF
- ARM: dts: sun8i-a23-a33: Move NAND controller device node to sort by address
- clk: ingenic: jz4740: Fix gating of UDC clock
- ntb_hw_switchtec: NT req id mapping table register entry number should be
512
- net: dsa: b53: Fix default VLAN ID
- net: dsa: b53: Properly account for VLAN filtering
- net: dsa: b53: Do not program CPU port's PVID
- drm/nouveau: fix missing break in switch statement
- net: dsa: fix unintended change of bridge interface STP state
- perf: Copy parent's address filter offsets on clone
- netfilter: nft_set_hash: bogus element self comparison from deactivation
path
- iommu/vt-d: Fix NULL pointer reference in intel_svm_bind_mm()
- NFS: Add missing encode / decode sequence_maxsz to v4.2 operations
- ARM: dts: sun8i: a33: Reintroduce default pinctrl muxing
- ARM: dts: sun9i: optimus: Fix fixed-regulators
- bus: ti-sysc: Fix sysc_unprepare() when no clocks have been allocated
- arm64/vdso: don't leak kernel addresses
- rtc: mt6397: Don't call irq_dispose_mapping.
- bpf: Add missed newline in verifier verbose log
- ACPI: button: reinitialize button state upon resume
- soc: amlogic: meson-gx-pwrc-vpu: Fix power on/off register bitmask
- net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info()
- afs: Fix AFS file locking to allow fine grained locks
- afs: Further fix file locking
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd()
- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
- vfio/mdev: Follow correct remove sequence
- ALSA: aica: Fix a long-time build breakage
- nfp: bpf: fix static check error through tightening shift amount adjustment
- thermal: rcar_gen3_thermal: fix interrupt type
- afs: Fix lock-wait/callback-break double locking
- afs: Fix double inc of vnode->cb_break
- clk: meson: gxbb: no spread spectrum on mpll0
- serial: stm32: fix word length configuration
- serial: stm32: fix rx data length when parity enabled
- net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector
- crypto: talitos - fix AEAD processing.
- net: don't clear sock->sk early to avoid trouble in strparser
- crypto: inside-secure - fix zeroing of the request in ahash_exit_inv
- arm64: dts: meson-gxm-khadas-vim2: fix gpio-keys-polled node
- arm64: dts: meson-gxm-khadas-vim2: fix Bluetooth support
- phy: usb: phy-brcm-usb: Remove sysfs attributes upon driver removal
- qed: iWARP - fix uninitialized callback
- IB/hfi1: Handle port down properly in pio
- net/af_iucv: build proper skbs for HiperTransport
- ARM: dts: iwg20d-q7-common: Fix SDHI1 VccQ regularor
- ip6_fib: Don't discard nodes with valid routing information in
fib6_locate_1()
- nvmem: imx-ocotp: Change TIMING calculation to u-boot algorithm
- fork,memcg: alloc_thread_stack_node needs to set tsk->stack
- PM: ACPI/PCI: Resume all devices during hibernation
- ACPI: PM: Simplify and fix PM domain hibernation callbacks
- ACPI: PM: Introduce "poweroff" callbacks for ACPI PM domain and LPSS
- drm/panel: make drm_panel.h self-contained
- cxgb4: smt: Add lock for atomic_dec_and_test
- powerpc/64s/radix: Fix memory hot-unplug page table split
- rtc: rv3029: revert error handling patch to rv3029_eeprom_write()
- i40e: reduce stack usage in i40e_set_fc
- ARM: 8896/1: VDSO: Don't leak kernel addresses
- rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
- usb: typec: tps6598x: Fix build error without CONFIG_REGMAP_I2C
- bcache: Fix an error code in bch_dump_read()
- ARM: dts: aspeed-g5: Fixe gpio-ranges upper limit
- net: hns3: fix error VF index when setting VLAN offload
- mailbox: qcom-apcs: fix max_register value
- powerpc/mm/mce: Keep irqs disabled during lockless page table walk
- net: netsec: Fix signedness bug in netsec_probe()
- s390/qeth: Fix error handling during VNICC initialization
- s390/qeth: Fix initialization of vnicc cmd masks during set online
- vhost/test: stop device before reset
- arm64: hibernate: check pgd table allocation
- afs: Fix missing timeout reset
- hwrng: omap3-rom - Fix missing clock by probing with device tree
- arm64: dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node
* Bionic update: upstream stable patchset 2020-02-06 (LP: #1862259)
- dt-bindings: reset: meson8b: fix duplicate reset IDs
- clk: Don't try to enable critical clocks if prepare failed
- ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1
- ALSA: seq: Fix racy access for queue timer in proc read
- Fix built-in early-load Intel microcode alignment
- block: fix an integer overflow in logical block size
- ARM: dts: am571x-idk: Fix gpios property to have the correct gpio number
- iio: buffer: align the size of scan bytes to size of the largest element
- USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx
- USB: serial: option: Add support for Quectel RM500Q
- USB: serial: opticon: fix control-message timeouts
- USB: serial: option: add support for Quectel RM500Q in QDL mode
- USB: serial: suppress driver bind attributes
- USB: serial: ch341: handle unbound port at reset_resume
- USB: serial: io_edgeport: add missing active-port sanity check
- USB: serial: keyspan: handle unbound ports
- USB: serial: quatech2: handle unbound ports
- scsi: fnic: fix invalid stack access
- scsi: mptfusion: Fix double fetch bug in ioctl
- ptrace: reintroduce usage of subjective credentials in ptrace_has_cap()
- usb: core: hub: Improved device recognition on remote wakeup
- x86/resctrl: Fix an imbalance in domain_remove_cpu()
- x86/efistub: Disable paging at mixed mode entry
- perf hists: Fix variable name's inconsistency in hists__for_each() macro
- perf report: Fix incorrectly added dimensions as switch perf data file
- mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD
alignment
- btrfs: fix memory leak in qgroup accounting
- mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio()
- net: stmmac: 16KB buffer must be 16 byte aligned
- net: stmmac: Enable 16KB buffer size
- USB: serial: io_edgeport: use irqsave() in USB's complete callback
- USB: serial: io_edgeport: handle unbound ports on URB completion
- mm/huge_memory.c: make __thp_get_unmapped_area static
- mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD
alignment
- arm64: dts: agilex/stratix10: fix pmu interrupt numbers
- cfg80211: fix page refcount issue in A-MSDU decap
- netfilter: fix a use-after-free in mtype_destroy()
- netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
- NFC: pn533: fix bulk-message timeout
- batman-adv: Fix DAT candidate selection on little endian systems
- macvlan: use skb_reset_mac_header() in macvlan_queue_xmit()
- hv_netvsc: Fix memory leak when removing rndis device
- net: dsa: tag_qca: fix doubled Tx statistics
- net: hns: fix soft lockup when there is not enough memory
- net: usb: lan78xx: limit size of local TSO packets
- net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info
- ptp: free ptp device pin descriptors properly
- r8152: add missing endpoint sanity check
- tcp: fix marked lost packets not being retransmitted
- xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk
- cw1200: Fix a signedness bug in cw1200_load_firmware()
- arm64: dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node
- cfg80211: check for set_wiphy_params
- tick/sched: Annotate lockless access to last_jiffies_update
- Revert "arm64: dts: juno: add dma-ranges property"
- reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr
- scsi: esas2r: unlock on error in esas2r_nvram_read_direct()
- scsi: qla4xxx: fix double free bug
- scsi: bnx2i: fix potential use after free
- scsi: target: core: Fix a pr_debug() argument
- scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI
- scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan
- scsi: core: scsi_trace: Use get_unaligned_be*()
- perf probe: Fix wrong address verification
- regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id
- ARM: dts: meson8: fix the size of the PMU registers
- LSM: generalize flag passing to security_capable
- drm/i915: Add missing include file <linux/math64.h>
- btrfs: do not delete mismatched root refs
- ARM: dts: imx6qdl: Add Engicam i.Core 1.5 MX6
- ARM: dts: imx7: Fix Toradex Colibri iMX7S 256MB NAND flash support
- mlxsw: spectrum: Wipe xstats.backlog of down ports
- tcp: refine rule to allow EPOLLOUT generation under mem pressure
- mtd: devices: fix mchp23k256 read and write
- drm/nouveau/bar/nv50: check bar1 vmm return value
- drm/nouveau/bar/gf100: ensure BAR is mapped
- drm/nouveau/mmu: qualify vmm during dtor
* Bionic update: upstream stable patchset 2020-02-04 (LP: #1861934)
- chardev: Avoid potential use-after-free in 'chrdev_open()'
- usb: chipidea: host: Disable port power only if previously enabled
- ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5
- ALSA: hda/realtek - Add new codec supported for ALCS1200A
- ALSA: hda/realtek - Set EAPD control to default for ALC222
- kernel/trace: Fix do not unregister tracepoints when register
sched_migrate_task fail
- tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined
- HID: Fix slab-out-of-bounds read in hid_field_extract
- HID: uhid: Fix returning EPOLLOUT from uhid_char_poll
- can: gs_usb: gs_usb_probe(): use descriptors of current altsetting
- can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling
to irq mode
- can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing
CAN sk_buffs
- gpiolib: acpi: Turn dmi_system_id table into a generic quirk table
- gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism
- staging: vt6656: set usb_set_intfdata on driver fail.
- USB: serial: option: add ZLP support for 0x1bc7/0x9010
- usb: musb: fix idling for suspend after disconnect interrupt
- usb: musb: Disable pullup at init
- usb: musb: dma: Correct parameter passed to IRQ handler
- staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713
- HID: hid-input: clear unmapped usages
- Input: add safety guards to input_set_keycode()
- drm/fb-helper: Round up bits_per_pixel if possible
- drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ
- staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
- tty: link tty and port before configuring it as console
- tty: always relink the port
- mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf
- scsi: bfa: release allocated memory in case of error
- rtl8xxxu: prevent leaking urb
- arm64: cpufeature: Avoid warnings due to unused symbols
- HID: hiddev: fix mess in hiddev_open()
- USB: Fix: Don't skip endpoint descriptors with maxpacket=0
- phy: cpcap-usb: Fix error path when no host driver is loaded
- phy: cpcap-usb: Fix flakey host idling and enumerating of devices
- netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
- netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
- ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen
- tracing: Change offset type to s32 in preempt/irq tracepoints
- serdev: Don't claim unsupported ACPI serial devices
- netfilter: conntrack: dccp, sctp: handle null timeout argument
- hidraw: Return EPOLLOUT from hidraw_poll
- HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
- HID: hidraw, uhid: Always report EPOLLOUT
- ethtool: reduce stack usage with clang
- fs/select: avoid clang stack usage warning
- arm64: don't open code page table entry creation
- arm64: mm: Change page table pointer name in p[md]_set_huge()
- arm64: Enforce BBM for huge IO/VMAP mappings
- arm64: Make sure permission updates happen for pmd/pud
- media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
- wimax: i2400: fix memory leak
- wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle
- iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
- rtc: mt6397: fix alarm register overwrite
- RDMA/bnxt_re: Fix Send Work Entry state check while polling completions
- ASoC: stm32: spdifrx: fix inconsistent lock state
- ASoC: stm32: spdifrx: fix race condition in irq handler
- gpio: zynq: Fix for bug in zynq_gpio_restore_context API
- iommu: Remove device link to group on failure
- gpio: Fix error message on out-of-range GPIO in lookup table
- hsr: reset network header when supervision frame is created
- cifs: Adjust indentation in smb2_open_file
- btrfs: simplify inode locking for RWF_NOWAIT
- RDMA/mlx5: Return proper error value
- RDMA/srpt: Report the SCSI residual to the initiator
- scsi: enclosure: Fix stale device oops with hot replug
- scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
- platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
- xprtrdma: Fix completion wait during device removal
- NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn
- iio: imu: adis16480: assign bias value only if operation succeeded
- mei: fix modalias documentation
- clk: samsung: exynos5420: Preserve CPU clocks configuration during
suspend/resume
- pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args
call
- pinctrl: lewisburg: Update pin list according to v1.1v6
- scsi: sd: enable compat ioctls for sed-opal
- arm64: dts: apq8096-db820c: Increase load on l21 for SDCARD
- af_unix: add compat_ioctl support
- compat_ioctl: handle SIOCOUTQNSD
- PCI/PTM: Remove spurious "d" from granularity message
- powerpc/powernv: Disable native PCIe port management
- tty: serial: imx: use the sg count from dma_map_sg
- tty: serial: pch_uart: correct usage of dma_unmap_sg
- media: ov6650: Fix incorrect use of JPEG colorspace
- media: ov6650: Fix some format attributes not under control
- media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support
- media: exynos4-is: Fix recursive locking in isp_video_release()
- mtd: spi-nor: fix silent truncation in spi_nor_read()
- mtd: spi-nor: fix silent truncation in spi_nor_read_raw()
- spi: atmel: fix handling of cs_change set on non-last xfer
- rtlwifi: Remove unnecessary NULL check in rtl_regd_init
- f2fs: fix potential overflow
- rtc: msm6242: Fix reading of 10-hour digit
- gpio: mpc8xxx: Add platform device to gpiochip->parent
- scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy()
- rseq/selftests: Turn off timeout setting
- mips: cacheinfo: report shared CPU map
- MIPS: Prevent link failure with kcov instrumentation
- dmaengine: k3dma: Avoid null pointer traversal
- ioat: ioat_alloc_ring() failure handling.
- hexagon: parenthesize registers in asm predicates
- hexagon: work around compiler crash
- ocfs2: call journal flush to mark journal as empty after journal recovery
when mount
- s390/qeth: Fix vnicc_is_in_use if rx_bcast not set
- drm/ttm: fix start page for huge page check in ttm_put_pages()
- drm/ttm: fix incrementing the page pointer for huge pages
- crypto: virtio - implement missing support for output IVs
- iommu/mediatek: Correct the flush_iotlb_all callback
- rtc: brcmstb-waketimer: add missed clk_disable_unprepare
* Bionic update: upstream stable patchset 2020-02-03 (LP: #1861739)
- USB: dummy-hcd: use usb_urb_dir_in instead of usb_pipein
- USB: dummy-hcd: increase max number of devices to 32
- locking/spinlock/debug: Fix various data races
- netfilter: ctnetlink: netns exit must wait for callbacks
- libtraceevent: Fix lib installation with O=
- x86/efi: Update e820 with reserved EFI boot services data to fix kexec
breakage
- efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs
- efi/gop: Return EFI_SUCCESS if a usable GOP was found
- efi/gop: Fix memory leak in __gop_query32/64()
- ARM: vexpress: Set-up shared OPP table instead of individual for each CPU
- netfilter: uapi: Avoid undefined left-shift in xt_sctp.h
- netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END
- ARM: dts: Cygnus: Fix MDIO node address/size cells
- spi: spi-cavium-thunderx: Add missing pci_release_regions()
- ASoC: topology: Check return value for soc_tplg_pcm_create()
- ARM: dts: bcm283x: Fix critical trip point
- bpf, mips: Limit to 33 tail calls
- ARM: dts: am437x-gp/epos-evm: fix panel compatible
- samples: bpf: Replace symbol compare of trace_event
- samples: bpf: fix syscall_tp due to unused syscall
- powerpc: Ensure that swiotlb buffer is allocated from low memory
- bnx2x: Do not handle requests from VFs after parity
- bnx2x: Fix logic to get total no. of PFs per engine
- net: usb: lan78xx: Fix error message format specifier
- rfkill: Fix incorrect check to avoid NULL pointer dereference
- ASoC: wm8962: fix lambda value
- regulator: rn5t618: fix module aliases
- kconfig: don't crash on NULL expressions in expr_eq()
- perf/x86/intel: Fix PT PMI handling
- fs: avoid softlockups in s_inodes iterators
- net: stmmac: Do not accept invalid MTU values
- net: stmmac: RX buffer size must be 16 byte aligned
- s390/dasd/cio: Interpret ccw_device_get_mdc return value correctly
- s390/dasd: fix memleak in path handling error case
- block: fix memleak when __blk_rq_map_user_iov() is failed
- parisc: Fix compiler warnings in debug_core.c
- llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c)
- hv_netvsc: Fix unwanted rx_table reset
- bpf: Fix passing modified ctx to ld/abs/ind instruction
- PCI/switchtec: Read all 64 bits of part_event_bitmap
- gtp: fix bad unlock balance in gtp_encap_enable_socket
- macvlan: do not assume mac_header is set in macvlan_broadcast()
- net: dsa: mv88e6xxx: Preserve priority when setting CPU port.
- net: stmmac: dwmac-sun8i: Allow all RGMII modes
- net: stmmac: dwmac-sunxi: Allow all RGMII modes
- net: usb: lan78xx: fix possible skb leak
- pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
- USB: core: fix check for duplicate endpoints
- USB: serial: option: add Telit ME910G1 0x110a composition
- sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
- tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK
- vxlan: fix tos value before xmit
- vlan: vlan_changelink() should propagate errors
- net: sch_prio: When ungrafting, replace with FIFO
- vlan: fix memory leak in vlan_dev_set_egress_priority
- regulator: fix use after free issue
- ASoC: max98090: fix possible race conditions
- netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()
- ARM: dts: BCM5301X: Fix MDIO node address/size cells
- bpf: Clear skb->tstamp in bpf_redirect when necessary
- parisc: add missing __init annotation
- iommu/iova: Init the struct iova to fix the possible memleak
- powerpc/spinlocks: Include correct header for static key
- ARM: dts: imx6ul: use nvmem-cells for cpu speed grading
* Sometimes can't adjust brightness on Dell AIO (LP: #1862885)
- SAUCE: platform/x86: dell-uart-backlight: increase retry times
* 4.15 kernel hard lockup about once a week (LP: #1799497)
- zram: correct flag name of ZRAM_ACCESS
- zram: fix lockdep warning of free block handling
* Prevent arm64 guest from accessing host debug registers (LP: #1860657)
- KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE
* pty03 from pty in ubuntu_ltp failed on Eoan (LP: #1862114)
- can, slip: Protect tty->disc_data in write_wakeup and close with RCU
-- Kleber Sacilotto de Souza <email address hidden> Thu, 20 Feb 2020 18:11:01 +0100
-
linux-aws (4.15.0-1060.62) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1060.62 -proposed tracker (LP: #1862808)
[ Ubuntu: 4.15.0-88.88 ]
* bionic/linux: 4.15.0-88.88 -proposed tracker (LP: #1862824)
* Segmentation fault (kernel oops) with memory-hotplug in
ubuntu_kernel_selftests on Bionic kernel (LP: #1862312)
- Revert "mm/memory_hotplug: fix online/offline_pages called w.o.
mem_hotplug_lock"
- mm/memory_hotplug: fix online/offline_pages called w.o. mem_hotplug_lock
linux-aws (4.15.0-1059.61) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1059.61 -proposed tracker (LP: #1861141)
* RANDOM_TRUST_BOOTLOADER support on AWS Graviton (LP: #1859192)
- aws: [Config] CONFIG_RANDOM_TRUST_BOOTLOADER=y for arm64
- fdt: add support for rng-seed
- efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness
[ Ubuntu: 4.15.0-87.87 ]
* bionic/linux: 4.15.0-87.87 -proposed tracker (LP: #1861165)
* Bionic update: upstream stable patchset 2020-01-22 (LP: #1860602)
- scsi: lpfc: Fix discovery failures when target device connectivity bounces
- scsi: mpt3sas: Fix clear pending bit in ioctl status
- scsi: lpfc: Fix locking on mailbox command completion
- Input: atmel_mxt_ts - disable IRQ across suspend
- iommu/tegra-smmu: Fix page tables in > 4 GiB memory
- scsi: target: compare full CHAP_A Algorithm strings
- scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices
- scsi: csiostor: Don't enable IRQs too early
- powerpc/pseries: Mark accumulate_stolen_time() as notrace
- powerpc/pseries: Don't fail hash page table insert for bolted mapping
- powerpc/tools: Don't quote $objdump in scripts
- dma-debug: add a schedule point in debug_dma_dump_mappings()
- clocksource/drivers/asm9260: Add a check for of_clk_get
- powerpc/security/book3s64: Report L1TF status in sysfs
- powerpc/book3s64/hash: Add cond_resched to avoid soft lockup warning
- ext4: update direct I/O read lock pattern for IOCB_NOWAIT
- jbd2: Fix statistics for the number of logged blocks
- scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6)
- scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow
- f2fs: fix to update dir's i_pino during cross_rename
- clk: qcom: Allow constant ratio freq tables for rcg
- irqchip/irq-bcm7038-l1: Enable parent IRQ if necessary
- irqchip: ingenic: Error out if IRQ domain creation failed
- fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned long
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences
- scsi: ufs: fix potential bug which ends in system hang
- powerpc/pseries/cmm: Implement release() function for sysfs device
- powerpc/security: Fix wrong message when RFI Flush is disable
- scsi: atari_scsi: sun3_scsi: Set sg_tablesize to 1 instead of SG_NONE
- clk: pxa: fix one of the pxa RTC clocks
- bcache: at least try to shrink 1 node in bch_mca_scan()
- HID: logitech-hidpp: Silence intermittent get_battery_capacity errors
- libnvdimm/btt: fix variable 'rc' set but not used
- HID: Improve Windows Precision Touchpad detection.
- scsi: pm80xx: Fix for SATA device discovery
- scsi: ufs: Fix error handing during hibern8 enter
- scsi: scsi_debug: num_tgts must be >= 0
- scsi: NCR5380: Add disconnect_mask module parameter
- scsi: iscsi: Don't send data to unbound connection
- scsi: target: iscsi: Wait for all commands to finish before freeing a
session
- gpio: mpc8xxx: Don't overwrite default irq_set_type callback
- apparmor: fix unsigned len comparison with less than zero
- scripts/kallsyms: fix definitely-lost memory leak
- cdrom: respect device capabilities during opening action
- perf script: Fix brstackinsn for AUXTRACE
- perf regs: Make perf_reg_name() return "unknown" instead of NULL
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
- s390/cpum_sf: Check for SDBT and SDB consistency
- ocfs2: fix passing zero to 'PTR_ERR' warning
- kernel: sysctl: make drop_caches write-only
- userfaultfd: require CAP_SYS_PTRACE for UFFD_FEATURE_EVENT_FORK
- x86/mce: Fix possibly incorrect severity calculation on AMD
- net, sysctl: Fix compiler warning when only cBPF is present
- netfilter: nf_queue: enqueue skbs with NULL dst
- ALSA: hda - Downgrade error message for single-cmd fallback
- bonding: fix active-backup transition after link failure
- perf strbuf: Remove redundant va_end() in strbuf_addv()
- Make filldir[64]() verify the directory entry filename is valid
- filldir[64]: remove WARN_ON_ONCE() for bad directory entries
- netfilter: ebtables: compat: reject all padding in matches/watchers
- 6pack,mkiss: fix possible deadlock
- netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
- inetpeer: fix data-race in inet_putpeer / inet_putpeer
- net: add a READ_ONCE() in skb_peek_tail()
- net: icmp: fix data-race in cmp_global_allow()
- hrtimer: Annotate lockless access to timer->state
- spi: fsl: don't map irq during probe
- tty/serial: atmel: fix out of range clock divider handling
- pinctrl: baytrail: Really serialize all register accesses
- net: ena: fix napi handler misbehavior when the napi budget is zero
- net/mlxfw: Fix out-of-memory error in mfa2 flash burning
- ptp: fix the race between the release of ptp_clock and cdev
- udp: fix integer overflow while computing available space in sk_rcvbuf
- vhost/vsock: accept only packets with the right dst_cid
- net: add bool confirm_neigh parameter for dst_ops.update_pmtu
- gtp: do not confirm neighbor when do pmtu update
- net/dst: add new function skb_dst_update_pmtu_no_confirm
- tunnel: do not confirm neighbor when do pmtu update
- vti: do not confirm neighbor when do pmtu update
- sit: do not confirm neighbor when do pmtu update
- gtp: do not allow adding duplicate tid and ms_addr pdp context
- tcp/dccp: fix possible race __inet_lookup_established()
- tcp: do not send empty skb from tcp_write_xmit()
- gtp: fix wrong condition in gtp_genl_dump_pdp()
- gtp: fix an use-after-free in ipv4_pdp_find()
- gtp: avoid zero size hashtable
- spi: fsl: use platform_get_irq() instead of of_irq_to_resource()
- scsi: hisi_sas: Replace in_softirq() check in hisi_sas_task_exec()
- clocksource/drivers/timer-of: Use unique device name instead of timer
- ext4: iomap that extends beyond EOF should be marked dirty
- clk: clk-gpio: propagate rate change to parent
- HID: quirks: Add quirk for HP MSU1465 PIXART OEM mouse
- HID: rmi: Check that the RMI_STARTED bit is set before unregistering the RMI
transport device
- watchdog: Fix the race between the release of watchdog_core_data and cdev
- powerpc: Don't add -mabi= flags when building with Clang
- tcp: Fix highest_sack and highest_sack_seq
- nvme_fc: add module to ops template to allow module references
- iio: adc: max9611: Fix too short conversion time delay
- PM / devfreq: Don't fail devfreq_dev_release if not in list
- RDMA/cma: add missed unregister_pernet_subsys in init failure
- rxe: correctly calculate iCRC for unaligned payloads
- scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func
- scsi: qla2xxx: Don't call qlt_async_event twice
- scsi: iscsi: qla4xxx: fix double free in probe
- scsi: libsas: stop discovering if oob mode is disconnected
- drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit
- usb: gadget: fix wrong endpoint desc
- net: make socket read/write_iter() honor IOCB_NOWAIT
- md: raid1: check rdev before reference in raid1_sync_request func
- s390/cpum_sf: Adjust sampling interval to avoid hitting sample limits
- s390/cpum_sf: Avoid SBD overflow condition in irq handler
- IB/mlx4: Follow mirror sequence of device add during device removal
- xen-blkback: prevent premature module unload
- xen/balloon: fix ballooned page accounting without hotplug enabled
- xfs: fix mount failure crash on invalid iclog memory access
- taskstats: fix data-race
- drm: limit to INT_MAX in create_blob ioctl
- ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code
- drm/sun4i: hdmi: Remove duplicate cleanup calls
- MIPS: Avoid VDSO ABI breakage due to global register variable
- media: pulse8-cec: fix lost cec_transmit_attempt_done() call
- media: cec: CEC 2.0-only bcast messages were ignored
- media: cec: avoid decrementing transmit_queue_sz if it is 0
- mm/zsmalloc.c: fix the migrated zspage statistics.
- memcg: account security cred as well to kmemcg
- pstore/ram: Write new dumps to start of recycled zones
- locks: print unsigned ino in /proc/locks
- dmaengine: Fix access to uninitialized dma_slave_caps
- compat_ioctl: block: handle Persistent Reservations
- compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE
- ata: libahci_platform: Export again ahci_platform_<en/dis>able_phys()
- ata: ahci_brcm: Allow optional reset controller to be used
- ata: ahci_brcm: Fix AHCI resources management
- gpiolib: fix up emulated open drain outputs
- tracing: Fix lock inversion in trace_event_enable_tgid_record()
- tracing: Have the histogram compare functions convert to u64 first
- ALSA: cs4236: fix error return comparison of an unsigned integer
- ALSA: firewire-motu: Correct a typo in the clock proc string
- exit: panic before exit_mm() on global init exit
- ftrace: Avoid potential division by zero in function profiler
- PM / devfreq: Check NULL governor in available_governors_show
- nfsd4: fix up replay_matches_cache()
- scsi: qla2xxx: Drop superfluous INIT_WORK of del_work
- xfs: don't check for AG deadlock for realtime files in bunmapi
- platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI
table
- Bluetooth: btusb: fix PM leak in error case of setup
- Bluetooth: delete a stray unlock
- Bluetooth: Fix memory leak in hci_connect_le_scan
- media: flexcop-usb: ensure -EIO is returned on error condition
- regulator: ab8500: Remove AB8505 USB regulator
- media: usb: fix memory leak in af9005_identify_state
- dt-bindings: clock: renesas: rcar-usb2-clock-sel: Fix typo in example
- tty: serial: msm_serial: Fix lockup for sysrq and oops
- fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP
- scsi: qedf: Do not retry ELS request if qedf_alloc_cmd fails
- drm/mst: Fix MST sideband up-reply failure handling
- powerpc/pseries/hvconsole: Fix stack overread via udbg
- selftests: rtnetlink: add addresses with fixed life time
- rxrpc: Fix possible NULL pointer access in ICMP handling
- ath9k_htc: Modify byte order for an error message
- ath9k_htc: Discard undersized packets
- arm64: dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed
warning
- net: add annotations on hh->hh_len lockless accesses
- s390/smp: fix physical to logical CPU map for SMT
- xen/blkback: Avoid unmapping unmapped grant pages
- perf/x86/intel/bts: Fix the use of page_private()
- drm/amdgpu: add cache flush workaround to gfx8 emit_fence
- drm/amd/display: Fixed kernel panic when booting with DP-to-HDMI dongle
- PM / devfreq: Fix devfreq_notifier_call returning errno
- PM / devfreq: Set scaling_max_freq to max on OPP notifier error
- afs: Fix afs_find_server lookups for ipv4 peers
- scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length
- scsi: qla2xxx: Send Notify ACK after N2N PLOGI
- ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen
- ALSA: hda/realtek - Add headset Mic no shutup for ALC283
- media: cec: check 'transmit_in_progress', not 'transmitting'
- HID: i2c-hid: Reset ALPS touchpads on resume
- bdev: Factor out bdev revalidation into a common helper
- bdev: Refresh bdev size for disks without partitioning
- KVM: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag
- net: core: limit nested device depth
- ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps
* Bionic update: upstream stable patchset 2020-01-14 (LP: #1859712)
- af_packet: set defaule value for tmo
- fjes: fix missed check in fjes_acpi_add
- mod_devicetable: fix PHY module format
- net: dst: Force 4-byte alignment of dst_metrics
- net: hisilicon: Fix a BUG trigered by wrong bytes_compl
- net: nfc: nci: fix a possible sleep-in-atomic-context bug in
nci_uart_tty_receive()
- net: qlogic: Fix error paths in ql_alloc_large_buffers()
- net: usb: lan78xx: Fix suspend/resume PHY register access error
- qede: Fix multicast mac configuration
- sctp: fully initialize v4 addr in some functions
- btrfs: don't double lock the subvol_sem for rename exchange
- btrfs: do not call synchronize_srcu() in inode_tree_del
- btrfs: skip log replay on orphaned roots
- btrfs: do not leak reloc root if we fail to read the fs root
- btrfs: handle ENOENT in btrfs_uuid_tree_iterate
- Btrfs: fix removal logic of the tree mod log that leads to use-after-free
issues
- ALSA: pcm: Avoid possible info leaks from PCM stream buffers
- ALSA: hda/ca0132 - Keep power on during processing DSP response
- ALSA: hda/ca0132 - Avoid endless loop
- drm: mst: Fix query_payload ack reply struct
- drm/bridge: analogix-anx78xx: silence -EPROBE_DEFER warnings
- iio: light: bh1750: Resolve compiler warning and make code more readable
- spi: Add call to spi_slave_abort() function when spidev driver is released
- staging: rtl8192u: fix multiple memory leaks on error path
- staging: rtl8188eu: fix possible null dereference
- rtlwifi: prevent memory leak in rtl_usb_probe
- libertas: fix a potential NULL pointer dereference
- IB/iser: bound protection_sg size by data_sg size
- media: am437x-vpfe: Setting STD to current value is not an error
- media: i2c: ov2659: fix s_stream return value
- media: ov6650: Fix crop rectangle alignment not passed back
- media: i2c: ov2659: Fix missing 720p register config
- media: ov6650: Fix stored frame format not in sync with hardware
- media: ov6650: Fix stored crop rectangle not in sync with hardware
- tools/power/cpupower: Fix initializer override in hsw_ext_cstates
- media: venus: core: Fix msm8996 frequency table
- ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq
- pinctrl: devicetree: Avoid taking direct reference to device name string
- selftests/bpf: Correct path to include msg + path
- usb: renesas_usbhs: add suspend event support in gadget mode
- hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled
- regulator: max8907: Fix the usage of uninitialized variable in
max8907_regulator_probe()
- media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init()
- media: cec-funcs.h: add status_req checks
- drm/bridge: dw-hdmi: Refuse DDC/CI transfers on the internal I2C controller
- samples: pktgen: fix proc_cmd command result check logic
- block: Fix writeback throttling W=1 compiler warnings
- mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring
- media: cx88: Fix some error handling path in 'cx8800_initdev()'
- media: ti-vpe: vpe: Fix Motion Vector vpdma stride
- media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format
- media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence
number
- media: ti-vpe: vpe: Make sure YUYV is set as default format
- media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic
- media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases
- media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage
- extcon: sm5502: Reset registers during initialization
- x86/mm: Use the correct function type for native_set_fixmap()
- drm/bridge: dw-hdmi: Restore audio when setting a mode
- perf test: Report failure for mmap events
- perf report: Add warning when libunwind not compiled in
- usb: usbfs: Suppress problematic bind and unbind uevents.
- iio: adc: max1027: Reset the device at probe time
- Bluetooth: missed cpu_to_le16 conversion in hci_init4_req
- Bluetooth: hci_core: fix init for HCI_USER_CHANNEL
- x86/mce: Lower throttling MCE messages' priority to warning
- drm/gma500: fix memory disclosures due to uninitialized bytes
- rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot
- x86/ioapic: Prevent inconsistent state when moving an interrupt
- arm64: psci: Reduce the waiting time for cpu_psci_cpu_kill()
- net: phy: dp83867: enable robust auto-mdix
- RDMA/qedr: Fix memory leak in user qp and mr
- gpu: host1x: Allocate gather copy for host1x
- net: dsa: LAN9303: select REGMAP when LAN9303 enable
- phy: qcom-usb-hs: Fix extcon double register after power cycle
- s390/time: ensure get_clock_monotonic() returns monotonic values
- s390/mm: add mm_pxd_folded() checks to pxd_free()
- libata: Ensure ata_port probe has completed before detach
- loop: fix no-unmap write-zeroes request behavior
- pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B
- iio: dln2-adc: fix iio_triggered_buffer_postenable() position
- Bluetooth: Fix advertising duplicated flags
- pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler()
- ixgbe: protect TX timestamping from API misuse
- media: rcar_drif: fix a memory disclosure
- media: v4l2-core: fix touch support in v4l_g_fmt
- rfkill: allocate static minor
- bnx2x: Fix PF-VF communication over multi-cos queues.
- spi: img-spfi: fix potential double release
- ALSA: timer: Limit max amount of slave instances
- rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt()
- perf probe: Fix to find range-only function instance
- perf probe: Fix to list probe event with correct line number
- perf probe: Walk function lines in lexical blocks
- perf probe: Fix to probe an inline function which has no entry pc
- perf probe: Fix to show ranges of variables in functions without entry_pc
- perf probe: Fix to show inlined function callsite without entry_pc
- libsubcmd: Use -O0 with DEBUG=1
- perf probe: Fix to probe a function which has no entry pc
- drm/amdgpu: fix potential double drop fence reference
- perf parse: If pmu configuration fails free terms
- perf probe: Skip overlapped location on searching variables
- perf probe: Return a better scope DIE if there is no best scope
- perf probe: Fix to show calling lines of inlined functions
- perf probe: Skip end-of-sequence and non statement lines
- perf probe: Filter out instances except for inlined subroutine and
subprogram
- ath10k: fix get invalid tx rate for Mesh metric
- fsi: core: Fix small accesses and unaligned offsets via sysfs
- media: pvrusb2: Fix oops on tear-down when radio support is not present
- media: si470x-i2c: add missed operations in remove
- EDAC/ghes: Fix grain calculation
- spi: pxa2xx: Add missed security checks
- ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile
- ASoC: Intel: kbl_rt5663_rt5514_max98927: Add dmic format constraint
- s390/disassembler: don't hide instruction addresses
- parport: load lowlevel driver if ports not found
- cpufreq: Register drivers only after CPU devices have been registered
- x86/crash: Add a forward declaration of struct kimage
- iwlwifi: mvm: fix unaligned read of rx_pkt_status
- spi: tegra20-slink: add missed clk_unprepare
- crypto: virtio - deal with unsupported input sizes
- mmc: tmio: Add MMC_CAP_ERASE to allow erase/discard/trim requests
- btrfs: don't prematurely free work in end_workqueue_fn()
- btrfs: don't prematurely free work in run_ordered_work()
- spi: st-ssc4: add missed pm_runtime_disable
- x86/insn: Add some Intel instructions to the opcode map
- iwlwifi: check kasprintf() return value
- fbtft: Make sure string is NULL terminated
- crypto: sun4i-ss - Fix 64-bit size_t warnings
- crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c
- mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED
- crypto: vmx - Avoid weird build failures
- libtraceevent: Fix memory leakage in copy_filter_type
- mips: fix build when "48 bits virtual memory" is enabled
- net: phy: initialise phydev speed and duplex sanely
- btrfs: don't prematurely free work in reada_start_machine_worker()
- btrfs: don't prematurely free work in scrub_missing_raid56_worker()
- Revert "mmc: sdhci: Fix incorrect switch to HS mode"
- mmc: mediatek: fix CMD_TA to 2 for MT8173 HS200/HS400 mode
- usb: xhci: Fix build warning seen with CONFIG_PM=n
- s390/ftrace: fix endless recursion in function_graph tracer
- btrfs: return error pointer from alloc_test_extent_buffer
- btrfs: abort transaction after failed inode updates in create_subvol
- usbip: Fix receive error in vhci-hcd when using scatter-gather
- usbip: Fix error path of vhci_recv_ret_submit()
- USB: EHCI: Do not return -EPIPE when hub is disconnected
- intel_th: pci: Add Comet Lake PCH-V support
- intel_th: pci: Add Elkhart Lake SOC support
- platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes
- staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value
- ext4: fix ext4_empty_dir() for directories with holes
- ext4: check for directory entries too close to block end
- ext4: unlock on error in ext4_expand_extra_isize()
- KVM: arm64: Ensure 'params' is initialised when looking up sys register
- x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure()
- x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks[]
- powerpc/irq: fix stack overflow verification
- mmc: sdhci-of-esdhc: Revert "mmc: sdhci-of-esdhc: add erratum A-009204
support"
- mmc: sdhci: Update the tuning failed messages to pr_debug level
- mmc: sdhci-of-esdhc: fix P2020 errata handling
- nbd: fix shutdown and recv work deadlock v2
- perf probe: Fix to show function entry line as probe-able
- btrfs: send: remove WARN_ON for readonly mount
- ALSA: hda/ca0132 - Fix work handling in delayed HP detection
- drm/panel: Add missing drm_panel_init() in panel drivers
- drm/amdkfd: fix a potential NULL pointer dereference (v2)
- drm/drm_vblank: Change EINVAL by the correct errno
- Bluetooth: Workaround directed advertising bug in Broadcom controllers
- media: smiapp: Register sensor after enabling runtime PM on the device
- md/bitmap: avoid race window between md_bitmap_resize and
bitmap_file_clear_bit
- net: hns3: add struct netdev_queue debug info for TX timeout
- nvmem: imx-ocotp: reset error status on probe
- perf jevents: Fix resource leak in process_mapfile() and main()
- perf tools: Splice events onto evlist even on error
- crypto: atmel - Fix authenc support when it is set to m
- iio: dac: ad5446: Add support for new AD5600 DAC
- bcache: fix static checker warning in bcache_device_free()
- tun: fix data-race in gro_normal_list()
- ASoC: wm2200: add missed operations in remove and probe failure
- ASoC: wm5100: add missed pm_runtime_disable
- net: ethernet: ti: ale: disable ale from stop()
- net: ethernet: ti: ale: clean ale tbl on init and intf restart
- cpufreq: Rename cpufreq_can_do_remote_dvfs()
- cpufreq: Avoid leaving stale IRQ work items during CPU offline
- mmc: sdhci: Add a quirk for broken command queuing
* Bionic update: upstream stable patchset 2020-01-10 (LP: #1859249)
- net: bridge: deny dev_set_mac_address() when unregistering
- net: dsa: fix flow dissection on Tx path
- net: ethernet: ti: cpsw: fix extra rx interrupt
- net: thunderx: start phy before starting autonegotiation
- openvswitch: support asymmetric conntrack
- tcp: md5: fix potential overestimation of TCP option space
- tipc: fix ordering of tipc module init and exit routine
- tcp: fix rejected syncookies due to stale timestamps
- tcp: tighten acceptance of ACKs not matching a child socket
- tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE()
- inet: protect against too small mtu values.
- nvme: host: core: fix precedence of ternary operator
- Revert "regulator: Defer init completion for a while after late_initcall"
- PCI/PM: Always return devices to D0 when thawing
- PCI: Fix Intel ACS quirk UPDCR register address
- PCI/MSI: Fix incorrect MSI-X masking on resume
- PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3
- xtensa: fix TLB sanity checker
- rpmsg: glink: Set tail pointer to 0 at end of FIFO
- rpmsg: glink: Fix reuse intents memory leak issue
- rpmsg: glink: Fix use after free in open_ack TIMEOUT case
- rpmsg: glink: Put an extra reference during cleanup
- rpmsg: glink: Fix rpmsg_register_device err handling
- rpmsg: glink: Don't send pending rx_done during remove
- rpmsg: glink: Free pending deferred work on remove
- CIFS: Respect O_SYNC and O_DIRECT flags during reconnect
- ARM: dts: s3c64xx: Fix init order of clock providers
- ARM: tegra: Fix FLOW_CTLR_HALT register clobbering by tegra_resume()
- vfio/pci: call irq_bypass_unregister_producer() before freeing irq
- dma-buf: Fix memory leak in sync_file_merge()
- dm btree: increase rebalance threshold in __rebalance2()
- scsi: iscsi: Fix a potential deadlock in the timeout handler
- drm/radeon: fix r1xx/r2xx register checker for POT textures
- xhci: fix USB3 device initiated resume race with roothub autosuspend
- net: stmmac: use correct DMA buffer size in the RX descriptor
- mqprio: Fix out-of-bounds access in mqprio_dump
* fstrim on nvme / AMD CPU fails and produces kernel error messages
(LP: #1856603)
- nvme: Discard workaround for non-conformant devices
* net selftest psock_fanout fails on xenial s390x due to incorrect queue
lengths (LP: #1853375)
- selftests/net: ignore background traffic in psock_fanout
* multi-zone raid0 corruption (LP: #1850540)
- md/raid0: avoid RAID0 data corruption due to layout confusion.
- md: add feature flag MD_FEATURE_RAID0_LAYOUT
- md/raid0: fix warning message for parameter default_layout
- md/raid0: Fix an error message in raid0_make_request()
- SAUCE: md/raid0: Link to wiki with guidance on multi-zone RAID0 layout
migration
- SAUCE: md/raid0: Use kernel specific layout
* Dell AIO can't adjust brightness (LP: #1858761)
- SAUCE: platform/x86: dell-uart-backlight: add retry for get scalar status
* USB key cannot be detected by hotplug on Sunix USB Type-A 3.1 Gen 2 card
[1b21:2142] (LP: #1858988)
- SAUCE: PCI: Avoid ASMedia XHCI USB PME# from D0 defect
* CVE-2019-5108
- cfg80211/mac80211: make ieee80211_send_layer2_update a public function
- mac80211: Do not send Layer 2 Update frame before authorization
* [SRU][B/OEM-B/OEM-OSP1/D/E/Unstable] UBUNTU: SAUCE: Use native backlight on
Lenovo E41-25/45 (LP: #1859561)
- SAUCE: ACPI: video: Use native backlight on Lenovo E41-25/45
* CVE-2019-20096
- dccp: Fix memleak in __feat_register_sp
* Fix misleading error message: Configuring the VNIC characteristics failed
(LP: #1860523)
- (upstream) s390/qeth: fix false reporting of VNIC CHAR config failure
* Fix unusable USB hub on Dell TB16 after S3 (LP: #1855312)
- SAUCE: USB: core: Make port power cycle a seperate helper function
- SAUCE: USB: core: Attempt power cycle port when it's in eSS.Disabled state
* [linux] Patch to prevent possible data corruption (LP: #1848739)
- blk-mq: quiesce queue during switching io sched and updating nr_requests
- blk-mq: move hctx lock/unlock into a helper
- blk-mq: factor out a few helpers from __blk_mq_try_issue_directly
- blk-mq: improve DM's blk-mq IO merging via blk_insert_cloned_request
feedback
- dm mpath: fix missing call of path selector type->end_io
- blk-mq-sched: remove unused 'can_block' arg from blk_mq_sched_insert_request
- blk-mq: don't dispatch request in blk_mq_request_direct_issue if queue is
busy
- blk-mq: introduce BLK_STS_DEV_RESOURCE
- blk-mq: Rename blk_mq_request_direct_issue() into
blk_mq_request_issue_directly()
- blk-mq: don't queue more if we get a busy return
- blk-mq: dequeue request one by one from sw queue if hctx is busy
- blk-mq: issue directly if hw queue isn't busy in case of 'none'
- blk-mq: fix corruption with direct issue
- blk-mq: fail the request in case issue failure
- blk-mq: punt failed direct issue to dispatch list
* [sas-1126]scsi: hisi_sas: Fix out of bound at debug_I_T_nexus_reset()
(LP: #1853992)
- scsi: hisi_sas: Fix out of bound at debug_I_T_nexus_reset()
* [sas-1126]scsi: hisi_sas: Assign NCQ tag for all NCQ commands (LP: #1853995)
- scsi: hisi_sas: Assign NCQ tag for all NCQ commands
* [sas-1126]scsi: hisi_sas: Fix the conflict between device gone and host
reset (LP: #1853997)
- scsi: hisi_sas: Fix the conflict between device gone and host reset
* scsi: hisi_sas: Check sas_port before using it (LP: #1855952)
- scsi: hisi_sas: Check sas_port before using it
* CVE-2019-18885
- btrfs: refactor btrfs_find_device() take fs_devices as argument
- btrfs: merge btrfs_find_device and find_device
* [SRU][B/OEM-B/OEM-OSP1/D/E/F] Add LG I2C touchscreen multitouch support
(LP: #1857541)
- SAUCE: HID: multitouch: Add LG MELF0410 I2C touchscreen support
* usb-audio: the mic can't record any sound after resume on Dell Dock WD19
(LP: #1857496)
- ALSA: usb-audio: set the interface format after resume on Dell WD19
* qede driver causes 100% CPU load (LP: #1855409)
- qede: Handle infinite driver spinning for Tx timestamp.
* [roce-1126]RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
(LP: #1853989)
- RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver
- RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
* [roce-1126]RDMA/hns: Fixs hw access invalid dma memory error (LP: #1853990)
- RDMA/hns: Fixs hw access invalid dma memory error
* [hns-1126] net: hns: add support for vlan TSO (LP: #1853937)
- net: hns: add support for vlan TSO
* mlx5_core reports hardware checksum error for padded packets on Mellanox
NICs (LP: #1854842)
- net/mlx5e: Rx, Fixup skb checksum for packets with tail padding
- net/mlx5e: Rx, Fix checksum calculation for new hardware
* alsa/hda/realtek: the line-out jack doens't work on a dell AIO
(LP: #1855999)
- ALSA: hda/realtek - Line-out jack doesn't work on a Dell AIO
* efivarfs test in ubuntu_kernel_selftest failed on the second run
(LP: #1809704)
- selftests: efivarfs: return Kselftest Skip code for skipped tests
- selftests/efivarfs: clean up test files from test_create*()
* CVE-2019-19082
- drm/amd/display: prevent memory leak
* CVE-2019-19078
- ath10k: fix memory leak
* Bionic update: upstream stable patchset 2019-12-20 (LP: #1857158)
- rsi: release skb if rsi_prepare_beacon fails
- arm64: tegra: Fix 'active-low' warning for Jetson TX1 regulator
- usb: gadget: u_serial: add missing port entry locking
- tty: serial: fsl_lpuart: use the sg count from dma_map_sg
- tty: serial: msm_serial: Fix flow control
- serial: pl011: Fix DMA ->flush_buffer()
- serial: serial_core: Perform NULL checks for break_ctl ops
- serial: ifx6x60: add missed pm_runtime_disable
- autofs: fix a leak in autofs_expire_indirect()
- RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN
- iwlwifi: pcie: don't consider IV len in A-MSDU
- exportfs_decode_fh(): negative pinned may become positive without the parent
locked
- audit_get_nd(): don't unlock parent too early
- NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error
- xfrm: release device reference for invalid state
- Input: cyttsp4_core - fix use after free bug
- sched/core: Avoid spurious lock dependencies
- ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed()
- rsxx: add missed destroy_workqueue calls in remove
- net: ep93xx_eth: fix mismatch of request_mem_region in remove
- i2c: core: fix use after free in of_i2c_notify
- serial: core: Allow processing sysrq at port unlock time
- cxgb4vf: fix memleak in mac_hlist initialization
- iwlwifi: mvm: synchronize TID queue removal
- iwlwifi: mvm: Send non offchannel traffic via AP sta
- ARM: 8813/1: Make aligned 2-byte getuser()/putuser() atomic on ARMv6+
- net/mlx5: Release resource on error flow
- clk: sunxi-ng: a64: Fix gate bit of DSI DPHY
- dlm: fix possible call to kfree() for non-initialized pointer
- extcon: max8997: Fix lack of path setting in USB device mode
- net: ethernet: ti: cpts: correct debug for expired txq skb
- rtc: s3c-rtc: Avoid using broken ALMYEAR register
- i40e: don't restart nway if autoneg not supported
- clk: rockchip: fix rk3188 sclk_smc gate data
- clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering
- ARM: dts: rockchip: Fix rk3288-rock2 vcc_flash name
- dlm: fix missing idr_destroy for recover_idr
- MIPS: SiByte: Enable ZONE_DMA32 for LittleSur
- net: dsa: mv88e6xxx: Work around mv886e6161 SERDES missing MII_PHYSID2
- scsi: zfcp: drop default switch case which might paper over missing case
- crypto: ecc - check for invalid values in the key verification test
- crypto: bcm - fix normal/non key hash algorithm failure
- pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues
- Staging: iio: adt7316: Fix i2c data reading, set the data field
- mm/vmstat.c: fix NUMA statistics updates
- clk: rockchip: fix I2S1 clock gate register for rk3328
- clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328
- regulator: Fix return value of _set_load() stub
- iomap: sub-block dio needs to zeroout beyond EOF
- MIPS: OCTEON: octeon-platform: fix typing
- net/smc: use after free fix in smc_wr_tx_put_slot()
- math-emu/soft-fp.h: (_FP_ROUND_ZERO) cast 0 to void to fix warning
- rtc: max8997: Fix the returned value in case of error in
'max8997_rtc_read_alarm()'
- rtc: dt-binding: abx80x: fix resistance scale
- ARM: dts: exynos: Use Samsung SoC specific compatible for DWC2 module
- media: pulse8-cec: return 0 when invalidating the logical address
- media: cec: report Vendor ID after initialization
- dmaengine: coh901318: Fix a double-lock bug
- dmaengine: coh901318: Remove unused variable
- dmaengine: dw-dmac: implement dma protection control setting
- usb: dwc3: debugfs: Properly print/set link state for HS
- usb: dwc3: don't log probe deferrals; but do log other error codes
- ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion()
- f2fs: fix count of seg_freed to make sec_freed correct
- f2fs: change segment to section in f2fs_ioc_gc_range
- ARM: dts: rockchip: Fix the PMU interrupt number for rv1108
- ARM: dts: rockchip: Assign the proper GPIO clocks for rv1108
- f2fs: fix to allow node segment for GC by ioctl path
- sparc: Correct ctx->saw_frame_pointer logic.
- dma-mapping: fix return type of dma_set_max_seg_size()
- altera-stapl: check for a null key before strcasecmp'ing it
- serial: imx: fix error handling in console_setup
- i2c: imx: don't print error message on probe defer
- lockd: fix decoding of TEST results
- ASoC: rsnd: tidyup registering method for rsnd_kctrl_new()
- ARM: dts: sun5i: a10s: Fix HDMI output DTC warning
- ARM: dts: sun8i: v3s: Change pinctrl nodes to avoid warning
- dlm: NULL check before kmem_cache_destroy is not needed
- ARM: debug: enable UART1 for socfpga Cyclone5
- nfsd: fix a warning in __cld_pipe_upcall()
- ASoC: au8540: use 64-bit arithmetic instead of 32-bit
- ARM: OMAP1/2: fix SoC name printing
- arm64: dts: meson-gxl-libretech-cc: fix GPIO lines names
- arm64: dts: meson-gxbb-nanopi-k2: fix GPIO lines names
- arm64: dts: meson-gxbb-odroidc2: fix GPIO lines names
- arm64: dts: meson-gxl-khadas-vim: fix GPIO lines names
- net/x25: fix called/calling length calculation in x25_parse_address_block
- net/x25: fix null_x25_address handling
- ARM: dts: mmp2: fix the gpio interrupt cell number
- ARM: dts: realview-pbx: Fix duplicate regulator nodes
- tcp: fix off-by-one bug on aborting window-probing socket
- tcp: fix SNMP under-estimation on failed retransmission
- tcp: fix SNMP TCP timeout under-estimation
- modpost: skip ELF local symbols during section mismatch check
- kbuild: fix single target build for external module
- mtd: fix mtd_oobavail() incoherent returned value
- ARM: dts: pxa: clean up USB controller nodes
- clk: sunxi-ng: h3/h5: Fix CSI_MCLK parent
- ARM: dts: realview: Fix some more duplicate regulator nodes
- dlm: fix invalid cluster name warning
- net/mlx4_core: Fix return codes of unsupported operations
- pstore/ram: Avoid NULL deref in ftrace merging failure path
- powerpc/math-emu: Update macros from GCC
- clk: renesas: r8a77995: Correct parent clock of DU
- MIPS: OCTEON: cvmx_pko_mem_debug8: use oldest forward compatible definition
- nfsd: Return EPERM, not EACCES, in some SETATTR cases
- media: stkwebcam: Bugfix for wrong return values
- firmware: qcom: scm: fix compilation error when disabled
- mlxsw: spectrum_router: Relax GRE decap matching check
- IB/hfi1: Ignore LNI errors before DC8051 transitions to Polling state
- IB/hfi1: Close VNIC sdma_progress sleep window
- mlx4: Use snprintf instead of complicated strcpy
- usb: mtu3: fix dbginfo in qmu_tx_zlp_error_handler
- ARM: dts: sunxi: Fix PMU compatible strings
- media: vimc: fix start stream when link is disabled
- net: aquantia: fix RSS table and key sizes
- sched/fair: Scale bandwidth quota and period without losing quota/period
ratio precision
- fuse: verify nlink
- fuse: verify attributes
- ALSA: pcm: oss: Avoid potential buffer overflows
- ALSA: hda - Add mute led support for HP ProBook 645 G4
- Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus
- Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash
- Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers
- Input: goodix - add upside-down quirk for Teclast X89 tablet
- coresight: etm4x: Fix input validation for sysfs.
- Input: Fix memory leak in psxpad_spi_probe
- CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks
- CIFS: Fix SMB2 oplock break processing
- tty: vt: keyboard: reject invalid keycodes
- can: slcan: Fix use-after-free Read in slcan_open
- kernfs: fix ino wrap-around detection
- jbd2: Fix possible overflow in jbd2_log_space_left()
- drm/i810: Prevent underflow in ioctl
- KVM: arm/arm64: vgic: Don't rely on the wrong pending table
- KVM: x86: do not modify masked bits of shared MSRs
- KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES
- crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr
- crypto: af_alg - cast ki_complete ternary op to int
- crypto: ccp - fix uninitialized list head
- crypto: ecdh - fix big endian bug in ECC library
- crypto: user - fix memory leak in crypto_report
- spi: atmel: Fix CS high support
- RDMA/qib: Validate ->show()/store() callbacks before calling them
- iomap: Fix pipe page leakage during splicing
- thermal: Fix deadlock in thermal thermal_zone_device_check
- binder: Handle start==NULL in binder_update_page_range()
- ASoC: rsnd: fixup MIX kctrl registration
- KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)
- appletalk: Fix potential NULL pointer dereference in unregister_snap_client
- appletalk: Set error code if register_snap_client failed
- usb: gadget: configfs: Fix missing spin_lock_init()
- usb: gadget: pch_udc: fix use after free
- scsi: qla2xxx: Fix driver unload hang
- media: venus: remove invalid compat_ioctl32 handler
- USB: uas: honor flag to avoid CAPACITY16
- USB: uas: heed CAPACITY_HEURISTICS
- USB: documentation: flags on usb-storage versus UAS
- usb: Allow USB device to be warm reset in suspended state
- staging: rtl8188eu: fix interface sanity check
- staging: rtl8712: fix interface sanity check
- staging: gigaset: fix general protection fault on probe
- staging: gigaset: fix illegal free on probe errors
- staging: gigaset: add endpoint-type sanity check
- usb: xhci: only set D3hot for pci device
- xhci: Increase STS_HALT timeout in xhci_suspend()
- xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour.
- ARM: dts: pandora-common: define wl1251 as child node of mmc3
- iio: humidity: hdc100x: fix IIO_HUMIDITYRELATIVE channel reporting
- USB: atm: ueagle-atm: add missing endpoint check
- USB: idmouse: fix interface sanity checks
- USB: serial: io_edgeport: fix epic endpoint lookup
- USB: adutux: fix interface sanity check
- usb: core: urb: fix URB structure initialization function
- usb: mon: Fix a deadlock in usbmon between mmap and read
- tpm: add check after commands attribs tab allocation
- mtd: spear_smi: Fix Write Burst mode
- virtio-balloon: fix managed page counts when migrating pages between zones
- usb: dwc3: ep0: Clear started flag on completion
- btrfs: check page->mapping when loading free space cache
- btrfs: use refcount_inc_not_zero in kill_all_nodes
- Btrfs: fix negative subv_writers counter and data space leak after buffered
write
- btrfs: Remove btrfs_bio::flags member
- Btrfs: send, skip backreference walking for extents with many references
- btrfs: record all roots for rename exchange on a subvol
- rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer
- rtlwifi: rtl8192de: Fix missing enable interrupt flag
- lib: raid6: fix awk build warnings
- ovl: relax WARN_ON() on rename to self
- ALSA: hda - Fix pending unsol events at shutdown
- watchdog: aspeed: Fix clock behaviour for ast2600
- hwrng: omap - Fix RNG wait loop timeout
- dm zoned: reduce overhead of backing device checks
- workqueue: Fix spurious sanity check failures in destroy_workqueue()
- workqueue: Fix pwq ref leak in rescuer_thread()
- ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report
- blk-mq: avoid sysfs buffer overflow with too many CPU cores
- cgroup: pids: use atomic64_t for pids->limit
- ar5523: check NULL before memcpy() in ar5523_cmd()
- s390/mm: properly clear _PAGE_NOEXEC bit when it is not supported
- media: bdisp: fix memleak on release
- media: radio: wl1273: fix interrupt masking on release
- media: cec.h: CEC_OP_REC_FLAG_ values were swapped
- cpuidle: Do not unset the driver if it is there already
- intel_th: Fix a double put_device() in error path
- intel_th: pci: Add Ice Lake CPU support
- intel_th: pci: Add Tiger Lake CPU support
- PM / devfreq: Lock devfreq in trans_stat_show
- cpufreq: powernv: fix stack bloat and hard limit on number of CPUs
- ACPI: OSL: only free map once in osl.c
- ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data()
- ACPI: PM: Avoid attaching ACPI PM domain to certain devices
- pinctrl: samsung: Add of_node_put() before return in error path
- pinctrl: samsung: Fix device node refcount leaks in S3C24xx wakeup
controller init
- pinctrl: samsung: Fix device node refcount leaks in init code
- pinctrl: samsung: Fix device node refcount leaks in S3C64xx wakeup
controller init
- mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of
pandora_wl1251_init_card
- ARM: dts: omap3-tao3530: Fix incorrect MMC card detection GPIO polarity
- ppdev: fix PPGETTIME/PPSETTIME ioctls
- powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges >4GB
- powerpc/xive: Prevent page fault issues in the machine crash handler
- powerpc: Allow flush_icache_range to work across ranges >4GB
- powerpc/xive: Skip ioremap() of ESB pages for LSI interrupts
- video/hdmi: Fix AVI bar unpack
- quota: Check that quota is not dirty before release
- ext2: check err when partial != NULL
- quota: fix livelock in dquot_writeback_dquots
- ext4: Fix credit estimate for final inode freeing
- reiserfs: fix extended attributes on the root directory
- block: fix single range discard merge
- scsi: zfcp: trace channel log even for FCP command responses
- scsi: qla2xxx: Fix DMA unmap leak
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd()
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value
- scsi: qla2xxx: Fix message indicating vectors used by driver
- xhci: Fix memory leak in xhci_add_in_port()
- xhci: make sure interrupts are restored to correct state
- iio: adis16480: Add debugfs_reg_access entry
- phy: renesas: rcar-gen3-usb2: Fix sysfs interface of "role"
- omap: pdata-quirks: remove openpandora quirks for mmc3 and wl1251
- scsi: lpfc: Cap NPIV vports to 256
- scsi: lpfc: Correct code setting non existent bits in sli4 ABORT WQE
- drbd: Change drbd_request_detach_interruptible's return type to int
- e100: Fix passing zero to 'PTR_ERR' warning in e100_load_ucode_wait
- power: supply: cpcap-battery: Fix signed counter sample register
- mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead
- ath10k: fix fw crash by moving chip reset after napi disabled
- powerpc: Avoid clang warnings around setjmp and longjmp
- powerpc: Fix vDSO clock_getres()
- ext4: work around deleting a file with i_nlink == 0 safely
- firmware: qcom: scm: Ensure 'a0' status code is treated as signed
- mm/shmem.c: cast the type of unmap_start to u64
- ext4: fix a bug in ext4_wait_for_tail_page_commit
- blk-mq: make sure that line break can be printed
- workqueue: Fix missing kfree(rescuer) in destroy_workqueue()
- sunrpc: fix crash when cache_head become valid before update
- net/mlx5e: Fix SFF 8472 eeprom length
- gfs2: fix glock reference problem in gfs2_trans_remove_revoke
- kernel/module.c: wakeup processes in module_wq on module unload
- gpiolib: acpi: Add Terra Pad 1061 to the run_edge_events_on_boot_blacklist
- raid5: need to set STRIPE_HANDLE for batch head
- of: unittest: fix memory leak in attach_node_and_children
- sparc64: implement ioremap_uc
- iwlwifi: trans: Clear persistence bit when starting the FW
- audit: Embed key into chunk
- netfilter: nf_tables: don't use position attribute on rule replacement
- ARC: IOC: panic if kernel was started with previously enabled IOC
- ARM: dts: exynos: Fix LDO13 min values on Odroid XU3/XU4/HC1
- scsi: zfcp: update kernel message for invalid FCP_CMND length, it's not the
CDB
- drivers: soc: Allow building the amlogic drivers without ARCH_MESON
- sctp: count sk_wmem_alloc by skb truesize in sctp_packet_transmit
- xfs: extent shifting doesn't fully invalidate page cache
- iomap: dio data corruption and spurious errors when pipes fill
- ravb: Clean up duplex handling
- net/ipv6: re-do dad when interface has IFF_NOARP flag change
- selftests/powerpc: Allocate base registers
- f2fs: fix to account preflush command for noflush_merge mode
- nvme: Free ctrl device name on init failure
- gpu: host1x: Fix syncpoint ID field size on Tegra186
- ARM: dts: sun4i: Fix gpio-keys warning
- ARM: dts: sun4i: Fix HDMI output DTC warning
- ARM: dts: sun7i: Fix HDMI output DTC warning
- ARM: dts: sun8i: a23/a33: Fix OPP DTC warnings
- can: xilinx: fix return type of ndo_start_xmit function
- clk: mediatek: Drop __init from mtk_clk_register_cpumuxes()
- clk: mediatek: Drop more __init markings for driver probe
- soc: renesas: r8a77970-sysc: Correct names of A2DP/A2CN power domains
- tcp: make tcp_space() aware of socket backlog
- clk: meson: meson8b: fix the offset of vid_pll_dco's N value
- media: uvcvideo: Abstract streaming object lifetime
- clk: renesas: rcar-gen3: Set state when registering SD clocks
- x86/mm/32: Sync only to VMALLOC_END in vmalloc_sync_all()
- crypto: atmel-aes - Fix IV handling when req->nbytes < ivsize
- binder: Fix race between mmap() and binder_alloc_print_pages()
- perf script: Fix invalid LBR/binary mismatch error
- splice: don't read more than available pipe space
- iomap: partially revert 4721a601099 (simulated directio short read on
EFAULT)
- xfs: add missing error check in xfs_prepare_shift()
- Btrfs: fix metadata space leak on fixup worker failure to set range as
delalloc
- btrfs: Avoid getting stuck during cyclic writebacks
- md: improve handling of bio with REQ_PREFLUSH in md_flush_request()
- pinctrl: armada-37xx: Fix irq mask access in armada_37xx_irq_set_type()
- pinctrl: samsung: Fix device node refcount leaks in Exynos wakeup controller
init
- scsi: lpfc: Correct topology type reporting on G7 adapters
- pvcalls-front: don't return error when the ring is full
- net: hns3: clear pci private data when unload hns3 driver
- net: hns3: change hnae3_register_ae_dev() to int
- net: hns3: Check variable is valid before assigning it to another
- scsi: hisi_sas: send primitive NOTIFY to SSP situation only
- scsi: hisi_sas: Reject setting programmed minimum linkrate > 1.5G
- regulator: 88pm800: fix warning same module names
- rtc: disable uie before setting time and enable after
- splice: only read in as much information as there is pipe buffer space
- s390/smp,vdso: fix ASCE handling
- PCI: rcar: Fix missing MACCTLR register setting in initialization sequence
- of: overlay: add_changeset_property() memory leak
- scsi: qla2xxx: Change discovery state before PLOGI
* Realtek ALC256M with DTS Audio Processing internal microphone doesn't work
on Redmi Book 14 2019 (LP: #1846148) // Bionic update: upstream stable
patchset 2019-12-20 (LP: #1857158)
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
* False positive test result in run_afpackettests from net in
ubuntu_kernel_selftest (LP: #1825778)
- selftests/net: correct the return value for run_afpackettests
* headphone has noise as not mute on dell machines with alc236/256
(LP: #1854401)
- SAUCE: ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236
* Bionic update: upstream stable patchset 2019-12-09 (LP: #1855787)
- Revert "KVM: nVMX: reset cache/shadows when switching loaded VMCS"
- clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate
- ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX
- ASoC: compress: fix unsigned integer overflow check
- reset: Fix memory leak in reset_control_array_put()
- ASoC: kirkwood: fix external clock probe defer
- clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume
- reset: fix reset_control_ops kerneldoc comment
- clk: at91: avoid sleeping early
- clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18
- idr: Fix idr_alloc_u32 on 32-bit systems
- x86/resctrl: Prevent NULL pointer dereference when reading mondata
- clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call
- net: fec: add missed clk_disable_unprepare in remove
- bridge: ebtables: don't crash when using dnat target in output chains
- can: peak_usb: report bus recovery as well
- can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open
- can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb
mem leak
- can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue
beyond skb_queue_len_max
- can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on
queue overflow or OOM
- can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate
error value in case of errors
- can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error
- can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error
- watchdog: meson: Fix the wrong value of left time
- scripts/gdb: fix debugging modules compiled with hot/cold partitioning
- net: bcmgenet: reapply manual settings to the PHY
- ceph: return -EINVAL if given fsc mount option on kernel w/o support
- mac80211: fix station inactive_time shortly after boot
- block: drbd: remove a stray unlock in __drbd_send_protocol()
- pwm: bcm-iproc: Prevent unloading the driver module while in use
- scsi: lpfc: Fix kernel Oops due to null pring pointers
- scsi: lpfc: Fix dif and first burst use in write commands
- ARM: dts: Fix up SQ201 flash access
- ARM: debug-imx: only define DEBUG_IMX_UART_PORT if needed
- [Config] updateconfigs for DEBUG_IMX_UART_PORT
- ARM: dts: imx53-voipac-dmm-668: Fix memory node duplication
- parisc: Fix serio address output
- parisc: Fix HP SDC hpa address output
- arm64: mm: Prevent mismatched 52-bit VA support
- arm64: smp: Handle errors reported by the firmware
- ARM: OMAP1: fix USB configuration for device-only setups
- RDMA/vmw_pvrdma: Use atomic memory allocation in create AH
- PM / AVS: SmartReflex: NULL check before some freeing functions is not
needed
- ARM: ks8695: fix section mismatch warning
- ACPI / LPSS: Ignore acpi_device_fix_up_power() return value
- scsi: lpfc: Enable Management features for IF_TYPE=6
- crypto: user - support incremental algorithm dumps
- mwifiex: fix potential NULL dereference and use after free
- mwifiex: debugfs: correct histogram spacing, formatting
- rtl818x: fix potential use after free
- xfs: require both realtime inodes to mount
- ubi: Put MTD device after it is not used
- ubi: Do not drop UBI device reference before using
- microblaze: adjust the help to the real behavior
- microblaze: move "... is ready" messages to arch/microblaze/Makefile
- iwlwifi: move iwl_nvm_check_version() into dvm
- gpiolib: Fix return value of gpio_to_desc() stub if !GPIOLIB
- kvm: vmx: Set IA32_TSC_AUX for legacy mode guests
- VSOCK: bind to random port for VMADDR_PORT_ANY
- mmc: meson-gx: make sure the descriptor is stopped on errors
- mtd: rawnand: sunxi: Write pageprog related opcodes to WCMD_SET
- btrfs: only track ref_heads in delayed_ref_updates
- HID: intel-ish-hid: fixes incorrect error handling
- serial: 8250: Rate limit serial port rx interrupts during input overruns
- kprobes/x86/xen: blacklist non-attachable xen interrupt functions
- xen/pciback: Check dev_data before using it
- vfio-mdev/samples: Use u8 instead of char for handle functions
- pinctrl: xway: fix gpio-hog related boot issues
- net/mlx5: Continue driver initialization despite debugfs failure
- exofs_mount(): fix leaks on failure exits
- bnxt_en: Return linux standard errors in bnxt_ethtool.c
- bnxt_en: query force speeds before disabling autoneg mode.
- KVM: s390: unregister debug feature on failing arch init
- pinctrl: sh-pfc: sh7264: Fix PFCR3 and PFCR0 register configuration
- pinctrl: sh-pfc: sh7734: Fix shifted values in IPSR10
- HID: doc: fix wrong data structure reference for UHID_OUTPUT
- dm flakey: Properly corrupt multi-page bios.
- gfs2: take jdata unstuff into account in do_grow
- xfs: Align compat attrlist_by_handle with native implementation.
- xfs: Fix bulkstat compat ioctls on x32 userspace.
- IB/qib: Fix an error code in qib_sdma_verbs_send()
- clocksource/drivers/fttmr010: Fix invalid interrupt register access
- vxlan: Fix error path in __vxlan_dev_create()
- powerpc/book3s/32: fix number of bats in p/v_block_mapped()
- powerpc/xmon: fix dump_segments()
- drivers/regulator: fix a missing check of return value
- Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading
- serial: max310x: Fix tx_empty() callback
- openrisc: Fix broken paths to arch/or32
- RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer
- scsi: qla2xxx: deadlock by configfs_depend_item
- scsi: csiostor: fix incorrect dma device in case of vport
- ath6kl: Only use match sets when firmware supports it
- ath6kl: Fix off by one error in scan completion
- powerpc/perf: Fix unit_sel/cache_sel checks
- powerpc/prom: fix early DEBUG messages
- powerpc/mm: Make NULL pointer deferences explicit on bad page faults.
- powerpc/44x/bamboo: Fix PCI range
- vfio/spapr_tce: Get rid of possible infinite loop
- powerpc/powernv/eeh/npu: Fix uninitialized variables in
opal_pci_eeh_freeze_status
- drbd: ignore "all zero" peer volume sizes in handshake
- drbd: reject attach of unsuitable uuids even if connected
- drbd: do not block when adjusting "disk-options" while IO is frozen
- drbd: fix print_st_err()'s prototype to match the definition
- IB/rxe: Make counters thread safe
- regulator: tps65910: fix a missing check of return value
- powerpc/83xx: handle machine check caused by watchdog timer
- powerpc/pseries: Fix node leak in update_lmb_associativity_index()
- crypto: mxc-scc - fix build warnings on ARM64
- pwm: clps711x: Fix period calculation
- net/netlink_compat: Fix a missing check of nla_parse_nested
- net/net_namespace: Check the return value of register_pernet_subsys()
- f2fs: fix to dirty inode synchronously
- um: Make GCOV depend on !KCOV
- net: (cpts) fix a missing check of clk_prepare
- net: stmicro: fix a missing check of clk_prepare
- net: dsa: bcm_sf2: Propagate error value from mdio_write
- atl1e: checking the status of atl1e_write_phy_reg
- tipc: fix a missing check of genlmsg_put
- net/wan/fsl_ucc_hdlc: Avoid double free in ucc_hdlc_probe()
- ocfs2: clear journal dirty flag after shutdown journal
- vmscan: return NODE_RECLAIM_NOSCAN in node_reclaim() when CONFIG_NUMA is n
- lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk
- lib/genalloc.c: use vzalloc_node() to allocate the bitmap
- fork: fix some -Wmissing-prototypes warnings
- drivers/base/platform.c: kmemleak ignore a known leak
- lib/genalloc.c: include vmalloc.h
- mtd: Check add_mtd_device() ret code
- tipc: fix memory leak in tipc_nl_compat_publ_dump
- net/core/neighbour: tell kmemleak about hash tables
- PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity()
- net/core/neighbour: fix kmemleak minimal reference count for hash tables
- serial: 8250: Fix serial8250 initialization crash
- gpu: ipu-v3: pre: don't trigger update if buffer address doesn't change
- sfc: suppress duplicate nvmem partition types in efx_ef10_mtd_probe
- ip_tunnel: Make none-tunnel-dst tunnel port work with lwtunnel
- decnet: fix DN_IFREQ_SIZE
- net/smc: prevent races between smc_lgr_terminate() and smc_conn_free()
- blktrace: Show requests without sector
- tipc: fix skb may be leaky in tipc_link_input
- sfc: initialise found bitmap in efx_ef10_mtd_probe
- net: fix possible overflow in __sk_mem_raise_allocated()
- sctp: don't compare hb_timer expire date before starting it
- bpf: decrease usercnt if bpf_map_new_fd() fails in bpf_map_get_fd_by_id()
- net: dev: Use unsigned integer as an argument to left-shift
- kvm: properly check debugfs dentry before using it
- bpf: drop refcount if bpf_map_new_fd() fails in map_create()
- net: hns3: Change fw error code NOT_EXEC to NOT_SUPPORTED
- apparmor: delete the dentry in aafs_remove() to avoid a leak
- scsi: libsas: Support SATA PHY connection rate unmatch fixing during
discovery
- ACPI / APEI: Don't wait to serialise with oops messages when panic()ing
- ACPI / APEI: Switch estatus pool to use vmalloc memory
- scsi: libsas: Check SMP PHY control function result
- mtd: Remove a debug trace in mtdpart.c
- mm, gup: add missing refcount overflow checks on s390
- clk: at91: fix update bit maps on CFG_MOR write
- clk: at91: generated: set audio_pll_allowed in at91_clk_register_generated()
- staging: rtl8192e: fix potential use after free
- staging: rtl8723bs: Drop ACPI device ids
- staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids
- USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P
- mei: bus: prefix device names on bus with the bus name
- media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE
- net: macb: fix error format in dev_err()
- pwm: Clear chip_data in pwm_put()
- media: atmel: atmel-isc: fix asd memory allocation
- media: atmel: atmel-isc: fix INIT_WORK misplacement
- macvlan: schedule bc_work even if error
- net: psample: fix skb_over_panic
- openvswitch: fix flow command message size
- slip: Fix use-after-free Read in slip_open
- openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info()
- openvswitch: remove another BUG_ON()
- tipc: fix link name length check
- sctp: cache netns in sctp_ep_common
- net: sched: fix `tc -s class show` no bstats on class with nolock subqueues
- ext4: add more paranoia checking in ext4_expand_extra_isize handling
- watchdog: sama5d4: fix WDD value to be always set to max
- net: macb: Fix SUBNS increment and increase resolution
- net: macb driver, check for SKBTX_HW_TSTAMP
- mtd: rawnand: atmel: Fix spelling mistake in error message
- mtd: rawnand: atmel: fix possible object reference leak
- mtd: spi-nor: cast to u64 to avoid uint overflows
- y2038: futex: Move compat implementation into futex.c
- futex: Prevent robust futex exit race
- futex: Move futex exit handling into futex code
- futex: Replace PF_EXITPIDONE with a state
- exit/exec: Seperate mm_release()
- futex: Split futex_mm_release() for exit/exec
- futex: Set task::futex_state to DEAD right after handling futex exit
- futex: Mark the begin of futex exit explicitly
- futex: Sanitize exit state handling
- futex: Provide state handling for exec() as well
- futex: Add mutex around futex exit
- futex: Provide distinct return value when owner is exiting
- futex: Prevent exit livelock
- HID: core: check whether Usage Page item is after Usage ID items
- crypto: stm32/hash - Fix hmac issue more than 256 bytes
- media: stm32-dcmi: fix DMA corruption when stopping streaming
- hwrng: stm32 - fix unbalanced pm_runtime_enable
- mailbox: mailbox-test: fix null pointer if no mmio
- pinctrl: stm32: fix memory leak issue
- ASoC: stm32: i2s: fix dma configuration
- ASoC: stm32: i2s: fix 16 bit format support
- ASoC: stm32: i2s: fix IRQ clearing
- platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer
- platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size
- net: fec: fix clock count mis-match
- clk: samsung: exynos5433: Fix error paths
- pinctrl: cherryview: Allocate IRQ chip dynamic
- ARM: dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend
- samples/bpf: fix build by setting HAVE_ATTR_TEST to zero
- idr: Fix integer overflow in idr_for_each_entry
- can: mcp251x: mcp251x_restart_work_handler(): Fix potential force_quit race
condition
- net: bcmgenet: use RGMII loopback for MAC reset
- RDMA/hns: Fix the bug while use multi-hop of pbl
- s390/zcrypt: make sysfs reset attribute trigger queue reset
- bcache: do not check if debug dentry is ERR or NULL explicitly on remove
- bcache: do not mark writeback_running too early
- microblaze: fix multiple bugs in arch/microblaze/boot/Makefile
- iwlwifi: pcie: fix erroneous print
- usb: ehci-omap: Fix deferred probe for phy handling
- btrfs: fix ncopies raid_attr for RAID56
- Btrfs: allow clear_extent_dirty() to receive a cached extent state record
- serial: sh-sci: Fix crash in rx_timer_fn() on PIO fallback
- kprobes: Blacklist symbols in arch-defined prohibited area
- kprobes/x86: Show x86-64 specific blacklisted symbols correctly
- memory: omap-gpmc: Get the header of the enum
- netfilter: nf_nat_sip: fix RTP/RTCP source port translations
- bnxt_en: Save ring statistics before reset.
- brcmfmac: Fix access point mode
- powerpc/32: Avoid unsupported flags with clang
- powerpc: Fix HMIs on big-endian with CONFIG_RELOCATABLE=y
- mm/page_alloc.c: free order-0 pages through PCP in page_frag_free()
- mm/page_alloc.c: use a single function to free page
- mm/page_alloc.c: deduplicate __memblock_free_early() and memblock_free()
- infiniband: bnxt_re: qplib: Check the return value of send_message
- infiniband/qedr: Potential null ptr dereference of qp
- firmware: arm_sdei: fix wrong of_node_put() in init function
- firmware: arm_sdei: Fix DT platform device creation
- ata: ahci: mvebu: do Armada 38x configuration only on relevant SoCs
- net/smc: don't wait for send buffer space when data was already sent
- mm/hotplug: invalid PFNs from pfn_to_online_page()
- ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI
- geneve: change NET_UDP_TUNNEL dependency to select
- mmc: core: align max segment size with logical block size
- net: hns3: fix PFC not setting problem for DCB module
- net: hns3: fix an issue for hclgevf_ae_get_hdev
- net: hns3: fix an issue for hns3_update_new_int_gl
- scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned
- RDMA/hns: Bugfix for the scene without receiver queue
- RDMA/hns: Fix the state of rereg mr
- thunderbolt: Power cycle the router if NVM authentication fails
- tcp: exit if nothing to retransmit on RTO timeout
* Bionic update: upstream stable patchset 2019-12-03 (LP: #1854975)
- net/mlx4_en: fix mlx4 ethtool -N insertion
- net: rtnetlink: prevent underflows in do_setvfinfo()
- sfc: Only cancel the PPS workqueue if it exists
- net/mlx5e: Fix set vf link state error flow
- net/mlxfw: Verify FSM error code translation doesn't exceed array size
- net/sched: act_pedit: fix WARN() in the traffic path
- vhost/vsock: split packets to send using multiple buffers
- gpio: max77620: Fixup debounce delays
- tools: gpio: Correctly add make dependencies for gpio_utils
- nbd:fix memory leak in nbd_get_socket()
- virtio_console: allocate inbufs in add_port() only if it is needed
- Revert "fs: ocfs2: fix possible null-pointer dereferences in
ocfs2_xa_prepare_entry()"
- mm/ksm.c: don't WARN if page is still mapped in remove_stable_node()
- drm/i915/userptr: Try to acquire the page lock around set_page_dirty()
- platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ
- mwifiex: Fix NL80211_TX_POWER_LIMITED
- ALSA: isight: fix leak of reference to firewire unit in error path of .probe
callback
- printk: fix integer overflow in setup_log_buf()
- gfs2: Fix marking bitmaps non-full
- pty: fix compat ioctls
- synclink_gt(): fix compat_ioctl()
- powerpc: Fix signedness bug in update_flash_db()
- powerpc/boot: Disable vector instructions
- powerpc/eeh: Fix use of EEH_PE_KEEP on wrong field
- EDAC, thunderx: Fix memory leak in thunderx_l2c_threaded_isr()
- brcmsmac: AP mode: update beacon when TIM changes
- ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem
- skd: fixup usage of legacy IO API
- cdrom: don't attempt to fiddle with cdo->capability
- spi: sh-msiof: fix deferred probing
- mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail
- btrfs: handle error of get_old_root
- gsmi: Fix bug in append_to_eventlog sysfs handler
- misc: mic: fix a DMA pool free failure
- w1: IAD Register is yet readable trough iad sys file. Fix snprintf (%u for
unsigned, count for max size).
- m68k: fix command-line parsing when passed from u-boot
- RDMA/bnxt_re: Fix qp async event reporting
- pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()'
- pwm: lpss: Only set update bit if we are actually changing the settings
- amiflop: clean up on errors during setup
- qed: Align local and global PTT to propagate through the APIs.
- scsi: ips: fix missing break in switch
- KVM: nVMX: reset cache/shadows when switching loaded VMCS
- KVM/x86: Fix invvpid and invept register operand size in 64-bit mode
- scsi: isci: Use proper enumerated type in atapi_d2h_reg_frame_handler
- scsi: isci: Change sci_controller_start_task's return type to sci_status
- scsi: iscsi_tcp: Explicitly cast param in iscsi_sw_tcp_host_get_param
- crypto: ccree - avoid implicit enum conversion
- nvmet-fcloop: suppress a compiler warning
- clk: mmp2: fix the clock id for sdh2_clk and sdh3_clk
- clk: at91: audio-pll: fix audio pmc type
- ASoC: tegra_sgtl5000: fix device_node refcounting
- scsi: dc395x: fix dma API usage in srb_done
- scsi: dc395x: fix DMA API usage in sg_update_list
- net: dsa: mv88e6xxx: Fix 88E6141/6341 2500mbps SERDES speed
- net: fix warning in af_unix
- xfs: fix use-after-free race in xfs_buf_rele
- kprobes, x86/ptrace.h: Make regs_get_kernel_stack_nth() not fault on bad
stack
- PM / Domains: Deal with multiple states but no governor in genpd
- ALSA: i2c/cs8427: Fix int to char conversion
- macintosh/windfarm_smu_sat: Fix debug output
- PCI: vmd: Detach resources after stopping root bus
- USB: misc: appledisplay: fix backlight update_status return code
- usbip: tools: fix atoi() on non-null terminated string
- dm raid: avoid bitmap with raid4/5/6 journal device
- SUNRPC: Fix a compile warning for cmpxchg64()
- sunrpc: safely reallow resvport min/max inversion
- atm: zatm: Fix empty body Clang warnings
- s390/perf: Return error when debug_register fails
- spi: omap2-mcspi: Set FIFO DMA trigger level to word length
- sparc: Fix parport build warnings.
- powerpc/pseries: Export raw per-CPU VPA data via debugfs
- ceph: fix dentry leak in ceph_readdir_prepopulate
- rtc: s35390a: Change buf's type to u8 in s35390a_init
- f2fs: fix to spread clear_cold_data()
- mISDN: Fix type of switch control variable in ctrl_teimanager
- qlcnic: fix a return in qlcnic_dcb_get_capability()
- net: ethernet: ti: cpsw: unsync mcast entries while switch promisc mode
- mfd: arizona: Correct calling of runtime_put_sync
- mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values
- mfd: intel_soc_pmic_bxtwc: Chain power button IRQs as well
- mfd: max8997: Enale irq-wakeup unconditionally
- selftests/ftrace: Fix to test kprobe $comm arg only if available
- selftests: watchdog: fix message when /dev/watchdog open fails
- selftests: watchdog: Fix error message.
- thermal: rcar_thermal: Prevent hardware access during system suspend
- bpf: devmap: fix wrong interface selection in notifier_call
- powerpc/process: Fix flush_all_to_thread for SPE
- sparc64: Rework xchg() definition to avoid warnings.
- arm64: lib: use C string functions with KASAN enabled
- fs/ocfs2/dlm/dlmdebug.c: fix a sleep-in-atomic-context bug in
dlm_print_one_mle()
- mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock
- macsec: update operstate when lower device changes
- macsec: let the administrator set UP state even if lowerdev is down
- block: fix the DISCARD request merge
- i2c: uniphier-f: make driver robust against concurrency
- i2c: uniphier-f: fix occasional timeout error
- i2c: uniphier-f: fix race condition when IRQ is cleared
- um: Make line/tty semantics use true write IRQ
- vfs: avoid problematic remapping requests into partial EOF block
- powerpc/xmon: Relax frame size for clang
- selftests/powerpc/signal: Fix out-of-tree build
- selftests/powerpc/switch_endian: Fix out-of-tree build
- selftests/powerpc/cache_shape: Fix out-of-tree build
- linux/bitmap.h: handle constant zero-size bitmaps correctly
- linux/bitmap.h: fix type of nbits in bitmap_shift_right()
- hfsplus: fix BUG on bnode parent update
- hfs: fix BUG on bnode parent update
- hfsplus: prevent btree data loss on ENOSPC
- hfs: prevent btree data loss on ENOSPC
- hfsplus: fix return value of hfsplus_get_block()
- hfs: fix return value of hfs_get_block()
- hfsplus: update timestamps on truncate()
- hfs: update timestamp on truncate()
- fs/hfs/extent.c: fix array out of bounds read of array extent
- mm/memory_hotplug: make add_memory() take the device_hotplug_lock
- igb: shorten maximum PHC timecounter update interval
- ntb_netdev: fix sleep time mismatch
- ntb: intel: fix return value for ndev_vec_mask()
- arm64: makefile fix build of .i file in external module case
- ocfs2: don't put and assigning null to bh allocated outside
- ocfs2: fix clusters leak in ocfs2_defrag_extent()
- net: do not abort bulk send on BQL status
- sched/topology: Fix off by one bug
- sched/fair: Don't increase sd->balance_interval on newidle balance
- openvswitch: fix linking without CONFIG_NF_CONNTRACK_LABELS
- clk: sunxi-ng: enable so-said LDOs for A64 SoC's pll-mipi clock
- audit: print empty EXECVE args
- btrfs: avoid link error with CONFIG_NO_AUTO_INLINE
- wil6210: fix locking in wmi_call
- wlcore: Fix the return value in case of error in
'wlcore_vendor_cmd_smart_config_start()'
- rtl8xxxu: Fix missing break in switch
- brcmsmac: never log "tid x is not agg'able" by default
- wireless: airo: potential buffer overflow in sprintf()
- rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information
- net: dsa: bcm_sf2: Turn on PHY to allow successful registration
- scsi: mpt3sas: Fix Sync cache command failure during driver unload
- scsi: mpt3sas: Don't modify EEDPTagMode field setting on SAS3.5 HBA devices
- scsi: mpt3sas: Fix driver modifying persistent data in Manufacturing page11
- scsi: megaraid_sas: Fix msleep granularity
- scsi: megaraid_sas: Fix goto labels in error handling
- scsi: lpfc: fcoe: Fix link down issue after 1000+ link bounces
- scsi: lpfc: Correct loss of fc4 type on remote port address change
- dlm: fix invalid free
- dlm: don't leak kernel pointer to userspace
- vrf: mark skb for multicast or link-local as enslaved to VRF
- ACPICA: Use %d for signed int print formatting instead of %u
- net: bcmgenet: return correct value 'ret' from bcmgenet_power_down
- of: unittest: allow base devicetree to have symbol metadata
- cfg80211: Prevent regulatory restore during STA disconnect in concurrent
interfaces
- pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues
- pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT
- pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD
- PCI: keystone: Use quirk to limit MRRS for K2G
- spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch
- i2c: uniphier-f: fix timeout error after reading 8 bytes
- mm/memory_hotplug: Do not unlock when fails to take the device_hotplug_lock
- ipv6: Fix handling of LLA with VRF and sockets bound to VRF
- cfg80211: call disconnect_wk when AP stops
- Bluetooth: Fix invalid-free in bcsp_close()
- KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved
- ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
- ath9k_hw: fix uninitialized variable data
- md/raid10: prevent access of uninitialized resync_pages offset
- mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span()
- net: phy: dp83867: fix speed 10 in sgmii mode
- net: phy: dp83867: increase SGMII autoneg timer duration
- cpufreq: Skip cpufreq resume if it's not suspended
- ocfs2: remove ocfs2_is_o2cb_active()
- ARM: 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary
- ARC: perf: Accommodate big-endian CPU
- x86/insn: Fix awk regexp warnings
- x86/speculation: Fix incorrect MDS/TAA mitigation status
- x86/speculation: Fix redundant MDS mitigation message
- nbd: prevent memory leak
- nfc: port100: handle command failure cleanly
- media: vivid: Set vid_cap_streaming and vid_out_streaming to true
- media: vivid: Fix wrong locking that causes race conditions on streaming
stop
- media: usbvision: Fix races among open, close, and disconnect
- cpufreq: Add NULL checks to show() and store() methods of cpufreq
- media: uvcvideo: Fix error path in control parsing failure
- media: b2c2-flexcop-usb: add sanity checking
- media: cxusb: detect cxusb_ctrl_msg error in query
- media: imon: invalid dereference in imon_touch_event
- virtio_ring: fix return code on DMA mapping fails
- usbip: tools: fix fd leakage in the function of read_attr_usbip_status
- usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
- usb-serial: cp201x: support Mark-10 digital force gauge
- USB: chaoskey: fix error case of a timeout
- appledisplay: fix error handling in the scheduled work
- USB: serial: mos7840: add USB ID to support Moxa UPort 2210
- USB: serial: mos7720: fix remote wakeup
- USB: serial: mos7840: fix remote wakeup
- USB: serial: option: add support for DW5821e with eSIM support
- USB: serial: option: add support for Foxconn T77W968 LTE modules
- staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
- x86/hyperv: mark hyperv_init as __init function
- mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel
- net/mlx4_en: Fix wrong limitation for number of TX rings
- net/mlx5: Fix auto group size calculation
- printk: lock/unlock console only for new logbuf entries
- powerpc/boot: Fix opal console in boot wrapper
- mmc: mediatek: fill the actual clock for mmc debugfs
- btrfs: defrag: use btrfs_mod_outstanding_extents in cluster_pages_for_defrag
- nvme-pci: fix hot removal during error handling
- PCI: mediatek: Fixup MSI enablement logic by enabling MSI before clocks
- swiotlb: do not panic on mapping failures
- powerpc/mm/radix: Fix off-by-one in split mapping logic
- powerpc/mm/radix: Fix overuse of small pages in splitting logic
- powerpc/mm/radix: Fix small page at boundary when splitting
- tools: bpftool: fix completion for "bpftool map update"
- ceph: only allow punch hole mode in fallocate
- RISC-V: Avoid corrupting the upper 32-bit of phys_addr_t in ioremap
- f2fs: spread f2fs_set_inode_flags()
- net: socionext: Stop PHY before resetting netsec
- tools/testing/selftests/vm/gup_benchmark.c: fix 'write' flag usage
- mm: thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race
condition
- ipv4/igmp: fix v1/v2 switchback timeout based on rfc3376, 8.12
- mm/gup_benchmark.c: prevent integer overflow in ioctl
- lib/bitmap.c: fix remaining space computation in bitmap_print_to_pagebuf
- kernel/panic.c: do not append newline to the stack protector panic string
- mm/memory_hotplug: fix online/offline_pages called w.o. mem_hotplug_lock
- fm10k: ensure completer aborts are marked as non-fatal after a resume
- irq/matrix: Fix memory overallocation
- nvme-pci: fix conflicting p2p resource adds
- mm: handle no memcg case in memcg_kmem_charge() properly
- ocfs2: without quota support, avoid calling quota recovery
- soc: bcm: brcmstb: Fix re-entry point with a THUMB2_KERNEL
- media: ov13858: Check for possible null pointer
- wil6210: fix debugfs memory access alignment
- scsi: lpfc: Fix odd recovery in duplicate FLOGIs in point-to-point
- usb: typec: tcpm: charge current handling for sink during hard reset
- clk: tegra20: Turn EMC clock gate into divider
- of: unittest: initialize args before calling of_*parse_*()
- tools: bpftool: pass an argument to silence open_obj_pinned()
- nvme-pci: fix surprise removal
- mm/page_io.c: do not free shared swap slots
- PM / devfreq: Fix kernel oops on governor module load
* Miscellaneous Ubuntu changes
- update dkms package versions
[ Ubuntu: 4.15.0-76.86 ]
* bionic/linux: 4.15.0-76.86 -proposed tracker (LP: #1860123)
* Integrate Intel SGX driver into linux-azure (LP: #1844245)
- [Packaging] Add systemd service to load intel_sgx
* [Regression] Bionic kernel 4.15.0-71.80 can not boot on ThunderX
(LP: #1853326) // Bionic kernel panic on Cavium ThunderX CN88XX
(LP: #1853485) // Cavium ThunderX CN88XX crashes on boot (LP: #1857074)
- arm64: Check for errata before evaluating cpu features
- arm64: add sentinel to kpti_safe_list
-- Marcelo Henrique Cerri <email address hidden> Tue, 11 Feb 2020 17:44:33 -0300
-
linux-aws (4.15.0-1059.61) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1059.61 -proposed tracker (LP: #1861141)
* RANDOM_TRUST_BOOTLOADER support on AWS Graviton (LP: #1859192)
- aws: [Config] CONFIG_RANDOM_TRUST_BOOTLOADER=y for arm64
- fdt: add support for rng-seed
- efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness
[ Ubuntu: 4.15.0-87.87 ]
* bionic/linux: 4.15.0-87.87 -proposed tracker (LP: #1861165)
* Bionic update: upstream stable patchset 2020-01-22 (LP: #1860602)
- scsi: lpfc: Fix discovery failures when target device connectivity bounces
- scsi: mpt3sas: Fix clear pending bit in ioctl status
- scsi: lpfc: Fix locking on mailbox command completion
- Input: atmel_mxt_ts - disable IRQ across suspend
- iommu/tegra-smmu: Fix page tables in > 4 GiB memory
- scsi: target: compare full CHAP_A Algorithm strings
- scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices
- scsi: csiostor: Don't enable IRQs too early
- powerpc/pseries: Mark accumulate_stolen_time() as notrace
- powerpc/pseries: Don't fail hash page table insert for bolted mapping
- powerpc/tools: Don't quote $objdump in scripts
- dma-debug: add a schedule point in debug_dma_dump_mappings()
- clocksource/drivers/asm9260: Add a check for of_clk_get
- powerpc/security/book3s64: Report L1TF status in sysfs
- powerpc/book3s64/hash: Add cond_resched to avoid soft lockup warning
- ext4: update direct I/O read lock pattern for IOCB_NOWAIT
- jbd2: Fix statistics for the number of logged blocks
- scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6)
- scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow
- f2fs: fix to update dir's i_pino during cross_rename
- clk: qcom: Allow constant ratio freq tables for rcg
- irqchip/irq-bcm7038-l1: Enable parent IRQ if necessary
- irqchip: ingenic: Error out if IRQ domain creation failed
- fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned long
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences
- scsi: ufs: fix potential bug which ends in system hang
- powerpc/pseries/cmm: Implement release() function for sysfs device
- powerpc/security: Fix wrong message when RFI Flush is disable
- scsi: atari_scsi: sun3_scsi: Set sg_tablesize to 1 instead of SG_NONE
- clk: pxa: fix one of the pxa RTC clocks
- bcache: at least try to shrink 1 node in bch_mca_scan()
- HID: logitech-hidpp: Silence intermittent get_battery_capacity errors
- libnvdimm/btt: fix variable 'rc' set but not used
- HID: Improve Windows Precision Touchpad detection.
- scsi: pm80xx: Fix for SATA device discovery
- scsi: ufs: Fix error handing during hibern8 enter
- scsi: scsi_debug: num_tgts must be >= 0
- scsi: NCR5380: Add disconnect_mask module parameter
- scsi: iscsi: Don't send data to unbound connection
- scsi: target: iscsi: Wait for all commands to finish before freeing a
session
- gpio: mpc8xxx: Don't overwrite default irq_set_type callback
- apparmor: fix unsigned len comparison with less than zero
- scripts/kallsyms: fix definitely-lost memory leak
- cdrom: respect device capabilities during opening action
- perf script: Fix brstackinsn for AUXTRACE
- perf regs: Make perf_reg_name() return "unknown" instead of NULL
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
- s390/cpum_sf: Check for SDBT and SDB consistency
- ocfs2: fix passing zero to 'PTR_ERR' warning
- kernel: sysctl: make drop_caches write-only
- userfaultfd: require CAP_SYS_PTRACE for UFFD_FEATURE_EVENT_FORK
- x86/mce: Fix possibly incorrect severity calculation on AMD
- net, sysctl: Fix compiler warning when only cBPF is present
- netfilter: nf_queue: enqueue skbs with NULL dst
- ALSA: hda - Downgrade error message for single-cmd fallback
- bonding: fix active-backup transition after link failure
- perf strbuf: Remove redundant va_end() in strbuf_addv()
- Make filldir[64]() verify the directory entry filename is valid
- filldir[64]: remove WARN_ON_ONCE() for bad directory entries
- netfilter: ebtables: compat: reject all padding in matches/watchers
- 6pack,mkiss: fix possible deadlock
- netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
- inetpeer: fix data-race in inet_putpeer / inet_putpeer
- net: add a READ_ONCE() in skb_peek_tail()
- net: icmp: fix data-race in cmp_global_allow()
- hrtimer: Annotate lockless access to timer->state
- spi: fsl: don't map irq during probe
- tty/serial: atmel: fix out of range clock divider handling
- pinctrl: baytrail: Really serialize all register accesses
- net: ena: fix napi handler misbehavior when the napi budget is zero
- net/mlxfw: Fix out-of-memory error in mfa2 flash burning
- ptp: fix the race between the release of ptp_clock and cdev
- udp: fix integer overflow while computing available space in sk_rcvbuf
- vhost/vsock: accept only packets with the right dst_cid
- net: add bool confirm_neigh parameter for dst_ops.update_pmtu
- gtp: do not confirm neighbor when do pmtu update
- net/dst: add new function skb_dst_update_pmtu_no_confirm
- tunnel: do not confirm neighbor when do pmtu update
- vti: do not confirm neighbor when do pmtu update
- sit: do not confirm neighbor when do pmtu update
- gtp: do not allow adding duplicate tid and ms_addr pdp context
- tcp/dccp: fix possible race __inet_lookup_established()
- tcp: do not send empty skb from tcp_write_xmit()
- gtp: fix wrong condition in gtp_genl_dump_pdp()
- gtp: fix an use-after-free in ipv4_pdp_find()
- gtp: avoid zero size hashtable
- spi: fsl: use platform_get_irq() instead of of_irq_to_resource()
- scsi: hisi_sas: Replace in_softirq() check in hisi_sas_task_exec()
- clocksource/drivers/timer-of: Use unique device name instead of timer
- ext4: iomap that extends beyond EOF should be marked dirty
- clk: clk-gpio: propagate rate change to parent
- HID: quirks: Add quirk for HP MSU1465 PIXART OEM mouse
- HID: rmi: Check that the RMI_STARTED bit is set before unregistering the RMI
transport device
- watchdog: Fix the race between the release of watchdog_core_data and cdev
- powerpc: Don't add -mabi= flags when building with Clang
- tcp: Fix highest_sack and highest_sack_seq
- nvme_fc: add module to ops template to allow module references
- iio: adc: max9611: Fix too short conversion time delay
- PM / devfreq: Don't fail devfreq_dev_release if not in list
- RDMA/cma: add missed unregister_pernet_subsys in init failure
- rxe: correctly calculate iCRC for unaligned payloads
- scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func
- scsi: qla2xxx: Don't call qlt_async_event twice
- scsi: iscsi: qla4xxx: fix double free in probe
- scsi: libsas: stop discovering if oob mode is disconnected
- drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit
- usb: gadget: fix wrong endpoint desc
- net: make socket read/write_iter() honor IOCB_NOWAIT
- md: raid1: check rdev before reference in raid1_sync_request func
- s390/cpum_sf: Adjust sampling interval to avoid hitting sample limits
- s390/cpum_sf: Avoid SBD overflow condition in irq handler
- IB/mlx4: Follow mirror sequence of device add during device removal
- xen-blkback: prevent premature module unload
- xen/balloon: fix ballooned page accounting without hotplug enabled
- xfs: fix mount failure crash on invalid iclog memory access
- taskstats: fix data-race
- drm: limit to INT_MAX in create_blob ioctl
- ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code
- drm/sun4i: hdmi: Remove duplicate cleanup calls
- MIPS: Avoid VDSO ABI breakage due to global register variable
- media: pulse8-cec: fix lost cec_transmit_attempt_done() call
- media: cec: CEC 2.0-only bcast messages were ignored
- media: cec: avoid decrementing transmit_queue_sz if it is 0
- mm/zsmalloc.c: fix the migrated zspage statistics.
- memcg: account security cred as well to kmemcg
- pstore/ram: Write new dumps to start of recycled zones
- locks: print unsigned ino in /proc/locks
- dmaengine: Fix access to uninitialized dma_slave_caps
- compat_ioctl: block: handle Persistent Reservations
- compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE
- ata: libahci_platform: Export again ahci_platform_<en/dis>able_phys()
- ata: ahci_brcm: Allow optional reset controller to be used
- ata: ahci_brcm: Fix AHCI resources management
- gpiolib: fix up emulated open drain outputs
- tracing: Fix lock inversion in trace_event_enable_tgid_record()
- tracing: Have the histogram compare functions convert to u64 first
- ALSA: cs4236: fix error return comparison of an unsigned integer
- ALSA: firewire-motu: Correct a typo in the clock proc string
- exit: panic before exit_mm() on global init exit
- ftrace: Avoid potential division by zero in function profiler
- PM / devfreq: Check NULL governor in available_governors_show
- nfsd4: fix up replay_matches_cache()
- scsi: qla2xxx: Drop superfluous INIT_WORK of del_work
- xfs: don't check for AG deadlock for realtime files in bunmapi
- platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI
table
- Bluetooth: btusb: fix PM leak in error case of setup
- Bluetooth: delete a stray unlock
- Bluetooth: Fix memory leak in hci_connect_le_scan
- media: flexcop-usb: ensure -EIO is returned on error condition
- regulator: ab8500: Remove AB8505 USB regulator
- media: usb: fix memory leak in af9005_identify_state
- dt-bindings: clock: renesas: rcar-usb2-clock-sel: Fix typo in example
- tty: serial: msm_serial: Fix lockup for sysrq and oops
- fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP
- scsi: qedf: Do not retry ELS request if qedf_alloc_cmd fails
- drm/mst: Fix MST sideband up-reply failure handling
- powerpc/pseries/hvconsole: Fix stack overread via udbg
- selftests: rtnetlink: add addresses with fixed life time
- rxrpc: Fix possible NULL pointer access in ICMP handling
- ath9k_htc: Modify byte order for an error message
- ath9k_htc: Discard undersized packets
- arm64: dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed
warning
- net: add annotations on hh->hh_len lockless accesses
- s390/smp: fix physical to logical CPU map for SMT
- xen/blkback: Avoid unmapping unmapped grant pages
- perf/x86/intel/bts: Fix the use of page_private()
- drm/amdgpu: add cache flush workaround to gfx8 emit_fence
- drm/amd/display: Fixed kernel panic when booting with DP-to-HDMI dongle
- PM / devfreq: Fix devfreq_notifier_call returning errno
- PM / devfreq: Set scaling_max_freq to max on OPP notifier error
- afs: Fix afs_find_server lookups for ipv4 peers
- scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length
- scsi: qla2xxx: Send Notify ACK after N2N PLOGI
- ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen
- ALSA: hda/realtek - Add headset Mic no shutup for ALC283
- media: cec: check 'transmit_in_progress', not 'transmitting'
- HID: i2c-hid: Reset ALPS touchpads on resume
- bdev: Factor out bdev revalidation into a common helper
- bdev: Refresh bdev size for disks without partitioning
- KVM: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag
- net: core: limit nested device depth
- ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps
* Bionic update: upstream stable patchset 2020-01-14 (LP: #1859712)
- af_packet: set defaule value for tmo
- fjes: fix missed check in fjes_acpi_add
- mod_devicetable: fix PHY module format
- net: dst: Force 4-byte alignment of dst_metrics
- net: hisilicon: Fix a BUG trigered by wrong bytes_compl
- net: nfc: nci: fix a possible sleep-in-atomic-context bug in
nci_uart_tty_receive()
- net: qlogic: Fix error paths in ql_alloc_large_buffers()
- net: usb: lan78xx: Fix suspend/resume PHY register access error
- qede: Fix multicast mac configuration
- sctp: fully initialize v4 addr in some functions
- btrfs: don't double lock the subvol_sem for rename exchange
- btrfs: do not call synchronize_srcu() in inode_tree_del
- btrfs: skip log replay on orphaned roots
- btrfs: do not leak reloc root if we fail to read the fs root
- btrfs: handle ENOENT in btrfs_uuid_tree_iterate
- Btrfs: fix removal logic of the tree mod log that leads to use-after-free
issues
- ALSA: pcm: Avoid possible info leaks from PCM stream buffers
- ALSA: hda/ca0132 - Keep power on during processing DSP response
- ALSA: hda/ca0132 - Avoid endless loop
- drm: mst: Fix query_payload ack reply struct
- drm/bridge: analogix-anx78xx: silence -EPROBE_DEFER warnings
- iio: light: bh1750: Resolve compiler warning and make code more readable
- spi: Add call to spi_slave_abort() function when spidev driver is released
- staging: rtl8192u: fix multiple memory leaks on error path
- staging: rtl8188eu: fix possible null dereference
- rtlwifi: prevent memory leak in rtl_usb_probe
- libertas: fix a potential NULL pointer dereference
- IB/iser: bound protection_sg size by data_sg size
- media: am437x-vpfe: Setting STD to current value is not an error
- media: i2c: ov2659: fix s_stream return value
- media: ov6650: Fix crop rectangle alignment not passed back
- media: i2c: ov2659: Fix missing 720p register config
- media: ov6650: Fix stored frame format not in sync with hardware
- media: ov6650: Fix stored crop rectangle not in sync with hardware
- tools/power/cpupower: Fix initializer override in hsw_ext_cstates
- media: venus: core: Fix msm8996 frequency table
- ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq
- pinctrl: devicetree: Avoid taking direct reference to device name string
- selftests/bpf: Correct path to include msg + path
- usb: renesas_usbhs: add suspend event support in gadget mode
- hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled
- regulator: max8907: Fix the usage of uninitialized variable in
max8907_regulator_probe()
- media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init()
- media: cec-funcs.h: add status_req checks
- drm/bridge: dw-hdmi: Refuse DDC/CI transfers on the internal I2C controller
- samples: pktgen: fix proc_cmd command result check logic
- block: Fix writeback throttling W=1 compiler warnings
- mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring
- media: cx88: Fix some error handling path in 'cx8800_initdev()'
- media: ti-vpe: vpe: Fix Motion Vector vpdma stride
- media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format
- media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence
number
- media: ti-vpe: vpe: Make sure YUYV is set as default format
- media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic
- media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases
- media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage
- extcon: sm5502: Reset registers during initialization
- x86/mm: Use the correct function type for native_set_fixmap()
- drm/bridge: dw-hdmi: Restore audio when setting a mode
- perf test: Report failure for mmap events
- perf report: Add warning when libunwind not compiled in
- usb: usbfs: Suppress problematic bind and unbind uevents.
- iio: adc: max1027: Reset the device at probe time
- Bluetooth: missed cpu_to_le16 conversion in hci_init4_req
- Bluetooth: hci_core: fix init for HCI_USER_CHANNEL
- x86/mce: Lower throttling MCE messages' priority to warning
- drm/gma500: fix memory disclosures due to uninitialized bytes
- rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot
- x86/ioapic: Prevent inconsistent state when moving an interrupt
- arm64: psci: Reduce the waiting time for cpu_psci_cpu_kill()
- net: phy: dp83867: enable robust auto-mdix
- RDMA/qedr: Fix memory leak in user qp and mr
- gpu: host1x: Allocate gather copy for host1x
- net: dsa: LAN9303: select REGMAP when LAN9303 enable
- phy: qcom-usb-hs: Fix extcon double register after power cycle
- s390/time: ensure get_clock_monotonic() returns monotonic values
- s390/mm: add mm_pxd_folded() checks to pxd_free()
- libata: Ensure ata_port probe has completed before detach
- loop: fix no-unmap write-zeroes request behavior
- pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B
- iio: dln2-adc: fix iio_triggered_buffer_postenable() position
- Bluetooth: Fix advertising duplicated flags
- pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler()
- ixgbe: protect TX timestamping from API misuse
- media: rcar_drif: fix a memory disclosure
- media: v4l2-core: fix touch support in v4l_g_fmt
- rfkill: allocate static minor
- bnx2x: Fix PF-VF communication over multi-cos queues.
- spi: img-spfi: fix potential double release
- ALSA: timer: Limit max amount of slave instances
- rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt()
- perf probe: Fix to find range-only function instance
- perf probe: Fix to list probe event with correct line number
- perf probe: Walk function lines in lexical blocks
- perf probe: Fix to probe an inline function which has no entry pc
- perf probe: Fix to show ranges of variables in functions without entry_pc
- perf probe: Fix to show inlined function callsite without entry_pc
- libsubcmd: Use -O0 with DEBUG=1
- perf probe: Fix to probe a function which has no entry pc
- drm/amdgpu: fix potential double drop fence reference
- perf parse: If pmu configuration fails free terms
- perf probe: Skip overlapped location on searching variables
- perf probe: Return a better scope DIE if there is no best scope
- perf probe: Fix to show calling lines of inlined functions
- perf probe: Skip end-of-sequence and non statement lines
- perf probe: Filter out instances except for inlined subroutine and
subprogram
- ath10k: fix get invalid tx rate for Mesh metric
- fsi: core: Fix small accesses and unaligned offsets via sysfs
- media: pvrusb2: Fix oops on tear-down when radio support is not present
- media: si470x-i2c: add missed operations in remove
- EDAC/ghes: Fix grain calculation
- spi: pxa2xx: Add missed security checks
- ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile
- ASoC: Intel: kbl_rt5663_rt5514_max98927: Add dmic format constraint
- s390/disassembler: don't hide instruction addresses
- parport: load lowlevel driver if ports not found
- cpufreq: Register drivers only after CPU devices have been registered
- x86/crash: Add a forward declaration of struct kimage
- iwlwifi: mvm: fix unaligned read of rx_pkt_status
- spi: tegra20-slink: add missed clk_unprepare
- crypto: virtio - deal with unsupported input sizes
- mmc: tmio: Add MMC_CAP_ERASE to allow erase/discard/trim requests
- btrfs: don't prematurely free work in end_workqueue_fn()
- btrfs: don't prematurely free work in run_ordered_work()
- spi: st-ssc4: add missed pm_runtime_disable
- x86/insn: Add some Intel instructions to the opcode map
- iwlwifi: check kasprintf() return value
- fbtft: Make sure string is NULL terminated
- crypto: sun4i-ss - Fix 64-bit size_t warnings
- crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c
- mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED
- crypto: vmx - Avoid weird build failures
- libtraceevent: Fix memory leakage in copy_filter_type
- mips: fix build when "48 bits virtual memory" is enabled
- net: phy: initialise phydev speed and duplex sanely
- btrfs: don't prematurely free work in reada_start_machine_worker()
- btrfs: don't prematurely free work in scrub_missing_raid56_worker()
- Revert "mmc: sdhci: Fix incorrect switch to HS mode"
- mmc: mediatek: fix CMD_TA to 2 for MT8173 HS200/HS400 mode
- usb: xhci: Fix build warning seen with CONFIG_PM=n
- s390/ftrace: fix endless recursion in function_graph tracer
- btrfs: return error pointer from alloc_test_extent_buffer
- btrfs: abort transaction after failed inode updates in create_subvol
- usbip: Fix receive error in vhci-hcd when using scatter-gather
- usbip: Fix error path of vhci_recv_ret_submit()
- USB: EHCI: Do not return -EPIPE when hub is disconnected
- intel_th: pci: Add Comet Lake PCH-V support
- intel_th: pci: Add Elkhart Lake SOC support
- platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes
- staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value
- ext4: fix ext4_empty_dir() for directories with holes
- ext4: check for directory entries too close to block end
- ext4: unlock on error in ext4_expand_extra_isize()
- KVM: arm64: Ensure 'params' is initialised when looking up sys register
- x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure()
- x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks[]
- powerpc/irq: fix stack overflow verification
- mmc: sdhci-of-esdhc: Revert "mmc: sdhci-of-esdhc: add erratum A-009204
support"
- mmc: sdhci: Update the tuning failed messages to pr_debug level
- mmc: sdhci-of-esdhc: fix P2020 errata handling
- nbd: fix shutdown and recv work deadlock v2
- perf probe: Fix to show function entry line as probe-able
- btrfs: send: remove WARN_ON for readonly mount
- ALSA: hda/ca0132 - Fix work handling in delayed HP detection
- drm/panel: Add missing drm_panel_init() in panel drivers
- drm/amdkfd: fix a potential NULL pointer dereference (v2)
- drm/drm_vblank: Change EINVAL by the correct errno
- Bluetooth: Workaround directed advertising bug in Broadcom controllers
- media: smiapp: Register sensor after enabling runtime PM on the device
- md/bitmap: avoid race window between md_bitmap_resize and
bitmap_file_clear_bit
- net: hns3: add struct netdev_queue debug info for TX timeout
- nvmem: imx-ocotp: reset error status on probe
- perf jevents: Fix resource leak in process_mapfile() and main()
- perf tools: Splice events onto evlist even on error
- crypto: atmel - Fix authenc support when it is set to m
- iio: dac: ad5446: Add support for new AD5600 DAC
- bcache: fix static checker warning in bcache_device_free()
- tun: fix data-race in gro_normal_list()
- ASoC: wm2200: add missed operations in remove and probe failure
- ASoC: wm5100: add missed pm_runtime_disable
- net: ethernet: ti: ale: disable ale from stop()
- net: ethernet: ti: ale: clean ale tbl on init and intf restart
- cpufreq: Rename cpufreq_can_do_remote_dvfs()
- cpufreq: Avoid leaving stale IRQ work items during CPU offline
- mmc: sdhci: Add a quirk for broken command queuing
* Bionic update: upstream stable patchset 2020-01-10 (LP: #1859249)
- net: bridge: deny dev_set_mac_address() when unregistering
- net: dsa: fix flow dissection on Tx path
- net: ethernet: ti: cpsw: fix extra rx interrupt
- net: thunderx: start phy before starting autonegotiation
- openvswitch: support asymmetric conntrack
- tcp: md5: fix potential overestimation of TCP option space
- tipc: fix ordering of tipc module init and exit routine
- tcp: fix rejected syncookies due to stale timestamps
- tcp: tighten acceptance of ACKs not matching a child socket
- tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE()
- inet: protect against too small mtu values.
- nvme: host: core: fix precedence of ternary operator
- Revert "regulator: Defer init completion for a while after late_initcall"
- PCI/PM: Always return devices to D0 when thawing
- PCI: Fix Intel ACS quirk UPDCR register address
- PCI/MSI: Fix incorrect MSI-X masking on resume
- PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3
- xtensa: fix TLB sanity checker
- rpmsg: glink: Set tail pointer to 0 at end of FIFO
- rpmsg: glink: Fix reuse intents memory leak issue
- rpmsg: glink: Fix use after free in open_ack TIMEOUT case
- rpmsg: glink: Put an extra reference during cleanup
- rpmsg: glink: Fix rpmsg_register_device err handling
- rpmsg: glink: Don't send pending rx_done during remove
- rpmsg: glink: Free pending deferred work on remove
- CIFS: Respect O_SYNC and O_DIRECT flags during reconnect
- ARM: dts: s3c64xx: Fix init order of clock providers
- ARM: tegra: Fix FLOW_CTLR_HALT register clobbering by tegra_resume()
- vfio/pci: call irq_bypass_unregister_producer() before freeing irq
- dma-buf: Fix memory leak in sync_file_merge()
- dm btree: increase rebalance threshold in __rebalance2()
- scsi: iscsi: Fix a potential deadlock in the timeout handler
- drm/radeon: fix r1xx/r2xx register checker for POT textures
- xhci: fix USB3 device initiated resume race with roothub autosuspend
- net: stmmac: use correct DMA buffer size in the RX descriptor
- mqprio: Fix out-of-bounds access in mqprio_dump
* fstrim on nvme / AMD CPU fails and produces kernel error messages
(LP: #1856603)
- nvme: Discard workaround for non-conformant devices
* net selftest psock_fanout fails on xenial s390x due to incorrect queue
lengths (LP: #1853375)
- selftests/net: ignore background traffic in psock_fanout
* multi-zone raid0 corruption (LP: #1850540)
- md/raid0: avoid RAID0 data corruption due to layout confusion.
- md: add feature flag MD_FEATURE_RAID0_LAYOUT
- md/raid0: fix warning message for parameter default_layout
- md/raid0: Fix an error message in raid0_make_request()
- SAUCE: md/raid0: Link to wiki with guidance on multi-zone RAID0 layout
migration
- SAUCE: md/raid0: Use kernel specific layout
* Dell AIO can't adjust brightness (LP: #1858761)
- SAUCE: platform/x86: dell-uart-backlight: add retry for get scalar status
* USB key cannot be detected by hotplug on Sunix USB Type-A 3.1 Gen 2 card
[1b21:2142] (LP: #1858988)
- SAUCE: PCI: Avoid ASMedia XHCI USB PME# from D0 defect
* CVE-2019-5108
- cfg80211/mac80211: make ieee80211_send_layer2_update a public function
- mac80211: Do not send Layer 2 Update frame before authorization
* [SRU][B/OEM-B/OEM-OSP1/D/E/Unstable] UBUNTU: SAUCE: Use native backlight on
Lenovo E41-25/45 (LP: #1859561)
- SAUCE: ACPI: video: Use native backlight on Lenovo E41-25/45
* CVE-2019-20096
- dccp: Fix memleak in __feat_register_sp
* Fix misleading error message: Configuring the VNIC characteristics failed
(LP: #1860523)
- (upstream) s390/qeth: fix false reporting of VNIC CHAR config failure
* Fix unusable USB hub on Dell TB16 after S3 (LP: #1855312)
- SAUCE: USB: core: Make port power cycle a seperate helper function
- SAUCE: USB: core: Attempt power cycle port when it's in eSS.Disabled state
* [linux] Patch to prevent possible data corruption (LP: #1848739)
- blk-mq: quiesce queue during switching io sched and updating nr_requests
- blk-mq: move hctx lock/unlock into a helper
- blk-mq: factor out a few helpers from __blk_mq_try_issue_directly
- blk-mq: improve DM's blk-mq IO merging via blk_insert_cloned_request
feedback
- dm mpath: fix missing call of path selector type->end_io
- blk-mq-sched: remove unused 'can_block' arg from blk_mq_sched_insert_request
- blk-mq: don't dispatch request in blk_mq_request_direct_issue if queue is
busy
- blk-mq: introduce BLK_STS_DEV_RESOURCE
- blk-mq: Rename blk_mq_request_direct_issue() into
blk_mq_request_issue_directly()
- blk-mq: don't queue more if we get a busy return
- blk-mq: dequeue request one by one from sw queue if hctx is busy
- blk-mq: issue directly if hw queue isn't busy in case of 'none'
- blk-mq: fix corruption with direct issue
- blk-mq: fail the request in case issue failure
- blk-mq: punt failed direct issue to dispatch list
* [sas-1126]scsi: hisi_sas: Fix out of bound at debug_I_T_nexus_reset()
(LP: #1853992)
- scsi: hisi_sas: Fix out of bound at debug_I_T_nexus_reset()
* [sas-1126]scsi: hisi_sas: Assign NCQ tag for all NCQ commands (LP: #1853995)
- scsi: hisi_sas: Assign NCQ tag for all NCQ commands
* [sas-1126]scsi: hisi_sas: Fix the conflict between device gone and host
reset (LP: #1853997)
- scsi: hisi_sas: Fix the conflict between device gone and host reset
* scsi: hisi_sas: Check sas_port before using it (LP: #1855952)
- scsi: hisi_sas: Check sas_port before using it
* CVE-2019-18885
- btrfs: refactor btrfs_find_device() take fs_devices as argument
- btrfs: merge btrfs_find_device and find_device
* [SRU][B/OEM-B/OEM-OSP1/D/E/F] Add LG I2C touchscreen multitouch support
(LP: #1857541)
- SAUCE: HID: multitouch: Add LG MELF0410 I2C touchscreen support
* usb-audio: the mic can't record any sound after resume on Dell Dock WD19
(LP: #1857496)
- ALSA: usb-audio: set the interface format after resume on Dell WD19
* qede driver causes 100% CPU load (LP: #1855409)
- qede: Handle infinite driver spinning for Tx timestamp.
* [roce-1126]RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
(LP: #1853989)
- RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver
- RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
* [roce-1126]RDMA/hns: Fixs hw access invalid dma memory error (LP: #1853990)
- RDMA/hns: Fixs hw access invalid dma memory error
* [hns-1126] net: hns: add support for vlan TSO (LP: #1853937)
- net: hns: add support for vlan TSO
* mlx5_core reports hardware checksum error for padded packets on Mellanox
NICs (LP: #1854842)
- net/mlx5e: Rx, Fixup skb checksum for packets with tail padding
- net/mlx5e: Rx, Fix checksum calculation for new hardware
* alsa/hda/realtek: the line-out jack doens't work on a dell AIO
(LP: #1855999)
- ALSA: hda/realtek - Line-out jack doesn't work on a Dell AIO
* efivarfs test in ubuntu_kernel_selftest failed on the second run
(LP: #1809704)
- selftests: efivarfs: return Kselftest Skip code for skipped tests
- selftests/efivarfs: clean up test files from test_create*()
* CVE-2019-19082
- drm/amd/display: prevent memory leak
* CVE-2019-19078
- ath10k: fix memory leak
* Bionic update: upstream stable patchset 2019-12-20 (LP: #1857158)
- rsi: release skb if rsi_prepare_beacon fails
- arm64: tegra: Fix 'active-low' warning for Jetson TX1 regulator
- usb: gadget: u_serial: add missing port entry locking
- tty: serial: fsl_lpuart: use the sg count from dma_map_sg
- tty: serial: msm_serial: Fix flow control
- serial: pl011: Fix DMA ->flush_buffer()
- serial: serial_core: Perform NULL checks for break_ctl ops
- serial: ifx6x60: add missed pm_runtime_disable
- autofs: fix a leak in autofs_expire_indirect()
- RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN
- iwlwifi: pcie: don't consider IV len in A-MSDU
- exportfs_decode_fh(): negative pinned may become positive without the parent
locked
- audit_get_nd(): don't unlock parent too early
- NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error
- xfrm: release device reference for invalid state
- Input: cyttsp4_core - fix use after free bug
- sched/core: Avoid spurious lock dependencies
- ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed()
- rsxx: add missed destroy_workqueue calls in remove
- net: ep93xx_eth: fix mismatch of request_mem_region in remove
- i2c: core: fix use after free in of_i2c_notify
- serial: core: Allow processing sysrq at port unlock time
- cxgb4vf: fix memleak in mac_hlist initialization
- iwlwifi: mvm: synchronize TID queue removal
- iwlwifi: mvm: Send non offchannel traffic via AP sta
- ARM: 8813/1: Make aligned 2-byte getuser()/putuser() atomic on ARMv6+
- net/mlx5: Release resource on error flow
- clk: sunxi-ng: a64: Fix gate bit of DSI DPHY
- dlm: fix possible call to kfree() for non-initialized pointer
- extcon: max8997: Fix lack of path setting in USB device mode
- net: ethernet: ti: cpts: correct debug for expired txq skb
- rtc: s3c-rtc: Avoid using broken ALMYEAR register
- i40e: don't restart nway if autoneg not supported
- clk: rockchip: fix rk3188 sclk_smc gate data
- clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering
- ARM: dts: rockchip: Fix rk3288-rock2 vcc_flash name
- dlm: fix missing idr_destroy for recover_idr
- MIPS: SiByte: Enable ZONE_DMA32 for LittleSur
- net: dsa: mv88e6xxx: Work around mv886e6161 SERDES missing MII_PHYSID2
- scsi: zfcp: drop default switch case which might paper over missing case
- crypto: ecc - check for invalid values in the key verification test
- crypto: bcm - fix normal/non key hash algorithm failure
- pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues
- Staging: iio: adt7316: Fix i2c data reading, set the data field
- mm/vmstat.c: fix NUMA statistics updates
- clk: rockchip: fix I2S1 clock gate register for rk3328
- clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328
- regulator: Fix return value of _set_load() stub
- iomap: sub-block dio needs to zeroout beyond EOF
- MIPS: OCTEON: octeon-platform: fix typing
- net/smc: use after free fix in smc_wr_tx_put_slot()
- math-emu/soft-fp.h: (_FP_ROUND_ZERO) cast 0 to void to fix warning
- rtc: max8997: Fix the returned value in case of error in
'max8997_rtc_read_alarm()'
- rtc: dt-binding: abx80x: fix resistance scale
- ARM: dts: exynos: Use Samsung SoC specific compatible for DWC2 module
- media: pulse8-cec: return 0 when invalidating the logical address
- media: cec: report Vendor ID after initialization
- dmaengine: coh901318: Fix a double-lock bug
- dmaengine: coh901318: Remove unused variable
- dmaengine: dw-dmac: implement dma protection control setting
- usb: dwc3: debugfs: Properly print/set link state for HS
- usb: dwc3: don't log probe deferrals; but do log other error codes
- ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion()
- f2fs: fix count of seg_freed to make sec_freed correct
- f2fs: change segment to section in f2fs_ioc_gc_range
- ARM: dts: rockchip: Fix the PMU interrupt number for rv1108
- ARM: dts: rockchip: Assign the proper GPIO clocks for rv1108
- f2fs: fix to allow node segment for GC by ioctl path
- sparc: Correct ctx->saw_frame_pointer logic.
- dma-mapping: fix return type of dma_set_max_seg_size()
- altera-stapl: check for a null key before strcasecmp'ing it
- serial: imx: fix error handling in console_setup
- i2c: imx: don't print error message on probe defer
- lockd: fix decoding of TEST results
- ASoC: rsnd: tidyup registering method for rsnd_kctrl_new()
- ARM: dts: sun5i: a10s: Fix HDMI output DTC warning
- ARM: dts: sun8i: v3s: Change pinctrl nodes to avoid warning
- dlm: NULL check before kmem_cache_destroy is not needed
- ARM: debug: enable UART1 for socfpga Cyclone5
- nfsd: fix a warning in __cld_pipe_upcall()
- ASoC: au8540: use 64-bit arithmetic instead of 32-bit
- ARM: OMAP1/2: fix SoC name printing
- arm64: dts: meson-gxl-libretech-cc: fix GPIO lines names
- arm64: dts: meson-gxbb-nanopi-k2: fix GPIO lines names
- arm64: dts: meson-gxbb-odroidc2: fix GPIO lines names
- arm64: dts: meson-gxl-khadas-vim: fix GPIO lines names
- net/x25: fix called/calling length calculation in x25_parse_address_block
- net/x25: fix null_x25_address handling
- ARM: dts: mmp2: fix the gpio interrupt cell number
- ARM: dts: realview-pbx: Fix duplicate regulator nodes
- tcp: fix off-by-one bug on aborting window-probing socket
- tcp: fix SNMP under-estimation on failed retransmission
- tcp: fix SNMP TCP timeout under-estimation
- modpost: skip ELF local symbols during section mismatch check
- kbuild: fix single target build for external module
- mtd: fix mtd_oobavail() incoherent returned value
- ARM: dts: pxa: clean up USB controller nodes
- clk: sunxi-ng: h3/h5: Fix CSI_MCLK parent
- ARM: dts: realview: Fix some more duplicate regulator nodes
- dlm: fix invalid cluster name warning
- net/mlx4_core: Fix return codes of unsupported operations
- pstore/ram: Avoid NULL deref in ftrace merging failure path
- powerpc/math-emu: Update macros from GCC
- clk: renesas: r8a77995: Correct parent clock of DU
- MIPS: OCTEON: cvmx_pko_mem_debug8: use oldest forward compatible definition
- nfsd: Return EPERM, not EACCES, in some SETATTR cases
- media: stkwebcam: Bugfix for wrong return values
- firmware: qcom: scm: fix compilation error when disabled
- mlxsw: spectrum_router: Relax GRE decap matching check
- IB/hfi1: Ignore LNI errors before DC8051 transitions to Polling state
- IB/hfi1: Close VNIC sdma_progress sleep window
- mlx4: Use snprintf instead of complicated strcpy
- usb: mtu3: fix dbginfo in qmu_tx_zlp_error_handler
- ARM: dts: sunxi: Fix PMU compatible strings
- media: vimc: fix start stream when link is disabled
- net: aquantia: fix RSS table and key sizes
- sched/fair: Scale bandwidth quota and period without losing quota/period
ratio precision
- fuse: verify nlink
- fuse: verify attributes
- ALSA: pcm: oss: Avoid potential buffer overflows
- ALSA: hda - Add mute led support for HP ProBook 645 G4
- Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus
- Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash
- Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers
- Input: goodix - add upside-down quirk for Teclast X89 tablet
- coresight: etm4x: Fix input validation for sysfs.
- Input: Fix memory leak in psxpad_spi_probe
- CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks
- CIFS: Fix SMB2 oplock break processing
- tty: vt: keyboard: reject invalid keycodes
- can: slcan: Fix use-after-free Read in slcan_open
- kernfs: fix ino wrap-around detection
- jbd2: Fix possible overflow in jbd2_log_space_left()
- drm/i810: Prevent underflow in ioctl
- KVM: arm/arm64: vgic: Don't rely on the wrong pending table
- KVM: x86: do not modify masked bits of shared MSRs
- KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES
- crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr
- crypto: af_alg - cast ki_complete ternary op to int
- crypto: ccp - fix uninitialized list head
- crypto: ecdh - fix big endian bug in ECC library
- crypto: user - fix memory leak in crypto_report
- spi: atmel: Fix CS high support
- RDMA/qib: Validate ->show()/store() callbacks before calling them
- iomap: Fix pipe page leakage during splicing
- thermal: Fix deadlock in thermal thermal_zone_device_check
- binder: Handle start==NULL in binder_update_page_range()
- ASoC: rsnd: fixup MIX kctrl registration
- KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)
- appletalk: Fix potential NULL pointer dereference in unregister_snap_client
- appletalk: Set error code if register_snap_client failed
- usb: gadget: configfs: Fix missing spin_lock_init()
- usb: gadget: pch_udc: fix use after free
- scsi: qla2xxx: Fix driver unload hang
- media: venus: remove invalid compat_ioctl32 handler
- USB: uas: honor flag to avoid CAPACITY16
- USB: uas: heed CAPACITY_HEURISTICS
- USB: documentation: flags on usb-storage versus UAS
- usb: Allow USB device to be warm reset in suspended state
- staging: rtl8188eu: fix interface sanity check
- staging: rtl8712: fix interface sanity check
- staging: gigaset: fix general protection fault on probe
- staging: gigaset: fix illegal free on probe errors
- staging: gigaset: add endpoint-type sanity check
- usb: xhci: only set D3hot for pci device
- xhci: Increase STS_HALT timeout in xhci_suspend()
- xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour.
- ARM: dts: pandora-common: define wl1251 as child node of mmc3
- iio: humidity: hdc100x: fix IIO_HUMIDITYRELATIVE channel reporting
- USB: atm: ueagle-atm: add missing endpoint check
- USB: idmouse: fix interface sanity checks
- USB: serial: io_edgeport: fix epic endpoint lookup
- USB: adutux: fix interface sanity check
- usb: core: urb: fix URB structure initialization function
- usb: mon: Fix a deadlock in usbmon between mmap and read
- tpm: add check after commands attribs tab allocation
- mtd: spear_smi: Fix Write Burst mode
- virtio-balloon: fix managed page counts when migrating pages between zones
- usb: dwc3: ep0: Clear started flag on completion
- btrfs: check page->mapping when loading free space cache
- btrfs: use refcount_inc_not_zero in kill_all_nodes
- Btrfs: fix negative subv_writers counter and data space leak after buffered
write
- btrfs: Remove btrfs_bio::flags member
- Btrfs: send, skip backreference walking for extents with many references
- btrfs: record all roots for rename exchange on a subvol
- rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer
- rtlwifi: rtl8192de: Fix missing enable interrupt flag
- lib: raid6: fix awk build warnings
- ovl: relax WARN_ON() on rename to self
- ALSA: hda - Fix pending unsol events at shutdown
- watchdog: aspeed: Fix clock behaviour for ast2600
- hwrng: omap - Fix RNG wait loop timeout
- dm zoned: reduce overhead of backing device checks
- workqueue: Fix spurious sanity check failures in destroy_workqueue()
- workqueue: Fix pwq ref leak in rescuer_thread()
- ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report
- blk-mq: avoid sysfs buffer overflow with too many CPU cores
- cgroup: pids: use atomic64_t for pids->limit
- ar5523: check NULL before memcpy() in ar5523_cmd()
- s390/mm: properly clear _PAGE_NOEXEC bit when it is not supported
- media: bdisp: fix memleak on release
- media: radio: wl1273: fix interrupt masking on release
- media: cec.h: CEC_OP_REC_FLAG_ values were swapped
- cpuidle: Do not unset the driver if it is there already
- intel_th: Fix a double put_device() in error path
- intel_th: pci: Add Ice Lake CPU support
- intel_th: pci: Add Tiger Lake CPU support
- PM / devfreq: Lock devfreq in trans_stat_show
- cpufreq: powernv: fix stack bloat and hard limit on number of CPUs
- ACPI: OSL: only free map once in osl.c
- ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data()
- ACPI: PM: Avoid attaching ACPI PM domain to certain devices
- pinctrl: samsung: Add of_node_put() before return in error path
- pinctrl: samsung: Fix device node refcount leaks in S3C24xx wakeup
controller init
- pinctrl: samsung: Fix device node refcount leaks in init code
- pinctrl: samsung: Fix device node refcount leaks in S3C64xx wakeup
controller init
- mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of
pandora_wl1251_init_card
- ARM: dts: omap3-tao3530: Fix incorrect MMC card detection GPIO polarity
- ppdev: fix PPGETTIME/PPSETTIME ioctls
- powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges >4GB
- powerpc/xive: Prevent page fault issues in the machine crash handler
- powerpc: Allow flush_icache_range to work across ranges >4GB
- powerpc/xive: Skip ioremap() of ESB pages for LSI interrupts
- video/hdmi: Fix AVI bar unpack
- quota: Check that quota is not dirty before release
- ext2: check err when partial != NULL
- quota: fix livelock in dquot_writeback_dquots
- ext4: Fix credit estimate for final inode freeing
- reiserfs: fix extended attributes on the root directory
- block: fix single range discard merge
- scsi: zfcp: trace channel log even for FCP command responses
- scsi: qla2xxx: Fix DMA unmap leak
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd()
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value
- scsi: qla2xxx: Fix message indicating vectors used by driver
- xhci: Fix memory leak in xhci_add_in_port()
- xhci: make sure interrupts are restored to correct state
- iio: adis16480: Add debugfs_reg_access entry
- phy: renesas: rcar-gen3-usb2: Fix sysfs interface of "role"
- omap: pdata-quirks: remove openpandora quirks for mmc3 and wl1251
- scsi: lpfc: Cap NPIV vports to 256
- scsi: lpfc: Correct code setting non existent bits in sli4 ABORT WQE
- drbd: Change drbd_request_detach_interruptible's return type to int
- e100: Fix passing zero to 'PTR_ERR' warning in e100_load_ucode_wait
- power: supply: cpcap-battery: Fix signed counter sample register
- mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead
- ath10k: fix fw crash by moving chip reset after napi disabled
- powerpc: Avoid clang warnings around setjmp and longjmp
- powerpc: Fix vDSO clock_getres()
- ext4: work around deleting a file with i_nlink == 0 safely
- firmware: qcom: scm: Ensure 'a0' status code is treated as signed
- mm/shmem.c: cast the type of unmap_start to u64
- ext4: fix a bug in ext4_wait_for_tail_page_commit
- blk-mq: make sure that line break can be printed
- workqueue: Fix missing kfree(rescuer) in destroy_workqueue()
- sunrpc: fix crash when cache_head become valid before update
- net/mlx5e: Fix SFF 8472 eeprom length
- gfs2: fix glock reference problem in gfs2_trans_remove_revoke
- kernel/module.c: wakeup processes in module_wq on module unload
- gpiolib: acpi: Add Terra Pad 1061 to the run_edge_events_on_boot_blacklist
- raid5: need to set STRIPE_HANDLE for batch head
- of: unittest: fix memory leak in attach_node_and_children
- sparc64: implement ioremap_uc
- iwlwifi: trans: Clear persistence bit when starting the FW
- audit: Embed key into chunk
- netfilter: nf_tables: don't use position attribute on rule replacement
- ARC: IOC: panic if kernel was started with previously enabled IOC
- ARM: dts: exynos: Fix LDO13 min values on Odroid XU3/XU4/HC1
- scsi: zfcp: update kernel message for invalid FCP_CMND length, it's not the
CDB
- drivers: soc: Allow building the amlogic drivers without ARCH_MESON
- sctp: count sk_wmem_alloc by skb truesize in sctp_packet_transmit
- xfs: extent shifting doesn't fully invalidate page cache
- iomap: dio data corruption and spurious errors when pipes fill
- ravb: Clean up duplex handling
- net/ipv6: re-do dad when interface has IFF_NOARP flag change
- selftests/powerpc: Allocate base registers
- f2fs: fix to account preflush command for noflush_merge mode
- nvme: Free ctrl device name on init failure
- gpu: host1x: Fix syncpoint ID field size on Tegra186
- ARM: dts: sun4i: Fix gpio-keys warning
- ARM: dts: sun4i: Fix HDMI output DTC warning
- ARM: dts: sun7i: Fix HDMI output DTC warning
- ARM: dts: sun8i: a23/a33: Fix OPP DTC warnings
- can: xilinx: fix return type of ndo_start_xmit function
- clk: mediatek: Drop __init from mtk_clk_register_cpumuxes()
- clk: mediatek: Drop more __init markings for driver probe
- soc: renesas: r8a77970-sysc: Correct names of A2DP/A2CN power domains
- tcp: make tcp_space() aware of socket backlog
- clk: meson: meson8b: fix the offset of vid_pll_dco's N value
- media: uvcvideo: Abstract streaming object lifetime
- clk: renesas: rcar-gen3: Set state when registering SD clocks
- x86/mm/32: Sync only to VMALLOC_END in vmalloc_sync_all()
- crypto: atmel-aes - Fix IV handling when req->nbytes < ivsize
- binder: Fix race between mmap() and binder_alloc_print_pages()
- perf script: Fix invalid LBR/binary mismatch error
- splice: don't read more than available pipe space
- iomap: partially revert 4721a601099 (simulated directio short read on
EFAULT)
- xfs: add missing error check in xfs_prepare_shift()
- Btrfs: fix metadata space leak on fixup worker failure to set range as
delalloc
- btrfs: Avoid getting stuck during cyclic writebacks
- md: improve handling of bio with REQ_PREFLUSH in md_flush_request()
- pinctrl: armada-37xx: Fix irq mask access in armada_37xx_irq_set_type()
- pinctrl: samsung: Fix device node refcount leaks in Exynos wakeup controller
init
- scsi: lpfc: Correct topology type reporting on G7 adapters
- pvcalls-front: don't return error when the ring is full
- net: hns3: clear pci private data when unload hns3 driver
- net: hns3: change hnae3_register_ae_dev() to int
- net: hns3: Check variable is valid before assigning it to another
- scsi: hisi_sas: send primitive NOTIFY to SSP situation only
- scsi: hisi_sas: Reject setting programmed minimum linkrate > 1.5G
- regulator: 88pm800: fix warning same module names
- rtc: disable uie before setting time and enable after
- splice: only read in as much information as there is pipe buffer space
- s390/smp,vdso: fix ASCE handling
- PCI: rcar: Fix missing MACCTLR register setting in initialization sequence
- of: overlay: add_changeset_property() memory leak
- scsi: qla2xxx: Change discovery state before PLOGI
* Realtek ALC256M with DTS Audio Processing internal microphone doesn't work
on Redmi Book 14 2019 (LP: #1846148) // Bionic update: upstream stable
patchset 2019-12-20 (LP: #1857158)
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
* False positive test result in run_afpackettests from net in
ubuntu_kernel_selftest (LP: #1825778)
- selftests/net: correct the return value for run_afpackettests
* headphone has noise as not mute on dell machines with alc236/256
(LP: #1854401)
- SAUCE: ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236
* Bionic update: upstream stable patchset 2019-12-09 (LP: #1855787)
- Revert "KVM: nVMX: reset cache/shadows when switching loaded VMCS"
- clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate
- ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX
- ASoC: compress: fix unsigned integer overflow check
- reset: Fix memory leak in reset_control_array_put()
- ASoC: kirkwood: fix external clock probe defer
- clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume
- reset: fix reset_control_ops kerneldoc comment
- clk: at91: avoid sleeping early
- clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18
- idr: Fix idr_alloc_u32 on 32-bit systems
- x86/resctrl: Prevent NULL pointer dereference when reading mondata
- clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call
- net: fec: add missed clk_disable_unprepare in remove
- bridge: ebtables: don't crash when using dnat target in output chains
- can: peak_usb: report bus recovery as well
- can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open
- can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb
mem leak
- can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue
beyond skb_queue_len_max
- can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on
queue overflow or OOM
- can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate
error value in case of errors
- can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error
- can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error
- watchdog: meson: Fix the wrong value of left time
- scripts/gdb: fix debugging modules compiled with hot/cold partitioning
- net: bcmgenet: reapply manual settings to the PHY
- ceph: return -EINVAL if given fsc mount option on kernel w/o support
- mac80211: fix station inactive_time shortly after boot
- block: drbd: remove a stray unlock in __drbd_send_protocol()
- pwm: bcm-iproc: Prevent unloading the driver module while in use
- scsi: lpfc: Fix kernel Oops due to null pring pointers
- scsi: lpfc: Fix dif and first burst use in write commands
- ARM: dts: Fix up SQ201 flash access
- ARM: debug-imx: only define DEBUG_IMX_UART_PORT if needed
- [Config] updateconfigs for DEBUG_IMX_UART_PORT
- ARM: dts: imx53-voipac-dmm-668: Fix memory node duplication
- parisc: Fix serio address output
- parisc: Fix HP SDC hpa address output
- arm64: mm: Prevent mismatched 52-bit VA support
- arm64: smp: Handle errors reported by the firmware
- ARM: OMAP1: fix USB configuration for device-only setups
- RDMA/vmw_pvrdma: Use atomic memory allocation in create AH
- PM / AVS: SmartReflex: NULL check before some freeing functions is not
needed
- ARM: ks8695: fix section mismatch warning
- ACPI / LPSS: Ignore acpi_device_fix_up_power() return value
- scsi: lpfc: Enable Management features for IF_TYPE=6
- crypto: user - support incremental algorithm dumps
- mwifiex: fix potential NULL dereference and use after free
- mwifiex: debugfs: correct histogram spacing, formatting
- rtl818x: fix potential use after free
- xfs: require both realtime inodes to mount
- ubi: Put MTD device after it is not used
- ubi: Do not drop UBI device reference before using
- microblaze: adjust the help to the real behavior
- microblaze: move "... is ready" messages to arch/microblaze/Makefile
- iwlwifi: move iwl_nvm_check_version() into dvm
- gpiolib: Fix return value of gpio_to_desc() stub if !GPIOLIB
- kvm: vmx: Set IA32_TSC_AUX for legacy mode guests
- VSOCK: bind to random port for VMADDR_PORT_ANY
- mmc: meson-gx: make sure the descriptor is stopped on errors
- mtd: rawnand: sunxi: Write pageprog related opcodes to WCMD_SET
- btrfs: only track ref_heads in delayed_ref_updates
- HID: intel-ish-hid: fixes incorrect error handling
- serial: 8250: Rate limit serial port rx interrupts during input overruns
- kprobes/x86/xen: blacklist non-attachable xen interrupt functions
- xen/pciback: Check dev_data before using it
- vfio-mdev/samples: Use u8 instead of char for handle functions
- pinctrl: xway: fix gpio-hog related boot issues
- net/mlx5: Continue driver initialization despite debugfs failure
- exofs_mount(): fix leaks on failure exits
- bnxt_en: Return linux standard errors in bnxt_ethtool.c
- bnxt_en: query force speeds before disabling autoneg mode.
- KVM: s390: unregister debug feature on failing arch init
- pinctrl: sh-pfc: sh7264: Fix PFCR3 and PFCR0 register configuration
- pinctrl: sh-pfc: sh7734: Fix shifted values in IPSR10
- HID: doc: fix wrong data structure reference for UHID_OUTPUT
- dm flakey: Properly corrupt multi-page bios.
- gfs2: take jdata unstuff into account in do_grow
- xfs: Align compat attrlist_by_handle with native implementation.
- xfs: Fix bulkstat compat ioctls on x32 userspace.
- IB/qib: Fix an error code in qib_sdma_verbs_send()
- clocksource/drivers/fttmr010: Fix invalid interrupt register access
- vxlan: Fix error path in __vxlan_dev_create()
- powerpc/book3s/32: fix number of bats in p/v_block_mapped()
- powerpc/xmon: fix dump_segments()
- drivers/regulator: fix a missing check of return value
- Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading
- serial: max310x: Fix tx_empty() callback
- openrisc: Fix broken paths to arch/or32
- RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer
- scsi: qla2xxx: deadlock by configfs_depend_item
- scsi: csiostor: fix incorrect dma device in case of vport
- ath6kl: Only use match sets when firmware supports it
- ath6kl: Fix off by one error in scan completion
- powerpc/perf: Fix unit_sel/cache_sel checks
- powerpc/prom: fix early DEBUG messages
- powerpc/mm: Make NULL pointer deferences explicit on bad page faults.
- powerpc/44x/bamboo: Fix PCI range
- vfio/spapr_tce: Get rid of possible infinite loop
- powerpc/powernv/eeh/npu: Fix uninitialized variables in
opal_pci_eeh_freeze_status
- drbd: ignore "all zero" peer volume sizes in handshake
- drbd: reject attach of unsuitable uuids even if connected
- drbd: do not block when adjusting "disk-options" while IO is frozen
- drbd: fix print_st_err()'s prototype to match the definition
- IB/rxe: Make counters thread safe
- regulator: tps65910: fix a missing check of return value
- powerpc/83xx: handle machine check caused by watchdog timer
- powerpc/pseries: Fix node leak in update_lmb_associativity_index()
- crypto: mxc-scc - fix build warnings on ARM64
- pwm: clps711x: Fix period calculation
- net/netlink_compat: Fix a missing check of nla_parse_nested
- net/net_namespace: Check the return value of register_pernet_subsys()
- f2fs: fix to dirty inode synchronously
- um: Make GCOV depend on !KCOV
- net: (cpts) fix a missing check of clk_prepare
- net: stmicro: fix a missing check of clk_prepare
- net: dsa: bcm_sf2: Propagate error value from mdio_write
- atl1e: checking the status of atl1e_write_phy_reg
- tipc: fix a missing check of genlmsg_put
- net/wan/fsl_ucc_hdlc: Avoid double free in ucc_hdlc_probe()
- ocfs2: clear journal dirty flag after shutdown journal
- vmscan: return NODE_RECLAIM_NOSCAN in node_reclaim() when CONFIG_NUMA is n
- lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk
- lib/genalloc.c: use vzalloc_node() to allocate the bitmap
- fork: fix some -Wmissing-prototypes warnings
- drivers/base/platform.c: kmemleak ignore a known leak
- lib/genalloc.c: include vmalloc.h
- mtd: Check add_mtd_device() ret code
- tipc: fix memory leak in tipc_nl_compat_publ_dump
- net/core/neighbour: tell kmemleak about hash tables
- PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity()
- net/core/neighbour: fix kmemleak minimal reference count for hash tables
- serial: 8250: Fix serial8250 initialization crash
- gpu: ipu-v3: pre: don't trigger update if buffer address doesn't change
- sfc: suppress duplicate nvmem partition types in efx_ef10_mtd_probe
- ip_tunnel: Make none-tunnel-dst tunnel port work with lwtunnel
- decnet: fix DN_IFREQ_SIZE
- net/smc: prevent races between smc_lgr_terminate() and smc_conn_free()
- blktrace: Show requests without sector
- tipc: fix skb may be leaky in tipc_link_input
- sfc: initialise found bitmap in efx_ef10_mtd_probe
- net: fix possible overflow in __sk_mem_raise_allocated()
- sctp: don't compare hb_timer expire date before starting it
- bpf: decrease usercnt if bpf_map_new_fd() fails in bpf_map_get_fd_by_id()
- net: dev: Use unsigned integer as an argument to left-shift
- kvm: properly check debugfs dentry before using it
- bpf: drop refcount if bpf_map_new_fd() fails in map_create()
- net: hns3: Change fw error code NOT_EXEC to NOT_SUPPORTED
- apparmor: delete the dentry in aafs_remove() to avoid a leak
- scsi: libsas: Support SATA PHY connection rate unmatch fixing during
discovery
- ACPI / APEI: Don't wait to serialise with oops messages when panic()ing
- ACPI / APEI: Switch estatus pool to use vmalloc memory
- scsi: libsas: Check SMP PHY control function result
- mtd: Remove a debug trace in mtdpart.c
- mm, gup: add missing refcount overflow checks on s390
- clk: at91: fix update bit maps on CFG_MOR write
- clk: at91: generated: set audio_pll_allowed in at91_clk_register_generated()
- staging: rtl8192e: fix potential use after free
- staging: rtl8723bs: Drop ACPI device ids
- staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids
- USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P
- mei: bus: prefix device names on bus with the bus name
- media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE
- net: macb: fix error format in dev_err()
- pwm: Clear chip_data in pwm_put()
- media: atmel: atmel-isc: fix asd memory allocation
- media: atmel: atmel-isc: fix INIT_WORK misplacement
- macvlan: schedule bc_work even if error
- net: psample: fix skb_over_panic
- openvswitch: fix flow command message size
- slip: Fix use-after-free Read in slip_open
- openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info()
- openvswitch: remove another BUG_ON()
- tipc: fix link name length check
- sctp: cache netns in sctp_ep_common
- net: sched: fix `tc -s class show` no bstats on class with nolock subqueues
- ext4: add more paranoia checking in ext4_expand_extra_isize handling
- watchdog: sama5d4: fix WDD value to be always set to max
- net: macb: Fix SUBNS increment and increase resolution
- net: macb driver, check for SKBTX_HW_TSTAMP
- mtd: rawnand: atmel: Fix spelling mistake in error message
- mtd: rawnand: atmel: fix possible object reference leak
- mtd: spi-nor: cast to u64 to avoid uint overflows
- y2038: futex: Move compat implementation into futex.c
- futex: Prevent robust futex exit race
- futex: Move futex exit handling into futex code
- futex: Replace PF_EXITPIDONE with a state
- exit/exec: Seperate mm_release()
- futex: Split futex_mm_release() for exit/exec
- futex: Set task::futex_state to DEAD right after handling futex exit
- futex: Mark the begin of futex exit explicitly
- futex: Sanitize exit state handling
- futex: Provide state handling for exec() as well
- futex: Add mutex around futex exit
- futex: Provide distinct return value when owner is exiting
- futex: Prevent exit livelock
- HID: core: check whether Usage Page item is after Usage ID items
- crypto: stm32/hash - Fix hmac issue more than 256 bytes
- media: stm32-dcmi: fix DMA corruption when stopping streaming
- hwrng: stm32 - fix unbalanced pm_runtime_enable
- mailbox: mailbox-test: fix null pointer if no mmio
- pinctrl: stm32: fix memory leak issue
- ASoC: stm32: i2s: fix dma configuration
- ASoC: stm32: i2s: fix 16 bit format support
- ASoC: stm32: i2s: fix IRQ clearing
- platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer
- platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size
- net: fec: fix clock count mis-match
- clk: samsung: exynos5433: Fix error paths
- pinctrl: cherryview: Allocate IRQ chip dynamic
- ARM: dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend
- samples/bpf: fix build by setting HAVE_ATTR_TEST to zero
- idr: Fix integer overflow in idr_for_each_entry
- can: mcp251x: mcp251x_restart_work_handler(): Fix potential force_quit race
condition
- net: bcmgenet: use RGMII loopback for MAC reset
- RDMA/hns: Fix the bug while use multi-hop of pbl
- s390/zcrypt: make sysfs reset attribute trigger queue reset
- bcache: do not check if debug dentry is ERR or NULL explicitly on remove
- bcache: do not mark writeback_running too early
- microblaze: fix multiple bugs in arch/microblaze/boot/Makefile
- iwlwifi: pcie: fix erroneous print
- usb: ehci-omap: Fix deferred probe for phy handling
- btrfs: fix ncopies raid_attr for RAID56
- Btrfs: allow clear_extent_dirty() to receive a cached extent state record
- serial: sh-sci: Fix crash in rx_timer_fn() on PIO fallback
- kprobes: Blacklist symbols in arch-defined prohibited area
- kprobes/x86: Show x86-64 specific blacklisted symbols correctly
- memory: omap-gpmc: Get the header of the enum
- netfilter: nf_nat_sip: fix RTP/RTCP source port translations
- bnxt_en: Save ring statistics before reset.
- brcmfmac: Fix access point mode
- powerpc/32: Avoid unsupported flags with clang
- powerpc: Fix HMIs on big-endian with CONFIG_RELOCATABLE=y
- mm/page_alloc.c: free order-0 pages through PCP in page_frag_free()
- mm/page_alloc.c: use a single function to free page
- mm/page_alloc.c: deduplicate __memblock_free_early() and memblock_free()
- infiniband: bnxt_re: qplib: Check the return value of send_message
- infiniband/qedr: Potential null ptr dereference of qp
- firmware: arm_sdei: fix wrong of_node_put() in init function
- firmware: arm_sdei: Fix DT platform device creation
- ata: ahci: mvebu: do Armada 38x configuration only on relevant SoCs
- net/smc: don't wait for send buffer space when data was already sent
- mm/hotplug: invalid PFNs from pfn_to_online_page()
- ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI
- geneve: change NET_UDP_TUNNEL dependency to select
- mmc: core: align max segment size with logical block size
- net: hns3: fix PFC not setting problem for DCB module
- net: hns3: fix an issue for hclgevf_ae_get_hdev
- net: hns3: fix an issue for hns3_update_new_int_gl
- scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned
- RDMA/hns: Bugfix for the scene without receiver queue
- RDMA/hns: Fix the state of rereg mr
- thunderbolt: Power cycle the router if NVM authentication fails
- tcp: exit if nothing to retransmit on RTO timeout
* Bionic update: upstream stable patchset 2019-12-03 (LP: #1854975)
- net/mlx4_en: fix mlx4 ethtool -N insertion
- net: rtnetlink: prevent underflows in do_setvfinfo()
- sfc: Only cancel the PPS workqueue if it exists
- net/mlx5e: Fix set vf link state error flow
- net/mlxfw: Verify FSM error code translation doesn't exceed array size
- net/sched: act_pedit: fix WARN() in the traffic path
- vhost/vsock: split packets to send using multiple buffers
- gpio: max77620: Fixup debounce delays
- tools: gpio: Correctly add make dependencies for gpio_utils
- nbd:fix memory leak in nbd_get_socket()
- virtio_console: allocate inbufs in add_port() only if it is needed
- Revert "fs: ocfs2: fix possible null-pointer dereferences in
ocfs2_xa_prepare_entry()"
- mm/ksm.c: don't WARN if page is still mapped in remove_stable_node()
- drm/i915/userptr: Try to acquire the page lock around set_page_dirty()
- platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ
- mwifiex: Fix NL80211_TX_POWER_LIMITED
- ALSA: isight: fix leak of reference to firewire unit in error path of .probe
callback
- printk: fix integer overflow in setup_log_buf()
- gfs2: Fix marking bitmaps non-full
- pty: fix compat ioctls
- synclink_gt(): fix compat_ioctl()
- powerpc: Fix signedness bug in update_flash_db()
- powerpc/boot: Disable vector instructions
- powerpc/eeh: Fix use of EEH_PE_KEEP on wrong field
- EDAC, thunderx: Fix memory leak in thunderx_l2c_threaded_isr()
- brcmsmac: AP mode: update beacon when TIM changes
- ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem
- skd: fixup usage of legacy IO API
- cdrom: don't attempt to fiddle with cdo->capability
- spi: sh-msiof: fix deferred probing
- mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail
- btrfs: handle error of get_old_root
- gsmi: Fix bug in append_to_eventlog sysfs handler
- misc: mic: fix a DMA pool free failure
- w1: IAD Register is yet readable trough iad sys file. Fix snprintf (%u for
unsigned, count for max size).
- m68k: fix command-line parsing when passed from u-boot
- RDMA/bnxt_re: Fix qp async event reporting
- pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()'
- pwm: lpss: Only set update bit if we are actually changing the settings
- amiflop: clean up on errors during setup
- qed: Align local and global PTT to propagate through the APIs.
- scsi: ips: fix missing break in switch
- KVM: nVMX: reset cache/shadows when switching loaded VMCS
- KVM/x86: Fix invvpid and invept register operand size in 64-bit mode
- scsi: isci: Use proper enumerated type in atapi_d2h_reg_frame_handler
- scsi: isci: Change sci_controller_start_task's return type to sci_status
- scsi: iscsi_tcp: Explicitly cast param in iscsi_sw_tcp_host_get_param
- crypto: ccree - avoid implicit enum conversion
- nvmet-fcloop: suppress a compiler warning
- clk: mmp2: fix the clock id for sdh2_clk and sdh3_clk
- clk: at91: audio-pll: fix audio pmc type
- ASoC: tegra_sgtl5000: fix device_node refcounting
- scsi: dc395x: fix dma API usage in srb_done
- scsi: dc395x: fix DMA API usage in sg_update_list
- net: dsa: mv88e6xxx: Fix 88E6141/6341 2500mbps SERDES speed
- net: fix warning in af_unix
- xfs: fix use-after-free race in xfs_buf_rele
- kprobes, x86/ptrace.h: Make regs_get_kernel_stack_nth() not fault on bad
stack
- PM / Domains: Deal with multiple states but no governor in genpd
- ALSA: i2c/cs8427: Fix int to char conversion
- macintosh/windfarm_smu_sat: Fix debug output
- PCI: vmd: Detach resources after stopping root bus
- USB: misc: appledisplay: fix backlight update_status return code
- usbip: tools: fix atoi() on non-null terminated string
- dm raid: avoid bitmap with raid4/5/6 journal device
- SUNRPC: Fix a compile warning for cmpxchg64()
- sunrpc: safely reallow resvport min/max inversion
- atm: zatm: Fix empty body Clang warnings
- s390/perf: Return error when debug_register fails
- spi: omap2-mcspi: Set FIFO DMA trigger level to word length
- sparc: Fix parport build warnings.
- powerpc/pseries: Export raw per-CPU VPA data via debugfs
- ceph: fix dentry leak in ceph_readdir_prepopulate
- rtc: s35390a: Change buf's type to u8 in s35390a_init
- f2fs: fix to spread clear_cold_data()
- mISDN: Fix type of switch control variable in ctrl_teimanager
- qlcnic: fix a return in qlcnic_dcb_get_capability()
- net: ethernet: ti: cpsw: unsync mcast entries while switch promisc mode
- mfd: arizona: Correct calling of runtime_put_sync
- mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values
- mfd: intel_soc_pmic_bxtwc: Chain power button IRQs as well
- mfd: max8997: Enale irq-wakeup unconditionally
- selftests/ftrace: Fix to test kprobe $comm arg only if available
- selftests: watchdog: fix message when /dev/watchdog open fails
- selftests: watchdog: Fix error message.
- thermal: rcar_thermal: Prevent hardware access during system suspend
- bpf: devmap: fix wrong interface selection in notifier_call
- powerpc/process: Fix flush_all_to_thread for SPE
- sparc64: Rework xchg() definition to avoid warnings.
- arm64: lib: use C string functions with KASAN enabled
- fs/ocfs2/dlm/dlmdebug.c: fix a sleep-in-atomic-context bug in
dlm_print_one_mle()
- mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock
- macsec: update operstate when lower device changes
- macsec: let the administrator set UP state even if lowerdev is down
- block: fix the DISCARD request merge
- i2c: uniphier-f: make driver robust against concurrency
- i2c: uniphier-f: fix occasional timeout error
- i2c: uniphier-f: fix race condition when IRQ is cleared
- um: Make line/tty semantics use true write IRQ
- vfs: avoid problematic remapping requests into partial EOF block
- powerpc/xmon: Relax frame size for clang
- selftests/powerpc/signal: Fix out-of-tree build
- selftests/powerpc/switch_endian: Fix out-of-tree build
- selftests/powerpc/cache_shape: Fix out-of-tree build
- linux/bitmap.h: handle constant zero-size bitmaps correctly
- linux/bitmap.h: fix type of nbits in bitmap_shift_right()
- hfsplus: fix BUG on bnode parent update
- hfs: fix BUG on bnode parent update
- hfsplus: prevent btree data loss on ENOSPC
- hfs: prevent btree data loss on ENOSPC
- hfsplus: fix return value of hfsplus_get_block()
- hfs: fix return value of hfs_get_block()
- hfsplus: update timestamps on truncate()
- hfs: update timestamp on truncate()
- fs/hfs/extent.c: fix array out of bounds read of array extent
- mm/memory_hotplug: make add_memory() take the device_hotplug_lock
- igb: shorten maximum PHC timecounter update interval
- ntb_netdev: fix sleep time mismatch
- ntb: intel: fix return value for ndev_vec_mask()
- arm64: makefile fix build of .i file in external module case
- ocfs2: don't put and assigning null to bh allocated outside
- ocfs2: fix clusters leak in ocfs2_defrag_extent()
- net: do not abort bulk send on BQL status
- sched/topology: Fix off by one bug
- sched/fair: Don't increase sd->balance_interval on newidle balance
- openvswitch: fix linking without CONFIG_NF_CONNTRACK_LABELS
- clk: sunxi-ng: enable so-said LDOs for A64 SoC's pll-mipi clock
- audit: print empty EXECVE args
- btrfs: avoid link error with CONFIG_NO_AUTO_INLINE
- wil6210: fix locking in wmi_call
- wlcore: Fix the return value in case of error in
'wlcore_vendor_cmd_smart_config_start()'
- rtl8xxxu: Fix missing break in switch
- brcmsmac: never log "tid x is not agg'able" by default
- wireless: airo: potential buffer overflow in sprintf()
- rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information
- net: dsa: bcm_sf2: Turn on PHY to allow successful registration
- scsi: mpt3sas: Fix Sync cache command failure during driver unload
- scsi: mpt3sas: Don't modify EEDPTagMode field setting on SAS3.5 HBA devices
- scsi: mpt3sas: Fix driver modifying persistent data in Manufacturing page11
- scsi: megaraid_sas: Fix msleep granularity
- scsi: megaraid_sas: Fix goto labels in error handling
- scsi: lpfc: fcoe: Fix link down issue after 1000+ link bounces
- scsi: lpfc: Correct loss of fc4 type on remote port address change
- dlm: fix invalid free
- dlm: don't leak kernel pointer to userspace
- vrf: mark skb for multicast or link-local as enslaved to VRF
- ACPICA: Use %d for signed int print formatting instead of %u
- net: bcmgenet: return correct value 'ret' from bcmgenet_power_down
- of: unittest: allow base devicetree to have symbol metadata
- cfg80211: Prevent regulatory restore during STA disconnect in concurrent
interfaces
- pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues
- pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT
- pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD
- PCI: keystone: Use quirk to limit MRRS for K2G
- spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch
- i2c: uniphier-f: fix timeout error after reading 8 bytes
- mm/memory_hotplug: Do not unlock when fails to take the device_hotplug_lock
- ipv6: Fix handling of LLA with VRF and sockets bound to VRF
- cfg80211: call disconnect_wk when AP stops
- Bluetooth: Fix invalid-free in bcsp_close()
- KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved
- ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
- ath9k_hw: fix uninitialized variable data
- md/raid10: prevent access of uninitialized resync_pages offset
- mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span()
- net: phy: dp83867: fix speed 10 in sgmii mode
- net: phy: dp83867: increase SGMII autoneg timer duration
- cpufreq: Skip cpufreq resume if it's not suspended
- ocfs2: remove ocfs2_is_o2cb_active()
- ARM: 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary
- ARC: perf: Accommodate big-endian CPU
- x86/insn: Fix awk regexp warnings
- x86/speculation: Fix incorrect MDS/TAA mitigation status
- x86/speculation: Fix redundant MDS mitigation message
- nbd: prevent memory leak
- nfc: port100: handle command failure cleanly
- media: vivid: Set vid_cap_streaming and vid_out_streaming to true
- media: vivid: Fix wrong locking that causes race conditions on streaming
stop
- media: usbvision: Fix races among open, close, and disconnect
- cpufreq: Add NULL checks to show() and store() methods of cpufreq
- media: uvcvideo: Fix error path in control parsing failure
- media: b2c2-flexcop-usb: add sanity checking
- media: cxusb: detect cxusb_ctrl_msg error in query
- media: imon: invalid dereference in imon_touch_event
- virtio_ring: fix return code on DMA mapping fails
- usbip: tools: fix fd leakage in the function of read_attr_usbip_status
- usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
- usb-serial: cp201x: support Mark-10 digital force gauge
- USB: chaoskey: fix error case of a timeout
- appledisplay: fix error handling in the scheduled work
- USB: serial: mos7840: add USB ID to support Moxa UPort 2210
- USB: serial: mos7720: fix remote wakeup
- USB: serial: mos7840: fix remote wakeup
- USB: serial: option: add support for DW5821e with eSIM support
- USB: serial: option: add support for Foxconn T77W968 LTE modules
- staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
- x86/hyperv: mark hyperv_init as __init function
- mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel
- net/mlx4_en: Fix wrong limitation for number of TX rings
- net/mlx5: Fix auto group size calculation
- printk: lock/unlock console only for new logbuf entries
- powerpc/boot: Fix opal console in boot wrapper
- mmc: mediatek: fill the actual clock for mmc debugfs
- btrfs: defrag: use btrfs_mod_outstanding_extents in cluster_pages_for_defrag
- nvme-pci: fix hot removal during error handling
- PCI: mediatek: Fixup MSI enablement logic by enabling MSI before clocks
- swiotlb: do not panic on mapping failures
- powerpc/mm/radix: Fix off-by-one in split mapping logic
- powerpc/mm/radix: Fix overuse of small pages in splitting logic
- powerpc/mm/radix: Fix small page at boundary when splitting
- tools: bpftool: fix completion for "bpftool map update"
- ceph: only allow punch hole mode in fallocate
- RISC-V: Avoid corrupting the upper 32-bit of phys_addr_t in ioremap
- f2fs: spread f2fs_set_inode_flags()
- net: socionext: Stop PHY before resetting netsec
- tools/testing/selftests/vm/gup_benchmark.c: fix 'write' flag usage
- mm: thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race
condition
- ipv4/igmp: fix v1/v2 switchback timeout based on rfc3376, 8.12
- mm/gup_benchmark.c: prevent integer overflow in ioctl
- lib/bitmap.c: fix remaining space computation in bitmap_print_to_pagebuf
- kernel/panic.c: do not append newline to the stack protector panic string
- mm/memory_hotplug: fix online/offline_pages called w.o. mem_hotplug_lock
- fm10k: ensure completer aborts are marked as non-fatal after a resume
- irq/matrix: Fix memory overallocation
- nvme-pci: fix conflicting p2p resource adds
- mm: handle no memcg case in memcg_kmem_charge() properly
- ocfs2: without quota support, avoid calling quota recovery
- soc: bcm: brcmstb: Fix re-entry point with a THUMB2_KERNEL
- media: ov13858: Check for possible null pointer
- wil6210: fix debugfs memory access alignment
- scsi: lpfc: Fix odd recovery in duplicate FLOGIs in point-to-point
- usb: typec: tcpm: charge current handling for sink during hard reset
- clk: tegra20: Turn EMC clock gate into divider
- of: unittest: initialize args before calling of_*parse_*()
- tools: bpftool: pass an argument to silence open_obj_pinned()
- nvme-pci: fix surprise removal
- mm/page_io.c: do not free shared swap slots
- PM / devfreq: Fix kernel oops on governor module load
* Miscellaneous Ubuntu changes
- update dkms package versions
[ Ubuntu: 4.15.0-76.86 ]
* bionic/linux: 4.15.0-76.86 -proposed tracker (LP: #1860123)
* Integrate Intel SGX driver into linux-azure (LP: #1844245)
- [Packaging] Add systemd service to load intel_sgx
* [Regression] Bionic kernel 4.15.0-71.80 can not boot on ThunderX
(LP: #1853326) // Bionic kernel panic on Cavium ThunderX CN88XX
(LP: #1853485) // Cavium ThunderX CN88XX crashes on boot (LP: #1857074)
- arm64: Check for errata before evaluating cpu features
- arm64: add sentinel to kpti_safe_list
-- Stefan Bader <email address hidden> Mon, 03 Feb 2020 15:25:52 +0100
-
linux-aws (4.15.0-1058.60) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1058.60 -proposed tracker (LP: #1859795)
* Update EFA driver to 1.5.0 (LP: #1850195)
- SAUCE: linux/efa: Fix incorrect error print
- SAUCE: linux/efa: Fix ‘err’ may be used uninitialized in this function
warning
- SAUCE: linux/efa: Add support for CentOS 7.7
- SAUCE: linux/efa: Clear the admin command buffer prior to its submission
- SAUCE: linux/efa: Bump driver version to 1.4.1
- SAUCE: linux/efa: Store network attributes in device attributes
- SAUCE: linux/efa: Support remote read access in MR registration
- SAUCE: linux/efa: Expose RDMA read related attributes
- SAUCE: linux/efa: Add ib_uverbs as a soft dependency
- SAUCE: linux/efa: Use the ib_port_phys_state enum values
- SAUCE: linux/efa: Backport missing driver id
- SAUCE: linux/efa: Check sscanf return value
- SAUCE: linux/efa: SuSE 15.1 support
- SAUCE: linux/efa: Bump driver version to 1.5.0
* linux-aws: swapoff optimization (LP: #1858618)
- UBUNTU SAUCE [aws]: mm: swap: improve swap readahead heuristic
* ARM CPU erratum Neoverse-N1 #1542419 (LP: #1855729)
- arm64: Add support for new control bits CTR_EL0.DIC and CTR_EL0.IDC
- arm64: Add part number for Neoverse N1
- arm64: cpufeature: Trap CTR_EL0 access only where it is necessary
- arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419
- arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419
- arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space
- aws: [Config] updateconfigs for ARM64_ERRATUM_1542419
[ Ubuntu: 4.15.0-75.85 ]
* bionic/linux: 4.15.0-75.85 -proposed tracker (LP: #1859705)
* use-after-free in i915_ppgtt_close (LP: #1859522) // CVE-2020-7053
- SAUCE: drm/i915: Fix use-after-free when destroying GEM context
* CVE-2019-14615
- drm/i915/gen9: Clear residual context state on context switch
* PAN is broken for execute-only user mappings on ARMv8 (LP: #1858815)
- arm64: Revert support for execute-only user mappings
* [Regression] usb usb2-port2: Cannot enable. Maybe the USB cable is bad?
(LP: #1856608)
- SAUCE: Revert "usb: handle warm-reset port requests on hub resume"
* Miscellaneous Ubuntu changes
- update dkms package versions
[ Ubuntu: 4.15.0-74.84 ]
* bionic/linux: 4.15.0-74.84 -proposed tracker (LP: #1856749)
* [Hyper-V] KVP daemon fails to start on first boot of disco VM (LP: #1820063)
- [Packaging] bind hv_kvp_daemon startup to hv_kvp device
* Unrevert "arm64: Use firmware to detect CPUs that are not affected by
Spectre-v2" (LP: #1854207)
- arm64: Get rid of __smccc_workaround_1_hvc_*
- arm64: Use firmware to detect CPUs that are not affected by Spectre-v2
* Bionic kernel panic on Cavium ThunderX CN88XX (LP: #1853485)
- SAUCE: irqchip/gic-v3-its: Add missing return value in
its_irq_domain_activate()
-- Connor Kuehl <email address hidden> Wed, 15 Jan 2020 10:27:24 -0800
-
linux-aws (4.15.0-1057.59) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1057.59 -proposed tracker (LP: #1854802)
* Bionic update: upstream stable patchset 2019-11-21 (LP: #1853519)
- aws: [Config] CONFIG_SGL_ALLOC=y
* update ENA driver for DIMLIB dynamic interrupt moderation (LP: #1853180)
- aws: [Config] CONFIG_DIMLIB=y
[ Ubuntu: 4.15.0-73.82 ]
* bionic/linux: 4.15.0-73.82 -proposed tracker (LP: #1854819)
* CVE-2019-14901
- SAUCE: mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()
* CVE-2019-14896 // CVE-2019-14897
- SAUCE: libertas: Fix two buffer overflows at parsing bss descriptor
* CVE-2019-14895
- SAUCE: mwifiex: fix possible heap overflow in mwifiex_process_country_ie()
* CVE-2019-18660: patches for Ubuntu (LP: #1853142) // CVE-2019-18660
- powerpc/64s: support nospectre_v2 cmdline option
- powerpc/book3s64: Fix link stack flush on context switch
- KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel
* Please add patch fixing RK818 ID detection (LP: #1853192)
- SAUCE: mfd: rk808: Fix RK818 ID template
* [SRU][B/OEM-B/OEM-OSP1/D] Enable new Elan touchpads which are not in current
whitelist (LP: #1853246)
- HID: quirks: Fix keyboard + touchpad on Lenovo Miix 630
- Input: elan_i2c - export the device id whitelist
- HID: quirks: Refactor ELAN 400 and 401 handling
* Lenovo dock MAC Address pass through doesn't work in Ubuntu (LP: #1827961)
- r8152: Add macpassthru support for ThinkPad Thunderbolt 3 Dock Gen 2
* s390/dasd: reduce the default queue depth and nr of hardware queues
(LP: #1852257)
- s390/dasd: reduce the default queue depth and nr of hardware queues
* External microphone can't work on some dell machines with the codec alc256
or alc236 (LP: #1853791)
- SAUCE: ALSA: hda/realtek - Move some alc256 pintbls to fallback table
- SAUCE: ALSA: hda/realtek - Move some alc236 pintbls to fallback table
* Memory leak in net/xfrm/xfrm_state.c - 8 pages per ipsec connection
(LP: #1853197)
- xfrm: Fix memleak on xfrm state destroy
* CVE-2019-19083
- drm/amd/display: memory leak
* update ENA driver for DIMLIB dynamic interrupt moderation (LP: #1853180)
- net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it
- net: ena: switch to dim algorithm for rx adaptive interrupt moderation
- net: ena: reimplement set/get_coalesce()
- net: ena: enable the interrupt_moderation in driver_supported_features
- net: ena: remove code duplication in
ena_com_update_nonadaptive_moderation_interval _*()
- net: ena: remove old adaptive interrupt moderation code from ena_netdev
- net: ena: remove ena_restore_ethtool_params() and relevant fields
- net: ena: remove all old adaptive rx interrupt moderation code from ena_com
- net: ena: fix update of interrupt moderation register
- net: ena: fix retrieval of nonadaptive interrupt moderation intervals
- net: ena: fix incorrect update of intr_delay_resolution
- net: ena: Select DIMLIB for ENA_ETHERNET
- SAUCE: net: ena: fix issues in setting interrupt moderation params in
ethtool
- SAUCE: net: ena: fix too long default tx interrupt moderation interval
* CONFIG_ARCH_ROCKCHIP is not set in ubuntu 18.04 aarch64,arm64 (LP: #1825222)
- [Config] Enable ROCKCHIP support for arm64
* backport DIMLIB (lib/dim/) to pre-5.2 kernels (LP: #1852637)
- include/linux/bitops.h: introduce BITS_PER_TYPE
- [Config] enable DIMLIB
- linux/dim: import DIMLIB (lib/dim/)
- SAUCE: linux/dim: avoid library object filename clash
* The alsa hda driver is not loaded due to the missing of PCIID for Comet
Lake-S [8086:a3f0] (LP: #1852070)
- SAUCE: ALSA: hda: Add Cometlake-S PCI ID
* Can't adjust brightness on DELL UHD dGPU AIO (LP: #1813877)
- SAUCE: platform/x86: dell-uart-backlight: add missing status command
- SAUCE: platform/x86: dell-uart-backlight: load driver by scalar status
- SAUCE: platform/x86: dell-uart-backlight: add force parameter
- SAUCE: platform/x86: dell-uart-backlight: add quirk for old platforms
* Enable framebuffer fonts auto selection for HighDPI screen (LP: #1851623)
- fonts: Fix coding style
- fonts: Prefer a bigger font for high resolution screens
* Disable unreliable HPET on CFL-H system (LP: #1852216)
- SAUCE: x86/intel: Disable HPET on Intel Coffe Lake H platforms
* i40e: Setting VF MAC address causes General Protection Fault (LP: #1852432)
- i40e: Fix crash caused by stress setting of VF MAC addresses
* Bionic update: upstream stable patchset 2019-11-27 (LP: #1854216)
- spi: mediatek: use correct mata->xfer_len when in fifo transfer
- tee: optee: add missing of_node_put after of_device_is_available
- net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size()
- idr: Fix idr_get_next race with idr_remove
- mm/memory_hotplug: don't access uninitialized memmaps in shrink_pgdat_span()
- mm/memory_hotplug: fix updating the node span
- arm64: uaccess: Ensure PAN is re-enabled after unhandled uaccess fault
- fbdev: Ditch fb_edid_add_monspecs
- net: ovs: fix return type of ndo_start_xmit function
- net: xen-netback: fix return type of ndo_start_xmit function
- ARM: dts: dra7: Enable workaround for errata i870 in PCIe host mode
- ARM: dts: omap5: enable OTG role for DWC3 controller
- f2fs: return correct errno in f2fs_gc
- ARM: dts: sun8i: h3-h5: ir register size should be the whole memory block
- SUNRPC: Fix priority queue fairness
- IB/hfi1: Ensure ucast_dlid access doesnt exceed bounds
- kvm: arm/arm64: Fix stage2_flush_memslot for 4 level page table
- arm64/numa: Report correct memblock range for the dummy node
- ath10k: fix vdev-start timeout on error
- ata: ahci_brcm: Allow using driver or DSL SoCs
- ath9k: fix reporting calculated new FFT upper max
- usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in
fotg210_get_status()
- usb: dwc3: gadget: Check ENBLSLPM before sending ep command
- nl80211: Fix a GET_KEY reply attribute
- irqchip/irq-mvebu-icu: Fix wrong private data retrieval
- watchdog: w83627hf_wdt: Support NCT6796D, NCT6797D, NCT6798D
- KVM: PPC: Inform the userspace about TCE update failures
- dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction
- dmaengine: timb_dma: Use proper enum in td_prep_slave_sg
- ext4: fix build error when DX_DEBUG is defined
- clk: keystone: Enable TISCI clocks if K3_ARCH
- sunrpc: Fix connect metrics
- mei: samples: fix a signedness bug in amt_host_if_call()
- cxgb4: Use proper enum in cxgb4_dcb_handle_fw_update
- cxgb4: Use proper enum in IEEE_FAUX_SYNC
- powerpc/pseries: Fix DTL buffer registration
- powerpc/pseries: Fix how we iterate over the DTL entries
- powerpc/xive: Move a dereference below a NULL test
- ARM: dts: at91: sama5d4_xplained: fix addressable nand flash size
- ARM: dts: at91: at91sam9x5cm: fix addressable nand flash size
- mtd: rawnand: sh_flctl: Use proper enum for flctl_dma_fifo0_transfer
- PM / hibernate: Check the success of generating md5 digest before
hibernation
- tools: PCI: Fix compilation warnings
- clocksource/drivers/sh_cmt: Fixup for 64-bit machines
- clocksource/drivers/sh_cmt: Fix clocksource width for 32-bit machines
- md: allow metadata updates while suspending an array - fix
- ixgbe: Fix ixgbe TX hangs with XDP_TX beyond queue limit
- i40e: Use proper enum in i40e_ndo_set_vf_link_state
- ixgbe: Fix crash with VFs and flow director on interface flap
- IB/mthca: Fix error return code in __mthca_init_one()
- IB/mlx4: Avoid implicit enumerated type conversion
- ACPICA: Never run _REG on system_memory and system_IO
- powerpc/time: Use clockevents_register_device(), fixing an issue with large
decrementer
- ata: ep93xx: Use proper enums for directions
- media: rc: ir-rc6-decoder: enable toggle bit for Kathrein RCU-676 remote
- media: pxa_camera: Fix check for pdev->dev.of_node
- media: i2c: adv748x: Support probing a single output
- ALSA: hda/sigmatel - Disable automute for Elo VuPoint
- KVM: PPC: Book3S PR: Exiting split hack mode needs to fixup both PC and LR
- USB: serial: cypress_m8: fix interrupt-out transfer length
- mtd: physmap_of: Release resources on error
- cpu/SMT: State SMT is disabled even with nosmt and without "=force"
- brcmfmac: reduce timeout for action frame scan
- brcmfmac: fix full timeout waiting for action frame on-channel tx
- qtnfmac: pass sgi rate info flag to wireless core
- qtnfmac: drop error reports for out-of-bounds key indexes
- clk: samsung: exynos5420: Define CLK_SECKEY gate clock only or Exynos5420
- clk: samsung: Use clk_hw API for calling clk framework from clk notifiers
- i2c: brcmstb: Allow enabling the driver on DSL SoCs
- NFSv4.x: fix lock recovery during delegation recall
- dmaengine: ioat: fix prototype of ioat_enumerate_channels
- media: cec-gpio: select correct Signal Free Time
- Input: st1232 - set INPUT_PROP_DIRECT property
- Input: silead - try firmware reload after unsuccessful resume
- remoteproc: Check for NULL firmwares in sysfs interface
- kexec: Allocate decrypted control pages for kdump if SME is enabled
- x86/olpc: Fix build error with CONFIG_MFD_CS5535=m
- dmaengine: rcar-dmac: set scatter/gather max segment size
- crypto: mxs-dcp - Fix SHA null hashes and output length
- crypto: mxs-dcp - Fix AES issues
- xfrm: use correct size to initialise sp->ovec
- ACPI / SBS: Fix rare oops when removing modules
- iwlwifi: mvm: don't send keys when entering D3
- x86/fsgsbase/64: Fix ptrace() to read the FS/GS base accurately
- mmc: tmio: Fix SCC error detection
- fbdev: sbuslib: use checked version of put_user()
- fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper()
- reset: Fix potential use-after-free in __of_reset_control_get()
- bcache: recal cached_dev_sectors on detach
- media: dw9714: Fix error handling in probe function
- s390/kasan: avoid vdso instrumentation
- proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted()
- backlight: lm3639: Unconditionally call led_classdev_unregister
- mfd: ti_am335x_tscadc: Keep ADC interface on if child is wakeup capable
- printk: Give error on attempt to set log buffer length to over 2G
- media: isif: fix a NULL pointer dereference bug
- GFS2: Flush the GFS2 delete workqueue before stopping the kernel threads
- media: cx231xx: fix potential sign-extension overflow on large shift
- x86/kexec: Correct KEXEC_BACKUP_SRC_END off-by-one error
- gpio: syscon: Fix possible NULL ptr usage
- spi: fsl-lpspi: Prevent FIFO under/overrun by default
- pinctrl: gemini: Mask and set properly
- spi: spidev: Fix OF tree warning logic
- ARM: 8802/1: Call syscall_trace_exit even when system call skipped
- orangefs: rate limit the client not running info message
- pinctrl: gemini: Fix up TVC clock group
- hwmon: (pwm-fan) Silence error on probe deferral
- hwmon: (ina3221) Fix INA3221_CONFIG_MODE macros
- netfilter: nft_compat: do not dump private area
- misc: cxl: Fix possible null pointer dereference
- mac80211: minstrel: fix using short preamble CCK rates on HT clients
- mac80211: minstrel: fix CCK rate group streams value
- mac80211: minstrel: fix sampling/reporting of CCK rates in HT mode
- spi: rockchip: initialize dma_slave_config properly
- mlxsw: spectrum_switchdev: Check notification relevance based on upper
device
- ARM: dts: omap5: Fix dual-role mode on Super-Speed port
- tools: PCI: Fix broken pcitest compilation
- powerpc/time: Fix clockevent_decrementer initalisation for PR KVM
- mmc: tmio: fix SCC error handling to avoid false positive CRC error
- ARM: dts: sun8i: h3: bpi-m2-plus: Fix address for external RGMII Ethernet
PHY
- tcp: up initial rmem to 128KB and SYN rwin to around 64KB
- ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq
- f2fs: keep lazytime on remount
- IB/hfi1: Error path MAD response size is incorrect
- PM / devfreq: Fix devfreq_add_device() when drivers are built as modules.
- PM / devfreq: Fix handling of min/max_freq == 0
- PM / devfreq: stopping the governor before device_unregister()
- watchdog: core: fix null pointer dereference when releasing cdev
- watchdog: renesas_wdt: stop when unregistering
- watchdog: sama5d4: fix timeout-sec usage
- printk: Do not miss new messages when replaying the log
- printk: CON_PRINTBUFFER console registration is a bit racy
- ALSA: hda: Fix mismatch for register mask and value in ext controller.
- x86/PCI: Apply VMD's AERSID fixup generically
- IB/rxe: avoid srq memory leak
- RDMA/hns: Bugfix for reserved qp number
- RDMA/hns: Submit bad wr when post send wr exception
- RDMA/hns: Bugfix for CM test
- RDMA/hns: Limit the size of extend sge of sq
- rpmsg: glink: smem: Support rx peak for size less than 4 bytes
- qed: Avoid implicit enum conversion in qed_ooo_submit_tx_buffers
- clk: samsung: Use NOIRQ stage for Exynos5433 clocks suspend/resume
- printk: Correct wrong casting
- mmc: renesas_sdhi_internal_dmac: set scatter/gather max segment size
- atmel_lcdfb: support native-mode display-timings
- fbdev: fix broken menu dependencies
- bcache: account size of buckets used in uuid write to
ca->meta_sectors_written
- media: cx18: Don't check for address of video_dev
- lightnvm: pblk: fix rqd.error return value in pblk_blk_erase_sync
- scsi: arcmsr: clean up clang warning on extraneous parentheses
- hwmon: (k10temp) Support all Family 15h Model 6xh and Model 7xh processors
- tcp: start receiver buffer autotuning sooner
- ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for
hibernate
- PM / devfreq: Fix static checker warning in try_then_request_governor
- x86/resctrl: Fix rdt_find_domain() return value and checks
* Bionic update: upstream stable patchset 2019-11-25 (LP: #1853915)
- kvm: mmu: Don't read PDPTEs when paging is not enabled
- KVM: x86: introduce is_pae_paging
- MIPS: BCM63XX: fix switch core reset on BCM6368
- scsi: core: Handle drivers which set sg_tablesize to zero
- Revert "Input: synaptics-rmi4 - avoid processing unknown IRQs"
- ax88172a: fix information leak on short answers
- net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules
- slip: Fix memory leak in slip_open error path
- ALSA: usb-audio: Fix missing error check at mixer resolution test
- ALSA: usb-audio: not submit urb for stopped endpoint
- Input: ff-memless - kill timer in destroy()
- Input: synaptics-rmi4 - fix video buffer size
- Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver
- Input: synaptics-rmi4 - do not consume more data than we have (F11, F12)
- Input: synaptics-rmi4 - clear IRQ enables for F54
- Input: synaptics-rmi4 - destroy F54 poller workqueue when removing
- IB/hfi1: Ensure full Gen3 speed in a Gen4 system
- i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present
- ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable
- ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either
- iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros
- mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm()
- mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup()
- mmc: sdhci-of-at91: fix quirk2 overwrite
- iio: adc: max9611: explicitly cast gain_selectors
- tee: optee: take DT status property into account
- ath10k: fix kernel panic by moving pci flush after napi_disable
- iio: dac: mcp4922: fix error handling in mcp4922_write_raw
- arm64: dts: allwinner: a64: Olinuxino: fix DRAM voltage
- arm64: dts: allwinner: a64: NanoPi-A64: Fix DCDC1 voltage
- ALSA: pcm: signedness bug in snd_pcm_plug_alloc()
- arm64: dts: tegra210-p2180: Correct sdmmc4 vqmmc-supply
- ARM: dts: at91/trivial: Fix USART1 definition for at91sam9g45
- rtc: rv8803: fix the rv8803 id in the OF table
- remoteproc/davinci: Use %zx for formating size_t
- extcon: cht-wc: Return from default case to avoid warnings
- cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set
- ALSA: seq: Do error checks at creating system ports
- ath9k: fix tx99 with monitor mode interface
- ath10k: limit available channels via DT ieee80211-freq-limit
- gfs2: Don't set GFS2_RDF_UPTODATE when the lvb is updated
- ASoC: dpcm: Properly initialise hw->rate_max
- pinctrl: ingenic: Probe driver at subsys_initcall
- MIPS: BCM47XX: Enable USB power on Netgear WNDR3400v3
- ARM: dts: exynos: Fix sound in Snow-rev5 Chromebook
- liquidio: fix race condition in instruction completion processing
- ARM: dts: exynos: Fix regulators configuration on Peach Pi/Pit Chromebooks
- i40e: use correct length for strncpy
- i40e: hold the rtnl lock on clearing interrupt scheme
- i40e: Prevent deleting MAC address from VF when set by PF
- IB/rxe: fixes for rdma read retry
- iwlwifi: don't WARN on trying to dump dead firmware
- iwlwifi: mvm: avoid sending too many BARs
- ARM: dts: pxa: fix the rtc controller
- ARM: dts: pxa: fix power i2c base address
- rtl8187: Fix warning generated when strncpy() destination length matches the
sixe argument
- soc: imx: gpc: fix PDN delay
- ASoC: rsnd: ssi: Fix issue in dma data address assignment
- net: phy: mscc: read 'vsc8531,vddmac' as an u32
- net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32
- ARM: dts: meson8: fix the clock controller register size
- ARM: dts: meson8b: fix the clock controller register size
- net: lan78xx: Bail out if lan78xx_get_endpoints fails
- ASoC: sgtl5000: avoid division by zero if lo_vag is zero
- ARM: dts: exynos: Disable pull control for S5M8767 PMIC
- ath10k: wmi: disable softirq's while calling ieee80211_rx
- IB/ipoib: Ensure that MTU isn't less than minimum permitted
- RDMA/core: Rate limit MAD error messages
- RDMA/core: Follow correct unregister order between sysfs and cgroup
- mips: txx9: fix iounmap related issue
- ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation
- of: make PowerMac cache node search conditional on CONFIG_PPC_PMAC
- ARM: dts: omap3-gta04: give spi_lcd node a label so that we can overwrite in
other DTS files
- ARM: dts: omap3-gta04: fixes for tvout / venc
- ARM: dts: omap3-gta04: tvout: enable as display1 alias
- ARM: dts: omap3-gta04: fix touchscreen tsc2007
- ARM: dts: omap3-gta04: make NAND partitions compatible with recent U-Boot
- ARM: dts: omap3-gta04: keep vpll2 always on
- sched/debug: Use symbolic names for task state constants
- arm64: dts: rockchip: Fix VCC5V0_HOST_EN on rk3399-sapphire
- dmaengine: dma-jz4780: Don't depend on MACH_JZ4780
- dmaengine: dma-jz4780: Further residue status fix
- EDAC, sb_edac: Return early on ADDRV bit and address type test
- rtc: mt6397: fix possible race condition
- rtc: pl030: fix possible race condition
- ath9k: add back support for using active monitor interfaces for tx99
- IB/hfi1: Missing return value in error path for user sdma
- signal: Always ignore SIGKILL and SIGSTOP sent to the global init
- signal: Properly deliver SIGILL from uprobes
- signal: Properly deliver SIGSEGV from x86 uprobes
- f2fs: fix memory leak of percpu counter in fill_super()
- scsi: qla2xxx: Fix iIDMA error
- scsi: qla2xxx: Defer chip reset until target mode is enabled
- scsi: qla2xxx: Fix dropped srb resource.
- scsi: lpfc: Fix errors in log messages.
- scsi: sym53c8xx: fix NULL pointer dereference panic in sym_int_sir()
- ARM: imx6: register pm_power_off handler if "fsl,pmic-stby-poweroff" is set
- scsi: pm80xx: Corrected dma_unmap_sg() parameter
- scsi: pm80xx: Fixed system hang issue during kexec boot
- kprobes: Don't call BUG_ON() if there is a kprobe in use on free list
- Drivers: hv: vmbus: Fix synic per-cpu context initialization
- nvmem: core: return error code instead of NULL from nvmem_device_get
- media: dt-bindings: adv748x: Fix decimal unit addresses
- media: fix: media: pci: meye: validate offset to avoid arbitrary access
- media: dvb: fix compat ioctl translation
- arm64: dts: meson: libretech: update board model
- ALSA: intel8x0m: Register irq handler after register initializations
- pinctrl: at91-pio4: fix has_config check in atmel_pctl_dt_subnode_to_map()
- llc: avoid blocking in llc_sap_close()
- ARM: dts: qcom: ipq4019: fix cpu0's qcom,saw2 reg value
- soc: qcom: wcnss_ctrl: Avoid string overflow
- ARM: dts: socfpga: Fix I2C bus unit-address error
- pinctrl: at91: don't use the same irqchip with multiple gpiochips
- cxgb4: Fix endianness issue in t4_fwcache()
- blok, bfq: do not plug I/O if all queues are weight-raised
- arm64: dts: meson: Fix erroneous SPI bus warnings
- power: supply: ab8500_fg: silence uninitialized variable warnings
- power: reset: at91-poweroff: do not procede if at91_shdwc is allocated
- power: supply: max8998-charger: Fix platform data retrieval
- component: fix loop condition to call unbind() if bind() fails
- kernfs: Fix range checks in kernfs_get_target_path
- ip_gre: fix parsing gre header in ipgre_err
- ARM: dts: rockchip: Fix erroneous SPI bus dtc warnings on rk3036
- ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask
- ath9k: Fix a locking bug in ath9k_add_interface()
- s390/qeth: invoke softirqs after napi_schedule()
- PCI/ACPI: Correct error message for ASPM disabling
- serial: uartps: Fix suspend functionality
- serial: samsung: Enable baud clock for UART reset procedure in resume
- serial: mxs-auart: Fix potential infinite loop
- samples/bpf: fix a compilation failure
- spi: mediatek: Don't modify spi_transfer when transfer.
- ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address
- net: hns3: fix return type of ndo_start_xmit function
- powerpc/iommu: Avoid derefence before pointer check
- powerpc/64s/hash: Fix stab_rr off by one initialization
- powerpc/pseries: Disable CPU hotplug across migrations
- powerpc: Fix duplicate const clang warning in user access code
- RDMA/i40iw: Fix incorrect iterator type
- libfdt: Ensure INT_MAX is defined in libfdt_env.h
- power: supply: twl4030_charger: fix charging current out-of-bounds
- power: supply: twl4030_charger: disable eoc interrupt on linear charge
- net: toshiba: fix return type of ndo_start_xmit function
- net: xilinx: fix return type of ndo_start_xmit function
- net: broadcom: fix return type of ndo_start_xmit function
- net: amd: fix return type of ndo_start_xmit function
- net: sun: fix return type of ndo_start_xmit function
- nfp: provide a better warning when ring allocation fails
- usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is already
started
- usb: chipidea: Fix otg event handler
- mlxsw: spectrum: Init shaper for TCs 8..15
- ARM: dts: am335x-evm: fix number of cpsw
- f2fs: fix to recover inode's uid/gid during POR
- ARM: dts: ux500: Correct SCU unit address
- ARM: dts: ux500: Fix LCDA clock line muxing
- ARM: dts: ste: Fix SPI controller node names
- spi: pic32: Use proper enum in dmaengine_prep_slave_rg
- cpufeature: avoid warning when compiling with clang
- crypto: arm/crc32 - avoid warning when compiling with Clang
- ARM: dts: marvell: Fix SPI and I2C bus warnings
- x86/mce-inject: Reset injection struct after injection
- ARM: dts: clearfog: fix sdhci supply property name
- bnx2x: Ignore bandwidth attention in single function mode
- samples/bpf: fix compilation failure
- net: phy: mdio-bcm-unimac: Allow configuring MDIO clock divider
- net: micrel: fix return type of ndo_start_xmit function
- net: freescale: fix return type of ndo_start_xmit function
- x86/CPU: Use correct macros for Cyrix calls
- x86/CPU: Change query logic so CPUID is enabled before testing
- MIPS: kexec: Relax memory restriction
- arm64: dts: rockchip: Fix microSD in rk3399 sapphire board
- media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init()
- media: au0828: Fix incorrect error messages
- media: davinci: Fix implicit enum conversion warning
- ARM: dts: rockchip: explicitly set vcc_sd0 pin to gpio on rk3188-radxarock
- usb: gadget: uvc: configfs: Drop leaked references to config items
- usb: gadget: uvc: configfs: Prevent format changes after linking header
- i2c: aspeed: fix invalid clock parameters for very large divisors
- phy: brcm-sata: allow PHY_BRCM_SATA driver to be built for DSL SoCs
- phy: renesas: rcar-gen3-usb2: fix vbus_ctrl for role sysfs
- phy: phy-twl4030-usb: fix denied runtime access
- usb: gadget: uvc: Factor out video USB request queueing
- usb: gadget: uvc: Only halt video streaming endpoint in bulk mode
- coresight: Fix handling of sinks
- coresight: perf: Fix per cpu path management
- coresight: perf: Disable trace path upon source error
- coresight: etm4x: Configure EL2 exception level when kernel is running in
HYP
- coresight: tmc: Fix byte-address alignment for RRP
- misc: kgdbts: Fix restrict error
- misc: genwqe: should return proper error value.
- vfio/pci: Fix potential memory leak in vfio_msi_cap_len
- vfio/pci: Mask buggy SR-IOV VF INTx support
- scsi: libsas: always unregister the old device if going to discover new
- phy: lantiq: Fix compile warning
- ARM: dts: tegra30: fix xcvr-setup-use-fuses
- ARM: tegra: apalis_t30: fix mmc1 cmd pull-up
- ARM: dts: paz00: fix wakeup gpio keycode
- net: smsc: fix return type of ndo_start_xmit function
- net: faraday: fix return type of ndo_start_xmit function
- f2fs: fix to recover inode's project id during POR
- f2fs: mark inode dirty explicitly in recover_inode()
- EDAC: Raise the maximum number of memory controllers
- ARM: dts: realview: Fix SPI controller node names
- firmware: dell_rbu: Make payload memory uncachable
- Bluetooth: hci_serdev: clear HCI_UART_PROTO_READY to avoid closing proto
races
- Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS
- x86/hyperv: Suppress "PCI: Fatal: No config space access function found"
- crypto: s5p-sss: Fix Fix argument list alignment
- crypto: fix a memory leak in rsa-kcs1pad's encryption mode
- iwlwifi: dbg: don't crash if the firmware crashes in the middle of a debug
dump
- iwlwifi: api: annotate compressed BA notif array sizes
- iwlwifi: mvm: Allow TKIP for AP mode
- scsi: NCR5380: Clear all unissued commands on host reset
- scsi: NCR5380: Have NCR5380_select() return a bool
- scsi: NCR5380: Withhold disconnect privilege for REQUEST SENSE
- scsi: NCR5380: Use DRIVER_SENSE to indicate valid sense data
- scsi: NCR5380: Check for invalid reselection target
- scsi: NCR5380: Don't clear busy flag when abort fails
- scsi: NCR5380: Don't call dsprintk() following reselection interrupt
- scsi: NCR5380: Handle BUS FREE during reselection
- scsi: NCR5380: Check for bus reset
- arm64: dts: amd: Fix SPI bus warnings
- arm64: dts: lg: Fix SPI controller node names
- ARM: dts: lpc32xx: Fix SPI controller node names
- rtc: armada38x: fix possible race condition
- netfilter: masquerade: don't flush all conntracks if only one address
deleted on device
- usb: xhci-mtk: fix ISOC error when interval is zero
- fuse: use READ_ONCE on congestion_threshold and max_background
- IB/iser: Fix possible NULL deref at iser_inv_desc()
- net: phy: mdio-bcm-unimac: mark PM functions as __maybe_unused
- memfd: Use radix_tree_deref_slot_protected to avoid the warning.
- slcan: Fix memory leak in error path
- ipmr: Fix skb headroom in ipmr_get_route().
- IB/hfi1: Use a common pad buffer for 9B and 16B packets
- net: ethernet: dwmac-sun8i: Use the correct function in exit path
- mm: mempolicy: fix the wrong return value and potential pages leak of mbind
- scsi: bfa: use proper time accessor for stats_reset_time
- y2038: make do_gettimeofday() and get_seconds() inline
- ARM: dts: rcar: Correct SATA device sizes to 2 MiB
- ARM: dts: exynos: Use i2c-gpio for HDMI-DDC on Arndale
- ARM: dts: exynos: Fix HDMI-HPD line handling on Arndale
- i40evf: Validate the number of queues a PF sends
- i40evf: set IFF_UNICAST_FLT flag for the VF
- i40evf: cancel workqueue sync for adminq when a VF is removed
- IB/rxe: avoid back-to-back retries
- brcmfmac: fix wrong strnchr usage
- mtd: rawnand: fsl_ifc: check result of SRAM initialization
- mtd: rawnand: fsl_ifc: fixup SRAM init for newer ctrl versions
- rtnetlink: move type calculation out of loop
- udf: Fix crash during mount
- sched/debug: Explicitly cast sched_feat() to bool
- usb: mtu3: disable vbus rise/fall interrupts of ltssm
- dmaengine: at_xdmac: remove a stray bottom half unlock
- scsi: qla2xxx: Terminate Plogi/PRLI if WWN is 0
- scsi: qla2xxx: Fix deadlock between ATIO and HW lock
- scsi: qla2xxx: Fix port speed display on chip reset
- scsi: lpfc: Correct invalid EQ doorbell write on if_type=6
- net: aquantia: fix hw_atl_utils_fw_upload_dwords
- ALSA: hda: Fix implicit definition of pci_iomap() on SH
- net: bcmgenet: Fix speed selection for reverse MII
- arm64: dts: broadcom: Fix I2C and SPI bus warnings
- ARM: dts: bcm: Fix SPI bus warnings
- ARM: dts: aspeed: Fix I2C bus warnings
- ARM: dts: sunxi: Fix I2C bus warnings
- ARM: dts: sun9i: Fix I2C bus warnings
- arm64: fix for bad_mode() handler to always result in panic
- netfilter: nf_tables: avoid BUG_ON usage
- media: vsp1: Fix YCbCr planar formats pitch calculation
- PCI: mediatek: Fix unchecked return value
- ARM: dts: xilinx: Fix I2C and SPI bus warnings
- ipmi_si_pci: fix NULL device in ipmi_si error message
- ipmi_si: fix potential integer overflow on large shift
- net: cavium: fix return type of ndo_start_xmit function
- net: ibm: fix return type of ndo_start_xmit function
- selftests/powerpc: Do not fail with reschedule
- usb: usbtmc: Fix ioctl USBTMC_IOCTL_ABORT_BULK_OUT
- s390/zcrypt: enable AP bus scan without a valid default domain
- s390/vdso: avoid 64-bit vdso mapping for compat tasks
- brcmsmac: allocate ucode with GFP_KERNEL
- brcmsmac: Use kvmalloc() for ucode allocations
- EDAC: Correct DIMM capacity unit symbol
- gpiolib: Fix gpio_direction_* for single direction GPIOs
- arm64: dts: fsl: Fix I2C and SPI bus warnings
- ARM: dts: imx51-zii-rdu1: Fix the rtc compatible string
- f2fs: update i_size after DIO completion
- RDMA: Fix dependencies for rdma_user_mmap_io
- crypto: s5p-sss: Fix race in error handling
- iwlwifi: pcie: gen2: build A-MSDU only for GSO
- iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN
- usb: usbtmc: uninitialized symbol 'actual' in usbtmc_ioctl_clear
- s390/vdso: correct vdso mapping for compat tasks
* Bionic update: upstream stable patchset 2019-11-21 (LP: #1853519)
- bonding: fix state transition issue in link monitoring
- CDC-NCM: handle incomplete transfer of MTU
- ipv4: Fix table id reference in fib_sync_down_addr
- net: ethernet: octeon_mgmt: Account for second possible VLAN header
- net: fix data-race in neigh_event_send()
- net: qualcomm: rmnet: Fix potential UAF when unregistering
- net: usb: qmi_wwan: add support for DW5821e with eSIM support
- NFC: fdp: fix incorrect free object
- nfc: netlink: fix double device reference drop
- NFC: st21nfca: fix double free
- qede: fix NULL pointer deref in __qede_remove()
- ALSA: timer: Fix incorrectly assigned timer instance
- ALSA: bebob: fix to detect configured source of sampling clock for Focusrite
Saffire Pro i/o series
- ALSA: hda/ca0132 - Fix possible workqueue stall
- mm: thp: handle page cache THP correctly in PageTransCompoundMap
- mm, vmstat: hide /proc/pagetypeinfo from normal users
- dump_stack: avoid the livelock of the dump_lock
- tools: gpio: Use !building_out_of_srctree to determine srctree
- perf tools: Fix time sorting
- drm/radeon: fix si_enable_smc_cac() failed issue
- HID: wacom: generic: Treat serial number and related fields as unsigned
- arm64: Do not mask out PTE_RDONLY in pte_same()
- ceph: fix use-after-free in __ceph_remove_cap()
- ceph: add missing check in d_revalidate snapdir handling
- iio: adc: stm32-adc: fix stopping dma
- iio: imu: adis16480: make sure provided frequency is positive
- iio: srf04: fix wrong limitation in distance measuring
- netfilter: nf_tables: Align nft_expr private data to 64-bit
- netfilter: ipset: Fix an error code in ip_set_sockfn_get()
- intel_th: pci: Add Comet Lake PCH support
- intel_th: pci: Add Jasper Lake PCH support
- can: usb_8dev: fix use-after-free on disconnect
- can: c_can: c_can_poll(): only read status register after status IRQ
- can: peak_usb: fix a potential out-of-sync while decoding packets
- can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid
skb mem leak
- can: gs_usb: gs_can_open(): prevent memory leak
- can: mcba_usb: fix use-after-free on disconnect
- can: peak_usb: fix slab info leak
- configfs: stash the data we need into configfs_buffer at open time
- configfs_register_group() shouldn't be (and isn't) called in rmdirable parts
- configfs: new object reprsenting tree fragments
- configfs: provide exclusion between IO and removals
- configfs: fix a deadlock in configfs_symlink()
- usb: dwc3: Allow disabling of metastability workaround
- mfd: palmas: Assign the right powerhold mask for tps65917
- ASoC: tlv320aic31xx: Handle inverted BCLK in non-DSP modes
- ARM: dts: dra7: Disable USB metastability workaround for USB2
- [Config] updateconfigs for SGL_ALLOC
- lib/scatterlist: Introduce sgl_alloc() and sgl_free()
- usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path
- usbip: Implement SG support to vhci-hcd and stub driver
- PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30
- dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config
- HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring()
- RDMA/qedr: Fix reported firmware version
- net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq
- scsi: qla2xxx: fixup incorrect usage of host_byte
- RDMA/uverbs: Prevent potential underflow
- net: openvswitch: free vport unless register_netdevice() succeeds
- scsi: lpfc: Honor module parameter lpfc_use_adisc
- scsi: qla2xxx: Initialized mailbox to prevent driver load failure
- ipvs: don't ignore errors in case refcounting ip_vs module fails
- ipvs: move old_secure_tcp into struct netns_ipvs
- bonding: fix unexpected IFF_BONDING bit unset
- macsec: fix refcnt leak in module exit routine
- usb: fsl: Check memory resource before releasing it
- usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode.
- usb: gadget: composite: Fix possible double free memory bug
- usb: gadget: configfs: fix concurrent issue between composite APIs
- usb: dwc3: remove the call trace of USBx_GFLADJ
- perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise
RIP validity
- perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h)
- USB: Skip endpoints with 0 maxpacket length
- USB: ldusb: use unsigned size format specifiers
- RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case
- scsi: qla2xxx: stop timer in shutdown path
- fjes: Handle workqueue allocation failure
- net: hisilicon: Fix "Trying to free already-free IRQ"
- hv_netvsc: Fix error handling in netvsc_attach()
- NFSv4: Don't allow a cached open with a revoked delegation
- net: ethernet: arc: add the missed clk_disable_unprepare
- igb: Fix constant media auto sense switching when no cable is connected
- e1000: fix memory leaks
- x86/apic: Move pending interrupt check code into it's own function
- x86/apic: Drop logical_smp_processor_id() inline
- x86/apic/32: Avoid bogus LDR warnings
- can: flexcan: disable completely the ECC mechanism
- mm/filemap.c: don't initiate writeback if mapping has no dirty pages
- cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is
dead
- usbip: Fix free of unallocated memory in vhci tx
- net: prevent load/store tearing on sk->sk_stamp
- x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs
- x86/cpu: Add Tremont to the cpu vulnerability whitelist
- Documentation: Add ITLB_MULTIHIT documentation
- net: hns: Fix the stray netpoll locks causing deadlock in NAPI path
- mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges
- mm, meminit: recalculate pcpu batch and high limits after init completes
- SMB3: Fix persistent handles reconnect
- dmaengine: sprd: Fix the possible memory leak issue
- iw_cxgb4: fix ECN check on the passive accept
- perf/x86/uncore: Fix event group support
- usbip: tools: Fix read_usb_vudc_device() error path handling
- RDMA/hns: Prevent memory leaks of eq->buf_list
- drm/amdgpu: If amdgpu_ib_schedule fails return back the error.
- drm/amd/display: Passive DP->HDMI dongle detection fix
- pinctrl: intel: Initialize GPIO properly when used through irqchip
- pinctrl: intel: Avoid potential glitches if pin is in GPIO mode
- pinctrl: cherryview: Fix irq_valid_mask calculation
- netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets
- vsock/virtio: fix sock refcnt holding during the shutdown
* Bionic update: upstream stable patchset 2019-11-19 (LP: #1853208)
- arm64: dts: Fix gpio to pinmux mapping
- regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone
- regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe()
could be uninitialized
- ASoC: wm_adsp: Don't generate kcontrols without READ flags
- ASoc: rockchip: i2s: Fix RPM imbalance
- ARM: dts: logicpd-torpedo-som: Remove twl_keypad
- pinctrl: ns2: Fix off by one bugs in ns2_pinmux_enable()
- ARM: mm: fix alignment handler faults under memory pressure
- scsi: scsi_dh_alua: handle RTPG sense code correctly during state
transitions
- scsi: sni_53c710: fix compilation error
- scsi: fix kconfig dependency warning related to 53C700_LE_ON_BE
- ARM: dts: imx7s: Correct GPT's ipg clock source
- perf c2c: Fix memory leak in build_cl_output()
- perf kmem: Fix memory leak in compact_gfp_flags()
- ARM: davinci: dm365: Fix McBSP dma_slave_map entry
- scsi: target: core: Do not overwrite CDB byte 1
- ARM: 8926/1: v7m: remove register save to stack before svc
- of: unittest: fix memory leak in unittest_data_add
- MIPS: bmips: mark exception vectors as char arrays
- i2c: stm32f7: remove warning when compiling with W=1
- cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs
- nbd: handle racing with error'ed out commands
- cxgb4: fix panic when attaching to ULD fail
- dccp: do not leak jiffies on the wire
- net: annotate accesses to sk->sk_incoming_cpu
- net: annotate lockless accesses to sk->sk_napi_id
- net: dsa: bcm_sf2: Fix IMP setup for port different than 8
- net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum
- net: fix sk_page_frag() recursion from memory reclaim
- net: hisilicon: Fix ping latency when deal with high throughput
- net/mlx4_core: Dynamically set guaranteed amount of counters per VF
- selftests: net: reuseport_dualstack: fix uninitalized parameter
- udp: fix data-race in udp_set_dev_scratch()
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
- net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget
- net: dsa: b53: Do not clear existing mirrored port mask
- net: usb: lan78xx: Connect PHY before registering MAC
- r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2
- net: dsa: fix switch tree list
- net: bcmgenet: reset 40nm EPHY on energy detect
- net: add skb_queue_empty_lockless()
- udp: use skb_queue_empty_lockless()
- net: use skb_queue_empty_lockless() in poll() handlers
- net: use skb_queue_empty_lockless() in busy poll contexts
- vxlan: check tun_info options_len properly
- erspan: fix the tun_info options_len check for erspan
- inet: stop leaking jiffies on the wire
- net/flow_dissector: switch to siphash
- kbuild: use -fmacro-prefix-map to make __FILE__ a relative path
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI
table
- iio: adc: stm32-adc: move registers definitions
- powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions
- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
- selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue
- selftests/powerpc: Fix compile error on tlbie_test due to newer gcc
- arm64: dts: allwinner: a64: pine64-plus: Add PHY regulator delay
- arm64: dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay
- scsi: qla2xxx: fix a potential NULL pointer dereference
- irqchip/gic-v3-its: Use the exact ITSList for VMOVP
- netns: fix GFP flags in rtnl_net_notifyid()
- net: usb: lan78xx: Disable interrupts before calling generic_handle_irq()
- wireless: Skip directory when generating certificates
- ASoC: pcm3168a: The codec does not support S32_LE
- usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending
driver fails
-- Paolo Pisati <email address hidden> Tue, 03 Dec 2019 14:14:15 +0100
-
linux-aws (4.15.0-1056.58) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1056.58 -proposed tracker (LP: #1854029)
[ Ubuntu: 4.15.0-72.81 ]
* bionic/linux: 4.15.0-72.81 -proposed tracker (LP: #1854027)
* [Regression] Bionic kernel 4.15.0-71.80 can not boot on ThunderX
(LP: #1853326)
- Revert "arm64: Use firmware to detect CPUs that are not affected by
Spectre-v2"
- Revert "arm64: Get rid of __smccc_workaround_1_hvc_*"
* [Regression] Bionic kernel 4.15.0-71.80 can not boot on ThunderX2 and
Kunpeng920 (LP: #1852723)
- SAUCE: arm64: capabilities: Move setup_boot_cpu_capabilities() call to
correct place
linux-aws (4.15.0-1055.57) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1055.57 -proposed tracker (LP: #1852270)
* Bionic update: upstream stable patchset 2019-10-29 (LP: #1850541)
- [Config] aws: updateconfigs for USB_RIO500
* ARM CPU support update (LP: #1850675)
- irqchip/gic-v3-its: Refactor LPI allocator
- irqchip/gic-v3-its: Use full range of LPIs
- irqchip/gic-v3-its: Move minimum LPI requirements to individual busses
- irqchip/gic-v3-its: Drop chunk allocation compatibility
- irqchip/gic-v3: Expose GICD_TYPER in the rdist structure
- irqchip/gic-v3-its: Honor hypervisor enforced LPI range
- irqchip/gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices
- irqchip/gic-v3: Allow LPIs to be disabled from the command line
- irqchip/gic-v3: Ensure GICR_CTLR.EnableLPI=0 is observed before enabling
- irqchip/gic-v3-its: Cap lpi_id_bits to reduce memory footprint
- irqchip/gic-v3-its: Change initialization ordering for LPIs
- irqchip/gic-v3-its: Simplify LPI_PENDBASE_SZ usage
- irqchip/gic-v3-its: Split property table clearing from allocation
- irqchip/gic-v3-its: Move pending table allocation to init time
- irqchip/gic-v3-its: Keep track of property table's PA and VA
- irqchip/gic-v3-its: Allow use of pre-programmed LPI tables
- irqchip/gic-v3-its: Use pre-programmed redistributor tables with kdump
kernels
- irqchip/gic-v3-its: Check that all RDs have the same property table
- efi: honour memory reservations passed via a linux specific config table
- efi: add API to reserve memory persistently across kexec reboot
- irqchip/gic-v3-its: Register LPI tables with EFI config table
- irqchip/gic-v3-its: Allow use of LPI tables in reserved memory
- arm64: kill config_sctlr_el1()
- arm64: Fix silly typo in comment
- KVM: arm64: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe
- arm64: cpu: Move errata and feature enable callbacks closer to callers
- arm64/cpufeature: Convert hook_lock to raw_spin_lock_t in cpu_enable_ssbs()
- efi/arm: libstub: add a root memreserve config table
- efi: Permit calling efi_mem_reserve_persistent() from atomic context
- efi: Prevent GICv3 WARN() by mapping the memreserve table before first use
- efi: Permit multiple entries in persistent memreserve data structure
- arm64: Avoid flush_icache_range() in alternatives patching code
[ Ubuntu: 4.15.0-71.80 ]
* bionic/linux: 4.15.0-71.80 -proposed tracker (LP: #1852289)
* Bionic update: upstream stable patchset 2019-10-29 (LP: #1850541)
- panic: ensure preemption is disabled during panic()
- f2fs: use EINVAL for superblock with invalid magic
- [Config] updateconfigs for USB_RIO500
- USB: rio500: Remove Rio 500 kernel driver
- USB: yurex: Don't retry on unexpected errors
- USB: yurex: fix NULL-derefs on disconnect
- USB: usb-skeleton: fix runtime PM after driver unbind
- USB: usb-skeleton: fix NULL-deref on disconnect
- xhci: Fix false warning message about wrong bounce buffer write length
- xhci: Prevent device initiated U1/U2 link pm if exit latency is too long
- xhci: Check all endpoints for LPM timeout
- usb: xhci: wait for CNR controller not ready bit in xhci resume
- USB: adutux: fix use-after-free on disconnect
- USB: adutux: fix NULL-derefs on disconnect
- USB: adutux: fix use-after-free on release
- USB: iowarrior: fix use-after-free on disconnect
- USB: iowarrior: fix use-after-free on release
- USB: iowarrior: fix use-after-free after driver unbind
- USB: usblp: fix runtime PM after driver unbind
- USB: chaoskey: fix use-after-free on release
- USB: ldusb: fix NULL-derefs on driver unbind
- serial: uartlite: fix exit path null pointer
- USB: serial: keyspan: fix NULL-derefs on open() and write()
- USB: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20
- USB: serial: option: add Telit FN980 compositions
- USB: serial: option: add support for Cinterion CLS8 devices
- USB: serial: fix runtime PM after driver unbind
- USB: usblcd: fix I/O after disconnect
- USB: microtek: fix info-leak at probe
- USB: dummy-hcd: fix power budget for SuperSpeed mode
- usb: renesas_usbhs: gadget: Do not discard queues in
usb_ep_set_{halt,wedge}()
- usb: renesas_usbhs: gadget: Fix usb_ep_set_{halt,wedge}() behavior
- USB: legousbtower: fix slab info leak at probe
- USB: legousbtower: fix deadlock on disconnect
- USB: legousbtower: fix potential NULL-deref on disconnect
- USB: legousbtower: fix open after failed reset request
- USB: legousbtower: fix use-after-free on release
- staging: vt6655: Fix memory leak in vt6655_probe
- iio: adc: ad799x: fix probe error handling
- iio: adc: axp288: Override TS pin bias current for some models
- iio: light: opt3001: fix mutex unlock race
- efivar/ssdt: Don't iterate over EFI vars if no SSDT override was specified
- perf llvm: Don't access out-of-scope array
- perf inject jit: Fix JIT_CODE_MOVE filename
- CIFS: Gracefully handle QueryInfo errors during open
- CIFS: Force revalidate inode when dentry is stale
- CIFS: Force reval dentry if LOOKUP_REVAL flag is set
- kernel/sysctl.c: do not override max_threads provided by userspace
- firmware: google: increment VPD key_len properly
- gpiolib: don't clear FLAG_IS_OUT when emulating open-drain/open-source
- Staging: fbtft: fix memory leak in fbtft_framebuffer_alloc
- iio: hx711: add delay until DOUT is ready
- iio: adc: hx711: fix bug in sampling of data
- btrfs: fix incorrect updating of log root tree
- NFS: Fix O_DIRECT accounting of number of bytes read/written
- MIPS: Disable Loongson MMI instructions for kernel build
- Fix the locking in dcache_readdir() and friends
- media: stkwebcam: fix runtime PM after driver unbind
- tracing/hwlat: Report total time spent in all NMIs during the sample
- tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency
- ftrace: Get a reference counter for the trace_array on filter files
- tracing: Get trace_array reference for available_tracers files
- x86/asm: Fix MWAITX C-state hint value
- iio: adc: stm32-adc: fix a race when using several adcs with dma and irq
- cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic
- btrfs: fix uninitialized ret in ref-verify
- arm64/sve: Fix wrong free for task->thread.sve_state
- [Config] updateconfigs for USB_RIO500
* Bionic update: upstream stable patchset 2019-11-13 (LP: #1852492)
- zram: fix race between backing_dev_show and backing_dev_store
- dm snapshot: use mutex instead of rw_semaphore
- dm snapshot: introduce account_start_copy() and account_end_copy()
- dm snapshot: rework COW throttling to fix deadlock
- dm: Use kzalloc for all structs with embedded biosets/mempools
- f2fs: flush quota blocks after turnning it off
- scsi: lpfc: Fix a duplicate 0711 log message number.
- sc16is7xx: Fix for "Unexpected interrupt: 8"
- powerpc/powernv: hold device_hotplug_lock when calling
memtrace_offline_pages()
- HID: i2c-hid: add Direkt-Tek DTLAPY133-1 to descriptor override
- x86/cpu: Add Atom Tremont (Jacobsville)
- HID: i2c-hid: Add Odys Winbook 13 to descriptor override
- clk: boston: unregister clks on failure in clk_boston_setup()
- scripts/setlocalversion: Improve -dirty check with git-status --no-optional-
locks
- HID: Add ASUS T100CHI keyboard dock battery quirks
- usb: handle warm-reset port requests on hub resume
- rtc: pcf8523: set xtal load capacitance from DT
- mlxsw: spectrum: Set LAG port collector only when active
- ALSA: hda/realtek - Apply ALC294 hp init also for S4 resume
- media: vimc: Remove unused but set variables
- exec: load_script: Do not exec truncated interpreter path
- PCI/PME: Fix possible use-after-free on remove
- power: supply: max14656: fix potential use-after-free
- iio: adc: meson_saradc: Fix memory allocation order
- iio: fix center temperature of bmc150-accel-core
- libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature
- perf tests: Avoid raising SEGV using an obvious NULL dereference
- perf map: Fix overlapped map handling
- perf jevents: Fix period for Intel fixed counters
- staging: rtl8188eu: fix null dereference when kzalloc fails
- RDMA/hfi1: Prevent memory leak in sdma_init
- RDMA/iwcm: Fix a lock inversion issue
- HID: hyperv: Use in-place iterator API in the channel callback
- nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request
- arm64: ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 #1542419
- tty: serial: owl: Fix the link time qualifier of 'owl_uart_exit()'
- tty: n_hdlc: fix build on SPARC
- gpio: max77620: Use correct unit for debounce times
- fs: cifs: mute -Wunused-const-variable message
- serial: mctrl_gpio: Check for NULL pointer
- efi/cper: Fix endianness of PCIe class code
- efi/x86: Do not clean dummy variable in kexec path
- MIPS: include: Mark __cmpxchg as __always_inline
- x86/xen: Return from panic notifier
- ocfs2: clear zero in unaligned direct IO
- fs: ocfs2: fix possible null-pointer dereferences in
ocfs2_xa_prepare_entry()
- fs: ocfs2: fix a possible null-pointer dereference in
ocfs2_write_end_nolock()
- fs: ocfs2: fix a possible null-pointer dereference in
ocfs2_info_scan_inode_alloc()
- sched/vtime: Fix guest/system mis-accounting on task switch
- perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp
- MIPS: include: Mark __xchg as __always_inline
- MIPS: fw: sni: Fix out of bounds init of o32 stack
- nbd: fix possible sysfs duplicate warning
- NFSv4: Fix leak of clp->cl_acceptor string
- s390/uaccess: avoid (false positive) compiler warnings
- tracing: Initialize iter->seq after zeroing in tracing_read_pipe()
- nbd: verify socket is supported during setup
- USB: legousbtower: fix a signedness bug in tower_probe()
- thunderbolt: Use 32-bit writes when writing ring producer/consumer
- fuse: flush dirty data/metadata before non-truncate setattr
- fuse: truncate pending writes on O_TRUNC
- ALSA: bebob: Fix prototype of helper function to return negative value
- UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather
segments")
- USB: gadget: Reject endpoints with 0 maxpacket value
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
virt_boundary_mask to avoid SG overflows")
- USB: ldusb: fix ring-buffer locking
- USB: ldusb: fix control-message timeout
- USB: serial: whiteheat: fix potential slab corruption
- USB: serial: whiteheat: fix line-speed endianness
- scsi: target: cxgbit: Fix cxgbit_fw4_ack()
- HID: i2c-hid: add Trekstor Primebook C11B to descriptor override
- HID: Fix assumption that devices have inputs
- HID: fix error message in hid_open_report()
- nl80211: fix validation of mesh path nexthop
- s390/cmm: fix information leak in cmm_timeout_handler()
- s390/idle: fix cpu idle time calculation
- arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default
- dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle
- llc: fix sk_buff leak in llc_sap_state_process()
- llc: fix sk_buff leak in llc_conn_service()
- rxrpc: Fix call ref leak
- NFC: pn533: fix use-after-free and memleaks
- bonding: fix potential NULL deref in bond_update_slave_arr
- net: usb: sr9800: fix uninitialized local variable
- sch_netem: fix rcu splat in netem_enqueue()
- sctp: fix the issue that flags are ignored when using kernel_connect
- sctp: not bind the socket in sctp_connect
- xfs: Correctly invert xfs_buftarg LRU isolation logic
- ALSA: timer: Simplify error path in snd_timer_open()
- ALSA: timer: Fix mutex deadlock at releasing card
- Revert "ALSA: hda: Flush interrupts on disabling"
- Btrfs: fix inode cache block reserve leak on failure to allocate data space
- Btrfs: fix memory leak due to concurrent append writes with fiemap
- tools/power turbostat: fix goldmont C-state limit decoding
- bcache: fix input overflow to writeback_rate_minimum
- netfilter: ipset: Make invalid MAC address checks consistent
- platform/x86: Add the VLV ISP PCI ID to atomisp2_pm
- platform/x86: Fix config space access for intel_atomisp2_pm
- NFSv4: Ensure that the state manager exits the loop on SIGKILL
- ALSA: usb-audio: Cleanup DSD whitelist
- arm64: Add MIDR encoding for HiSilicon Taishan CPUs
- arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs
- scsi: lpfc: Correct localport timeout duration error
- ext4: disallow files with EXT4_JOURNAL_DATA_FL from EXT4_IOC_SWAP_BOOT
- net: dsa: mv88e6xxx: Release lock while requesting IRQ
- drm/amd/display: fix odm combine pipe reset
- perf script brstackinsn: Fix recovery from LBR/binary mismatch
- perf tools: Propagate get_cpuid() error
- perf annotate: Propagate perf_env__arch() error
- perf annotate: Fix the signedness of failure returns
- arm64: armv8_deprecated: Checking return value for memory allocation
- x86/cpu: Add Comet Lake to the Intel CPU models header
- iio: imu: adis16400: release allocated memory on failure
- usb: xhci: fix __le32/__le64 accessors in debugfs code
- dmaengine: qcom: bam_dma: Fix resource leak
- NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid()
- batman-adv: Avoid free/alloc race when handling OGM buffer
- powerpc/powernv: Fix CPU idle to be called with IRQs disabled
* Dell XPS 13 9350/9360 headphone audio hiss (LP: #1654448) // [XPS 13 9360,
Realtek ALC3246, Black Headphone Out, Front] High noise floor
(LP: #1845810) // Bionic update: upstream stable patchset 2019-11-13
(LP: #1852492)
- ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360
* Add GeminiLake support on Intel int340x thermal device (LP: #1851506)
- thermal: int340x: processor_thermal: Add GeminiLake support
* System hangs at early boot (LP: #1851216)
- x86/timer: Skip PIT initialization on modern chipsets
* Some EFI systems fail to boot in efi_init() when booted via maas
(LP: #1851810)
- efi: efi_get_memory_map -- increase map headroom
* dkms artifacts may expire from the pool (LP: #1850958)
- [Packaging] dkms -- try launchpad librarian for pool downloads
- [Packaging] dkms -- dkms-build quieten wget verbiage
* update ENA driver to version 2.1.0 (LP: #1850175)
- net: ena: fix: set freed objects to NULL to avoid failing future allocations
- net: ena: fix swapped parameters when calling
ena_com_indirect_table_fill_entry
- net: ena: fix: Free napi resources when ena_up() fails
- net: ena: fix incorrect test of supported hash function
- net: ena: fix return value of ena_com_config_llq_info()
- net: ena: improve latency by disabling adaptive interrupt moderation by
default
- net: ena: fix ena_com_fill_hash_function() implementation
- net: ena: add handling of llq max tx burst size
- net: ena: ethtool: add extra properties retrieval via get_priv_flags
- net: ena: replace free_tx/rx_ids union with single free_ids field in
ena_ring
- net: ena: arrange ena_probe() function variables in reverse christmas tree
- net: ena: add newline at the end of pr_err prints
- net: ena: documentation: update ena.txt
- net: ena: allow automatic fallback to polling mode
- net: ena: add support for changing max_header_size in LLQ mode
- net: ena: optimise calculations for CQ doorbell
- net: ena: add good checksum counter
- net: ena: use dev_info_once instead of static variable
- net: ena: add MAX_QUEUES_EXT get feature admin command
- net: ena: enable negotiating larger Rx ring size
- net: ena: make ethtool show correct current and max queue sizes
- net: ena: allow queue allocation backoff when low on memory
- net: ena: add ethtool function for changing io queue sizes
- net: ena: remove inline keyword from functions in *.c
- net: ena: update driver version from 2.0.3 to 2.1.0
- net: ena: Fix bug where ring allocation backoff stopped too late
- Revert "net: ena: ethtool: add extra properties retrieval via
get_priv_flags"
- net: ena: don't wake up tx queue when down
- net: ena: clean up indentation issue
* Skip frame when buffer overflow on UVC camera (LP: #1849871)
- media: uvcvideo: Mark buffer error where overflow
* Handle the skip return code in kernel_selftests on Bionic (LP: #1812352)
- selftests: lib.mk set KSFT_TAP_LEVEL to prevent nested TAP headers
- selftests: Fix lib.mk run_tests target shell script
- selftests: lib.mk: cleanup RUN_TESTS define and make it readable
- selftests: lib.mk: add SKIP handling to RUN_TESTS define
* Intel Wireless AC 3168 on Eoan complaints FW error in SYNC CMD
GEO_TX_POWER_LIMIT (LP: #1846016)
- iwlwifi: exclude GEO SAR support for 3168
* tsc marked unstable after entered PC10 on Intel CoffeeLake (LP: #1840239)
- SAUCE: x86/intel: Disable HPET on Intel Coffe Lake platforms
- SAUCE: x86/intel: Disable HPET on Intel Ice Lake platforms
* Bionic update: upstream stable patchset 2019-11-08 (LP: #1851876)
- scsi: ufs: skip shutdown if hba is not powered
- scsi: megaraid: disable device when probe failed after enabled device
- scsi: qla2xxx: Fix unbound sleep in fcport delete path.
- ARM: OMAP2+: Fix missing reset done flag for am3 and am43
- ieee802154: ca8210: prevent memory leak
- ARM: dts: am4372: Set memory bandwidth limit for DISPC
- net: dsa: qca8k: Use up to 7 ports for all operations
- MIPS: dts: ar9331: fix interrupt-controller size
- xen/efi: Set nonblocking callbacks
- nl80211: fix null pointer dereference
- mac80211: fix txq null pointer dereference
- mips: Loongson: Fix the link time qualifier of 'serial_exit()'
- net: hisilicon: Fix usage of uninitialized variable in function
mdio_sc_cfg_reg_write()
- namespace: fix namespace.pl script to support relative paths
- Revert "drm/radeon: Fix EEH during kexec"
- ocfs2: fix panic due to ocfs2_wq is null
- ipv4: Return -ENETUNREACH if we can't create route but saddr is valid
- net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3
- net: bcmgenet: Set phydev->dev_flags only for internal PHYs
- net: i82596: fix dma_alloc_attr for sni_82596
- net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow
- sctp: change sctp_prot .no_autobind with true
- net: avoid potential infinite loop in tc_ctl_action()
- memfd: Fix locking when tagging pins
- USB: legousbtower: fix memleak on disconnect
- ALSA: hda/realtek - Add support for ALC711
- usb: udc: lpc32xx: fix bad bit shift operation
- USB: serial: ti_usb_3410_5052: fix port-close races
- USB: ldusb: fix memleak on disconnect
- USB: usblp: fix use-after-free on disconnect
- USB: ldusb: fix read info leaks
- arm64: v8.4: Support for new floating point multiplication instructions
- arm64: Documentation: cpu-feature-registers: Remove RES0 fields
- arm64: Expose Arm v8.4 features
- arm64: move SCTLR_EL{1,2} assertions to <asm/sysreg.h>
- arm64: add PSR_AA32_* definitions
- arm64: Introduce sysreg_clear_set()
- arm64: capabilities: Update prototype for enable call back
- arm64: capabilities: Move errata work around check on boot CPU
- arm64: capabilities: Move errata processing code
- arm64: capabilities: Prepare for fine grained capabilities
- arm64: capabilities: Add flags to handle the conflicts on late CPU
- arm64: capabilities: Unify the verification
- arm64: capabilities: Filter the entries based on a given mask
- arm64: capabilities: Prepare for grouping features and errata work arounds
- arm64: capabilities: Split the processing of errata work arounds
- arm64: capabilities: Allow features based on local CPU scope
- arm64: capabilities: Group handling of features and errata workarounds
- arm64: capabilities: Introduce weak features based on local CPU
- arm64: capabilities: Restrict KPTI detection to boot-time CPUs
- arm64: capabilities: Add support for features enabled early
- arm64: capabilities: Change scope of VHE to Boot CPU feature
- arm64: capabilities: Clean up midr range helpers
- arm64: Add helpers for checking CPU MIDR against a range
- arm64: Add MIDR encoding for Arm Cortex-A55 and Cortex-A35
- arm64: capabilities: Add support for checks based on a list of MIDRs
- arm64: KVM: Use SMCCC_ARCH_WORKAROUND_1 for Falkor BP hardening
- arm64: don't zero DIT on signal return
- arm64: Get rid of __smccc_workaround_1_hvc_*
- arm64: cpufeature: Detect SSBS and advertise to userspace
- arm64: ssbd: Add support for PSTATE.SSBS rather than trapping to EL3
- KVM: arm64: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe
- arm64: fix SSBS sanitization
- arm64: Add sysfs vulnerability show for spectre-v1
- arm64: add sysfs vulnerability show for meltdown
- arm64: enable generic CPU vulnerabilites support
- arm64: Always enable ssb vulnerability detection
- arm64: Provide a command line to disable spectre_v2 mitigation
- arm64: Advertise mitigation of Spectre-v2, or lack thereof
- arm64: Always enable spectre-v2 vulnerability detection
- arm64: add sysfs vulnerability show for spectre-v2
- arm64: add sysfs vulnerability show for speculative store bypass
- arm64: ssbs: Don't treat CPUs with SSBS as unaffected by SSB
- arm64: Force SSBS on context switch
- arm64: Use firmware to detect CPUs that are not affected by Spectre-v2
- arm64/speculation: Support 'mitigations=' cmdline option
- MIPS: tlbex: Fix build_restore_pagemask KScratch restore
- staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS
- scsi: sd: Ignore a failure to sync cache due to lack of authorization
- scsi: core: save/restore command resid for error handling
- scsi: core: try to get module before removing device
- scsi: ch: Make it possible to open a ch device multiple times again
- Input: da9063 - fix capability and drop KEY_SLEEP
- Input: synaptics-rmi4 - avoid processing unknown IRQs
- ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting
- cfg80211: wext: avoid copying malformed SSIDs
- mac80211: Reject malformed SSID elements
- drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1
- drivers/base/memory.c: don't access uninitialized memmaps in
soft_offline_page_store()
- fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c
- scsi: zfcp: fix reaction on bit error threshold notification
- mm/slub: fix a deadlock in show_slab_objects()
- mm/page_owner: don't access uninitialized memmaps when reading
/proc/pagetypeinfo
- hugetlbfs: don't access uninitialized memmaps in pfn_range_valid_gigantic()
- xtensa: drop EXPORT_SYMBOL for outs*/ins*
- parisc: Fix vmap memory leak in ioremap()/iounmap()
- CIFS: avoid using MID 0xFFFF
- x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area
- pinctrl: armada-37xx: fix control of pins 32 and up
- pinctrl: armada-37xx: swap polarity on LED group
- btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group()
- memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
- cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown
- xen/netback: fix error path of xenvif_connect_data()
- PCI: PM: Fix pci_power_up()
- KVM: X86: introduce invalidate_gpa argument to tlb flush
- kvm: vmx: Introduce lapic_mode enumeration
- kvm: vmx: Basic APIC virtualization controls have three settings
- RDMA/cxgb4: Do not dma memory off of the stack
- ARM: OMAP2+: Fix warnings with broken omap2_set_init_voltage()
- libata/ahci: Fix PCS quirk application
- ipv4: fix race condition between route lookup and invalidation
- ALSA: hda/realtek - Enable headset mic on Asus MJ401TA
- ALSA: hda - Force runtime PM on Nvidia HDMI codecs
- ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit()
- EDAC/ghes: Fix Use after free in ghes_edac remove path
- arm64: Enable workaround for Cavium TX2 erratum 219 when running SMT
- CIFS: Fix use after free of file info structures
- perf/aux: Fix AUX output stopping
- dm cache: fix bugs when a GFP_NOWAIT allocation fails
- x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu
- Btrfs: add missing extents release on file extent cluster relocation error
* Colour banding in Lenovo G50-80 laptop display (i915) (LP: #1819968) //
Bionic update: upstream stable patchset 2019-11-08 (LP: #1851876)
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
* cloudimg: no iavf/i40evf module so no network available with SR-IOV enabled
cloud (LP: #1848481)
- [Debian]: include i40evf in generic
* [SRU][B/OEM-B/OEM-OSP1/D/E] UBUNTU: SAUCE: add rtl623 codec support and fix
mic issues (LP: #1850599)
- SAUCE: ALSA: hda/realtek - Add support for ALC623
- SAUCE: ALSA: hda/realtek - Fix 2 front mics of codec 0x623
* Add Intel Comet Lake ethernet support (LP: #1848555)
- e1000e: Add support for Comet Lake
* Suppress "hid_field_extract() called with n (192) > 32!" message floods
(LP: #1850600)
- HID: core: reformat and reduce hid_printk macros
- HID: core: Add printk_once variants to hid_warn() etc
- HID: core: fix dmesg flooding if report field larger than 32bit
* AMD Prairie Falcon platform failed to boot up (LP: #1850572)
- drm/amdgpu: re-enable CGCG on CZ and disable on ST
* UIO: mutex used in interrupt handler causes crash (LP: #1843487)
- Revert "uio: use request_threaded_irq instead"
* root can lift kernel lockdown (LP: #1851380)
- SAUCE: (efi-lockdown) Really don't allow lifting lockdown from userspace
* Suspend stopped working from 4.4.0-157 onwards (LP: #1844021) // Bionic
update: upstream stable patchset 2019-10-29 (LP: #1850541)
- xhci: Increase STS_SAVE timeout in xhci_suspend()
* Bionic update: upstream stable patchset 2019-10-23 (LP: #1849576)
- s390/process: avoid potential reading of freed stack
- KVM: s390: Test for bad access register and size at the start of S390_MEM_OP
- s390/topology: avoid firing events before kobjs are created
- s390/cio: avoid calling strlen on null pointer
- s390/cio: exclude subchannels with no parent from pseudo check
- KVM: PPC: Book3S HV: Don't lose pending doorbell request on migration on P9
- PM / devfreq: tegra: Fix kHz to Hz conversion
- ASoC: Define a set of DAPM pre/post-up events
- powerpc/powernv: Restrict OPAL symbol map to only be readable by root
- can: mcp251x: mcp251x_hw_reset(): allow more time after a reset
- tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file
- crypto: qat - Silence smp_processor_id() warning
- crypto: skcipher - Unmap pages after an external error
- crypto: cavium/zip - Add missing single_release()
- crypto: caam - fix concurrency issue in givencrypt descriptor
- usercopy: Avoid HIGHMEM pfn warning
- timer: Read jiffies once when forwarding base clk
- watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout
- drm/omap: fix max fclk divider for omap36xx
- mmc: sdhci: improve ADMA error reporting
- mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence
- Revert "locking/pvqspinlock: Don't wait if vCPU is preempted"
- xen/xenbus: fix self-deadlock after killing user process
- ieee802154: atusb: fix use-after-free at disconnect
- cfg80211: initialize on-stack chandefs
- ima: always return negative code for error
- fs: nfs: Fix possible null-pointer dereferences in encode_attrs()
- 9p: avoid attaching writeback_fid on mmap with type PRIVATE
- xen/pci: reserve MCFG areas earlier
- ceph: fix directories inode i_blkbits initialization
- ceph: reconnect connection if session hang in opening state
- watchdog: aspeed: Add support for AST2600
- netfilter: nf_tables: allow lookups in dynamic sets
- drm/amdgpu: Check for valid number of registers to read
- pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors
- pwm: stm32-lp: Add check in case requested period cannot be achieved
- thermal: Fix use-after-free when unregistering thermal zone device
- fuse: fix memleak in cuse_channel_open
- sched/core: Fix migration to invalid CPU in __set_cpus_allowed_ptr()
- perf build: Add detection of java-11-openjdk-devel package
- kernel/elfcore.c: include proper prototypes
- perf unwind: Fix libunwind build failure on i386 systems
- KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the
VP
- nbd: fix crash when the blksize is zero
- block/ndb: add WQ_UNBOUND to the knbd-recv workqueue
- nbd: fix max number of supported devs
- powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt()
- tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure
- tick: broadcast-hrtimer: Fix a race in bc_set_next
- perf tools: Fix segfault in cpu_cache_level__read()
- perf stat: Fix a segmentation fault when using repeat forever
- perf stat: Reset previous counts on repeat with interval
- vfs: Fix EOVERFLOW testing in put_compat_statfs64
- coresight: etm4x: Use explicit barriers on enable/disable
- cfg80211: add and use strongly typed element iteration macros
- cfg80211: Use const more consistently in for_each_element macros
- nl80211: validate beacon head
- ASoC: sgtl5000: Improve VAG power and mute control
- KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores
- powerpc/mce: Fix MCE handling for huge pages
- powerpc/mce: Schedule work from irq_work
- MIPS: Treat Loongson Extensions as ASEs
- PCI: Restore Resizable BAR size bits correctly for 1MB BARs
- drm/msm/dsi: Fix return value check for clk_get_parent
- ima: fix freeing ongoing ahash_request
- x86/purgatory: Disable the stackleak GCC plugin for the purgatory
- thermal_hwmon: Sanitize thermal_zone type
- libnvdimm/region: Initialize bad block for volatile namespaces
- drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed
[ Ubuntu: 4.15.0-70.79 ]
* Ubuntu-5.0.0-33.35 introduces KVM regression with old Intel CPUs and Linux
guests (LP: #1851709)
- Revert "KVM: x86: Manually calculate reserved bits when loading PDPTRS"
* Incomplete i915 fix for 64-bit x86 kernels (LP: #1852141) // CVE-2019-0155
- SAUCE: drm/i915/cmdparser: Fix jump whitelist clearing
-- Stefan Bader <email address hidden> Tue, 26 Nov 2019 15:55:25 +0100
-
linux-aws (4.15.0-1055.57) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1055.57 -proposed tracker (LP: #1852270)
* Bionic update: upstream stable patchset 2019-10-29 (LP: #1850541)
- [Config] aws: updateconfigs for USB_RIO500
* ARM CPU support update (LP: #1850675)
- irqchip/gic-v3-its: Refactor LPI allocator
- irqchip/gic-v3-its: Use full range of LPIs
- irqchip/gic-v3-its: Move minimum LPI requirements to individual busses
- irqchip/gic-v3-its: Drop chunk allocation compatibility
- irqchip/gic-v3: Expose GICD_TYPER in the rdist structure
- irqchip/gic-v3-its: Honor hypervisor enforced LPI range
- irqchip/gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices
- irqchip/gic-v3: Allow LPIs to be disabled from the command line
- irqchip/gic-v3: Ensure GICR_CTLR.EnableLPI=0 is observed before enabling
- irqchip/gic-v3-its: Cap lpi_id_bits to reduce memory footprint
- irqchip/gic-v3-its: Change initialization ordering for LPIs
- irqchip/gic-v3-its: Simplify LPI_PENDBASE_SZ usage
- irqchip/gic-v3-its: Split property table clearing from allocation
- irqchip/gic-v3-its: Move pending table allocation to init time
- irqchip/gic-v3-its: Keep track of property table's PA and VA
- irqchip/gic-v3-its: Allow use of pre-programmed LPI tables
- irqchip/gic-v3-its: Use pre-programmed redistributor tables with kdump
kernels
- irqchip/gic-v3-its: Check that all RDs have the same property table
- efi: honour memory reservations passed via a linux specific config table
- efi: add API to reserve memory persistently across kexec reboot
- irqchip/gic-v3-its: Register LPI tables with EFI config table
- irqchip/gic-v3-its: Allow use of LPI tables in reserved memory
- arm64: kill config_sctlr_el1()
- arm64: Fix silly typo in comment
- KVM: arm64: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe
- arm64: cpu: Move errata and feature enable callbacks closer to callers
- arm64/cpufeature: Convert hook_lock to raw_spin_lock_t in cpu_enable_ssbs()
- efi/arm: libstub: add a root memreserve config table
- efi: Permit calling efi_mem_reserve_persistent() from atomic context
- efi: Prevent GICv3 WARN() by mapping the memreserve table before first use
- efi: Permit multiple entries in persistent memreserve data structure
- arm64: Avoid flush_icache_range() in alternatives patching code
[ Ubuntu: 4.15.0-71.80 ]
* bionic/linux: 4.15.0-71.80 -proposed tracker (LP: #1852289)
* Bionic update: upstream stable patchset 2019-10-29 (LP: #1850541)
- panic: ensure preemption is disabled during panic()
- f2fs: use EINVAL for superblock with invalid magic
- [Config] updateconfigs for USB_RIO500
- USB: rio500: Remove Rio 500 kernel driver
- USB: yurex: Don't retry on unexpected errors
- USB: yurex: fix NULL-derefs on disconnect
- USB: usb-skeleton: fix runtime PM after driver unbind
- USB: usb-skeleton: fix NULL-deref on disconnect
- xhci: Fix false warning message about wrong bounce buffer write length
- xhci: Prevent device initiated U1/U2 link pm if exit latency is too long
- xhci: Check all endpoints for LPM timeout
- usb: xhci: wait for CNR controller not ready bit in xhci resume
- USB: adutux: fix use-after-free on disconnect
- USB: adutux: fix NULL-derefs on disconnect
- USB: adutux: fix use-after-free on release
- USB: iowarrior: fix use-after-free on disconnect
- USB: iowarrior: fix use-after-free on release
- USB: iowarrior: fix use-after-free after driver unbind
- USB: usblp: fix runtime PM after driver unbind
- USB: chaoskey: fix use-after-free on release
- USB: ldusb: fix NULL-derefs on driver unbind
- serial: uartlite: fix exit path null pointer
- USB: serial: keyspan: fix NULL-derefs on open() and write()
- USB: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20
- USB: serial: option: add Telit FN980 compositions
- USB: serial: option: add support for Cinterion CLS8 devices
- USB: serial: fix runtime PM after driver unbind
- USB: usblcd: fix I/O after disconnect
- USB: microtek: fix info-leak at probe
- USB: dummy-hcd: fix power budget for SuperSpeed mode
- usb: renesas_usbhs: gadget: Do not discard queues in
usb_ep_set_{halt,wedge}()
- usb: renesas_usbhs: gadget: Fix usb_ep_set_{halt,wedge}() behavior
- USB: legousbtower: fix slab info leak at probe
- USB: legousbtower: fix deadlock on disconnect
- USB: legousbtower: fix potential NULL-deref on disconnect
- USB: legousbtower: fix open after failed reset request
- USB: legousbtower: fix use-after-free on release
- staging: vt6655: Fix memory leak in vt6655_probe
- iio: adc: ad799x: fix probe error handling
- iio: adc: axp288: Override TS pin bias current for some models
- iio: light: opt3001: fix mutex unlock race
- efivar/ssdt: Don't iterate over EFI vars if no SSDT override was specified
- perf llvm: Don't access out-of-scope array
- perf inject jit: Fix JIT_CODE_MOVE filename
- CIFS: Gracefully handle QueryInfo errors during open
- CIFS: Force revalidate inode when dentry is stale
- CIFS: Force reval dentry if LOOKUP_REVAL flag is set
- kernel/sysctl.c: do not override max_threads provided by userspace
- firmware: google: increment VPD key_len properly
- gpiolib: don't clear FLAG_IS_OUT when emulating open-drain/open-source
- Staging: fbtft: fix memory leak in fbtft_framebuffer_alloc
- iio: hx711: add delay until DOUT is ready
- iio: adc: hx711: fix bug in sampling of data
- btrfs: fix incorrect updating of log root tree
- NFS: Fix O_DIRECT accounting of number of bytes read/written
- MIPS: Disable Loongson MMI instructions for kernel build
- Fix the locking in dcache_readdir() and friends
- media: stkwebcam: fix runtime PM after driver unbind
- tracing/hwlat: Report total time spent in all NMIs during the sample
- tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency
- ftrace: Get a reference counter for the trace_array on filter files
- tracing: Get trace_array reference for available_tracers files
- x86/asm: Fix MWAITX C-state hint value
- iio: adc: stm32-adc: fix a race when using several adcs with dma and irq
- cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic
- btrfs: fix uninitialized ret in ref-verify
- arm64/sve: Fix wrong free for task->thread.sve_state
- [Config] updateconfigs for USB_RIO500
* Bionic update: upstream stable patchset 2019-11-13 (LP: #1852492)
- zram: fix race between backing_dev_show and backing_dev_store
- dm snapshot: use mutex instead of rw_semaphore
- dm snapshot: introduce account_start_copy() and account_end_copy()
- dm snapshot: rework COW throttling to fix deadlock
- dm: Use kzalloc for all structs with embedded biosets/mempools
- f2fs: flush quota blocks after turnning it off
- scsi: lpfc: Fix a duplicate 0711 log message number.
- sc16is7xx: Fix for "Unexpected interrupt: 8"
- powerpc/powernv: hold device_hotplug_lock when calling
memtrace_offline_pages()
- HID: i2c-hid: add Direkt-Tek DTLAPY133-1 to descriptor override
- x86/cpu: Add Atom Tremont (Jacobsville)
- HID: i2c-hid: Add Odys Winbook 13 to descriptor override
- clk: boston: unregister clks on failure in clk_boston_setup()
- scripts/setlocalversion: Improve -dirty check with git-status --no-optional-
locks
- HID: Add ASUS T100CHI keyboard dock battery quirks
- usb: handle warm-reset port requests on hub resume
- rtc: pcf8523: set xtal load capacitance from DT
- mlxsw: spectrum: Set LAG port collector only when active
- ALSA: hda/realtek - Apply ALC294 hp init also for S4 resume
- media: vimc: Remove unused but set variables
- exec: load_script: Do not exec truncated interpreter path
- PCI/PME: Fix possible use-after-free on remove
- power: supply: max14656: fix potential use-after-free
- iio: adc: meson_saradc: Fix memory allocation order
- iio: fix center temperature of bmc150-accel-core
- libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature
- perf tests: Avoid raising SEGV using an obvious NULL dereference
- perf map: Fix overlapped map handling
- perf jevents: Fix period for Intel fixed counters
- staging: rtl8188eu: fix null dereference when kzalloc fails
- RDMA/hfi1: Prevent memory leak in sdma_init
- RDMA/iwcm: Fix a lock inversion issue
- HID: hyperv: Use in-place iterator API in the channel callback
- nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request
- arm64: ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 #1542419
- tty: serial: owl: Fix the link time qualifier of 'owl_uart_exit()'
- tty: n_hdlc: fix build on SPARC
- gpio: max77620: Use correct unit for debounce times
- fs: cifs: mute -Wunused-const-variable message
- serial: mctrl_gpio: Check for NULL pointer
- efi/cper: Fix endianness of PCIe class code
- efi/x86: Do not clean dummy variable in kexec path
- MIPS: include: Mark __cmpxchg as __always_inline
- x86/xen: Return from panic notifier
- ocfs2: clear zero in unaligned direct IO
- fs: ocfs2: fix possible null-pointer dereferences in
ocfs2_xa_prepare_entry()
- fs: ocfs2: fix a possible null-pointer dereference in
ocfs2_write_end_nolock()
- fs: ocfs2: fix a possible null-pointer dereference in
ocfs2_info_scan_inode_alloc()
- sched/vtime: Fix guest/system mis-accounting on task switch
- perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp
- MIPS: include: Mark __xchg as __always_inline
- MIPS: fw: sni: Fix out of bounds init of o32 stack
- nbd: fix possible sysfs duplicate warning
- NFSv4: Fix leak of clp->cl_acceptor string
- s390/uaccess: avoid (false positive) compiler warnings
- tracing: Initialize iter->seq after zeroing in tracing_read_pipe()
- nbd: verify socket is supported during setup
- USB: legousbtower: fix a signedness bug in tower_probe()
- thunderbolt: Use 32-bit writes when writing ring producer/consumer
- fuse: flush dirty data/metadata before non-truncate setattr
- fuse: truncate pending writes on O_TRUNC
- ALSA: bebob: Fix prototype of helper function to return negative value
- UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather
segments")
- USB: gadget: Reject endpoints with 0 maxpacket value
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
virt_boundary_mask to avoid SG overflows")
- USB: ldusb: fix ring-buffer locking
- USB: ldusb: fix control-message timeout
- USB: serial: whiteheat: fix potential slab corruption
- USB: serial: whiteheat: fix line-speed endianness
- scsi: target: cxgbit: Fix cxgbit_fw4_ack()
- HID: i2c-hid: add Trekstor Primebook C11B to descriptor override
- HID: Fix assumption that devices have inputs
- HID: fix error message in hid_open_report()
- nl80211: fix validation of mesh path nexthop
- s390/cmm: fix information leak in cmm_timeout_handler()
- s390/idle: fix cpu idle time calculation
- arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default
- dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle
- llc: fix sk_buff leak in llc_sap_state_process()
- llc: fix sk_buff leak in llc_conn_service()
- rxrpc: Fix call ref leak
- NFC: pn533: fix use-after-free and memleaks
- bonding: fix potential NULL deref in bond_update_slave_arr
- net: usb: sr9800: fix uninitialized local variable
- sch_netem: fix rcu splat in netem_enqueue()
- sctp: fix the issue that flags are ignored when using kernel_connect
- sctp: not bind the socket in sctp_connect
- xfs: Correctly invert xfs_buftarg LRU isolation logic
- ALSA: timer: Simplify error path in snd_timer_open()
- ALSA: timer: Fix mutex deadlock at releasing card
- Revert "ALSA: hda: Flush interrupts on disabling"
- Btrfs: fix inode cache block reserve leak on failure to allocate data space
- Btrfs: fix memory leak due to concurrent append writes with fiemap
- tools/power turbostat: fix goldmont C-state limit decoding
- bcache: fix input overflow to writeback_rate_minimum
- netfilter: ipset: Make invalid MAC address checks consistent
- platform/x86: Add the VLV ISP PCI ID to atomisp2_pm
- platform/x86: Fix config space access for intel_atomisp2_pm
- NFSv4: Ensure that the state manager exits the loop on SIGKILL
- ALSA: usb-audio: Cleanup DSD whitelist
- arm64: Add MIDR encoding for HiSilicon Taishan CPUs
- arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs
- scsi: lpfc: Correct localport timeout duration error
- ext4: disallow files with EXT4_JOURNAL_DATA_FL from EXT4_IOC_SWAP_BOOT
- net: dsa: mv88e6xxx: Release lock while requesting IRQ
- drm/amd/display: fix odm combine pipe reset
- perf script brstackinsn: Fix recovery from LBR/binary mismatch
- perf tools: Propagate get_cpuid() error
- perf annotate: Propagate perf_env__arch() error
- perf annotate: Fix the signedness of failure returns
- arm64: armv8_deprecated: Checking return value for memory allocation
- x86/cpu: Add Comet Lake to the Intel CPU models header
- iio: imu: adis16400: release allocated memory on failure
- usb: xhci: fix __le32/__le64 accessors in debugfs code
- dmaengine: qcom: bam_dma: Fix resource leak
- NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid()
- batman-adv: Avoid free/alloc race when handling OGM buffer
- powerpc/powernv: Fix CPU idle to be called with IRQs disabled
* Dell XPS 13 9350/9360 headphone audio hiss (LP: #1654448) // [XPS 13 9360,
Realtek ALC3246, Black Headphone Out, Front] High noise floor
(LP: #1845810) // Bionic update: upstream stable patchset 2019-11-13
(LP: #1852492)
- ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360
* Add GeminiLake support on Intel int340x thermal device (LP: #1851506)
- thermal: int340x: processor_thermal: Add GeminiLake support
* System hangs at early boot (LP: #1851216)
- x86/timer: Skip PIT initialization on modern chipsets
* Some EFI systems fail to boot in efi_init() when booted via maas
(LP: #1851810)
- efi: efi_get_memory_map -- increase map headroom
* dkms artifacts may expire from the pool (LP: #1850958)
- [Packaging] dkms -- try launchpad librarian for pool downloads
- [Packaging] dkms -- dkms-build quieten wget verbiage
* update ENA driver to version 2.1.0 (LP: #1850175)
- net: ena: fix: set freed objects to NULL to avoid failing future allocations
- net: ena: fix swapped parameters when calling
ena_com_indirect_table_fill_entry
- net: ena: fix: Free napi resources when ena_up() fails
- net: ena: fix incorrect test of supported hash function
- net: ena: fix return value of ena_com_config_llq_info()
- net: ena: improve latency by disabling adaptive interrupt moderation by
default
- net: ena: fix ena_com_fill_hash_function() implementation
- net: ena: add handling of llq max tx burst size
- net: ena: ethtool: add extra properties retrieval via get_priv_flags
- net: ena: replace free_tx/rx_ids union with single free_ids field in
ena_ring
- net: ena: arrange ena_probe() function variables in reverse christmas tree
- net: ena: add newline at the end of pr_err prints
- net: ena: documentation: update ena.txt
- net: ena: allow automatic fallback to polling mode
- net: ena: add support for changing max_header_size in LLQ mode
- net: ena: optimise calculations for CQ doorbell
- net: ena: add good checksum counter
- net: ena: use dev_info_once instead of static variable
- net: ena: add MAX_QUEUES_EXT get feature admin command
- net: ena: enable negotiating larger Rx ring size
- net: ena: make ethtool show correct current and max queue sizes
- net: ena: allow queue allocation backoff when low on memory
- net: ena: add ethtool function for changing io queue sizes
- net: ena: remove inline keyword from functions in *.c
- net: ena: update driver version from 2.0.3 to 2.1.0
- net: ena: Fix bug where ring allocation backoff stopped too late
- Revert "net: ena: ethtool: add extra properties retrieval via
get_priv_flags"
- net: ena: don't wake up tx queue when down
- net: ena: clean up indentation issue
* Skip frame when buffer overflow on UVC camera (LP: #1849871)
- media: uvcvideo: Mark buffer error where overflow
* Handle the skip return code in kernel_selftests on Bionic (LP: #1812352)
- selftests: lib.mk set KSFT_TAP_LEVEL to prevent nested TAP headers
- selftests: Fix lib.mk run_tests target shell script
- selftests: lib.mk: cleanup RUN_TESTS define and make it readable
- selftests: lib.mk: add SKIP handling to RUN_TESTS define
* Intel Wireless AC 3168 on Eoan complaints FW error in SYNC CMD
GEO_TX_POWER_LIMIT (LP: #1846016)
- iwlwifi: exclude GEO SAR support for 3168
* tsc marked unstable after entered PC10 on Intel CoffeeLake (LP: #1840239)
- SAUCE: x86/intel: Disable HPET on Intel Coffe Lake platforms
- SAUCE: x86/intel: Disable HPET on Intel Ice Lake platforms
* Bionic update: upstream stable patchset 2019-11-08 (LP: #1851876)
- scsi: ufs: skip shutdown if hba is not powered
- scsi: megaraid: disable device when probe failed after enabled device
- scsi: qla2xxx: Fix unbound sleep in fcport delete path.
- ARM: OMAP2+: Fix missing reset done flag for am3 and am43
- ieee802154: ca8210: prevent memory leak
- ARM: dts: am4372: Set memory bandwidth limit for DISPC
- net: dsa: qca8k: Use up to 7 ports for all operations
- MIPS: dts: ar9331: fix interrupt-controller size
- xen/efi: Set nonblocking callbacks
- nl80211: fix null pointer dereference
- mac80211: fix txq null pointer dereference
- mips: Loongson: Fix the link time qualifier of 'serial_exit()'
- net: hisilicon: Fix usage of uninitialized variable in function
mdio_sc_cfg_reg_write()
- namespace: fix namespace.pl script to support relative paths
- Revert "drm/radeon: Fix EEH during kexec"
- ocfs2: fix panic due to ocfs2_wq is null
- ipv4: Return -ENETUNREACH if we can't create route but saddr is valid
- net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3
- net: bcmgenet: Set phydev->dev_flags only for internal PHYs
- net: i82596: fix dma_alloc_attr for sni_82596
- net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow
- sctp: change sctp_prot .no_autobind with true
- net: avoid potential infinite loop in tc_ctl_action()
- memfd: Fix locking when tagging pins
- USB: legousbtower: fix memleak on disconnect
- ALSA: hda/realtek - Add support for ALC711
- usb: udc: lpc32xx: fix bad bit shift operation
- USB: serial: ti_usb_3410_5052: fix port-close races
- USB: ldusb: fix memleak on disconnect
- USB: usblp: fix use-after-free on disconnect
- USB: ldusb: fix read info leaks
- arm64: v8.4: Support for new floating point multiplication instructions
- arm64: Documentation: cpu-feature-registers: Remove RES0 fields
- arm64: Expose Arm v8.4 features
- arm64: move SCTLR_EL{1,2} assertions to <asm/sysreg.h>
- arm64: add PSR_AA32_* definitions
- arm64: Introduce sysreg_clear_set()
- arm64: capabilities: Update prototype for enable call back
- arm64: capabilities: Move errata work around check on boot CPU
- arm64: capabilities: Move errata processing code
- arm64: capabilities: Prepare for fine grained capabilities
- arm64: capabilities: Add flags to handle the conflicts on late CPU
- arm64: capabilities: Unify the verification
- arm64: capabilities: Filter the entries based on a given mask
- arm64: capabilities: Prepare for grouping features and errata work arounds
- arm64: capabilities: Split the processing of errata work arounds
- arm64: capabilities: Allow features based on local CPU scope
- arm64: capabilities: Group handling of features and errata workarounds
- arm64: capabilities: Introduce weak features based on local CPU
- arm64: capabilities: Restrict KPTI detection to boot-time CPUs
- arm64: capabilities: Add support for features enabled early
- arm64: capabilities: Change scope of VHE to Boot CPU feature
- arm64: capabilities: Clean up midr range helpers
- arm64: Add helpers for checking CPU MIDR against a range
- arm64: Add MIDR encoding for Arm Cortex-A55 and Cortex-A35
- arm64: capabilities: Add support for checks based on a list of MIDRs
- arm64: KVM: Use SMCCC_ARCH_WORKAROUND_1 for Falkor BP hardening
- arm64: don't zero DIT on signal return
- arm64: Get rid of __smccc_workaround_1_hvc_*
- arm64: cpufeature: Detect SSBS and advertise to userspace
- arm64: ssbd: Add support for PSTATE.SSBS rather than trapping to EL3
- KVM: arm64: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe
- arm64: fix SSBS sanitization
- arm64: Add sysfs vulnerability show for spectre-v1
- arm64: add sysfs vulnerability show for meltdown
- arm64: enable generic CPU vulnerabilites support
- arm64: Always enable ssb vulnerability detection
- arm64: Provide a command line to disable spectre_v2 mitigation
- arm64: Advertise mitigation of Spectre-v2, or lack thereof
- arm64: Always enable spectre-v2 vulnerability detection
- arm64: add sysfs vulnerability show for spectre-v2
- arm64: add sysfs vulnerability show for speculative store bypass
- arm64: ssbs: Don't treat CPUs with SSBS as unaffected by SSB
- arm64: Force SSBS on context switch
- arm64: Use firmware to detect CPUs that are not affected by Spectre-v2
- arm64/speculation: Support 'mitigations=' cmdline option
- MIPS: tlbex: Fix build_restore_pagemask KScratch restore
- staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS
- scsi: sd: Ignore a failure to sync cache due to lack of authorization
- scsi: core: save/restore command resid for error handling
- scsi: core: try to get module before removing device
- scsi: ch: Make it possible to open a ch device multiple times again
- Input: da9063 - fix capability and drop KEY_SLEEP
- Input: synaptics-rmi4 - avoid processing unknown IRQs
- ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting
- cfg80211: wext: avoid copying malformed SSIDs
- mac80211: Reject malformed SSID elements
- drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1
- drivers/base/memory.c: don't access uninitialized memmaps in
soft_offline_page_store()
- fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c
- scsi: zfcp: fix reaction on bit error threshold notification
- mm/slub: fix a deadlock in show_slab_objects()
- mm/page_owner: don't access uninitialized memmaps when reading
/proc/pagetypeinfo
- hugetlbfs: don't access uninitialized memmaps in pfn_range_valid_gigantic()
- xtensa: drop EXPORT_SYMBOL for outs*/ins*
- parisc: Fix vmap memory leak in ioremap()/iounmap()
- CIFS: avoid using MID 0xFFFF
- x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area
- pinctrl: armada-37xx: fix control of pins 32 and up
- pinctrl: armada-37xx: swap polarity on LED group
- btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group()
- memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
- cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown
- xen/netback: fix error path of xenvif_connect_data()
- PCI: PM: Fix pci_power_up()
- KVM: X86: introduce invalidate_gpa argument to tlb flush
- kvm: vmx: Introduce lapic_mode enumeration
- kvm: vmx: Basic APIC virtualization controls have three settings
- RDMA/cxgb4: Do not dma memory off of the stack
- ARM: OMAP2+: Fix warnings with broken omap2_set_init_voltage()
- libata/ahci: Fix PCS quirk application
- ipv4: fix race condition between route lookup and invalidation
- ALSA: hda/realtek - Enable headset mic on Asus MJ401TA
- ALSA: hda - Force runtime PM on Nvidia HDMI codecs
- ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit()
- EDAC/ghes: Fix Use after free in ghes_edac remove path
- arm64: Enable workaround for Cavium TX2 erratum 219 when running SMT
- CIFS: Fix use after free of file info structures
- perf/aux: Fix AUX output stopping
- dm cache: fix bugs when a GFP_NOWAIT allocation fails
- x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu
- Btrfs: add missing extents release on file extent cluster relocation error
* Colour banding in Lenovo G50-80 laptop display (i915) (LP: #1819968) //
Bionic update: upstream stable patchset 2019-11-08 (LP: #1851876)
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
* cloudimg: no iavf/i40evf module so no network available with SR-IOV enabled
cloud (LP: #1848481)
- [Debian]: include i40evf in generic
* [SRU][B/OEM-B/OEM-OSP1/D/E] UBUNTU: SAUCE: add rtl623 codec support and fix
mic issues (LP: #1850599)
- SAUCE: ALSA: hda/realtek - Add support for ALC623
- SAUCE: ALSA: hda/realtek - Fix 2 front mics of codec 0x623
* Add Intel Comet Lake ethernet support (LP: #1848555)
- e1000e: Add support for Comet Lake
* Suppress "hid_field_extract() called with n (192) > 32!" message floods
(LP: #1850600)
- HID: core: reformat and reduce hid_printk macros
- HID: core: Add printk_once variants to hid_warn() etc
- HID: core: fix dmesg flooding if report field larger than 32bit
* AMD Prairie Falcon platform failed to boot up (LP: #1850572)
- drm/amdgpu: re-enable CGCG on CZ and disable on ST
* UIO: mutex used in interrupt handler causes crash (LP: #1843487)
- Revert "uio: use request_threaded_irq instead"
* root can lift kernel lockdown (LP: #1851380)
- SAUCE: (efi-lockdown) Really don't allow lifting lockdown from userspace
* Suspend stopped working from 4.4.0-157 onwards (LP: #1844021) // Bionic
update: upstream stable patchset 2019-10-29 (LP: #1850541)
- xhci: Increase STS_SAVE timeout in xhci_suspend()
* Bionic update: upstream stable patchset 2019-10-23 (LP: #1849576)
- s390/process: avoid potential reading of freed stack
- KVM: s390: Test for bad access register and size at the start of S390_MEM_OP
- s390/topology: avoid firing events before kobjs are created
- s390/cio: avoid calling strlen on null pointer
- s390/cio: exclude subchannels with no parent from pseudo check
- KVM: PPC: Book3S HV: Don't lose pending doorbell request on migration on P9
- PM / devfreq: tegra: Fix kHz to Hz conversion
- ASoC: Define a set of DAPM pre/post-up events
- powerpc/powernv: Restrict OPAL symbol map to only be readable by root
- can: mcp251x: mcp251x_hw_reset(): allow more time after a reset
- tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file
- crypto: qat - Silence smp_processor_id() warning
- crypto: skcipher - Unmap pages after an external error
- crypto: cavium/zip - Add missing single_release()
- crypto: caam - fix concurrency issue in givencrypt descriptor
- usercopy: Avoid HIGHMEM pfn warning
- timer: Read jiffies once when forwarding base clk
- watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout
- drm/omap: fix max fclk divider for omap36xx
- mmc: sdhci: improve ADMA error reporting
- mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence
- Revert "locking/pvqspinlock: Don't wait if vCPU is preempted"
- xen/xenbus: fix self-deadlock after killing user process
- ieee802154: atusb: fix use-after-free at disconnect
- cfg80211: initialize on-stack chandefs
- ima: always return negative code for error
- fs: nfs: Fix possible null-pointer dereferences in encode_attrs()
- 9p: avoid attaching writeback_fid on mmap with type PRIVATE
- xen/pci: reserve MCFG areas earlier
- ceph: fix directories inode i_blkbits initialization
- ceph: reconnect connection if session hang in opening state
- watchdog: aspeed: Add support for AST2600
- netfilter: nf_tables: allow lookups in dynamic sets
- drm/amdgpu: Check for valid number of registers to read
- pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors
- pwm: stm32-lp: Add check in case requested period cannot be achieved
- thermal: Fix use-after-free when unregistering thermal zone device
- fuse: fix memleak in cuse_channel_open
- sched/core: Fix migration to invalid CPU in __set_cpus_allowed_ptr()
- perf build: Add detection of java-11-openjdk-devel package
- kernel/elfcore.c: include proper prototypes
- perf unwind: Fix libunwind build failure on i386 systems
- KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the
VP
- nbd: fix crash when the blksize is zero
- block/ndb: add WQ_UNBOUND to the knbd-recv workqueue
- nbd: fix max number of supported devs
- powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt()
- tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure
- tick: broadcast-hrtimer: Fix a race in bc_set_next
- perf tools: Fix segfault in cpu_cache_level__read()
- perf stat: Fix a segmentation fault when using repeat forever
- perf stat: Reset previous counts on repeat with interval
- vfs: Fix EOVERFLOW testing in put_compat_statfs64
- coresight: etm4x: Use explicit barriers on enable/disable
- cfg80211: add and use strongly typed element iteration macros
- cfg80211: Use const more consistently in for_each_element macros
- nl80211: validate beacon head
- ASoC: sgtl5000: Improve VAG power and mute control
- KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores
- powerpc/mce: Fix MCE handling for huge pages
- powerpc/mce: Schedule work from irq_work
- MIPS: Treat Loongson Extensions as ASEs
- PCI: Restore Resizable BAR size bits correctly for 1MB BARs
- drm/msm/dsi: Fix return value check for clk_get_parent
- ima: fix freeing ongoing ahash_request
- x86/purgatory: Disable the stackleak GCC plugin for the purgatory
- thermal_hwmon: Sanitize thermal_zone type
- libnvdimm/region: Initialize bad block for volatile namespaces
- drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed
[ Ubuntu: 4.15.0-70.79 ]
* Ubuntu-5.0.0-33.35 introduces KVM regression with old Intel CPUs and Linux
guests (LP: #1851709)
- Revert "KVM: x86: Manually calculate reserved bits when loading PDPTRS"
* Incomplete i915 fix for 64-bit x86 kernels (LP: #1852141) // CVE-2019-0155
- SAUCE: drm/i915/cmdparser: Fix jump whitelist clearing
-- Kleber Sacilotto de Souza <email address hidden> Fri, 15 Nov 2019 16:07:55 +0100
-
linux-aws (4.15.0-1054.56) bionic; urgency=medium
* CVE-2019-11135
- [Config] Disable TSX by default when possible
[ Ubuntu: 4.15.0-69.78 ]
* KVM NULL pointer deref (LP: #1851205)
- KVM: nVMX: handle page fault in vmread fix
* CVE-2018-12207
- KVM: MMU: drop vcpu param in gpte_access
- kvm: Convert kvm_lock to a mutex
- kvm: x86: Do not release the page inside mmu_set_spte()
- KVM: x86: make FNAME(fetch) and __direct_map more similar
- KVM: x86: remove now unneeded hugepage gfn adjustment
- KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON
- KVM: x86: add tracepoints around __direct_map and FNAME(fetch)
- kvm: x86, powerpc: do not allow clearing largepages debugfs entry
- SAUCE: KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
active
- SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure
- SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation
- SAUCE: kvm: Add helper function for creating VM worker threads
- SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages
- SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers
- SAUCE: kvm: x86: mmu: Apply global mitigations knob to ITLB_MULTIHIT
* CVE-2019-11135
- KVM: x86: use Intel speculation bugs and features as derived in generic x86
code
- x86/msr: Add the IA32_TSX_CTRL MSR
- x86/cpu: Add a helper function x86_read_arch_cap_msr()
- x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
- x86/speculation/taa: Add mitigation for TSX Async Abort
- x86/speculation/taa: Add sysfs reporting for TSX Async Abort
- kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
- x86/tsx: Add "auto" option to the tsx= cmdline parameter
- x86/speculation/taa: Add documentation for TSX Async Abort
- x86/tsx: Add config options to set tsx=on|off|auto
- SAUCE: x86/speculation/taa: Call tsx_init()
- SAUCE: x86/cpu: Include cpu header from bugs.c
- [Config] Disable TSX by default when possible
* CVE-2019-0154
- SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs
- SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA
* CVE-2019-0155
- drm/i915/gtt: Add read only pages to gen8_pte_encode
- drm/i915/gtt: Read-only pages for insert_entries on bdw+
- drm/i915/gtt: Disable read-only support under GVT
- drm/i915: Prevent writing into a read-only object via a GGTT mmap
- drm/i915/cmdparser: Check reg_table_count before derefencing.
- drm/i915/cmdparser: Do not check past the cmd length.
- drm/i915: Silence smatch for cmdparser
- drm/i915: Move engine->needs_cmd_parser to engine->flags
- SAUCE: drm/i915: Rename gen7 cmdparser tables
- SAUCE: drm/i915: Disable Secure Batches for gen6+
- SAUCE: drm/i915: Remove Master tables from cmdparser
- SAUCE: drm/i915: Add support for mandatory cmdparsing
- SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
- SAUCE: drm/i915: Allow parsing of unsized batches
- SAUCE: drm/i915: Add gen9 BCS cmdparsing
- SAUCE: drm/i915/cmdparser: Use explicit goto for error paths
- SAUCE: drm/i915/cmdparser: Add support for backward jumps
- SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching
[ Ubuntu: 4.15.0-68.77 ]
* bionic/linux: 4.15.0-68.77 -proposed tracker (LP: #1849855)
* [REGRESSION] md/raid0: cannot assemble multi-zone RAID0 with default_layout
setting (LP: #1849682)
- Revert "md/raid0: avoid RAID0 data corruption due to layout confusion."
linux-aws (4.15.0-1053.55) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1053.55 -proposed tracker (LP: #1849016)
[ Ubuntu: 4.15.0-67.76 ]
* bionic/linux: 4.15.0-67.76 -proposed tracker (LP: #1849035)
* Unexpected CFS throttling (LP: #1832151)
- sched/fair: Add lsub_positive() and use it consistently
- sched/fair: Fix low cpu usage with high throttling by removing expiration of
cpu-local slices
- sched/fair: Fix -Wunused-but-set-variable warnings
* [CML] New device IDs for CML-U (LP: #1843774)
- i2c: i801: Add support for Intel Comet Lake
- spi: pxa2xx: Add support for Intel Comet Lake
* CVE-2019-17666
- SAUCE: rtlwifi: rtl8822b: Fix potential overflow on P2P code
- SAUCE: rtlwifi: Fix potential overflow on P2P code
* md raid0/linear doesn't show error state if an array member is removed and
allows successful writes (LP: #1847773)
- md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone
* Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x from yes
to no (LP: #1848492)
- [Config] Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x
from yes to no
* [Packaging] Support building Flattened Image Tree (FIT) kernels
(LP: #1847969)
- [Packaging] add rules to build FIT image
- [Packaging] force creation of headers directory
* bcache: Performance degradation when querying priority_stats (LP: #1840043)
- bcache: add cond_resched() in __bch_cache_cmp()
* Add installer support for iwlmvm adapters (LP: #1848236)
- d-i: Add iwlmvm to nic-modules
* Check for CPU Measurement sampling (LP: #1847590)
- s390/cpumsf: Check for CPU Measurement sampling
* [CML-U] Comet lake platform need ISH driver support (LP: #1843775)
- HID: intel-ish-hid: Add Comet Lake PCI device ID
* intel-lpss driver conflicts with write-combining MTRR region (LP: #1845584)
- SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390 2-in-1
* Fix non-working Realtek USB ethernet after system resume (LP: #1847063)
- r8152: remove extra action copying ethernet address
- r8152: Refresh MAC address during USBDEVFS_RESET
- r8152: Set macpassthru in reset_resume callback
* Ubuntu 18.04 - wrong cpu-mf counter number (LP: #1847109)
- s390/cpum_cf: correct counter number of LAST_HOST_TRANSLATIONS
* PM / hibernate: fix potential memory corruption (LP: #1847118)
- PM / hibernate: memory_bm_find_bit(): Tighten node optimisation
* Microphone-Mute keyboard LED is always on/off on Dell Latitude 3310
(LP: #1846453)
- platform/x86: dell-laptop: Add 2-in-1 devices to the DMI whitelist
- platform/x86: dell-laptop: Removed duplicates in DMI whitelist
* xHCI on AMD Stoney Ridge cannot detect USB 2.0 or 1.1 devices.
(LP: #1846470)
- x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect
* CVE-2019-15098
- ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
* Bionic update: upstream stable patchset 2019-10-15 (LP: #1848274)
- tpm: use tpm_try_get_ops() in tpm-sysfs.c.
- tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations
- drm/bridge: tc358767: Increase AUX transfer length limit
- drm/panel: simple: fix AUO g185han01 horizontal blanking
- video: ssd1307fb: Start page range at page_offset
- drm/stm: attach gem fence to atomic state
- drm/radeon: Fix EEH during kexec
- gpu: drm: radeon: Fix a possible null-pointer dereference in
radeon_connector_set_property()
- ipmi_si: Only schedule continuously in the thread in maintenance mode
- clk: qoriq: Fix -Wunused-const-variable
- clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks
- clk: sirf: Don't reference clk_init_data after registration
- clk: zx296718: Don't reference clk_init_data after registration
- powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL
- powerpc/rtas: use device model APIs and serialization during LPM
- powerpc/futex: Fix warning: 'oldval' may be used uninitialized in this
function
- powerpc/pseries/mobility: use cond_resched when updating device tree
- pinctrl: tegra: Fix write barrier placement in pmx_writel
- vfio_pci: Restore original state on release
- drm/nouveau/volt: Fix for some cards having 0 maximum voltage
- drm/amdgpu/si: fix ASIC tests
- powerpc/64s/exception: machine check use correct cfar for late handler
- powerpc/pseries: correctly track irq state in default idle
- arm64: fix unreachable code issue with cmpxchg
- clk: at91: select parent if main oscillator or bypass is enabled
- scsi: core: Reduce memory required for SCSI logging
- dma-buf/sw_sync: Synchronize signal vs syncpt free
- MIPS: tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean
- i2c-cht-wc: Fix lockdep warning
- PCI: tegra: Fix OF node reference leak
- livepatch: Nullify obj->mod in klp_module_coming()'s error path
- ARM: 8898/1: mm: Don't treat faults reported from cache maintenance as
writes
- rtc: snvs: fix possible race condition
- HID: apple: Fix stuck function keys when using FN
- PCI: rockchip: Propagate errors for optional regulators
- PCI: imx6: Propagate errors for optional regulators
- PCI: exynos: Propagate errors for optional PHYs
- security: smack: Fix possible null-pointer dereferences in
smack_socket_sock_rcv_skb()
- ARM: 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned
address
- fat: work around race with userspace's read via blockdev while mounting
- pktcdvd: remove warning on attempting to register non-passthrough dev
- hypfs: Fix error number left in struct pointer member
- kbuild: clean compressed initramfs image
- ocfs2: wait for recovering done after direct unlock request
- kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K
- bpf: fix use after free in prog symbol exposure
- cxgb4:Fix out-of-bounds MSI-X info array access
- erspan: remove the incorrect mtu limit for erspan
- hso: fix NULL-deref on tty open
- ipv6: drop incoming packets having a v4mapped source address
- net: ipv4: avoid mixed n_redirects and rate_tokens usage
- net: qlogic: Fix memory leak in ql_alloc_large_buffers
- net: Unpublish sk from sk_reuseport_cb before call_rcu
- nfc: fix memory leak in llcp_sock_bind()
- qmi_wwan: add support for Cinterion CLS8 devices
- sch_dsmark: fix potential NULL deref in dsmark_init()
- vsock: Fix a lockdep warning in __vsock_release()
- net/rds: Fix error handling in rds_ib_add_one()
- xen-netfront: do not use ~0U as error return value for xennet_fill_frags()
- tipc: fix unlimited bundling of small messages
- sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
- ipv6: Handle missing host route in __ipv6_ifa_notify
- Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set
- smack: use GFP_NOFS while holding inode_smack::smk_lock
- NFC: fix attrs checks in netlink interface
- kexec: bail out upon SIGKILL when allocating memory.
- drm/panel: check failure cases in the probe func
- drm/amd/display: reprogram VM config when system resume
- pinctrl: amd: disable spurious-firing GPIO IRQs
- pstore: fs superblock limits
- pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c
- mbox: qcom: add APCS child device for QCS404
- ARM: 8875/1: Kconfig: default to AEABI w/ Clang
- arm64: consider stack randomization for mmap base only when necessary
- mips: properly account for stack randomization and stack guard gap
- arm: properly account for stack randomization and stack guard gap
- arm: use STACK_TOP when computing mmap base address
* Bionic update: upstream stable patchset 2019-10-07 (LP: #1847155)
- Revert "Bluetooth: validate BLE connection interval updates"
- powerpc/xive: Fix bogus error code returned by OPAL
- IB/core: Add an unbound WQ type to the new CQ API
- HID: prodikeys: Fix general protection fault during probe
- HID: sony: Fix memory corruption issue on cleanup.
- HID: logitech: Fix general protection fault caused by Logitech driver
- HID: hidraw: Fix invalid read in hidraw_ioctl
- mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword()
- crypto: talitos - fix missing break in switch statement
- iwlwifi: mvm: send BCAST management frames to the right station
- media: tvp5150: fix switch exit in set control handler
- ASoC: fsl: Fix of-node refcount unbalance in fsl_ssi_probe_from_dt()
- arm64: kpti: Whitelist Cortex-A CPUs that don't implement the CSV3 field
- ALSA: hda - Add laptop imic fixup for ASUS M9V laptop
- ALSA: hda - Apply AMD controller workaround for Raven platform
- objtool: Clobber user CFLAGS variable
- pinctrl: sprd: Use define directive for sprd_pinconf_params values
- power: supply: sysfs: ratelimit property read error message
- irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices
- f2fs: check all the data segments against all node ones
- PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it
- blk-mq: move cancel of requeue_work to the front of blk_exit_queue
- Revert "f2fs: avoid out-of-range memory access"
- dm zoned: fix invalid memory access
- f2fs: fix to do sanity check on segment bitmap of LFS curseg
- drm: Flush output polling on shutdown
- net: don't warn in inet diag when IPV6 is disabled
- ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35
- xfs: don't crash on null attr fork xfs_bmapi_read
- Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices
- f2fs: use generic EFSBADCRC/EFSCORRUPTED
- arcnet: provide a buffer big enough to actually receive packets
- cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
- macsec: drop skb sk before calling gro_cells_receive
- net/phy: fix DP83865 10 Mbps HDX loopback disable function
- net: qrtr: Stop rx_worker before freeing node
- net/sched: act_sample: don't push mac header on ip6gre ingress
- net_sched: add max len check for TCA_KIND
- openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC
- ppp: Fix memory leak in ppp_write
- sch_netem: fix a divide by zero in tabledist()
- skge: fix checksum byte order
- usbnet: ignore endpoints with invalid wMaxPacketSize
- usbnet: sanity checking of packet sizes and device mtu
- net/mlx5: Add device ID of upcoming BlueField-2
- mISDN: enforce CAP_NET_RAW for raw sockets
- appletalk: enforce CAP_NET_RAW for raw sockets
- ax25: enforce CAP_NET_RAW for raw sockets
- ieee802154: enforce CAP_NET_RAW for raw sockets
- nfc: enforce CAP_NET_RAW for raw sockets
- ALSA: hda: Flush interrupts on disabling
- regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg
- ASoC: sgtl5000: Fix charge pump source assignment
- dmaengine: bcm2835: Print error in case setting DMA mask fails
- leds: leds-lp5562 allow firmware files up to the maximum length
- media: dib0700: fix link error for dibx000_i2c_set_speed
- media: mtk-cir: lower de-glitch counter for rc-mm protocol
- media: exynos4-is: fix leaked of_node references
- media: hdpvr: Add device num check and handling
- media: i2c: ov5640: Check for devm_gpiod_get_optional() error
- sched/fair: Fix imbalance due to CPU affinity
- sched/core: Fix CPU controller for !RT_GROUP_SCHED
- x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI
fails
- x86/apic: Soft disable APIC before initializing it
- ALSA: hda - Show the fatal CORB/RIRB error more clearly
- ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in
build_adc_controls()
- EDAC/mc: Fix grain_bits calculation
- media: iguanair: add sanity checks
- base: soc: Export soc_device_register/unregister APIs
- ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid
- ia64:unwind: fix double free for mod->arch.init_unw_table
- EDAC/altera: Use the proper type for the IRQ status bits
- ASoC: rsnd: don't call clk_get_rate() under atomic context
- md/raid1: end bio when the device faulty
- md: don't call spare_active in md_reap_sync_thread if all member devices
can't work
- md: don't set In_sync if array is frozen
- ACPI / processor: don't print errors for processorIDs == 0xff
- EDAC, pnd2: Fix ioremap() size in dnv_rd_reg()
- efi: cper: print AER info of PCIe fatal error
- sched/fair: Use rq_lock/unlock in online_fair_sched_group
- media: gspca: zero usb_buf on error
- perf test vfs_getname: Disable ~/.perfconfig to get default output
- media: mtk-mdp: fix reference count on old device tree
- media: fdp1: Reduce FCP not found message level to debug
- media: rc: imon: Allow iMON RC protocol for ffdc 7e device
- dmaengine: iop-adma: use correct printk format strings
- perf record: Support aarch64 random socket_id assignment
- media: i2c: ov5645: Fix power sequence
- media: omap3isp: Don't set streaming state on random subdevs
- media: imx: mipi csi-2: Don't fail if initial state times-out
- net: lpc-enet: fix printk format strings
- ARM: dts: imx7d: cl-som-imx7: make ethernet work again
- media: radio/si470x: kill urb on error
- media: hdpvr: add terminating 0 at end of string
- nbd: add missing config put
- media: dvb-core: fix a memory leak bug
- libperf: Fix alignment trap with xyarray contents in 'perf stat'
- EDAC/amd64: Recognize DRAM device type ECC capability
- EDAC/amd64: Decode syndrome before translating address
- PM / devfreq: passive: Use non-devm notifiers
- PM / devfreq: exynos-bus: Correct clock enable sequence
- media: cec-notifier: clear cec_adap in cec_notifier_unregister
- media: saa7146: add cleanup in hexium_attach()
- media: cpia2_usb: fix memory leaks
- media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate()
- perf trace beauty ioctl: Fix off-by-one error in cmd->string table
- media: ov9650: add a sanity check
- ASoC: es8316: fix headphone mixer volume table
- ACPI / CPPC: do not require the _PSD method
- arm64: kpti: ensure patched kernel text is fetched from PoU
- nvmet: fix data units read and written counters in SMART log
- iommu/amd: Silence warnings under memory pressure
- iommu/iova: Avoid false sharing on fq_timer_on
- libtraceevent: Change users plugin directory
- ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks
- ACPI: custom_method: fix memory leaks
- ACPI / PCI: fix acpi_pci_irq_enable() memory leak
- hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
- md/raid1: fail run raid1 array when active disk less than one
- dmaengine: ti: edma: Do not reset reserved paRAM slots
- kprobes: Prohibit probing on BUG() and WARN() address
- s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding
- ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set
- raid5: don't set STRIPE_HANDLE to stripe which is in batch list
- mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD
- mmc: sdhci: Fix incorrect switch to HS mode
- raid5: don't increment read_errors on EILSEQ return
- libertas: Add missing sentinel at end of if_usb.c fw_table
- ALSA: hda - Drop unsol event handler for Intel HDMI codecs
- drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2)
- media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
- ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93
- btrfs: extent-tree: Make sure we only allocate extents from block groups
with the same type
- media: omap3isp: Set device on omap3isp subdevs
- PM / devfreq: passive: fix compiler warning
- ALSA: firewire-tascam: handle error code when getting current source of
clock
- ALSA: firewire-tascam: check intermediate state of clock status and retry
- scsi: scsi_dh_rdac: zero cdb in send_mode_select()
- printk: Do not lose last line in kmsg buffer dump
- IB/hfi1: Define variables as unsigned long to fix KASAN warning
- randstruct: Check member structs in is_pure_ops_struct()
- ALSA: hda/realtek - Fixup mute led on HP Spectre x360
- fuse: fix missing unlock_page in fuse_writepage()
- parisc: Disable HP HSC-PCI Cards to prevent kernel crash
- x86/retpolines: Fix up backport of a9d57ef15cbe
- KVM: x86: always stop emulation on page fault
- KVM: x86: set ctxt->have_exception in x86_decode_insn()
- KVM: x86: Manually calculate reserved bits when loading PDPTRS
- media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table
- binfmt_elf: Do not move brk for INTERP-less ET_EXEC
- ASoC: Intel: NHLT: Fix debug print format
- ASoC: Intel: Skylake: Use correct function to access iomem space
- ASoC: Intel: Fix use of potentially uninitialized variable
- ARM: samsung: Fix system restart on S3C6410
- ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up
- arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328
- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP
- regulator: Defer init completion for a while after late_initcall
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps
- memcg, oom: don't require __GFP_FS when invoking memcg OOM killer
- memcg, kmem: do not fail __GFP_NOFAIL charges
- ovl: filter of trusted xattr results in audit
- Btrfs: fix use-after-free when using the tree modification log
- btrfs: Relinquish CPUs in btrfs_compare_trees
- btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space
- md/raid6: Set R5_ReadError when there is read failure on parity disk
- md: don't report active array_state until after revalidate_disk() completes.
- md: only call set_in_sync() when it is expected to succeed.
- cfg80211: Purge frame registrations on iftype change
- /dev/mem: Bail out upon SIGKILL.
- ext4: fix warning inside ext4_convert_unwritten_extents_endio
- ext4: fix punch hole for inline_data file systems
- quota: fix wrong condition in is_quota_modification()
- hwrng: core - don't wait on add_early_randomness()
- i2c: riic: Clear NACK in tend isr
- CIFS: fix max ea value size
- CIFS: Fix oplock handling for SMB 2.1+ protocols
- md/raid0: avoid RAID0 data corruption due to layout confusion.
- mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new
zone
- btrfs: qgroup: Drop quota_root and fs_info parameters from
update_qgroup_status_item
- Btrfs: fix race setting up and completing qgroup rescan workers
- net/ibmvnic: free reset work of removed device from queue
- HID: Add quirk for HP X500 PIXART OEM mouse
- net/mlx5e: Set ECN for received packets using CQE indication
- net/mlx5e: don't set CHECKSUM_COMPLETE on SCTP packets
- mlx5: fix get_ip_proto()
- net/mlx5e: Allow reporting of checksum unnecessary
- net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded
- net/mlx5e: Rx, Check ip headers sanity
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set()
- initramfs: don't free a non-existent initrd
- blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs
- net/ibmvnic: Fix missing { in __ibmvnic_reset
- net_sched: check cops->tcf_block in tc_bind_tclass()
- loop: Add LOOP_SET_BLOCK_SIZE in compat ioctl
- loop: Add LOOP_SET_DIRECT_IO to compat ioctl
- perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig
- ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK
- posix-cpu-timers: Sanitize bogus WARNONS
- x86/apic/vector: Warn when vector space exhaustion breaks affinity
- x86/mm/pti: Do not invoke PTI functions when PTI is disabled
- x86/mm/pti: Handle unaligned address gracefully in pti_clone_pagetable()
- libata/ahci: Drop PCS quirk for Denverton and beyond
- x86/cpu: Add Tiger Lake to Intel family
- platform/x86: intel_pmc_core: Do not ioremap RAM
- mmc: core: Add helper function to indicate if SDIO IRQs is enabled
- mmc: dw_mmc: Re-store SDIO IRQs mask at system resume
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36
- Revert "ceph: use ceph_evict_inode to cleanup inode's resource"
- ceph: use ceph_evict_inode to cleanup inode's resource
- ALSA: hda/realtek - PCI quirk for Medion E4254
- smb3: allow disabling requesting leases
- btrfs: fix allocation of free space cache v1 bitmap pages
- drm/amd/display: Restore backlight brightness after system resume
-- Andrea Righi <email address hidden> Thu, 07 Nov 2019 15:38:04 +0100
-
linux-aws (4.15.0-1053.55) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1053.55 -proposed tracker (LP: #1849016)
[ Ubuntu: 4.15.0-67.76 ]
* bionic/linux: 4.15.0-67.76 -proposed tracker (LP: #1849035)
* Unexpected CFS throttling (LP: #1832151)
- sched/fair: Add lsub_positive() and use it consistently
- sched/fair: Fix low cpu usage with high throttling by removing expiration of
cpu-local slices
- sched/fair: Fix -Wunused-but-set-variable warnings
* [CML] New device IDs for CML-U (LP: #1843774)
- i2c: i801: Add support for Intel Comet Lake
- spi: pxa2xx: Add support for Intel Comet Lake
* CVE-2019-17666
- SAUCE: rtlwifi: rtl8822b: Fix potential overflow on P2P code
- SAUCE: rtlwifi: Fix potential overflow on P2P code
* md raid0/linear doesn't show error state if an array member is removed and
allows successful writes (LP: #1847773)
- md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone
* Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x from yes
to no (LP: #1848492)
- [Config] Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x
from yes to no
* [Packaging] Support building Flattened Image Tree (FIT) kernels
(LP: #1847969)
- [Packaging] add rules to build FIT image
- [Packaging] force creation of headers directory
* bcache: Performance degradation when querying priority_stats (LP: #1840043)
- bcache: add cond_resched() in __bch_cache_cmp()
* Add installer support for iwlmvm adapters (LP: #1848236)
- d-i: Add iwlmvm to nic-modules
* Check for CPU Measurement sampling (LP: #1847590)
- s390/cpumsf: Check for CPU Measurement sampling
* [CML-U] Comet lake platform need ISH driver support (LP: #1843775)
- HID: intel-ish-hid: Add Comet Lake PCI device ID
* intel-lpss driver conflicts with write-combining MTRR region (LP: #1845584)
- SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390 2-in-1
* Fix non-working Realtek USB ethernet after system resume (LP: #1847063)
- r8152: remove extra action copying ethernet address
- r8152: Refresh MAC address during USBDEVFS_RESET
- r8152: Set macpassthru in reset_resume callback
* Ubuntu 18.04 - wrong cpu-mf counter number (LP: #1847109)
- s390/cpum_cf: correct counter number of LAST_HOST_TRANSLATIONS
* PM / hibernate: fix potential memory corruption (LP: #1847118)
- PM / hibernate: memory_bm_find_bit(): Tighten node optimisation
* Microphone-Mute keyboard LED is always on/off on Dell Latitude 3310
(LP: #1846453)
- platform/x86: dell-laptop: Add 2-in-1 devices to the DMI whitelist
- platform/x86: dell-laptop: Removed duplicates in DMI whitelist
* xHCI on AMD Stoney Ridge cannot detect USB 2.0 or 1.1 devices.
(LP: #1846470)
- x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect
* CVE-2019-15098
- ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
* Bionic update: upstream stable patchset 2019-10-15 (LP: #1848274)
- tpm: use tpm_try_get_ops() in tpm-sysfs.c.
- tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations
- drm/bridge: tc358767: Increase AUX transfer length limit
- drm/panel: simple: fix AUO g185han01 horizontal blanking
- video: ssd1307fb: Start page range at page_offset
- drm/stm: attach gem fence to atomic state
- drm/radeon: Fix EEH during kexec
- gpu: drm: radeon: Fix a possible null-pointer dereference in
radeon_connector_set_property()
- ipmi_si: Only schedule continuously in the thread in maintenance mode
- clk: qoriq: Fix -Wunused-const-variable
- clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks
- clk: sirf: Don't reference clk_init_data after registration
- clk: zx296718: Don't reference clk_init_data after registration
- powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL
- powerpc/rtas: use device model APIs and serialization during LPM
- powerpc/futex: Fix warning: 'oldval' may be used uninitialized in this
function
- powerpc/pseries/mobility: use cond_resched when updating device tree
- pinctrl: tegra: Fix write barrier placement in pmx_writel
- vfio_pci: Restore original state on release
- drm/nouveau/volt: Fix for some cards having 0 maximum voltage
- drm/amdgpu/si: fix ASIC tests
- powerpc/64s/exception: machine check use correct cfar for late handler
- powerpc/pseries: correctly track irq state in default idle
- arm64: fix unreachable code issue with cmpxchg
- clk: at91: select parent if main oscillator or bypass is enabled
- scsi: core: Reduce memory required for SCSI logging
- dma-buf/sw_sync: Synchronize signal vs syncpt free
- MIPS: tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean
- i2c-cht-wc: Fix lockdep warning
- PCI: tegra: Fix OF node reference leak
- livepatch: Nullify obj->mod in klp_module_coming()'s error path
- ARM: 8898/1: mm: Don't treat faults reported from cache maintenance as
writes
- rtc: snvs: fix possible race condition
- HID: apple: Fix stuck function keys when using FN
- PCI: rockchip: Propagate errors for optional regulators
- PCI: imx6: Propagate errors for optional regulators
- PCI: exynos: Propagate errors for optional PHYs
- security: smack: Fix possible null-pointer dereferences in
smack_socket_sock_rcv_skb()
- ARM: 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned
address
- fat: work around race with userspace's read via blockdev while mounting
- pktcdvd: remove warning on attempting to register non-passthrough dev
- hypfs: Fix error number left in struct pointer member
- kbuild: clean compressed initramfs image
- ocfs2: wait for recovering done after direct unlock request
- kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K
- bpf: fix use after free in prog symbol exposure
- cxgb4:Fix out-of-bounds MSI-X info array access
- erspan: remove the incorrect mtu limit for erspan
- hso: fix NULL-deref on tty open
- ipv6: drop incoming packets having a v4mapped source address
- net: ipv4: avoid mixed n_redirects and rate_tokens usage
- net: qlogic: Fix memory leak in ql_alloc_large_buffers
- net: Unpublish sk from sk_reuseport_cb before call_rcu
- nfc: fix memory leak in llcp_sock_bind()
- qmi_wwan: add support for Cinterion CLS8 devices
- sch_dsmark: fix potential NULL deref in dsmark_init()
- vsock: Fix a lockdep warning in __vsock_release()
- net/rds: Fix error handling in rds_ib_add_one()
- xen-netfront: do not use ~0U as error return value for xennet_fill_frags()
- tipc: fix unlimited bundling of small messages
- sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
- ipv6: Handle missing host route in __ipv6_ifa_notify
- Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set
- smack: use GFP_NOFS while holding inode_smack::smk_lock
- NFC: fix attrs checks in netlink interface
- kexec: bail out upon SIGKILL when allocating memory.
- drm/panel: check failure cases in the probe func
- drm/amd/display: reprogram VM config when system resume
- pinctrl: amd: disable spurious-firing GPIO IRQs
- pstore: fs superblock limits
- pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c
- mbox: qcom: add APCS child device for QCS404
- ARM: 8875/1: Kconfig: default to AEABI w/ Clang
- arm64: consider stack randomization for mmap base only when necessary
- mips: properly account for stack randomization and stack guard gap
- arm: properly account for stack randomization and stack guard gap
- arm: use STACK_TOP when computing mmap base address
* Bionic update: upstream stable patchset 2019-10-07 (LP: #1847155)
- Revert "Bluetooth: validate BLE connection interval updates"
- powerpc/xive: Fix bogus error code returned by OPAL
- IB/core: Add an unbound WQ type to the new CQ API
- HID: prodikeys: Fix general protection fault during probe
- HID: sony: Fix memory corruption issue on cleanup.
- HID: logitech: Fix general protection fault caused by Logitech driver
- HID: hidraw: Fix invalid read in hidraw_ioctl
- mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword()
- crypto: talitos - fix missing break in switch statement
- iwlwifi: mvm: send BCAST management frames to the right station
- media: tvp5150: fix switch exit in set control handler
- ASoC: fsl: Fix of-node refcount unbalance in fsl_ssi_probe_from_dt()
- arm64: kpti: Whitelist Cortex-A CPUs that don't implement the CSV3 field
- ALSA: hda - Add laptop imic fixup for ASUS M9V laptop
- ALSA: hda - Apply AMD controller workaround for Raven platform
- objtool: Clobber user CFLAGS variable
- pinctrl: sprd: Use define directive for sprd_pinconf_params values
- power: supply: sysfs: ratelimit property read error message
- irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices
- f2fs: check all the data segments against all node ones
- PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it
- blk-mq: move cancel of requeue_work to the front of blk_exit_queue
- Revert "f2fs: avoid out-of-range memory access"
- dm zoned: fix invalid memory access
- f2fs: fix to do sanity check on segment bitmap of LFS curseg
- drm: Flush output polling on shutdown
- net: don't warn in inet diag when IPV6 is disabled
- ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35
- xfs: don't crash on null attr fork xfs_bmapi_read
- Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices
- f2fs: use generic EFSBADCRC/EFSCORRUPTED
- arcnet: provide a buffer big enough to actually receive packets
- cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
- macsec: drop skb sk before calling gro_cells_receive
- net/phy: fix DP83865 10 Mbps HDX loopback disable function
- net: qrtr: Stop rx_worker before freeing node
- net/sched: act_sample: don't push mac header on ip6gre ingress
- net_sched: add max len check for TCA_KIND
- openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC
- ppp: Fix memory leak in ppp_write
- sch_netem: fix a divide by zero in tabledist()
- skge: fix checksum byte order
- usbnet: ignore endpoints with invalid wMaxPacketSize
- usbnet: sanity checking of packet sizes and device mtu
- net/mlx5: Add device ID of upcoming BlueField-2
- mISDN: enforce CAP_NET_RAW for raw sockets
- appletalk: enforce CAP_NET_RAW for raw sockets
- ax25: enforce CAP_NET_RAW for raw sockets
- ieee802154: enforce CAP_NET_RAW for raw sockets
- nfc: enforce CAP_NET_RAW for raw sockets
- ALSA: hda: Flush interrupts on disabling
- regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg
- ASoC: sgtl5000: Fix charge pump source assignment
- dmaengine: bcm2835: Print error in case setting DMA mask fails
- leds: leds-lp5562 allow firmware files up to the maximum length
- media: dib0700: fix link error for dibx000_i2c_set_speed
- media: mtk-cir: lower de-glitch counter for rc-mm protocol
- media: exynos4-is: fix leaked of_node references
- media: hdpvr: Add device num check and handling
- media: i2c: ov5640: Check for devm_gpiod_get_optional() error
- sched/fair: Fix imbalance due to CPU affinity
- sched/core: Fix CPU controller for !RT_GROUP_SCHED
- x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI
fails
- x86/apic: Soft disable APIC before initializing it
- ALSA: hda - Show the fatal CORB/RIRB error more clearly
- ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in
build_adc_controls()
- EDAC/mc: Fix grain_bits calculation
- media: iguanair: add sanity checks
- base: soc: Export soc_device_register/unregister APIs
- ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid
- ia64:unwind: fix double free for mod->arch.init_unw_table
- EDAC/altera: Use the proper type for the IRQ status bits
- ASoC: rsnd: don't call clk_get_rate() under atomic context
- md/raid1: end bio when the device faulty
- md: don't call spare_active in md_reap_sync_thread if all member devices
can't work
- md: don't set In_sync if array is frozen
- ACPI / processor: don't print errors for processorIDs == 0xff
- EDAC, pnd2: Fix ioremap() size in dnv_rd_reg()
- efi: cper: print AER info of PCIe fatal error
- sched/fair: Use rq_lock/unlock in online_fair_sched_group
- media: gspca: zero usb_buf on error
- perf test vfs_getname: Disable ~/.perfconfig to get default output
- media: mtk-mdp: fix reference count on old device tree
- media: fdp1: Reduce FCP not found message level to debug
- media: rc: imon: Allow iMON RC protocol for ffdc 7e device
- dmaengine: iop-adma: use correct printk format strings
- perf record: Support aarch64 random socket_id assignment
- media: i2c: ov5645: Fix power sequence
- media: omap3isp: Don't set streaming state on random subdevs
- media: imx: mipi csi-2: Don't fail if initial state times-out
- net: lpc-enet: fix printk format strings
- ARM: dts: imx7d: cl-som-imx7: make ethernet work again
- media: radio/si470x: kill urb on error
- media: hdpvr: add terminating 0 at end of string
- nbd: add missing config put
- media: dvb-core: fix a memory leak bug
- libperf: Fix alignment trap with xyarray contents in 'perf stat'
- EDAC/amd64: Recognize DRAM device type ECC capability
- EDAC/amd64: Decode syndrome before translating address
- PM / devfreq: passive: Use non-devm notifiers
- PM / devfreq: exynos-bus: Correct clock enable sequence
- media: cec-notifier: clear cec_adap in cec_notifier_unregister
- media: saa7146: add cleanup in hexium_attach()
- media: cpia2_usb: fix memory leaks
- media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate()
- perf trace beauty ioctl: Fix off-by-one error in cmd->string table
- media: ov9650: add a sanity check
- ASoC: es8316: fix headphone mixer volume table
- ACPI / CPPC: do not require the _PSD method
- arm64: kpti: ensure patched kernel text is fetched from PoU
- nvmet: fix data units read and written counters in SMART log
- iommu/amd: Silence warnings under memory pressure
- iommu/iova: Avoid false sharing on fq_timer_on
- libtraceevent: Change users plugin directory
- ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks
- ACPI: custom_method: fix memory leaks
- ACPI / PCI: fix acpi_pci_irq_enable() memory leak
- hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
- md/raid1: fail run raid1 array when active disk less than one
- dmaengine: ti: edma: Do not reset reserved paRAM slots
- kprobes: Prohibit probing on BUG() and WARN() address
- s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding
- ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set
- raid5: don't set STRIPE_HANDLE to stripe which is in batch list
- mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD
- mmc: sdhci: Fix incorrect switch to HS mode
- raid5: don't increment read_errors on EILSEQ return
- libertas: Add missing sentinel at end of if_usb.c fw_table
- ALSA: hda - Drop unsol event handler for Intel HDMI codecs
- drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2)
- media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
- ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93
- btrfs: extent-tree: Make sure we only allocate extents from block groups
with the same type
- media: omap3isp: Set device on omap3isp subdevs
- PM / devfreq: passive: fix compiler warning
- ALSA: firewire-tascam: handle error code when getting current source of
clock
- ALSA: firewire-tascam: check intermediate state of clock status and retry
- scsi: scsi_dh_rdac: zero cdb in send_mode_select()
- printk: Do not lose last line in kmsg buffer dump
- IB/hfi1: Define variables as unsigned long to fix KASAN warning
- randstruct: Check member structs in is_pure_ops_struct()
- ALSA: hda/realtek - Fixup mute led on HP Spectre x360
- fuse: fix missing unlock_page in fuse_writepage()
- parisc: Disable HP HSC-PCI Cards to prevent kernel crash
- x86/retpolines: Fix up backport of a9d57ef15cbe
- KVM: x86: always stop emulation on page fault
- KVM: x86: set ctxt->have_exception in x86_decode_insn()
- KVM: x86: Manually calculate reserved bits when loading PDPTRS
- media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table
- binfmt_elf: Do not move brk for INTERP-less ET_EXEC
- ASoC: Intel: NHLT: Fix debug print format
- ASoC: Intel: Skylake: Use correct function to access iomem space
- ASoC: Intel: Fix use of potentially uninitialized variable
- ARM: samsung: Fix system restart on S3C6410
- ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up
- arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328
- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP
- regulator: Defer init completion for a while after late_initcall
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps
- memcg, oom: don't require __GFP_FS when invoking memcg OOM killer
- memcg, kmem: do not fail __GFP_NOFAIL charges
- ovl: filter of trusted xattr results in audit
- Btrfs: fix use-after-free when using the tree modification log
- btrfs: Relinquish CPUs in btrfs_compare_trees
- btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space
- md/raid6: Set R5_ReadError when there is read failure on parity disk
- md: don't report active array_state until after revalidate_disk() completes.
- md: only call set_in_sync() when it is expected to succeed.
- cfg80211: Purge frame registrations on iftype change
- /dev/mem: Bail out upon SIGKILL.
- ext4: fix warning inside ext4_convert_unwritten_extents_endio
- ext4: fix punch hole for inline_data file systems
- quota: fix wrong condition in is_quota_modification()
- hwrng: core - don't wait on add_early_randomness()
- i2c: riic: Clear NACK in tend isr
- CIFS: fix max ea value size
- CIFS: Fix oplock handling for SMB 2.1+ protocols
- md/raid0: avoid RAID0 data corruption due to layout confusion.
- mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new
zone
- btrfs: qgroup: Drop quota_root and fs_info parameters from
update_qgroup_status_item
- Btrfs: fix race setting up and completing qgroup rescan workers
- net/ibmvnic: free reset work of removed device from queue
- HID: Add quirk for HP X500 PIXART OEM mouse
- net/mlx5e: Set ECN for received packets using CQE indication
- net/mlx5e: don't set CHECKSUM_COMPLETE on SCTP packets
- mlx5: fix get_ip_proto()
- net/mlx5e: Allow reporting of checksum unnecessary
- net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded
- net/mlx5e: Rx, Check ip headers sanity
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set()
- initramfs: don't free a non-existent initrd
- blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs
- net/ibmvnic: Fix missing { in __ibmvnic_reset
- net_sched: check cops->tcf_block in tc_bind_tclass()
- loop: Add LOOP_SET_BLOCK_SIZE in compat ioctl
- loop: Add LOOP_SET_DIRECT_IO to compat ioctl
- perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig
- ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK
- posix-cpu-timers: Sanitize bogus WARNONS
- x86/apic/vector: Warn when vector space exhaustion breaks affinity
- x86/mm/pti: Do not invoke PTI functions when PTI is disabled
- x86/mm/pti: Handle unaligned address gracefully in pti_clone_pagetable()
- libata/ahci: Drop PCS quirk for Denverton and beyond
- x86/cpu: Add Tiger Lake to Intel family
- platform/x86: intel_pmc_core: Do not ioremap RAM
- mmc: core: Add helper function to indicate if SDIO IRQs is enabled
- mmc: dw_mmc: Re-store SDIO IRQs mask at system resume
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36
- Revert "ceph: use ceph_evict_inode to cleanup inode's resource"
- ceph: use ceph_evict_inode to cleanup inode's resource
- ALSA: hda/realtek - PCI quirk for Medion E4254
- smb3: allow disabling requesting leases
- btrfs: fix allocation of free space cache v1 bitmap pages
- drm/amd/display: Restore backlight brightness after system resume
-- Khalid Elmously <email address hidden> Tue, 22 Oct 2019 02:50:20 -0400
-
linux-aws (4.15.0-1052.54) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1052.54 -proposed tracker (LP: #1846110)
[ Ubuntu: 4.15.0-66.75 ]
* bionic/linux: 4.15.0-66.75 -proposed tracker (LP: #1846131)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CVE-2018-21008
- rsi: add fix for crash during assertions
* ipv6: fix neighbour resolution with raw socket (LP: #1834465)
- ipv6: constify rt6_nexthop()
- ipv6: fix neighbour resolution with raw socket
* run_netsocktests from net in ubuntu_kernel_selftests failed with X-4.15
(LP: #1842023)
- SAUCE: selftests: net: replace AF_MAX with INT_MAX in socket.c
* No sound inputs from the external microphone and headset on a Dell machine
(LP: #1842265)
- ALSA: hda - Expand pin_match function to match upcoming new tbls
- ALSA: hda - Define a fallback_pin_fixup_tbl for alc269 family
* Add -fcf-protection=none when using retpoline flags (LP: #1843291)
- SAUCE: kbuild: add -fcf-protection=none when using retpoline flags
* Enhanced Hardware Support - Finalize Naming (LP: #1842774)
- s390: add support for IBM z15 machines
* Bionic update: upstream stable patchset 2019-09-24 (LP: #1845266)
- bridge/mdb: remove wrong use of NLM_F_MULTI
- cdc_ether: fix rndis support for Mediatek based smartphones
- ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()'
- isdn/capi: check message length in capi_write()
- net: Fix null de-reference of device refcount
- net: gso: Fix skb_segment splat when splitting gso_size mangled skb having
linear-headed frag_list
- net: phylink: Fix flow control resolution
- sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
- sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()'
- sctp: use transport pf_retrans in sctp_do_8_2_transport_strike
- tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR
- tipc: add NULL pointer check before calling kfree_rcu
- tun: fix use-after-free when register netdev failed
- btrfs: compression: add helper for type to string conversion
- btrfs: correctly validate compression type
- Revert "MIPS: SiByte: Enable swiotlb for SWARM, LittleSur and BigSur"
- gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist
- gpio: fix line flag validation in linehandle_create
- gpio: fix line flag validation in lineevent_create
- Btrfs: fix assertion failure during fsync and use of stale transaction
- genirq: Prevent NULL pointer dereference in resend_irqs()
- KVM: s390: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl
- KVM: x86: work around leak of uninitialized stack contents
- KVM: nVMX: handle page fault in vmread
- MIPS: VDSO: Prevent use of smp_processor_id()
- MIPS: VDSO: Use same -m%-float cflag as the kernel proper
- powerpc: Add barrier_nospec to raw_copy_in_user()
- drm/meson: Add support for XBGR8888 & ABGR8888 formats
- clk: rockchip: Don't yell about bad mmc phases when getting
- mtd: rawnand: mtk: Fix wrongly assigned OOB buffer pointer issue
- PCI: Always allow probing with driver_override
- ubifs: Correctly use tnc_next() in search_dh_cookie()
- driver core: Fix use-after-free and double free on glue directory
- crypto: talitos - check AES key size
- crypto: talitos - fix CTR alg blocksize
- crypto: talitos - check data blocksize in ablkcipher.
- crypto: talitos - fix ECB algs ivsize
- crypto: talitos - Do not modify req->cryptlen on decryption.
- crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking.
- firmware: ti_sci: Always request response from firmware
- drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto
- Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"
- platform/x86: pmc_atom: Add CB4063 Beckhoff Automation board to
critclk_systems DMI table
- nvmem: Use the same permissions for eeprom as for nvmem
- x86/build: Add -Wnoaddress-of-packed-member to REALMODE_CFLAGS, to silence
GCC9 build warning
- ixgbe: Prevent u8 wrapping of ITR value to something less than 10us
- x86/purgatory: Change compiler flags from -mcmodel=kernel to -mcmodel=large
to fix kexec relocation errors
- modules: fix BUG when load module with rodata=n
- modules: fix compile error if don't have strict module rwx
- HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report
- Input: elan_i2c - remove Lenovo Legion Y7000 PnpID
- powerpc/mm/radix: Use the right page size for vmemmap mapping
- USB: usbcore: Fix slab-out-of-bounds bug during device reset
- phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current
- media: tm6000: double free if usb disconnect while streaming
- xen-netfront: do not assume sk_buff_head list is empty in error handling
- net_sched: let qdisc_put() accept NULL pointer
- KVM: coalesced_mmio: add bounds checking
- firmware: google: check if size is valid when decoding VPD data
- serial: sprd: correct the wrong sequence of arguments
- tty/serial: atmel: reschedule TX after RX was started
- mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings
- nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
- ARM: OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss
- s390/bpf: fix lcgr instruction encoding
- ARM: OMAP2+: Fix omap4 errata warning on other SoCs
- ARM: dts: dra74x: Fix iodelay configuration for mmc3
- s390/bpf: use 32-bit index for tail calls
- fpga: altera-ps-spi: Fix getting of optional confd gpio
- netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info
- NFSv4: Fix return values for nfs4_file_open()
- NFSv4: Fix return value in nfs_finish_open()
- NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup
- Kconfig: Fix the reference to the IDT77105 Phy driver in the description of
ATM_NICSTAR_USE_IDT77105
- qed: Add cleanup in qed_slowpath_start()
- ARM: 8874/1: mm: only adjust sections of valid mm structures
- batman-adv: Only read OGM2 tvlv_len after buffer len check
- r8152: Set memory to all 0xFFs on failed reg reads
- x86/apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines
- netfilter: nf_conntrack_ftp: Fix debug output
- NFSv2: Fix eof handling
- NFSv2: Fix write regression
- kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the
first symbol
- cifs: set domainName when a domain-key is used in multiuser
- cifs: Use kzfree() to zero out the password
- ARM: 8901/1: add a criteria for pfn_valid of arm
- sky2: Disable MSI on yet another ASUS boards (P6Xxxx)
- i2c: designware: Synchronize IRQs when unregistering slave client
- perf/x86/intel: Restrict period on Nehalem
- perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops
- amd-xgbe: Fix error path in xgbe_mod_init()
- tools/power x86_energy_perf_policy: Fix "uninitialized variable" warnings at
-O2
- tools/power x86_energy_perf_policy: Fix argument parsing
- tools/power turbostat: fix buffer overrun
- net: seeq: Fix the function used to release some memory in an error handling
path
- dmaengine: ti: dma-crossbar: Fix a memory leak bug
- dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe()
- x86/uaccess: Don't leak the AC flags into __get_user() argument evaluation
- x86/hyper-v: Fix overflow bug in fill_gva_list()
- keys: Fix missing null pointer check in request_key_auth_describe()
- iommu/amd: Flush old domains in kdump kernel
- iommu/amd: Fix race in increase_address_space()
- PCI: kirin: Fix section mismatch warning
- floppy: fix usercopy direction
- binfmt_elf: move brk out of mmap when doing direct loader exec
- tcp: Reset send_head when removing skb from write-queue
- tcp: Don't dequeue SYN/FIN-segments from write-queue
- media: technisat-usb2: break out of loop at end of buffer
- tools: bpftool: close prog FD before exit on showing a single program
- netfilter: xt_physdev: Fix spurious error message in physdev_mt_check
- ibmvnic: Do not process reset during or after device removal
- net: aquantia: fix out of memory condition on rx side
* Bionic update: upstream stable patchset 2019-09-18 (LP: #1844558)
- ALSA: hda - Fix potential endless loop at applying quirks
- ALSA: hda/realtek - Fix overridden device-specific initialization
- ALSA: hda/realtek - Fix the problem of two front mics on a ThinkCentre
- sched/fair: Don't assign runtime for throttled cfs_rq
- drm/vmwgfx: Fix double free in vmw_recv_msg()
- xfrm: clean up xfrm protocol checks
- PCI: designware-ep: Fix find_first_zero_bit() usage
- PCI: dra7xx: Fix legacy INTD IRQ handling
- vhost/test: fix build for vhost test
- batman-adv: fix uninit-value in batadv_netlink_get_ifindex()
- batman-adv: Only read OGM tvlv_len after buffer len check
- hv_sock: Fix hang when a connection is closed
- powerpc/64: mark start_here_multiplatform as __ref
- arm64: dts: rockchip: enable usb-host regulators at boot on rk3328-rock64
- scripts/decode_stacktrace: match basepath using shell prefix operator, not
regex
- clk: s2mps11: Add used attribute to s2mps11_dt_match
- kernel/module: Fix mem leak in module_add_modinfo_attrs
- ALSA: hda/realtek - Enable internal speaker & headset mic of ASUS UX431FL
- {nl,mac}80211: fix interface combinations on crypto controlled devices
- x86/ftrace: Fix warning and considate ftrace_jmp_replace() and
ftrace_call_replace()
- media: stm32-dcmi: fix irq = 0 case
- modules: always page-align module section allocations
- scsi: qla2xxx: Move log messages before issuing command to firmware
- keys: Fix the use of the C++ keyword "private" in uapi/linux/keyctl.h
- Drivers: hv: kvp: Fix two "this statement may fall through" warnings
- remoteproc: qcom: q6v5-mss: add SCM probe dependency
- KVM: x86: hyperv: enforce vp_index < KVM_MAX_VCPUS
- KVM: x86: hyperv: consistently use 'hv_vcpu' for 'struct kvm_vcpu_hv'
variables
- drm/i915: Fix intel_dp_mst_best_encoder()
- drm/i915: Rename PLANE_CTL_DECOMPRESSION_ENABLE
- drm/i915/gen9+: Fix initial readout for Y tiled framebuffers
- drm/atomic_helper: Disallow new modesets on unregistered connectors
- Drivers: hv: kvp: Fix the indentation of some "break" statements
- Drivers: hv: kvp: Fix the recent regression caused by incorrect clean-up
- drm/amd/dm: Understand why attaching path/tile properties are needed
- ARM: davinci: da8xx: define gpio interrupts as separate resources
- ARM: davinci: dm365: define gpio interrupts as separate resources
- ARM: davinci: dm646x: define gpio interrupts as separate resources
- ARM: davinci: dm355: define gpio interrupts as separate resources
- ARM: davinci: dm644x: define gpio interrupts as separate resources
- media: vim2m: use workqueue
- media: vim2m: use cancel_delayed_work_sync instead of flush_schedule_work
- drm/i915: Restore sane defaults for KMS on GEM error load
- KVM: PPC: Book3S HV: Fix race between kvm_unmap_hva_range and MMU mode
switch
- Btrfs: clean up scrub is_dev_replace parameter
- Btrfs: fix deadlock with memory reclaim during scrub
- btrfs: Remove extent_io_ops::fill_delalloc
- btrfs: Fix error handling in btrfs_cleanup_ordered_extents
- scsi: megaraid_sas: Fix combined reply queue mode detection
- scsi: megaraid_sas: Add check for reset adapter bit
- media: vim2m: only cancel work if it is for right context
- ARC: show_regs: lockdep: re-enable preemption
- ARC: mm: do_page_fault fixes #1: relinquish mmap_sem if signal arrives while
handle_mm_fault
- IB/uverbs: Fix OOPs upon device disassociation
- drm/vblank: Allow dynamic per-crtc max_vblank_count
- drm/i915/ilk: Fix warning when reading emon_status with no output
- mfd: Kconfig: Fix I2C_DESIGNWARE_PLATFORM dependencies
- tpm: Fix some name collisions with drivers/char/tpm.h
- bcache: replace hard coded number with BUCKET_GC_GEN_MAX
- bcache: treat stale && dirty keys as bad keys
- KVM: VMX: Compare only a single byte for VMCS' "launched" in vCPU-run
- iio: adc: exynos-adc: Add S5PV210 variant
- iio: adc: exynos-adc: Use proper number of channels for Exynos4x12
- drm/nouveau: Don't WARN_ON VCPI allocation failures
- x86/kvmclock: set offset for kvm unstable clock
- powerpc/kvm: Save and restore host AMR/IAMR/UAMOR
- mmc: renesas_sdhi: Fix card initialization failure in high speed mode
- btrfs: scrub: pass fs_info to scrub_setup_ctx
- btrfs: init csum_list before possible free
- PCI: qcom: Don't deassert reset GPIO during probe
- drm: add __user attribute to ptr_to_compat()
- CIFS: Fix error paths in writeback code
- CIFS: Fix leaking locked VFS cache pages in writeback retry
- drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set
- drm/i915: Sanity check mmap length against object size
- IB/mlx5: Reset access mask when looping inside page fault handler
- kvm: mmu: Fix overflow on kvm mmu page limit calculation
- x86/kvm: move kvm_load/put_guest_xcr0 into atomic context
- KVM: x86: Always use 32-bit SMRAM save state for 32-bit kernels
- cifs: Fix lease buffer length error
- ext4: protect journal inode's blocks using block_validity
- dm mpath: fix missing call of path selector type->end_io
- blk-mq: free hw queue's resource in hctx's release handler
- mmc: sdhci-pci: Add support for Intel ICP
- mmc: sdhci-pci: Add support for Intel CML
- dm crypt: move detailed message into debug level
- kvm: Check irqchip mode before assign irqfd
- drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2)
- drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc
- Btrfs: fix race between block group removal and block group allocation
- cifs: add spinlock for the openFileList to cifsInodeInfo
- IB/hfi1: Avoid hardlockup with flushlist_lock
- apparmor: reset pos on failure to unpack for various functions
- staging: wilc1000: fix error path cleanup in wilc_wlan_initialize()
- scsi: zfcp: fix request object use-after-free in send path causing wrong
traces
- cifs: Properly handle auto disabling of serverino option
- ceph: use ceph_evict_inode to cleanup inode's resource
- KVM: x86: optimize check for valid PAT value
- KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value
- KVM: VMX: Fix handling of #MC that occurs during VM-Entry
- KVM: VMX: check CPUID before allowing read/write of IA32_XSS
- resource: Include resource end in walk_*() interfaces
- resource: Fix find_next_iomem_res() iteration issue
- resource: fix locking in find_next_iomem_res()
- pstore: Fix double-free in pstore_mkfile() failure path
- dm thin metadata: check if in fail_io mode when setting needs_check
- drm/panel: Add support for Armadeus ST0700 Adapt
- ALSA: hda - Fix intermittent CORB/RIRB stall on Intel chips
- iommu/iova: Remove stale cached32_node
- gpio: don't WARN() on NULL descs if gpiolib is disabled
- i2c: at91: disable TXRDY interrupt after sending data
- i2c: at91: fix clk_offset for sama5d2
- mm/migrate.c: initialize pud_entry in migrate_vma()
- iio: adc: gyroadc: fix uninitialized return code
- NFSv4: Fix delegation state recovery
- bcache: only clear BTREE_NODE_dirty bit when it is set
- bcache: add comments for mutex_lock(&b->write_lock)
- virtio/s390: fix race on airq_areas[]
- ext4: don't perform block validity checks on the journal inode
- ext4: fix block validity checks for journal inodes using indirect blocks
- ext4: unsigned int compared against zero
- powerpc/tm: Remove msr_tm_active()
* Bionic update: upstream stable patchset 2019-09-10 (LP: #1843463)
- net: tundra: tsi108: use spin_lock_irqsave instead of spin_lock_irq in IRQ
context
- hv_netvsc: Fix a warning of suspicious RCU usage
- net: tc35815: Explicitly check NET_IP_ALIGN is not zero in tc35815_rx
- Bluetooth: btqca: Add a short delay before downloading the NVM
- ibmveth: Convert multicast list size for little-endian system
- gpio: Fix build error of function redefinition
- drm/mediatek: use correct device to import PRIME buffers
- drm/mediatek: set DMA max segment size
- cxgb4: fix a memory leak bug
- liquidio: add cleanup in octeon_setup_iq()
- net: myri10ge: fix memory leaks
- lan78xx: Fix memory leaks
- vfs: fix page locking deadlocks when deduping files
- cx82310_eth: fix a memory leak bug
- net: kalmia: fix memory leaks
- wimax/i2400m: fix a memory leak bug
- ravb: Fix use-after-free ravb_tstamp_skb
- kprobes: Fix potential deadlock in kprobe_optimizer()
- HID: cp2112: prevent sleeping function called from invalid context
- Input: hyperv-keyboard: Use in-place iterator API in the channel callback
- Tools: hv: kvp: eliminate 'may be used uninitialized' warning
- IB/mlx4: Fix memory leaks
- ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr()
- ceph: fix buffer free while holding i_ceph_lock in
__ceph_build_xattrs_blob()
- ceph: fix buffer free while holding i_ceph_lock in fill_inode()
- KVM: arm/arm64: Only skip MMIO insn once
- libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer
- spi: bcm2835aux: unifying code between polling and interrupt driven code
- spi: bcm2835aux: remove dangerous uncontrolled read of fifo
- spi: bcm2835aux: fix corruptions for longer spi transfers
- net: fix skb use after free in netpoll
- net_sched: fix a NULL pointer deref in ipt action
- net: stmmac: dwmac-rk: Don't fail if phy regulator is absent
- tcp: inherit timestamp on mtu probe
- tcp: remove empty skb from write queue in error cases
- net: sched: act_sample: fix psample group handling on overwrite
- mld: fix memory leak in mld_del_delrec()
- x86/boot: Preserve boot_params.secure_boot from sanitizing
- tools: bpftool: fix error message (prog -> object)
- scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure
- afs: Fix leak in afs_lookup_cell_rcu()
* Bionic update: upstream stable patchset 2019-09-09 (LP: #1843338)
- dmaengine: ste_dma40: fix unneeded variable warning
- auxdisplay: panel: need to delete scan_timer when misc_register fails in
panel_attach
- iommu/dma: Handle SG length overflow better
- usb: gadget: composite: Clear "suspended" on reset/disconnect
- usb: gadget: mass_storage: Fix races between fsg_disable and fsg_set_alt
- xen/blkback: fix memory leaks
- i2c: rcar: avoid race when unregistering slave client
- i2c: emev2: avoid race when unregistering slave client
- drm/ast: Fixed reboot test may cause system hanged
- usb: host: fotg2: restart hcd after port reset
- tools: hv: fix KVP and VSS daemons exit code
- watchdog: bcm2835_wdt: Fix module autoload
- drm/bridge: tfp410: fix memleak in get_modes()
- scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value
- drm/tilcdc: Register cpufreq notifier after we have initialized crtc
- ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term
- ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit
- net/smc: make sure EPOLLOUT is raised
- tcp: make sure EPOLLOUT wont be missed
- mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n
- ALSA: line6: Fix memory leak at line6_init_pcm() error path
- ALSA: seq: Fix potential concurrent access to the deleted pool
- kvm: x86: skip populating logical dest map if apic is not sw enabled
- KVM: x86: Don't update RIP or do single-step on faulting emulation
- x86/apic: Do not initialize LDR and DFR for bigsmp
- ftrace: Fix NULL pointer dereference in t_probe_next()
- ftrace: Check for successful allocation of hash
- ftrace: Check for empty hash and comment the race with registering probes
- usb-storage: Add new JMS567 revision to unusual_devs
- USB: cdc-wdm: fix race between write and disconnect due to flag abuse
- usb: chipidea: udc: don't do hardware access if gadget has stopped
- usb: host: ohci: fix a race condition between shutdown and irq
- usb: host: xhci: rcar: Fix typo in compatible string matching
- USB: storage: ums-realtek: Update module parameter description for
auto_delink_en
- uprobes/x86: Fix detection of 32-bit user mode
- mmc: sdhci-of-at91: add quirk for broken HS200
- mmc: core: Fix init of SD cards reporting an invalid VDD range
- stm class: Fix a double free of stm_source_device
- intel_th: pci: Add support for another Lewisburg PCH
- intel_th: pci: Add Tiger Lake support
- drm/i915: Don't deballoon unused ggtt drm_mm_node in linux guest
- VMCI: Release resource if the work is already queued
- crypto: ccp - Ignore unconfigured CCP device on suspend/resume
- Revert "cfg80211: fix processing world regdomain when non modular"
- mac80211: fix possible sta leak
- KVM: PPC: Book3S: Fix incorrect guest-to-user-translation error handling
- KVM: arm/arm64: vgic: Fix potential deadlock when ap_list is long
- KVM: arm/arm64: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI
- NFS: Clean up list moves of struct nfs_page
- NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend()
- NFS: Pass error information to the pgio error cleanup routine
- NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0
- i2c: piix4: Fix port selection for AMD Family 16h Model 30h
- x86/ptrace: fix up botched merge of spectrev1 fix
- Revert "ASoC: Fail card instantiation if DAI format setup fails"
- nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns
- afs: Fix the CB.ProbeUuid service handler to reply correctly
- dmaengine: stm32-mdma: Fix a possible null-pointer dereference in
stm32_mdma_irq_handler()
- omap-dma/omap_vout_vrfb: fix off-by-one fi value
- arm64: cpufeature: Don't treat granule sizes as strict
- tools: hv: fixed Python pep8/flake8 warnings for lsvmbus
- ipv4/icmp: fix rt dst dev null pointer dereference
- ALSA: hda - Fixes inverted Conexant GPIO mic mute led
- usb: hcd: use managed device resources
- lib: logic_pio: Fix RCU usage
- lib: logic_pio: Avoid possible overlap for unregistering regions
- lib: logic_pio: Add logic_pio_unregister_range()
- drm/amdgpu: Add APTX quirk for Dell Latitude 5495
- drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe()
- bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-
free
* New ID in ums-realtek module breaks cardreader (LP: #1838886) // Bionic
update: upstream stable patchset 2019-09-09 (LP: #1843338)
- USB: storage: ums-realtek: Whitelist auto-delink support
* TC filters are broken on Mellanox after upstream stable updates
(LP: #1842502)
- net/mlx5e: Remove redundant vport context vlan update
- net/mlx5e: Properly order min inline mode setup while parsing TC matches
- net/mlx5e: Get the required HW match level while parsing TC flow matches
- net/mlx5e: Always use the match level enum when parsing TC rule match
- net/mlx5e: Don't match on vlan non-existence if ethertype is wildcarded
-- Kleber Sacilotto de Souza <email address hidden> Tue, 01 Oct 2019 15:55:22 +0200
-
linux-aws (4.15.0-1051.53) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1051.53 -proposed tracker (LP: #1844380)
* linux-aws: update EFA driver to version 1.4.0 (LP: #1844166)
- SAUCE: efa: don't elide module initialization
- SAUCE: linux/efa: Fix kcompat defines usage before include
- SAUCE: linux/efa: Bump driver version to 1.3.1
- SAUCE: linux/efa: Expose device statistics
- SAUCE: linux/efa: Remove umem check on dereg MR flow
- SAUCE: linux/efa: Add EFA definitions usage
- SAUCE: linux/efa: Rate limit admin queue error prints
- SAUCE: linux/efa: Remove check that prevents destroy of resources in error
flows
- SAUCE: linux/efa: Move driver_id into struct ib_device_ops
- SAUCE: linux/efa: Move uverbs_abi_ver into struct ib_device_ops
- SAUCE: linux/efa: Move owner into struct ib_device_ops
- SAUCE: linux/efa: Clean destroy CQ in drivers do not return errors
- SAUCE: linux/efa: Combine create CQ functions
- SAUCE: linux/efa: Fix wrong ifdef clause
- SAUCE: linux/efa: Align with CQ core allocations
- SAUCE: linux/efa: Use existing FIELD_SIZEOF macro
- SAUCE: linux/efa: Assign err when failing to create everbs device
- SAUCE: linux/efa: Bump driver version to 1.4.0
* arm64: large modules fail to load (LP: #1841109)
- [config] aws: Remove CONFIG_ARM64_MODULE_CMODEL_LARGE
* AWS: per-device block I/O timeout support (LP: #1841461)
- block: add io timeout to sysfs
- block: don't show io_timeout if driver has no timeout handler
[ Ubuntu: 4.15.0-65.74 ]
* bionic/linux: 4.15.0-65.74 -proposed tracker (LP: #1844403)
* arm64: large modules fail to load (LP: #1841109)
- arm64/kernel: kaslr: reduce module randomization range to 4 GB
- arm64/kernel: don't ban ADRP to work around Cortex-A53 erratum #843419
- arm64: fix undefined reference to 'printk'
- arm64/kernel: rename module_emit_adrp_veneer->module_emit_veneer_for_adrp
- [config] Remove CONFIG_ARM64_MODULE_CMODEL_LARGE
* CVE-2018-20976
- xfs: clear sb->s_fs_info on mount failure
* br_netfilter: namespace sysctl operations (LP: #1836910)
- net: bridge: add bitfield for options and convert vlan opts
- net: bridge: convert nf call options to bits
- netfilter: bridge: port sysctls to use brnf_net
- netfilter: bridge: namespace bridge netfilter sysctls
- netfilter: bridge: prevent UAF in brnf_exit_net()
* tuntap: correctly set SOCKWQ_ASYNC_NOSPACE (LP: #1830756)
- tuntap: correctly set SOCKWQ_ASYNC_NOSPACE
* Bionic update: upstream stable patchset 2019-08-30 (LP: #1842114)
- HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT
- MIPS: kernel: only use i8253 clocksource with periodic clockevent
- mips: fix cacheinfo
- netfilter: ebtables: fix a memory leak bug in compat
- ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks
- bonding: Force slave speed check after link state recovery for 802.3ad
- can: dev: call netif_carrier_off() in register_candev()
- ASoC: Fail card instantiation if DAI format setup fails
- st21nfca_connectivity_event_received: null check the allocation
- st_nci_hci_connectivity_event_received: null check the allocation
- ASoC: ti: davinci-mcasp: Correct slot_width posed constraint
- net: usb: qmi_wwan: Add the BroadMobi BM818 card
- qed: RDMA - Fix the hw_ver returned in device attributes
- isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in
start_isoc_chain()
- netfilter: ipset: Fix rename concurrency with listing
- isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack
- perf bench numa: Fix cpu0 binding
- can: sja1000: force the string buffer NULL-terminated
- can: peak_usb: force the string buffer NULL-terminated
- net/ethernet/qlogic/qed: force the string buffer NULL-terminated
- NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim()
- HID: input: fix a4tech horizontal wheel custom usage
- SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL
- net: cxgb3_main: Fix a resource leak in a error path in 'init_one()'
- net: hisilicon: make hip04_tx_reclaim non-reentrant
- net: hisilicon: fix hip04-xmit never return TX_BUSY
- net: hisilicon: Fix dma_map_single failed on arm64
- libata: have ata_scsi_rw_xlat() fail invalid passthrough requests
- libata: add SG safety checks in SFF pio transfers
- x86/lib/cpu: Address missing prototypes warning
- drm/vmwgfx: fix memory leak when too many retries have occurred
- perf ftrace: Fix failure to set cpumask when only one cpu is present
- perf cpumap: Fix writing to illegal memory in handling cpumap mask
- perf pmu-events: Fix missing "cpu_clk_unhalted.core" event
- selftests: kvm: Adding config fragments
- HID: wacom: correct misreported EKR ring values
- HID: wacom: Correct distance scale for 2nd-gen Intuos devices
- Revert "dm bufio: fix deadlock with loop device"
- ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply
- libceph: fix PG split vs OSD (re)connect race
- drm/nouveau: Don't retry infinitely when receiving no data on i2c over AUX
- gpiolib: never report open-drain/source lines as 'input' to user-space
- userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx
- x86/retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386
- x86/apic: Handle missing global clockevent gracefully
- x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h
- x86/boot: Save fields explicitly, zero out everything else
- x86/boot: Fix boot regression caused by bootparam sanitizing
- dm kcopyd: always complete failed jobs
- dm btree: fix order of block initialization in btree_split_beneath
- dm space map metadata: fix missing store of apply_bops() return value
- dm table: fix invalid memory accesses with too high sector number
- dm zoned: improve error handling in reclaim
- dm zoned: improve error handling in i/o map code
- dm zoned: properly handle backing device failure
- genirq: Properly pair kobject_del() with kobject_add()
- mm, page_owner: handle THP splits correctly
- mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely
- mm/zsmalloc.c: fix race condition in zs_destroy_pool
- xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT
- dm zoned: fix potential NULL dereference in dmz_do_reclaim()
- powerpc: Allow flush_(inval_)dcache_range to work across ranges >4GB
- can: mcp251x: add error check when wq alloc failed
- netfilter: ipset: Actually allow destination MAC address for hash:ip,mac
sets too
- netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and
hash:ip,mac sets
- rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet
- net: phy: phy_led_triggers: Fix a possible null-pointer dereference in
phy_led_trigger_change_speed()
- NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts
- net: stmmac: Fix issues when number of Queues >= 4
- KVM: arm64: Don't write junk to sysregs on reset
- KVM: arm: Don't write junk to CP15 registers on reset
- xfs: don't trip over uninitialized buffer on extent read of corrupted inode
- xfs: Move fs/xfs/xfs_attr.h to fs/xfs/libxfs/xfs_attr.h
- xfs: Add helper function xfs_attr_try_sf_addname
- xfs: Add attibute remove and helper functions
* Bionic update: upstream stable patchset 2019-08-27 (LP: #1841652)
- sh: kernel: hw_breakpoint: Fix missing break in switch statement
- mm/usercopy: use memory range to be accessed for wraparound check
- mm/memcontrol.c: fix use after free in mem_cgroup_iter()
- bpf: get rid of pure_initcall dependency to enable jits
- bpf: restrict access to core bpf sysctls
- bpf: add bpf_jit_limit knob to restrict unpriv allocations
- xtensa: add missing isync to the cpu_reset TLB code
- ALSA: hda - Apply workaround for another AMD chip 1022:1487
- ALSA: hda - Fix a memory leak bug
- HID: holtek: test for sanity of intfdata
- HID: hiddev: avoid opening a disconnected device
- HID: hiddev: do cleanup in failure of opening a device
- Input: kbtab - sanity check for endpoint type
- Input: iforce - add sanity checks
- net: usb: pegasus: fix improper read if get_registers() fail
- netfilter: ebtables: also count base chain policies
- clk: at91: generated: Truncate divisor to GENERATED_MAX_DIV + 1
- clk: renesas: cpg-mssr: Fix reset control race condition
- xen/pciback: remove set but not used variable 'old_state'
- irqchip/gic-v3-its: Free unused vpt_page when alloc vpe table fail
- irqchip/irq-imx-gpcv2: Forward irq type to parent
- perf header: Fix divide by zero error if f_header.attr_size==0
- perf header: Fix use of unitialized value warning
- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
- drm/bridge: lvds-encoder: Fix build error while CONFIG_DRM_KMS_HELPER=m
- scsi: hpsa: correct scsi command status issue after reset
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences
- ata: libahci: do not complain in case of deferred probe
- kbuild: modpost: handle KBUILD_EXTRA_SYMBOLS only for external modules
- arm64/efi: fix variable 'si' set but not used
- arm64: unwind: Prohibit probing on return_address()
- arm64/mm: fix variable 'pud' set but not used
- IB/core: Add mitigation for Spectre V1
- IB/mad: Fix use-after-free in ib mad completion handling
- drm: msm: Fix add_gpu_components
- ocfs2: remove set but not used variable 'last_hash'
- asm-generic: fix -Wtype-limits compiler warnings
- KVM: arm/arm64: Sync ICH_VMCR_EL2 back when about to block
- staging: comedi: dt3000: Fix signed integer overflow 'divider * base'
- staging: comedi: dt3000: Fix rounding up of timer divisor
- iio: adc: max9611: Fix temperature reading in probe
- USB: core: Fix races in character device registration and deregistraion
- usb: gadget: udc: renesas_usb3: Fix sysfs interface of "role"
- usb: cdc-acm: make sure a refcount is taken early enough
- USB: CDC: fix sanity checks in CDC union parser
- USB: serial: option: add D-Link DWM-222 device ID
- USB: serial: option: Add support for ZTE MF871A
- USB: serial: option: add the BroadMobi BM818 card
- USB: serial: option: Add Motorola modem UARTs
- bpf: fix bpf_jit_limit knob for PAGE_SIZE >= 64K
- arm64: ftrace: Ensure module ftrace trampoline is coherent with I-side
- netfilter: conntrack: Use consistent ct id hash calculation
- Input: psmouse - fix build error of multiple definition
- iommu/amd: Move iommu_init_pci() to .init section
- bnx2x: Fix VF's VLAN reconfiguration in reload.
- net/mlx4_en: fix a memory leak bug
- net/packet: fix race in tpacket_snd()
- sctp: fix the transport error_count check
- xen/netback: Reset nr_frags before freeing skb
- net/mlx5e: Only support tx/rx pause setting for port owner
- net/mlx5e: Use flow keys dissector to parse packets for ARFS
- team: Add vlan tx offload to hw_enc_features
- bonding: Add vlan tx offload to hw_enc_features
- mmc: sdhci-of-arasan: Do now show error message in case of deffered probe
- xfrm: policy: remove pcpu policy cache
- mm/hmm: fix bad subpage pointer in try_to_unmap_one
- mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and
MPOL_MF_STRICT were specified
- mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind
- riscv: Make __fstate_clean() work correctly.
- Revert "kmemleak: allow to coexist with fault injection"
- sctp: fix memleak in sctp_send_reset_streams
* Bionic update: upstream stable patchset 2019-08-16 (LP: #1840520)
- iio: adc: max9611: Fix misuse of GENMASK macro
- crypto: ccp - Fix oops by properly managing allocated structures
- crypto: ccp - Ignore tag length when decrypting GCM ciphertext
- usb: usbfs: fix double-free of usb memory upon submiturb error
- usb: iowarrior: fix deadlock on disconnect
- sound: fix a memory leak bug
- mmc: cavium: Set the correct dma max segment size for mmc_host
- mmc: cavium: Add the missing dma unmap when the dma has finished.
- loop: set PF_MEMALLOC_NOIO for the worker thread
- Input: synaptics - enable RMI mode for HP Spectre X360
- lkdtm: support llvm-objcopy
- crypto: ccp - Validate buffer lengths for copy operations
- crypto: ccp - Add support for valid authsize values less than 16
- perf annotate: Fix s390 gap between kernel end and module start
- perf db-export: Fix thread__exec_comm()
- perf record: Fix module size on s390
- usb: host: xhci-rcar: Fix timeout in xhci_suspend()
- usb: yurex: Fix use-after-free in yurex_delete
- can: rcar_canfd: fix possible IRQ storm on high load
- can: peak_usb: fix potential double kfree_skb()
- netfilter: nfnetlink: avoid deadlock due to synchronous request_module
- vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn
- netfilter: Fix rpfilter dropping vrf packets by mistake
- netfilter: nft_hash: fix symhash with modulus one
- scripts/sphinx-pre-install: fix script for RHEL/CentOS
- iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND
- mac80211: don't warn about CW params when not using them
- hwmon: (nct6775) Fix register address and added missed tolerance for nct6106
- drm: silence variable 'conn' set but not used
- cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init()
- s390/qdio: add sanity checks to the fast-requeue path
- ALSA: compress: Fix regression on compressed capture streams
- ALSA: compress: Prevent bypasses of set_params
- ALSA: compress: Don't allow paritial drain operations on capture streams
- ALSA: compress: Be more restrictive about when a drain is allowed
- perf tools: Fix proper buffer size for feature processing
- perf probe: Avoid calling freeing routine multiple times for same pointer
- drbd: dynamically allocate shash descriptor
- ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id()
- ARM: davinci: fix sleep.S build error on ARMv4
- scsi: megaraid_sas: fix panic on loading firmware crashdump
- scsi: ibmvfc: fix WARN_ON during event pool release
- scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG
- test_firmware: fix a memory leak bug
- tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop
- perf/core: Fix creating kernel counters for PMUs that override event->cpu
- HID: sony: Fix race condition between rumble and device remove.
- can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
- can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
- hwmon: (nct7802) Fix wrong detection of in4 presence
- drm/i915: Fix wrong escape clock divisor init for GLK
- ALSA: firewire: fix a memory leak bug
- ALSA: hda - Don't override global PCM hw info flag
- ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457)
- mac80211: don't WARN on short WMM parameters from AP
- SMB3: Fix deadlock in validate negotiate hits reconnect
- smb3: send CAP_DFS capability during session setup
- NFSv4: Only pass the delegation to setattr if we're sending a truncate
- NFSv4: Fix an Oops in nfs4_do_setattr
- KVM: Fix leak vCPU's VMCS value into other pCPU
- mwifiex: fix 802.11n/WPA detection
- iwlwifi: don't unmap as page memory that was mapped as single
- iwlwifi: mvm: fix an out-of-bound access
- iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41
- iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support
- iio: cros_ec_accel_legacy: Fix incorrect channel setting
- staging: android: ion: Bail out upon SIGKILL when allocating memory.
- x86/purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS
- usb: typec: tcpm: free log buf memory when remove debug file
- usb: typec: tcpm: remove tcpm dir if no children
- usb: typec: tcpm: Add NULL check before dereferencing config
- netfilter: conntrack: always store window size un-scaled
- drm/amd/display: Wait for backlight programming completion in set backlight
level
- drm/amd/display: use encoder's engine id to find matched free audio device
- drm/amd/display: Fix dc_create failure handling and 666 color depths
- drm/amd/display: Only enable audio if speaker allocation exists
- drm/amd/display: Increase size of audios array
- allocate_flower_entry: should check for null deref
- s390/dma: provide proper ARCH_ZONE_DMA_BITS value
- ALSA: hiface: fix multiple memory leak bugs
* Bionic update: upstream stable patchset 2019-08-15 (LP: #1840378)
- scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
- ARM: dts: Add pinmuxing for i2c2 and i2c3 for LogicPD SOM-LV
- ARM: dts: Add pinmuxing for i2c2 and i2c3 for LogicPD torpedo
- HID: wacom: fix bit shift for Cintiq Companion 2
- HID: Add quirk for HP X1200 PIXART OEM mouse
- RDMA: Directly cast the sockaddr union to sockaddr
- IB: directly cast the sockaddr union to aockaddr
- atm: iphase: Fix Spectre v1 vulnerability
- ife: error out when nla attributes are empty
- ip6_tunnel: fix possible use-after-free on xmit
- net: bridge: delete local fdb on device init failure
- net: bridge: mcast: don't delete permanent entries when fast leave is
enabled
- net: fix ifindex collision during namespace removal
- net/mlx5: Use reversed order when unregister devices
- net: phylink: Fix flow control for fixed-link
- net: sched: Fix a possible null-pointer dereference in dequeue_func()
- NFC: nfcmrvl: fix gpio-handling regression
- tipc: compat: allow tipc commands without arguments
- compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
- net/mlx5e: Prevent encap flow counter update async to user query
- tun: mark small packets as owned by the tap sock
- mvpp2: refactor MTU change code
- bnx2x: Disable multi-cos feature.
- cgroup: Call cgroup_release() before __exit_signal()
- cgroup: Implement css_task_iter_skip()
- cgroup: Include dying leaders with live threads in PROCS iterations
- cgroup: css_task_iter_skip()'d iterators must be advanced before accessed
- cgroup: Fix css_task_iter_advance_css_set() cset skip condition
- spi: bcm2835: Fix 3-wire mode if DMA is enabled
- driver core: Establish order of operations for device_add and device_del via
bitflag
- drivers/base: Introduce kill_device()
- libnvdimm/bus: Prevent duplicate device_unregister() calls
- libnvdimm/region: Register badblocks before namespaces
- libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant
- libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock
- ipip: validate header length in ipip_tunnel_xmit
- mvpp2: fix panic on module removal
- net/mlx5: Fix modify_cq_in alignment
- r8169: don't use MSI before RTL8168d
* VIMC module not available (CONFIG_VIDEO_VIMC not set) (LP: #1831482)
- [Config] Enable VIMC module
* reboot will introduce an alarm 'beep ...' during BIOS phase (LP: #1840395)
- ALSA: hda - Let all conexant codec enter D3 when rebooting
- ALSA: hda - Add a generic reboot_notify
* Include Sunix serial/parallel driver (LP: #1826716)
- serial: 8250_pci: Add support for Sunix serial boards
- parport: parport_serial: Add support for Sunix Multi I/O boards
* Intel HDMI audio print "Unable to sync register" errors (LP: #1840394)
- ALSA: hda - Don't resume forcibly i915 HDMI/DP codec
* Support cpufreq, thermal sensors & cooling cells on iMX6Q based Nitrogen6x
board (LP: #1840437)
- arm: imx: Add MODULE_ALIAS for cpufreq
- ARM: dts: imx: Add missing OPP properties for CPUs
- ARM: dts: imx7d: use operating-points-v2 for cpu
- ARM: dts: imx7d: remove "operating-points" property for cpu1
- ARM: dts: imx: add cooling-cells for cpufreq cooling device
- ARM: dts: imx6: add thermal sensor and cooling cells
* hns3: ring buffer race leads can cause corruption (LP: #1840717)
- net: hns3: minor optimization for ring_space
- net: hns3: fix data race between ring->next_to_clean
- net: hns3: optimize the barrier using when cleaning TX BD
* Bionic build broken if CONFIG_MODVERSIONS enabled (LP: #1840321)
- Revert "genksyms: Teach parser about 128-bit built-in types"
* [bionic] drm/i915: softpin broken, needs to be fixed for 32bit mesa
(LP: #1815172)
- SAUCE: drm/i915: Partially revert d6edad3777c28ea
* Goodix touchpad may drop first input event (LP: #1840075)
- mfd: intel-lpss: Remove D3cold delay
* NULL pointer dereference when Inserting the VIMC module (LP: #1840028)
- media: vimc: fix component match compare
* Fix touchpad IRQ storm after S3 (LP: #1841396)
- pinctrl: intel: remap the pin number to gpio offset for irq enabled pin
* [SRU][B/OEM-B/OEM-OSP1/D] UBUNTU: SAUCE: enable middle button for one more
ThinkPad (LP: #1841722)
- SAUCE: Input: elantech - enable middle button for one more ThinkPad
* Test 391/u and 391/p from ubuntu_bpf failed on B (LP: #1841704)
- SAUCE: Fix "bpf: improve verifier branch analysis"
* crypto/testmgr.o fails to build due to struct cipher_testvec not having data
members: ctext, ptext, len (LP: #1841264)
- SAUCE: Revert "crypto: testmgr - add AES-CFB tests"
* Bionic QEMU with Bionic Kernel hangs in AMD FX-8350 with cpu-host as
passthrough (LP: #1834522)
- KVM: SVM: install RSM intercept
- KVM: x86: SVM: Set EMULTYPE_NO_REEXECUTE for RSM emulation
-- Marcelo Henrique Cerri <email address hidden> Wed, 18 Sep 2019 09:51:12 -0300
-
linux-aws (4.15.0-1050.52) bionic; urgency=medium
[ Ubuntu: 4.15.0-64.73 ]
* powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts
(CVE-2019-15031) / powerpc/tm: Fix FP/VMX unavailable exceptions inside a
transaction (CVE-2019-15030) (LP: #1843533) // CVE-2019-15031
- powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction
- powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts
* CVE-2019-14835
- vhost: fix dirty log buffer overflow
-- Stefan Bader <email address hidden> Thu, 12 Sep 2019 21:37:07 +0200
-
linux-aws (4.15.0-1049.51) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1049.51 -proposed tracker (LP: #1842806)
* arm64: large modules fail to load (LP: #1841109)
- [config] aws: Remove CONFIG_ARM64_MODULE_CMODEL_LARGE
* AWS: per-device block I/O timeout support (LP: #1841461)
- block: add io timeout to sysfs
- block: don't show io_timeout if driver has no timeout handler
[ Ubuntu: 4.15.0-63.72 ]
* bionic/linux: 4.15.0-63.72 -proposed tracker (LP: #1842828)
* arm64: large modules fail to load (LP: #1841109)
- arm64/kernel: kaslr: reduce module randomization range to 4 GB
- arm64/kernel: don't ban ADRP to work around Cortex-A53 erratum #843419
- arm64: fix undefined reference to 'printk'
- arm64/kernel: rename module_emit_adrp_veneer->module_emit_veneer_for_adrp
- [config] Remove CONFIG_ARM64_MODULE_CMODEL_LARGE
* CVE-2018-20976
- xfs: clear sb->s_fs_info on mount failure
* br_netfilter: namespace sysctl operations (LP: #1836910)
- net: bridge: add bitfield for options and convert vlan opts
- net: bridge: convert nf call options to bits
- netfilter: bridge: port sysctls to use brnf_net
- netfilter: bridge: namespace bridge netfilter sysctls
- netfilter: bridge: prevent UAF in brnf_exit_net()
* tuntap: correctly set SOCKWQ_ASYNC_NOSPACE (LP: #1830756)
- tuntap: correctly set SOCKWQ_ASYNC_NOSPACE
* Bionic update: upstream stable patchset 2019-08-30 (LP: #1842114)
- HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT
- MIPS: kernel: only use i8253 clocksource with periodic clockevent
- mips: fix cacheinfo
- netfilter: ebtables: fix a memory leak bug in compat
- ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks
- bonding: Force slave speed check after link state recovery for 802.3ad
- can: dev: call netif_carrier_off() in register_candev()
- ASoC: Fail card instantiation if DAI format setup fails
- st21nfca_connectivity_event_received: null check the allocation
- st_nci_hci_connectivity_event_received: null check the allocation
- ASoC: ti: davinci-mcasp: Correct slot_width posed constraint
- net: usb: qmi_wwan: Add the BroadMobi BM818 card
- qed: RDMA - Fix the hw_ver returned in device attributes
- isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in
start_isoc_chain()
- netfilter: ipset: Fix rename concurrency with listing
- isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack
- perf bench numa: Fix cpu0 binding
- can: sja1000: force the string buffer NULL-terminated
- can: peak_usb: force the string buffer NULL-terminated
- net/ethernet/qlogic/qed: force the string buffer NULL-terminated
- NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim()
- HID: input: fix a4tech horizontal wheel custom usage
- SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL
- net: cxgb3_main: Fix a resource leak in a error path in 'init_one()'
- net: hisilicon: make hip04_tx_reclaim non-reentrant
- net: hisilicon: fix hip04-xmit never return TX_BUSY
- net: hisilicon: Fix dma_map_single failed on arm64
- libata: have ata_scsi_rw_xlat() fail invalid passthrough requests
- libata: add SG safety checks in SFF pio transfers
- x86/lib/cpu: Address missing prototypes warning
- drm/vmwgfx: fix memory leak when too many retries have occurred
- perf ftrace: Fix failure to set cpumask when only one cpu is present
- perf cpumap: Fix writing to illegal memory in handling cpumap mask
- perf pmu-events: Fix missing "cpu_clk_unhalted.core" event
- selftests: kvm: Adding config fragments
- HID: wacom: correct misreported EKR ring values
- HID: wacom: Correct distance scale for 2nd-gen Intuos devices
- Revert "dm bufio: fix deadlock with loop device"
- ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply
- libceph: fix PG split vs OSD (re)connect race
- drm/nouveau: Don't retry infinitely when receiving no data on i2c over AUX
- gpiolib: never report open-drain/source lines as 'input' to user-space
- userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx
- x86/retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386
- x86/apic: Handle missing global clockevent gracefully
- x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h
- x86/boot: Save fields explicitly, zero out everything else
- x86/boot: Fix boot regression caused by bootparam sanitizing
- dm kcopyd: always complete failed jobs
- dm btree: fix order of block initialization in btree_split_beneath
- dm space map metadata: fix missing store of apply_bops() return value
- dm table: fix invalid memory accesses with too high sector number
- dm zoned: improve error handling in reclaim
- dm zoned: improve error handling in i/o map code
- dm zoned: properly handle backing device failure
- genirq: Properly pair kobject_del() with kobject_add()
- mm, page_owner: handle THP splits correctly
- mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely
- mm/zsmalloc.c: fix race condition in zs_destroy_pool
- xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT
- dm zoned: fix potential NULL dereference in dmz_do_reclaim()
- powerpc: Allow flush_(inval_)dcache_range to work across ranges >4GB
- can: mcp251x: add error check when wq alloc failed
- netfilter: ipset: Actually allow destination MAC address for hash:ip,mac
sets too
- netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and
hash:ip,mac sets
- rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet
- net: phy: phy_led_triggers: Fix a possible null-pointer dereference in
phy_led_trigger_change_speed()
- NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts
- net: stmmac: Fix issues when number of Queues >= 4
- KVM: arm64: Don't write junk to sysregs on reset
- KVM: arm: Don't write junk to CP15 registers on reset
- xfs: don't trip over uninitialized buffer on extent read of corrupted inode
- xfs: Move fs/xfs/xfs_attr.h to fs/xfs/libxfs/xfs_attr.h
- xfs: Add helper function xfs_attr_try_sf_addname
- xfs: Add attibute remove and helper functions
* Bionic update: upstream stable patchset 2019-08-27 (LP: #1841652)
- sh: kernel: hw_breakpoint: Fix missing break in switch statement
- mm/usercopy: use memory range to be accessed for wraparound check
- mm/memcontrol.c: fix use after free in mem_cgroup_iter()
- bpf: get rid of pure_initcall dependency to enable jits
- bpf: restrict access to core bpf sysctls
- bpf: add bpf_jit_limit knob to restrict unpriv allocations
- xtensa: add missing isync to the cpu_reset TLB code
- ALSA: hda - Apply workaround for another AMD chip 1022:1487
- ALSA: hda - Fix a memory leak bug
- HID: holtek: test for sanity of intfdata
- HID: hiddev: avoid opening a disconnected device
- HID: hiddev: do cleanup in failure of opening a device
- Input: kbtab - sanity check for endpoint type
- Input: iforce - add sanity checks
- net: usb: pegasus: fix improper read if get_registers() fail
- netfilter: ebtables: also count base chain policies
- clk: at91: generated: Truncate divisor to GENERATED_MAX_DIV + 1
- clk: renesas: cpg-mssr: Fix reset control race condition
- xen/pciback: remove set but not used variable 'old_state'
- irqchip/gic-v3-its: Free unused vpt_page when alloc vpe table fail
- irqchip/irq-imx-gpcv2: Forward irq type to parent
- perf header: Fix divide by zero error if f_header.attr_size==0
- perf header: Fix use of unitialized value warning
- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
- drm/bridge: lvds-encoder: Fix build error while CONFIG_DRM_KMS_HELPER=m
- scsi: hpsa: correct scsi command status issue after reset
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences
- ata: libahci: do not complain in case of deferred probe
- kbuild: modpost: handle KBUILD_EXTRA_SYMBOLS only for external modules
- arm64/efi: fix variable 'si' set but not used
- arm64: unwind: Prohibit probing on return_address()
- arm64/mm: fix variable 'pud' set but not used
- IB/core: Add mitigation for Spectre V1
- IB/mad: Fix use-after-free in ib mad completion handling
- drm: msm: Fix add_gpu_components
- ocfs2: remove set but not used variable 'last_hash'
- asm-generic: fix -Wtype-limits compiler warnings
- KVM: arm/arm64: Sync ICH_VMCR_EL2 back when about to block
- staging: comedi: dt3000: Fix signed integer overflow 'divider * base'
- staging: comedi: dt3000: Fix rounding up of timer divisor
- iio: adc: max9611: Fix temperature reading in probe
- USB: core: Fix races in character device registration and deregistraion
- usb: gadget: udc: renesas_usb3: Fix sysfs interface of "role"
- usb: cdc-acm: make sure a refcount is taken early enough
- USB: CDC: fix sanity checks in CDC union parser
- USB: serial: option: add D-Link DWM-222 device ID
- USB: serial: option: Add support for ZTE MF871A
- USB: serial: option: add the BroadMobi BM818 card
- USB: serial: option: Add Motorola modem UARTs
- bpf: fix bpf_jit_limit knob for PAGE_SIZE >= 64K
- arm64: ftrace: Ensure module ftrace trampoline is coherent with I-side
- netfilter: conntrack: Use consistent ct id hash calculation
- Input: psmouse - fix build error of multiple definition
- iommu/amd: Move iommu_init_pci() to .init section
- bnx2x: Fix VF's VLAN reconfiguration in reload.
- net/mlx4_en: fix a memory leak bug
- net/packet: fix race in tpacket_snd()
- sctp: fix the transport error_count check
- xen/netback: Reset nr_frags before freeing skb
- net/mlx5e: Only support tx/rx pause setting for port owner
- net/mlx5e: Use flow keys dissector to parse packets for ARFS
- team: Add vlan tx offload to hw_enc_features
- bonding: Add vlan tx offload to hw_enc_features
- mmc: sdhci-of-arasan: Do now show error message in case of deffered probe
- xfrm: policy: remove pcpu policy cache
- mm/hmm: fix bad subpage pointer in try_to_unmap_one
- mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and
MPOL_MF_STRICT were specified
- mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind
- riscv: Make __fstate_clean() work correctly.
- Revert "kmemleak: allow to coexist with fault injection"
- sctp: fix memleak in sctp_send_reset_streams
* Bionic update: upstream stable patchset 2019-08-16 (LP: #1840520)
- iio: adc: max9611: Fix misuse of GENMASK macro
- crypto: ccp - Fix oops by properly managing allocated structures
- crypto: ccp - Ignore tag length when decrypting GCM ciphertext
- usb: usbfs: fix double-free of usb memory upon submiturb error
- usb: iowarrior: fix deadlock on disconnect
- sound: fix a memory leak bug
- mmc: cavium: Set the correct dma max segment size for mmc_host
- mmc: cavium: Add the missing dma unmap when the dma has finished.
- loop: set PF_MEMALLOC_NOIO for the worker thread
- Input: synaptics - enable RMI mode for HP Spectre X360
- lkdtm: support llvm-objcopy
- crypto: ccp - Validate buffer lengths for copy operations
- crypto: ccp - Add support for valid authsize values less than 16
- perf annotate: Fix s390 gap between kernel end and module start
- perf db-export: Fix thread__exec_comm()
- perf record: Fix module size on s390
- usb: host: xhci-rcar: Fix timeout in xhci_suspend()
- usb: yurex: Fix use-after-free in yurex_delete
- can: rcar_canfd: fix possible IRQ storm on high load
- can: peak_usb: fix potential double kfree_skb()
- netfilter: nfnetlink: avoid deadlock due to synchronous request_module
- vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn
- netfilter: Fix rpfilter dropping vrf packets by mistake
- netfilter: nft_hash: fix symhash with modulus one
- scripts/sphinx-pre-install: fix script for RHEL/CentOS
- iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND
- mac80211: don't warn about CW params when not using them
- hwmon: (nct6775) Fix register address and added missed tolerance for nct6106
- drm: silence variable 'conn' set but not used
- cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init()
- s390/qdio: add sanity checks to the fast-requeue path
- ALSA: compress: Fix regression on compressed capture streams
- ALSA: compress: Prevent bypasses of set_params
- ALSA: compress: Don't allow paritial drain operations on capture streams
- ALSA: compress: Be more restrictive about when a drain is allowed
- perf tools: Fix proper buffer size for feature processing
- perf probe: Avoid calling freeing routine multiple times for same pointer
- drbd: dynamically allocate shash descriptor
- ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id()
- ARM: davinci: fix sleep.S build error on ARMv4
- scsi: megaraid_sas: fix panic on loading firmware crashdump
- scsi: ibmvfc: fix WARN_ON during event pool release
- scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG
- test_firmware: fix a memory leak bug
- tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop
- perf/core: Fix creating kernel counters for PMUs that override event->cpu
- HID: sony: Fix race condition between rumble and device remove.
- can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
- can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
- hwmon: (nct7802) Fix wrong detection of in4 presence
- drm/i915: Fix wrong escape clock divisor init for GLK
- ALSA: firewire: fix a memory leak bug
- ALSA: hda - Don't override global PCM hw info flag
- ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457)
- mac80211: don't WARN on short WMM parameters from AP
- SMB3: Fix deadlock in validate negotiate hits reconnect
- smb3: send CAP_DFS capability during session setup
- NFSv4: Only pass the delegation to setattr if we're sending a truncate
- NFSv4: Fix an Oops in nfs4_do_setattr
- KVM: Fix leak vCPU's VMCS value into other pCPU
- mwifiex: fix 802.11n/WPA detection
- iwlwifi: don't unmap as page memory that was mapped as single
- iwlwifi: mvm: fix an out-of-bound access
- iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41
- iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support
- iio: cros_ec_accel_legacy: Fix incorrect channel setting
- staging: android: ion: Bail out upon SIGKILL when allocating memory.
- x86/purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS
- usb: typec: tcpm: free log buf memory when remove debug file
- usb: typec: tcpm: remove tcpm dir if no children
- usb: typec: tcpm: Add NULL check before dereferencing config
- netfilter: conntrack: always store window size un-scaled
- drm/amd/display: Wait for backlight programming completion in set backlight
level
- drm/amd/display: use encoder's engine id to find matched free audio device
- drm/amd/display: Fix dc_create failure handling and 666 color depths
- drm/amd/display: Only enable audio if speaker allocation exists
- drm/amd/display: Increase size of audios array
- allocate_flower_entry: should check for null deref
- s390/dma: provide proper ARCH_ZONE_DMA_BITS value
- ALSA: hiface: fix multiple memory leak bugs
* Bionic update: upstream stable patchset 2019-08-15 (LP: #1840378)
- scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
- ARM: dts: Add pinmuxing for i2c2 and i2c3 for LogicPD SOM-LV
- ARM: dts: Add pinmuxing for i2c2 and i2c3 for LogicPD torpedo
- HID: wacom: fix bit shift for Cintiq Companion 2
- HID: Add quirk for HP X1200 PIXART OEM mouse
- RDMA: Directly cast the sockaddr union to sockaddr
- IB: directly cast the sockaddr union to aockaddr
- atm: iphase: Fix Spectre v1 vulnerability
- ife: error out when nla attributes are empty
- ip6_tunnel: fix possible use-after-free on xmit
- net: bridge: delete local fdb on device init failure
- net: bridge: mcast: don't delete permanent entries when fast leave is
enabled
- net: fix ifindex collision during namespace removal
- net/mlx5: Use reversed order when unregister devices
- net: phylink: Fix flow control for fixed-link
- net: sched: Fix a possible null-pointer dereference in dequeue_func()
- NFC: nfcmrvl: fix gpio-handling regression
- tipc: compat: allow tipc commands without arguments
- compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
- net/mlx5e: Prevent encap flow counter update async to user query
- tun: mark small packets as owned by the tap sock
- mvpp2: refactor MTU change code
- bnx2x: Disable multi-cos feature.
- cgroup: Call cgroup_release() before __exit_signal()
- cgroup: Implement css_task_iter_skip()
- cgroup: Include dying leaders with live threads in PROCS iterations
- cgroup: css_task_iter_skip()'d iterators must be advanced before accessed
- cgroup: Fix css_task_iter_advance_css_set() cset skip condition
- spi: bcm2835: Fix 3-wire mode if DMA is enabled
- driver core: Establish order of operations for device_add and device_del via
bitflag
- drivers/base: Introduce kill_device()
- libnvdimm/bus: Prevent duplicate device_unregister() calls
- libnvdimm/region: Register badblocks before namespaces
- libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant
- libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock
- ipip: validate header length in ipip_tunnel_xmit
- mvpp2: fix panic on module removal
- net/mlx5: Fix modify_cq_in alignment
- r8169: don't use MSI before RTL8168d
* VIMC module not available (CONFIG_VIDEO_VIMC not set) (LP: #1831482)
- [Config] Enable VIMC module
* reboot will introduce an alarm 'beep ...' during BIOS phase (LP: #1840395)
- ALSA: hda - Let all conexant codec enter D3 when rebooting
- ALSA: hda - Add a generic reboot_notify
* Include Sunix serial/parallel driver (LP: #1826716)
- serial: 8250_pci: Add support for Sunix serial boards
- parport: parport_serial: Add support for Sunix Multi I/O boards
* Intel HDMI audio print "Unable to sync register" errors (LP: #1840394)
- ALSA: hda - Don't resume forcibly i915 HDMI/DP codec
* Support cpufreq, thermal sensors & cooling cells on iMX6Q based Nitrogen6x
board (LP: #1840437)
- arm: imx: Add MODULE_ALIAS for cpufreq
- ARM: dts: imx: Add missing OPP properties for CPUs
- ARM: dts: imx7d: use operating-points-v2 for cpu
- ARM: dts: imx7d: remove "operating-points" property for cpu1
- ARM: dts: imx: add cooling-cells for cpufreq cooling device
- ARM: dts: imx6: add thermal sensor and cooling cells
* hns3: ring buffer race leads can cause corruption (LP: #1840717)
- net: hns3: minor optimization for ring_space
- net: hns3: fix data race between ring->next_to_clean
- net: hns3: optimize the barrier using when cleaning TX BD
* Bionic build broken if CONFIG_MODVERSIONS enabled (LP: #1840321)
- Revert "genksyms: Teach parser about 128-bit built-in types"
* [bionic] drm/i915: softpin broken, needs to be fixed for 32bit mesa
(LP: #1815172)
- SAUCE: drm/i915: Partially revert d6edad3777c28ea
* Goodix touchpad may drop first input event (LP: #1840075)
- mfd: intel-lpss: Remove D3cold delay
* NULL pointer dereference when Inserting the VIMC module (LP: #1840028)
- media: vimc: fix component match compare
* Fix touchpad IRQ storm after S3 (LP: #1841396)
- pinctrl: intel: remap the pin number to gpio offset for irq enabled pin
* [SRU][B/OEM-B/OEM-OSP1/D] UBUNTU: SAUCE: enable middle button for one more
ThinkPad (LP: #1841722)
- SAUCE: Input: elantech - enable middle button for one more ThinkPad
* Test 391/u and 391/p from ubuntu_bpf failed on B (LP: #1841704)
- SAUCE: Fix "bpf: improve verifier branch analysis"
* crypto/testmgr.o fails to build due to struct cipher_testvec not having data
members: ctext, ptext, len (LP: #1841264)
- SAUCE: Revert "crypto: testmgr - add AES-CFB tests"
* Bionic QEMU with Bionic Kernel hangs in AMD FX-8350 with cpu-host as
passthrough (LP: #1834522)
- KVM: SVM: install RSM intercept
- KVM: x86: SVM: Set EMULTYPE_NO_REEXECUTE for RSM emulation
-- Sultan Alsawaf <email address hidden> Fri, 06 Sep 2019 12:12:56 -0700
-
linux-aws (4.15.0-1048.50) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1048.50 -proposed tracker (LP: #1842718)
[ Ubuntu: 4.15.0-62.69 ]
* bionic/linux: 4.15.0-62.69 -proposed tracker (LP: #1842746)
* Kernel Panic with linux-image-4.15.0-60-generic when specifying nameserver
in docker-compose (LP: #1842447)
- ip: frags: fix crash in ip_do_fragment()
-- Khalid Elmously <email address hidden> Wed, 04 Sep 2019 17:26:55 -0400
-
linux-aws (4.15.0-1047.49) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1047.49 -proposed tracker (LP: #1841084)
* [18.04/18.10] File libperf-jvmti.so is missing in linux-tools-common deb on
Ubuntu (LP: #1761379)
- [Packaging] aws: Enable building libperf-jvmti.so
[ Ubuntu: 4.15.0-60.67 ]
* bionic/linux: 4.15.0-60.67 -proposed tracker (LP: #1841086)
* [Regression] net test from ubuntu_kernel_selftests failed due to bpf test
compilation issue (LP: #1840935)
- SAUCE: Fix "bpf: relax verifier restriction on BPF_MOV | BPF_ALU"
* [Regression] failed to compile seccomp test from ubuntu_kernel_selftests
(LP: #1840932)
- Revert "selftests: skip seccomp get_metadata test if not real root"
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
linux-aws (4.15.0-1046.48) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1046.48 -proposed tracker (LP: #1839985)
* Bionic update: upstream stable patchset 2019-07-25 (LP: #1837952)
- aws: [Config] set CONFIG_SUN50I_ERRATUM_UNKNOWN1=y
* Bionic update: upstream stable patchset 2019-07-26 (LP: #1838116)
- aws: [Config] set CONFIG_LDISC_AUTOLOAD=y
- aws: [Config] remove CONFIG_R3964=m
* Bionic update: upstream stable patchset 2019-08-02 (LP: #1838824)
- aws: [Config] set CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT=y
* Bionic update: upstream stable patchset 2019-07-22 (LP: #1837477)
- aws: [Config] set CONFIG_CIFS_ALLOW_INSECURE_LEGACY=y
* Build Nvidia drivers in conjunction with kernel (LP: #1764792)
- aws: [Packaging] enable nvidia dkms build
* Add the EFA driver into linux-aws (LP: #1837638)
- RDMA/efa: Add EFA device definitions
- RDMA/efa: Add the ABI definitions
- RDMA/efa: Add the efa.h header file
- RDMA/efa: Add the efa_com.h file
- RDMA/efa: Add the com service API definitions
- RDMA/efa: Implement functions that submit and complete admin commands
- RDMA/efa: Add common command handlers
- RDMA/efa: Add EFA verbs implementation
- RDMA/efa: Add the efa module
- RDMA/efa: Add driver to Kconfig/Makefile
- [Config] aws: CONFIG_INFINIBAND_EFA=m
- RDMA/efa: Remove MAYEXEC flag check from mmap flow
- RDMA/efa: Fix success return value in case of error
- RDMA/efa: Handle mmap insertions overflow
- SAUCE: Add kernel compatibility fixups
- SAUCE: linux/efa: Be consistent with success flow return value
- SAUCE: linux/efa: Entropy in admin commands id
- SAUCE: linux/efa: Fix modify QP udata check backport
[ Ubuntu: 4.15.0-59.66 ]
* bionic/linux: 4.15.0-59.66 -proposed tracker (LP: #1840006)
* zfs not completely removed from bionic tree (LP: #1840051)
- SAUCE: (noup) remove completely the zfs code
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* [18.04 FEAT] Enhanced hardware support (LP: #1836857)
- s390: report new CPU capabilities
- s390: add alignment hints to vector load and store
* [18.04 FEAT] Enhanced CPU-MF hardware counters - kernel part (LP: #1836860)
- s390/cpum_cf: Add support for CPU-MF SVN 6
- s390/cpumf: Add extended counter set definitions for model 8561 and 8562
* ideapad_laptop disables WiFi/BT radios on Lenovo Y540 (LP: #1837136)
- platform/x86: ideapad-laptop: Remove no_hw_rfkill_list
* Stacked onexec transitions fail when under NO NEW PRIVS restrictions
(LP: #1839037)
- SAUCE: apparmor: fix nnp subset check failure when, stacking
* bcache: bch_allocator_thread(): hung task timeout (LP: #1784665) // Tight
timeout for bcache removal causes spurious failures (LP: #1796292)
- SAUCE: bcache: fix deadlock in bcache_allocator
* bcache: bch_allocator_thread(): hung task timeout (LP: #1784665)
- bcache: never writeback a discard operation
- bcache: improve bcache_reboot()
- bcache: fix writeback target calc on large devices
- bcache: add journal statistic
- bcache: fix high CPU occupancy during journal
- bcache: use pr_info() to inform duplicated CACHE_SET_IO_DISABLE set
- bcache: fix incorrect sysfs output value of strip size
- bcache: fix error return value in memory shrink
- bcache: fix using of loop variable in memory shrink
- bcache: Fix indentation
- bcache: Add __printf annotation to __bch_check_keys()
- bcache: Annotate switch fall-through
- bcache: Fix kernel-doc warnings
- bcache: Remove an unused variable
- bcache: Suppress more warnings about set-but-not-used variables
- bcache: Reduce the number of sparse complaints about lock imbalances
- bcache: Fix a compiler warning in bcache_device_init()
- bcache: Move couple of string arrays to sysfs.c
- bcache: Move couple of functions to sysfs.c
- bcache: Replace bch_read_string_list() by __sysfs_match_string()
* linux hwe i386 kernel 5.0.0-21.22~18.04.1 crashes on Lenovo x220
(LP: #1838115)
- x86/mm: Check for pfn instead of page in vmalloc_sync_one()
- x86/mm: Sync also unmappings in vmalloc_sync_all()
- mm/vmalloc.c: add priority threshold to __purge_vmap_area_lazy()
- mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy()
* [bionic] drm/i915: softpin broken, needs to be fixed for 32bit mesa
(LP: #1815172)
- drm/i915: Mark up GTT sizes as u64
- drm/i915/gvt: Use I915_GTT_PAGE_SIZE
- drm/i915: Compare user's 64b GTT offset even on 32b
* Bionic update: upstream stable patchset 2019-08-07 (LP: #1839376)
- ARM: riscpc: fix DMA
- ARM: dts: rockchip: Make rk3288-veyron-minnie run at hs200
- ARM: dts: rockchip: Make rk3288-veyron-mickey's emmc work again
- ARM: dts: rockchip: Mark that the rk3288 timer might stop in suspend
- ftrace: Enable trampoline when rec count returns back to one
- kernel/module.c: Only return -EEXIST for modules that have finished loading
- MIPS: lantiq: Fix bitfield masking
- dmaengine: rcar-dmac: Reject zero-length slave DMA requests
- clk: tegra210: fix PLLU and PLLU_OUT1
- fs/adfs: super: fix use-after-free bug
- btrfs: fix minimum number of chunk errors for DUP
- cifs: Fix a race condition with cifs_echo_request
- ceph: fix improper use of smp_mb__before_atomic()
- ceph: return -ERANGE if virtual xattr value didn't fit in buffer
- ACPI: blacklist: fix clang warning for unused DMI table
- scsi: zfcp: fix GCC compiler warning emitted with -Wmaybe-uninitialized
- x86: kvm: avoid constant-conversion warning
- ACPI: fix false-positive -Wuninitialized warning
- be2net: Signal that the device cannot transmit during reconfiguration
- x86/apic: Silence -Wtype-limits compiler warnings
- x86: math-emu: Hide clang warnings for 16-bit overflow
- mm/cma.c: fail if fixed declaration can't be honored
- coda: add error handling for fget
- coda: fix build using bare-metal toolchain
- uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
headers
- drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings
- ipc/mqueue.c: only perform resource calculation if user valid
- xen/pv: Fix a boot up hang revealed by int3 self test
- x86/kvm: Don't call kvm_spurious_fault() from .fixup
- x86/paravirt: Fix callee-saved function ELF sizes
- x86, boot: Remove multiple copy of static function sanitize_boot_params()
- drm/nouveau: fix memory leak in nouveau_conn_reset()
- kbuild: initialize CLANG_FLAGS correctly in the top Makefile
- Btrfs: fix incremental send failure after deduplication
- Btrfs: fix race leading to fs corruption after transaction abort
- mmc: dw_mmc: Fix occasional hang after tuning on eMMC
- gpiolib: fix incorrect IRQ requesting of an active-low lineevent
- IB/hfi1: Fix Spectre v1 vulnerability
- selinux: fix memory leak in policydb_init()
- s390/dasd: fix endless loop after read unit address configuration
- parisc: Fix build of compressed kernel even with debug enabled
- drivers/perf: arm_pmu: Fix failure path in PM notifier
- nbd: replace kill_bdev() with __invalidate_device() again
- xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
- IB/mlx5: Fix unreg_umr to ignore the mkey state
- IB/mlx5: Use direct mkey destroy command upon UMR unreg failure
- IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache
- IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
- IB/hfi1: Check for error on call to alloc_rsm_map_table
- eeprom: at24: make spd world-readable again
- objtool: Support GCC 9 cold subfunction naming scheme
- gcc-9: properly declare the {pv,hv}clock_page storage
- x86/vdso: Prevent segfaults due to hoisted vclock reads
- Documentation: Add swapgs description to the Spectre v1 documentation
- firmware/psci: psci_checker: Park kthreads before stopping them
- btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit()
- lib/test_string.c: avoid masking memset16/32/64 failures
- mmc: meson-mx-sdio: Fix misuse of GENMASK macro
- arm64: compat: Allow single-byte watchpoints on all addresses
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
- IB/mlx5: Fix clean_mr() to work in the expected order
- ARC: enable uboot support unconditionally
- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
* Bionic update: upstream stable patchset 2019-08-06 (LP: #1839213)
- staging: vt6656: use meaningful error code during buffer allocation
- drm/amd/display: Fill prescale_params->scale for RGB565
- drm/amd/display: Disable ABM before destroy ABM struct
- gpu: host1x: Increase maximum DMA segment size
- drm/amd/display: Always allocate initial connector state state
- drm/amd/display: fix compilation error
- mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width
- i2c: stm32f7: fix the get_irq error cases
- genksyms: Teach parser about 128-bit built-in types
- powerpc/mm: Handle page table allocation failures
- arm64: assembler: Switch ESB-instruction with a vanilla nop if
!ARM64_HAS_RAS
- dlm: check if workqueues are NULL before flushing/destroying
- proc: use down_read_killable mmap_sem for /proc/pid/pagemap
- proc: use down_read_killable mmap_sem for /proc/pid/clear_refs
- proc: use down_read_killable mmap_sem for /proc/pid/map_files
- proc: use down_read_killable mmap_sem for /proc/pid/maps
- mm: use down_read_killable for locking mmap_sem in access_remote_vm
- ALSA: ac97: Fix double free of ac97_codec_device
- libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl()
- vsock: correct removal of socket from the list
- NFS: Fix dentry revalidation on NFSv4 lookup
- NFS: Refactor nfs_lookup_revalidate()
- NFSv4: Fix lookup revalidate of regular files
- i2c: qup: fixed releasing dma without flush operation completion
- arm64: compat: Provide definition for COMPAT_SIGMINSTKSZ
- binder: fix possible UAF when freeing buffer
- ISDN: hfcsusb: checking idx of ep configuration
- media: au0828: fix null dereference in error path
- ath10k: Change the warning message string
- media: cpia2_usb: first wake up, then free in disconnect
- media: pvrusb2: use a different format for warnings
- NFS: Cleanup if nfs_match_client is interrupted
- media: radio-raremono: change devm_k*alloc to k*alloc
- iommu/vt-d: Don't queue_iova() if there is no flush queue
- iommu/iova: Fix compilation error with !CONFIG_IOMMU_IOVA
- hv_sock: Add support for delayed close
- Bluetooth: hci_uart: check for missing tty operations
- sched/fair: Don't free p->numa_faults with concurrent readers
- drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
- Fix allyesconfig output.
- ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
* Bionic update: upstream stable patchset 2019-08-05 (LP: #1839036)
- e1000e: start network tx queue only when link is up
- Input: synaptics - enable SMBUS on T480 thinkpad trackpad
- nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
- drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT
- crypto: talitos - rename alternative AEAD algos.
- samples, bpf: fix to change the buffer size for read()
- bpf: sockmap, fix use after free from sleep in psock backlog workqueue
- staging:iio:ad7150: fix threshold mode config bit
- mac80211: mesh: fix RCU warning
- mac80211: free peer keys before vif down in mesh
- iwlwifi: Fix double-free problems in iwl_req_fw_callback()
- dt-bindings: can: mcp251x: add mcp25625 support
- can: mcp251x: add support for mcp25625
- can: m_can: implement errata "Needless activation of MRAF irq"
- can: af_can: Fix error path of can_init()
- ibmvnic: Refresh device multicast list after reset
- ARM: dts: am335x phytec boards: Fix cd-gpios active level
- Input: imx_keypad - make sure keyboard can always wake up system
- KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
- mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed
- ARM: davinci: da850-evm: call regulator_has_full_constraints()
- ARM: davinci: da8xx: specify dma_coherent_mask for lcdc
- mac80211: only warn once on chanctx_conf being NULL
- qmi_wwan: add support for QMAP padding in the RX path
- qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode
- qmi_wwan: extend permitted QMAP mux_id value range
- md: fix for divide error in status_resync
- bnx2x: Check if transceiver implements DDM before access
- drm: return -EFAULT if copy_to_user() fails
- ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
- net: lio_core: fix potential sign-extension overflow on large shift
- quota: fix a problem about transfer quota
- net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge()
- net :sunrpc :clnt :Fix xps refcount imbalance on the error path
- fscrypt: don't set policy for a dead directory
- udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
- ALSA: hda/realtek - Headphone Mic can't record after S3
- block, bfq: NULL out the bic when it's no longer valid
- x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
- x86/tls: Fix possible spectre-v1 in do_get_thread_area()
- Documentation: Add section about CPU vulnerabilities for Spectre
- mwifiex: Abort at too short BSS descriptor element
- mwifiex: Don't abort on small, spec-compliant vendor IEs
- USB: serial: ftdi_sio: add ID for isodebug v1
- USB: serial: option: add support for GosunCn ME3630 RNDIS mode
- Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
- p54usb: Fix race between disconnect and firmware loading
- usb: gadget: ether: Fix race between gether_disconnect and rx_submit
- usb: renesas_usbhs: add a workaround for a race condition of workqueue
- staging: comedi: dt282x: fix a null pointer deref on interrupt
- staging: comedi: amplc_pci230: fix null pointer deref on interrupt
- binder: fix memory leak in error path
- carl9170: fix misuse of device driver API
- VMCI: Fix integer overflow in VMCI handle arrays
- MIPS: Remove superfluous check for __linux__
- clk: ti: clkctrl: Fix returning uninitialized data
- efi/bgrt: Drop BGRT status field reserved bits check
- perf/core: Fix perf_sample_regs_user() mm check
- ARM: omap2: remove incorrect __init annotation
- be2net: fix link failure after ethtool offline test
- ppp: mppe: Add softdep to arc4
- sis900: fix TX completion
- ARM: dts: imx6ul: fix PWM[1-4] interrupts
- dm verity: use message limit for data block corruption message
- x86/boot/64: Fix crash if kernel image crosses page table boundary
- cpu/hotplug: Fix out-of-bounds read when setting fail state
- linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL
- ARC: hide unused function unw_hdr_alloc
- s390: fix stfle zero padding
- s390/qdio: (re-)initialize tiqdio list entries
- s390/qdio: don't touch the dsci in tiqdio_add_input_queues()
- crypto/NX: Set receive window credits to max number of CRBs in RxFIFO
- drm/udl: introduce a macro to convert dev to udl.
- drm/udl: move to embedding drm device inside udl device.
- drm/vmwgfx: fix a warning due to missing dma_parms
- riscv: Fix udelay in RV32.
- mac80211: do not start any work during reconfigure flow
- bpf, devmap: Fix premature entry free on destroying map
- NFS4: Only set creation opendata if O_CREAT
- perf pmu: Fix uncore PMU alias list for ARM64
- Documentation/admin: Remove the vsyscall=native documentation
- drivers/usb/typec/tps6598x.c: fix portinfo width
- staging: bcm2835-camera: Ensure all buffers are returned on disable
- staging: bcm2835-camera: Remove check of the number of buffers supplied
- staging: rtl8712: reduce stack usage, again
- irqchip/gic-v3-its: Fix command queue pointer comparison bug
- x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz
- pinctrl: mcp23s08: Fix add_data and irqchip_add_nested call order
- x86/boot/64: Add missing fixup_pointer() for next_early_pgt access
- genirq: Delay deactivation in free_irq()
- genirq: Fix misleading synchronize_irq() documentation
- genirq: Update code comments wrt recycled thread_mask
- genirq: Synchronize only with single thread on free_irq()
- genirq: Add optional hardware synchronization for shutdown
- x86/ioapic: Implement irq_get_irqchip_state() callback
- x86/irq: Handle spurious interrupt after shutdown gracefully
- crypto: talitos - move struct talitos_edesc into talitos.h
- crypto: talitos - fix hash on SEC1.
- regmap-irq: do not write mask register if mask_base is zero
- MIPS: ath79: fix ar933x uart parity mode
- MIPS: fix build on non-linux hosts
- arm64/efi: Mark __efistub_stext_offset as an absolute symbol explicitly
- scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported
- dmaengine: imx-sdma: fix use-after-free on probe error path
- wil6210: fix potential out-of-bounds read
- ath10k: Do not send probe response template for mesh
- ath9k: Check for errors when reading SREV register
- ath6kl: add some bounds checking
- ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
- batman-adv: fix for leaked TVLV handler.
- media: dvb: usb: fix use after free in dvb_usb_device_exit
- media: spi: IR LED: add missing of table registration
- crypto: talitos - fix skcipher failure due to wrong output IV
- media: marvell-ccic: fix DMA s/g desc number calculation
- media: vpss: fix a potential NULL pointer dereference
- media: media_device_enum_links32: clean a reserved field
- net: stmmac: dwmac1000: Clear unused address entries
- net: stmmac: dwmac4/5: Clear unused address entries
- qed: Set the doorbell address correctly
- signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
- af_key: fix leaks in key_pol_get_resp and dump_sp.
- xfrm: Fix xfrm sel prefix length validation
- fscrypt: clean up some BUG_ON()s in block encryption/decryption
- media: mc-device.c: don't memset __user pointer contents
- media: staging: media: davinci_vpfe: - Fix for memory leak if decoder
initialization fails.
- net: phy: Check against net_device being NULL
- crypto: talitos - properly handle split ICV.
- crypto: talitos - Align SEC1 accesses to 32 bits boundaries.
- tua6100: Avoid build warnings.
- locking/lockdep: Fix merging of hlocks with non-zero references
- media: wl128x: Fix some error handling in fm_v4l2_init_video_device()
- cpupower : frequency-set -r option misses the last cpu in related cpu list
- net: stmmac: dwmac4: fix flow control issue
- net: fec: Do not use netdev messages too early
- net: axienet: Fix race condition causing TX hang
- s390/qdio: handle PENDING state for QEBSM devices
- RAS/CEC: Fix pfn insertion
- net: sfp: add mutex to prevent concurrent state checks
- ipset: Fix memory accounting for hash types on resize
- perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode
- perf tests: Add valid callback for parse-events test
- perf test 6: Fix missing kvm module load for s390
- media: fdp1: Support M3N and E3 platforms
- iommu: Fix a leak in iommu_insert_resv_region
- gpio: omap: fix lack of irqstatus_raw0 for OMAP4
- gpio: omap: ensure irq is enabled before wakeup
- regmap: fix bulk writes on paged registers
- bpf: silence warning messages in core
- rcu: Force inlining of rcu_read_lock()
- x86/cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS
- blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership
arbitration
- xfrm: fix sa selector validation
- sched/core: Add __sched tag for io_schedule()
- x86/atomic: Fix smp_mb__{before,after}_atomic()
- perf evsel: Make perf_evsel__name() accept a NULL argument
- vhost_net: disable zerocopy by default
- ipoib: correcly show a VF hardware address
- EDAC/sysfs: Fix memory leak when creating a csrow object
- ipsec: select crypto ciphers for xfrm_algo
- ipvs: defer hook registration to avoid leaks
- media: s5p-mfc: Make additional clocks optional
- media: i2c: fix warning same module names
- ntp: Limit TAI-UTC offset
- timer_list: Guard procfs specific code
- acpi/arm64: ignore 5.1 FADTs that are reported as 5.0
- media: coda: fix mpeg2 sequence number handling
- media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP
- media: coda: increment sequence offset for the last returned frame
- media: vimc: cap: check v4l2_fill_pixfmt return value
- media: hdpvr: fix locking and a missing msleep
- rtlwifi: rtl8192cu: fix error handle when usb probe failed
- mt7601u: do not schedule rx_tasklet when the device has been disconnected
- x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c
- mt7601u: fix possible memory leak when the device is disconnected
- ipvs: fix tinfo memory leak in start_sync_thread
- ath10k: add missing error handling
- ath10k: fix PCIE device wake up failed
- perf tools: Increase MAX_NR_CPUS and MAX_CACHES
- libata: don't request sense data on !ZAC ATA devices
- clocksource/drivers/exynos_mct: Increase priority over ARM arch timer
- rslib: Fix decoding of shortened codes
- rslib: Fix handling of of caller provided syndrome
- ixgbe: Check DDM existence in transceiver before access
- crypto: serpent - mark __serpent_setkey_sbox noinline
- crypto: asymmetric_keys - select CRYPTO_HASH where needed
- EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
- bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
- net: hns3: fix a -Wformat-nonliteral compile warning
- net: hns3: add some error checking in hclge_tm module
- ath10k: destroy sdio workqueue while remove sdio module
- iwlwifi: mvm: Drop large non sta frames
- perf stat: Make metric event lookup more robust
- net: usb: asix: init MAC address buffers
- gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
- Bluetooth: hci_bcsp: Fix memory leak in rx_skb
- Bluetooth: 6lowpan: search for destination address in all peers
- Bluetooth: Check state in l2cap_disconnect_rsp
- gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable()
- Bluetooth: validate BLE connection interval updates
- gtp: fix suspicious RCU usage
- gtp: fix Illegal context switch in RCU read-side critical section.
- gtp: fix use-after-free in gtp_encap_destroy()
- gtp: fix use-after-free in gtp_newlink()
- net: mvmdio: defer probe of orion-mdio if a clock is not ready
- iavf: fix dereference of null rx_buffer pointer
- floppy: fix out-of-bounds read in next_valid_format
- floppy: fix invalid pointer dereference in drive_name
- xen: let alloc_xenballooned_pages() fail if not enough memory free
- scsi: NCR5380: Reduce goto statements in NCR5380_select()
- scsi: NCR5380: Always re-enable reselection interrupt
- Revert "scsi: ncr5380: Increase register polling limit"
- scsi: core: Fix race on creating sense cache
- scsi: megaraid_sas: Fix calculation of target ID
- scsi: mac_scsi: Increase PIO/PDMA transfer length threshold
- scsi: mac_scsi: Fix pseudo DMA implementation, take 2
- crypto: ghash - fix unaligned memory access in ghash_setkey()
- crypto: ccp - Validate the the error value used to index error messages
- crypto: arm64/sha1-ce - correct digest for empty data in finup
- crypto: arm64/sha2-ce - correct digest for empty data in finup
- crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
- crypto: ccp - memset structure fields to zero before reuse
- crypto: ccp/gcm - use const time tag comparison.
- crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe
- Input: gtco - bounds check collection indent level
- Input: alps - don't handle ALPS cs19 trackpoint-only device
- Input: synaptics - whitelist Lenovo T580 SMBus intertouch
- Input: alps - fix a mismatch between a condition check and its comment
- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
- arm64: tegra: Update Jetson TX1 GPU regulator timings
- iwlwifi: pcie: don't service an interrupt that was masked
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X
- NFSv4: Handle the special Linux file open access mode
- pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error
- lib/scatterlist: Fix mapping iterator when sg->offset is greater than
PAGE_SIZE
- ASoC: dapm: Adapt for debugfs API change
- ALSA: seq: Break too long mutex context in the write loop
- media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
- media: coda: Remove unbalanced and unneeded mutex unlock
- KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed
- arm64: tegra: Fix AGIC register range
- fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys
inodes.
- drm/nouveau/i2c: Enable i2c pads & busses during preinit
- padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
- dm zoned: fix zone state management race
- xen/events: fix binding user event channels to cpus
- 9p/xen: Add cleanup path in p9_trans_xen_init
- 9p/virtio: Add cleanup path in p9_virtio_init
- x86/boot: Fix memory leak in default_get_smp_config()
- perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs
- perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs
- intel_th: pci: Add Ice Lake NNPI support
- PCI: Do not poll for PME if the device is in D3cold
- Btrfs: fix data loss after inode eviction, renaming it, and fsync it
- Btrfs: fix fsync not persisting dentry deletions due to inode evictions
- Btrfs: add missing inode version, ctime and mtime updates when punching hole
- HID: wacom: generic: only switch the mode on devices with LEDs
- HID: wacom: correct touch resolution x/y typo
- libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
- coda: pass the host file in vma->vm_file on mmap
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM
- PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
- crypto: caam - limit output IV to CBC to work around CTR mode DMA issue
- parisc: Ensure userspace privilege for ptraced processes in regset functions
- parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1
- powerpc/32s: fix suspend/resume when IBATs 4-7 are used
- powerpc/watchpoint: Restore NV GPRs while returning from exception
- eCryptfs: fix a couple type promotion bugs
- intel_th: msu: Fix single mode with disabled IOMMU
- Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
- usb: Handle USB3 remote wakeup for LPM enabled devices correctly
- net: mvmdio: allow up to four clocks to be specified for orion-mdio
- dt-bindings: allow up to four clocks for orion-mdio
- dm bufio: fix deadlock with loop device
- compiler.h, kasan: Avoid duplicating __read_once_size_nocheck()
- compiler.h: Add read_word_at_a_time() function.
- lib/strscpy: Shut up KASAN false-positives in strscpy()
- bnx2x: Prevent load reordering in tx completion processing
- caif-hsi: fix possible deadlock in cfhsi_exit_module()
- igmp: fix memory leak in igmpv3_del_delrec()
- ipv4: don't set IPv6 only flags to IPv4 addresses
- net: bcmgenet: use promisc for unsupported filters
- net: dsa: mv88e6xxx: wait after reset deactivation
- net: neigh: fix multiple neigh timer scheduling
- net: openvswitch: fix csum updates for MPLS actions
- nfc: fix potential illegal memory access
- rxrpc: Fix send on a connected, but unbound socket
- sky2: Disable MSI on ASUS P6T
- vrf: make sure skb->data contains ip header to make routing
- macsec: fix use-after-free of skb during RX
- macsec: fix checksumming after decryption
- netrom: fix a memory leak in nr_rx_frame()
- netrom: hold sock when setting skb->destructor
- bonding: validate ip header before check IPPROTO_IGMP
- net: make skb_dst_force return true when dst is refcounted
- tcp: fix tcp_set_congestion_control() use from bpf hook
- tcp: Reset bytes_acked and bytes_received when disconnecting
- net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
- net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
- net: bridge: stp: don't cache eth dest pointer before skb pull
- dma-buf: balance refcount inbalance
- dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc
- MIPS: lb60: Fix pin mappings
- ext4: don't allow any modifications to an immutable file
- ext4: enforce the immutable flag on open files
- mm: add filemap_fdatawait_range_keep_errors()
- jbd2: introduce jbd2_inode dirty range scoping
- ext4: use jbd2_inode dirty range scoping
- ext4: allow directory holes
- mm: vmscan: scan anonymous pages on file refaults
- hvsock: fix epollout hang from race condition
- drm/panel: simple: Fix panel_simple_dsi_probe
- usb: core: hub: Disable hub-initiated U1/U2
- tty: max310x: Fix invalid baudrate divisors calculator
- pinctrl: rockchip: fix leaked of_node references
- tty: serial: cpm_uart - fix init when SMC is relocated
- drm/edid: Fix a missing-check bug in drm_load_edid_firmware()
- PCI: Return error if cannot probe VF
- drm/bridge: tc358767: read display_props in get_modes()
- drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz
- drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry
- memstick: Fix error cleanup path of memstick_init
- tty/serial: digicolor: Fix digicolor-usart already registered warning
- tty: serial: msm_serial: avoid system lockup condition
- serial: 8250: Fix TX interrupt handling condition
- drm/virtio: Add memory barriers for capset cache.
- phy: renesas: rcar-gen2: Fix memory leak at error paths
- powerpc/pseries/mobility: prevent cpu hotplug during DT update
- drm/rockchip: Properly adjust to a true clock in adjusted_mode
- tty: serial_core: Set port active bit in uart_port_activate
- usb: gadget: Zero ffs_io_data
- powerpc/pci/of: Fix OF flags parsing for 64bit BARs
- drm/msm: Depopulate platform on probe failure
- serial: mctrl_gpio: Check if GPIO property exisits before requesting it
- PCI: sysfs: Ignore lockdep for remove attribute
- kbuild: Add -Werror=unknown-warning-option to CLANG_FLAGS
- PCI: xilinx-nwl: Fix Multi MSI data programming
- iio: iio-utils: Fix possible incorrect mask calculation
- powerpc/xmon: Fix disabling tracing while in xmon
- recordmcount: Fix spurious mcount entries on powerpc
- mfd: core: Set fwnode for created devices
- mfd: arizona: Fix undefined behavior
- mfd: hi655x-pmic: Fix missing return value check for
devm_regmap_init_mmio_clk
- um: Silence lockdep complaint about mmap_sem
- powerpc/4xx/uic: clear pending interrupt after irq type/pol change
- RDMA/i40iw: Set queue pair state when being queried
- serial: sh-sci: Terminate TX DMA during buffer flushing
- serial: sh-sci: Fix TX DMA buffer flushing and workqueue races
- kallsyms: exclude kasan local symbols on s390
- perf test mmap-thread-lookup: Initialize variable to suppress memory
sanitizer warning
- perf session: Fix potential NULL pointer dereference found by the smatch
tool
- perf annotate: Fix dereferencing freed memory found by the smatch tool
- RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM
- PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB
- powerpc/boot: add {get, put}_unaligned_be32 to xz_config.h
- f2fs: avoid out-of-range memory access
- mailbox: handle failed named mailbox channel request
- powerpc/eeh: Handle hugepages in ioremap space
- block/bio-integrity: fix a memory leak bug
- sh: prevent warnings when using iounmap
- mm/kmemleak.c: fix check for softirq context
- 9p: pass the correct prototype to read_cache_page
- mm/gup.c: mark undo_dev_pagemap as __maybe_unused
- mm/gup.c: remove some BUG_ONs from get_gate_page()
- mm/mmu_notifier: use hlist_add_head_rcu()
- locking/lockdep: Fix lock used or unused stats error
- locking/lockdep: Hide unused 'class' variable
- drm/crc: Only report a single overflow when a CRC fd is opened
- drm/crc-debugfs: Also sprinkle irqrestore over early exits
- usb: wusbcore: fix unbalanced get/put cluster_id
- usb: pci-quirks: Correct AMD PLL quirk detection
- KVM: nVMX: do not use dangling shadow VMCS after guest reset
- btrfs: inode: Don't compress if NODATASUM or NODATACOW set
- x86/sysfb_efi: Add quirks for some devices with swapped width and height
- x86/speculation/mds: Apply more accurate check on hypervisor platform
- binder: prevent transactions to context manager from its own process.
- fpga-manager: altera-ps-spi: Fix build error
- hpet: Fix division by zero in hpet_time_div()
- powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask()
- powerpc/tm: Fix oops on sigreturn on systems without TM
- access: avoid the RCU grace period for the temporary subjective credentials
- batman-adv: Fix duplicated OGMs on NETDEV_UP
- net: hns3: set ops to null when unregister ad_dev
- x86/cpu: Add Ice Lake NNPI to Intel family
- qed: iWARP - Fix tc for MPA ll2 connection
- net: hns3: fix for skb leak when doing selftest
- sched/fair: Fix "runnable_avg_yN_inv" not used warnings
- x86/cacheinfo: Fix a -Wtype-limits warning
- nvme-pci: properly report state change failure in nvme_reset_work
- nvme-pci: set the errno on ctrl state change error
- arm64: Do not enable IRQs for ct_user_exit
- net: stmmac: sun8i: force select external PHY when no internal one
- bcache: check CACHE_SET_IO_DISABLE in allocator code
- bcache: check CACHE_SET_IO_DISABLE bit in bch_journal()
- bcache: acquire bch_register_lock later in cached_dev_free()
- bcache: fix potential deadlock in cached_def_free()
- perf stat: Fix group lookup for metric group
- tools: bpftool: Fix json dump crash on powerpc
- Bluetooth: Add a new 13d3:3496 QCA_ROME device
- Bluetooth: Add new 13d3:3491 QCA_ROME device
- Bluetooth: Add new 13d3:3501 QCA_ROME device
- bcache: ignore read-ahead request failure on backing device
- bcache: fix mistaken sysfs entry for io_error counter
- bcache: destroy dc->writeback_write_wq if failed to create
dc->writeback_thread
- iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill
- iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices
- ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform
- media: videobuf2-core: Prevent size alignment wrapping buffer size to 0
- media: videobuf2-dma-sg: Prevent size from overflowing
- perf/x86/intel: Fix spurious NMI on fixed counter
- drm/edid: parse CEA blocks embedded in DisplayID
- PCI: qcom: Ensure that PERST is asserted for at least 100 ms
- IB/mlx5: Report correctly tag matching rendezvous capability
- include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT
architectures
- xfs: fix pagecache truncation prior to reflink
- xfs: flush removing page cache in xfs_reflink_remap_prep
- xfs: don't overflow xattr listent buffer
- xfs: don't ever put nlink > 0 inodes on the unlinked list
- xfs: fix reporting supported extra file attributes for statx()
- xfs: serialize unaligned dio writes against all other dio writes
- xfs: abort unaligned nowait directio early
- powerpc/powernv/npu: Fix reference leak
- powerpc/pseries: Fix oops in hotplug memory notifier
- mmc: sdhci-msm: fix mutex while in spinlock
- mtd: rawnand: mtk: Correct low level time calculation of r/w cycle
- blk-throttle: fix zero wait time for iops throttled group
- tcp: be more careful in tcp_fragment()
- net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn
- net_sched: unset TCQ_F_CAN_BYPASS when adding filters
- net: bridge: don't cache ether dest pointer on input
- net: sched: verify that q!=NULL before setting q->flags
* Line 6 POD HD500 driver fault (LP: #1790595) // Bionic update: upstream
stable patchset 2019-08-05 (LP: #1839036)
- ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1
* Bionic update: upstream stable patchset 2019-08-02 (LP: #1838824)
- rapidio: fix a NULL pointer dereference when create_workqueue() fails
- fs/fat/file.c: issue flush after the writeback of FAT
- sysctl: return -EINVAL if val violates minmax
- ipc: prevent lockup on alloc_msg and free_msg
- ARM: prevent tracing IPI_CPU_BACKTRACE
- mm/hmm: select mmu notifier when selecting HMM
- hugetlbfs: on restore reserve error path retain subpool reservation
- mem-hotplug: fix node spanned pages when we have a node with only
ZONE_MOVABLE
- mm/cma.c: fix crash on CMA allocation if bitmap allocation fails
- mm/cma.c: fix the bitmap status to show failed allocation reason
- mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
- mm/slab.c: fix an infinite loop in leaks_show()
- kernel/sys.c: prctl: fix false positive in validate_prctl_map()
- thermal: rcar_gen3_thermal: disable interrupt in .remove
- drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER
- mfd: tps65912-spi: Add missing of table registration
- mfd: intel-lpss: Set the device in reset state when init
- drm/nouveau/disp/dp: respect sink limits when selecting failsafe link
configuration
- mfd: twl6040: Fix device init errors for ACCCTL register
- perf/x86/intel: Allow PEBS multi-entry in watermark mode
- drm/bridge: adv7511: Fix low refresh rate selection
- objtool: Don't use ignore flag for fake jumps
- EDAC/mpc85xx: Prevent building as a module
- pwm: meson: Use the spin-lock only to protect register modifications
- ntp: Allow TAI-UTC offset to be set to zero
- f2fs: fix to avoid panic in do_recover_data()
- f2fs: fix to clear dirty inode in error path of f2fs_iget()
- f2fs: fix to avoid panic in dec_valid_block_count()
- f2fs: fix to do sanity check on valid block count of segment
- percpu: remove spurious lock dependency between percpu and sched
- configfs: fix possible use-after-free in configfs_register_group
- uml: fix a boot splat wrt use of cpu_all_mask
- mmc: mmci: Prevent polling for busy detection in IRQ context
- watchdog: imx2_wdt: Fix set_timeout for big timeout values
- watchdog: fix compile time error of pretimeout governors
- blk-mq: move cancel of requeue_work into blk_mq_release
- iommu/vt-d: Set intel_iommu_gfx_mapped correctly
- misc: pci_endpoint_test: Fix test_reg_bar to be updated in pci_endpoint_test
- nvme-pci: unquiesce admin queue on shutdown
- ALSA: hda - Register irq handler after the chip initialization
- nvmem: core: fix read buffer in place
- fuse: retrieve: cap requested size to negotiated max_write
- nfsd: allow fh_want_write to be called twice
- vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING"
- x86/PCI: Fix PCI IRQ routing table memory leak
- platform/chrome: cros_ec_proto: check for NULL transfer function
- PCI: keystone: Prevent ARM32 specific code to be compiled for ARM64
- soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
- clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
- soc: rockchip: Set the proper PWM for rk3288
- ARM: dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA
- ARM: dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA
- ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
- ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
- PCI: rpadlpar: Fix leaked device_node references in add/remove paths
- platform/x86: intel_pmc_ipc: adding error handling
- power: supply: max14656: fix potential use-before-alloc
- PCI: rcar: Fix a potential NULL pointer dereference
- PCI: rcar: Fix 64bit MSI message address handling
- video: hgafb: fix potential NULL pointer dereference
- video: imsttfb: fix potential NULL pointer dereferences
- block, bfq: increase idling for weight-raised queues
- PCI: xilinx: Check for __get_free_pages() failure
- gpio: gpio-omap: add check for off wake capable gpios
- dmaengine: idma64: Use actual device for DMA transfers
- pwm: tiehrpwm: Update shadow register for disabling PWMs
- ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on
Arndale Octa
- pwm: Fix deadlock warning when removing PWM device
- ARM: exynos: Fix undefined instruction during Exynos5422 resume
- usb: typec: fusb302: Check vconn is off when we start toggling
- gpio: vf610: Do not share irq_chip
- percpu: do not search past bitmap when allocating an area
- drm: don't block fb changes for async plane updates
- ALSA: seq: Cover unsubscribe_port() in list_mutex
- initramfs: free initrd memory if opening /initrd.image fails
- bpf: fix undefined behavior in narrow load handling
- f2fs: fix to avoid panic in f2fs_remove_inode_page()
- f2fs: fix to use inline space only if inline_xattr is enable
- netfilter: nf_conntrack_h323: restore boundary check correctness
- mips: Make sure dt memory regions are valid
- nvmem: sunxi_sid: Support SID on A83T and H5
- nfsd: avoid uninitialized variable warning
- switchtec: Fix unintended mask of MRPC event
- net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending
- i40e: Queues are reserved despite "Invalid argument" error
- net: hns3: return 0 and print warning when hit duplicate MAC
- soc: renesas: Identify R-Car M3-W ES1.1
- soc: renesas: Identify R-Car M3-W ES1.3
- [Config] updateconfigs for CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT
- drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3)
- nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled
- HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth
- HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary
- ALSA: oxfw: allow PCM capture for Stanton SCS.1m
- ALSA: hda/realtek - Update headset mode for ALC256
- ALSA: firewire-motu: fix destruction of data for isochronous resources
- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
- mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
- fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
- mm/vmscan.c: fix trying to reclaim unevictable LRU page
- signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
- ptrace: restore smp_rmb() in __ptrace_may_access()
- media: v4l2-ioctl: clear fields in s_parm
- iommu/arm-smmu: Avoid constant zero in TLBI writes
- i2c: acorn: fix i2c warning
- bcache: fix stack corruption by PRECEDING_KEY()
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
- ASoC: cs42xx8: Add regcache mask dirty
- ASoC: fsl_asrc: Fix the issue about unsupported rate
- drm/i915/sdvo: Implement proper HDMI audio support for SDVO
- x86/uaccess, kcov: Disable stack protector
- ALSA: seq: Protect in-kernel ioctl calls with mutex
- ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
- Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
- s390/kasan: fix strncpy_from_user kasan checks
- Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
- scsi: qedi: remove memset/memcpy to nfunc and use func instead
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
- scsi: lpfc: add check for loss of ndlp when sending RRQ
- arm64/mm: Inhibit huge-vmap with ptdump
- nvme: remove the ifdef around nvme_nvm_ioctl
- platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI
table
- platform/x86: pmc_atom: Add several Beckhoff Automation boards to
critclk_systems DMI table
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
- libnvdimm: Fix compilation warnings with W=1
- selftests/timers: Add missing fflush(stdout) calls
- usbnet: ipheth: fix racing condition
- KVM: x86/pmu: do not mask the value that is written to fixed PMUs
- KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
- drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an
invalid read
- drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
- usb: dwc2: Fix DMA cache alignment issues
- usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression)
- USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
- USB: serial: pl2303: add Allied Telesis VT-Kit3
- USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
- USB: serial: option: add Telit 0x1260 and 0x1261 compositions
- RAS/CEC: Fix binary search function
- x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback
- x86/kasan: Fix boot with 5-level paging and KASAN
- rtc: pcf8523: don't return invalid date when battery is low
- HID: wacom: Don't set tool type until we're in range
- HID: wacom: Don't report anything prior to the tool entering range
- HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact
- bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached
- f2fs: fix to avoid accessing xattr across the boundary
- nvme: fix srcu locking on error return in nvme_get_ns_from_disk
- nvme: merge nvme_ns_ioctl into nvme_ioctl
- nvme: release namespace SRCU protection before performing controller ioctls
- nvme: fix memory leak for power latency tolerance
- KVM: x86/pmu: mask the result of rdpmc according to the width of the
counters
- tools/kvm_stat: fix fields filter for child events
- RAS/CEC: Convert the timer callback to a workqueue
- x86/mm/KASLR: Compute the size of the vmemmap section properly
- ax25: fix inconsistent lock state in ax25_destroy_timer
- be2net: Fix number of Rx queues used for flow hashing
- ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
- lapb: fixed leak of control-blocks.
- neigh: fix use-after-free read in pneigh_get_next
- net: openvswitch: do not free vport if register_netdevice() is failed.
- sctp: Free cookie before we memdup a new one
- sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg
- Staging: vc04_services: Fix a couple error codes
- perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints
- netfilter: nf_queue: fix reinject verdict handling
- ipvs: Fix use-after-free in ip_vs_in
- selftests: netfilter: missing error check when setting up veth interface
- clk: ti: clkctrl: Fix clkdm_clk handling
- powerpc/powernv: Return for invalid IMC domain
- mISDN: make sure device name is NUL terminated
- x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor
- perf/ring_buffer: Fix exposing a temporarily decreased data_head
- perf/ring_buffer: Add ordering to rb->nest increment
- perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data
- gpio: fix gpio-adp5588 build errors
- net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()
- net: aquantia: fix LRO with FCS error
- i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
- ALSA: hda - Force polling mode on CNL for fixing codec communication
- configfs: Fix use-after-free when accessing sd->s_dentry
- perf data: Fix 'strncat may truncate' build failure with recent gcc
- perf record: Fix s390 missing module symbol and warning for non-root users
- ia64: fix build errors by exporting paddr_to_nid()
- KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list
- KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu
- net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs
- net: phy: dp83867: Set up RGMII TX delay
- scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
- scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask
- scsi: scsi_dh_alua: Fix possible null-ptr-deref
- scsi: libsas: delete sas port if expander discover failed
- mlxsw: spectrum: Prevent force of 56G
- coredump: fix race condition between collapse_huge_page() and core dumping
- infiniband: fix race condition between infiniband mlx4, mlx5 driver and core
dumping
- Abort file_remove_privs() for non-reg. files
- tipc: purge deferredq list for each grp member in tipc_group_delete
- vsock/virtio: set SOCK_DONE on peer shutdown
- usb: xhci: Fix a potential null pointer dereference in
xhci_debugfs_create_endpoint()
- ACPI/PCI: PM: Add missing wakeup.flags.valid checks
- drm/etnaviv: lock MMU while dumping core
- net: aquantia: tx clean budget logic error
- perf namespace: Protect reading thread's namespace
- xen/pvcalls: Remove set but not used variable
- xen: xenbus: Catch closing of non existent transactions
- xen: xenbus_dev_frontend: Verify body of XS_TRANSACTION_END
- xenbus: Avoid deadlock during suspend due to open transactions
- tracing: Silence GCC 9 array bounds warning
- objtool: Support per-function rodata sections
- gcc-9: silence 'address-of-packed-member' warning
- net: phy: broadcom: Use strlcpy() for ethtool::get_strings
- mmc: core: Prevent processing SDIO IRQs when the card is suspended
- scsi: ufs: Avoid runtime suspend possibly being blocked forever
- usb: chipidea: udc: workaround for endpoint conflict issue
- IB/hfi1: Silence txreq allocation warnings
- Input: synaptics - enable SMBus on ThinkPad E480 and E580
- Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD
- apparmor: enforce nullbyte at end of tag string
- ARC: fix build warnings
- ARC: [plat-hsdk]: Add missing multicast filter bins number to GMAC node
- ARC: [plat-hsdk]: Add missing FIFO size entry in GMAC node
- parport: Fix mem leak in parport_register_dev_model
- parisc: Fix compiler warnings in float emulation code
- IB/rdmavt: Fix alloc_qpn() WARN_ON()
- IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
- IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value
- IB/hfi1: Validate page aligned for a given virtual address
- MIPS: uprobes: remove set but not used variable 'epc'
- xtensa: Fix section mismatch between memblock_reserve and mem_reserve
- net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0
- net: hns: Fix loopback test failed at copper ports
- mdesc: fix a missing-check bug in get_vdev_port_node_info()
- sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD
- net: ethernet: mediatek: Use hw_feature to judge if HWLRO is supported
- net: ethernet: mediatek: Use NET_IP_ALIGN to judge if HW RX_2BYTE_OFFSET is
enabled
- drm/arm/hdlcd: Actually validate CRTC modes
- drm/arm/hdlcd: Allow a bit of clock tolerance
- scripts/checkstack.pl: Fix arm64 wrong or unknown architecture
- scsi: ufs: Check that space was properly alloced in copy_query_response
- scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous()
- net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set
- s390/qeth: fix VLAN attribute in bridge_hostnotify udev event
- hwmon: (core) add thermal sensors only if dev->of_node is present
- hwmon: (pmbus/core) Treat parameters as paged if on multiple pages
- nvme: Fix u32 overflow in the number of namespace list calculation
- btrfs: start readahead also in seed devices
- can: flexcan: fix timeout when set small bitrate
- can: purge socket error queue on sock destruct
- powerpc/bpf: use unsigned division instruction for 64-bit operations
- ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX
- ARM: dts: am57xx-idk: Remove support for voltage switching for SD card
- Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
- Bluetooth: Fix regression with minimum encryption key size alignment
- SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write
- cfg80211: fix memory leak of wiphy device name
- mac80211: drop robust management frames from unknown TA
- mac80211: handle deauthentication/disassociation from TDLS peer
- mac80211: Do not use stack memory with scatterlist for GMAC
- s390/jump_label: Use "jdd" constraint on gcc9
- s390/ap: rework assembler functions to use unions for in/out register
variables
- mmc: core: API to temporarily disable retuning for SDIO CRC errors
- mmc: core: Add sdio_retune_hold_now() and sdio_retune_release()
- Input: silead - add MSSL0017 to acpi_device_id
- selftests: vm: install test_vmalloc.sh for run_vmtests
- arm64: Silence gcc warnings about arch ABI drift
- riscv: mm: synchronize MMU after pte change
- arm64/sve: <uapi/asm/ptrace.h> should not depend on <uapi/linux/prctl.h>
- drm/vmwgfx: Use the backdoor port if the HB port is not available
- {nl,mac}80211: allow 4addr AP operation on crypto controlled devices
- perf ui helpline: Use strlcpy() as a shorter form of strncpy() + explicit
set nul
- perf help: Remove needless use of strncpy()
- perf header: Fix unchecked usage of strncpy()
- IB/hfi1: Close PSM sdma_progress sleep window
- 9p/xen: fix check for xenbus_read error in front_probe
- 9p/rdma: do not disconnect on down_interruptible EAGAIN
- 9p: acl: fix uninitialized iattr access
- 9p/rdma: remove useless check in cm_event_handler
- 9p: p9dirent_read: check network-provided name length
- net/9p: include trans_common.h to fix missing prototype warning.
- qmi_wwan: Fix out-of-bounds read
- fs/proc/array.c: allow reporting eip/esp for all coredumping threads
- mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask
- fs/binfmt_flat.c: make load_flat_shared_library() work
- dm log writes: make sure super sector log updates are written in order
- scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()
- x86/speculation: Allow guests to use SSBD even if host does not
- x86/microcode: Fix the microcode load on CPU hotplug for real
- NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O
- cpu/speculation: Warn on unsupported mitigations= parameter
- eeprom: at24: fix unexpected timeout under high load
- af_packet: Block execution of tasks waiting for transmit to complete in
AF_PACKET
- ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop
- net/packet: fix memory leak in packet_set_ring()
- net: remove duplicate fetch in sock_getsockopt
- net: stmmac: fixed new system time seconds value calculation
- sctp: change to hold sk after auth shkey is created successfully
- tipc: change to use register_pernet_device
- tipc: check msg->req data len in tipc_nl_compat_bearer_disable
- tun: wake up waitqueues after IFF_UP is set
- team: Always enable vlan tx offload
- bonding: Always enable vlan tx offload
- bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro
- bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err
- arm64: futex: Avoid copying out uninitialised stack in failed cmpxchg()
- bpf, arm64: use more scalable stadd over ldxr / stxr loop in xadd
- futex: Update comments and docs about return values of arch futex code
- tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
- arm64: insn: Fix ldadd instruction encoding
- arm64: Don't unconditionally add -Wno-psabi to KBUILD_CFLAGS
- irqchip/mips-gic: Use the correct local interrupt map registers
- Bluetooth: Fix faulty expression for minimum encryption key size check
- ASoC : cs4265 : readable register too low
- ASoC: soc-pcm: BE dai needs prepare when pause release after resume
- spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
- drm/mediatek: fix unbind functions
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable()
- ASoC: max98090: remove 24-bit format support if RJ is 0
- ASoC: sun4i-i2s: Fix sun8i tx channel offset mask
- ASoC: sun4i-i2s: Add offset to RX channel select
- usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i]
- usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC
- SoC: rt274: Fix internal jack assignment in set_jack callback
- scsi: hpsa: correct ioaccel2 chaining
- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device
registration
- cpuset: restore sanity to cpuset_cpus_allowed_fallback()
- scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE
- mm/mlock.c: change count_mm_mlocked_page_nr return type
- module: Fix livepatch/ftrace module text permissions race
- ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper()
- MIPS: netlogic: xlr: Remove erroneous check in nlm_fmn_send()
- drm/i915/dmc: protect against reading random memory
- crypto: user - prevent operating on larval algorithms
- crypto: cryptd - Fix skcipher instance memory leak
- ALSA: seq: fix incorrect order of dest_client/dest_ports arguments
- ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages
- ALSA: line6: Fix write on zero-sized buffer
- ALSA: usb-audio: fix sign unintended sign extension on left shifts
- ALSA: hda/realtek - Change front mic location for Lenovo M710q
- lib/mpi: Fix karactx leak in mpi_powm
- tracing/snapshot: Resize spare buffer if size changed
- arm64: kaslr: keep modules inside module region when KASAN is enabled
- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
- drm/imx: notify drm core before sending event during crtc disable
- drm/imx: only send event on crtc disable if kept disabled
- ftrace/x86: Remove possible deadlock between register_kprobe() and
ftrace_run_update_code()
- mm/vmscan.c: prevent useless kswapd loops
- btrfs: Ensure replaced device doesn't have pending chunk allocation
- vhost-net: set packet weight of tx polling to 2 * vq size
- vhost_net: use packet weight for rx handler, too
- vhost_net: introduce vhost_exceeds_weight()
- vhost: introduce vhost_exceeds_weight()
- vhost_net: fix possible infinite loop
- vhost: vsock: add weight support
- vhost: scsi: add weight support
- tty: rocket: fix incorrect forward declaration of 'rp_init()'
- KVM: x86: degrade WARN to pr_warn_ratelimited
- KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC
- svcrdma: Ignore source port when computing DRC hash
- MIPS: Fix bounds check virt_addr_valid
- MIPS: Add missing EHB in mtc0 -> mfc0 sequence.
- dmaengine: imx-sdma: remove BD_INTR for channel0
- drm/mediatek: unbind components in mtk_drm_unbind()
- drm/mediatek: clear num_pipes when unbind driver
- x86/CPU: Add more Icelake model numbers
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from
asus_nb_wmi
- platform/x86: intel-vbtn: Report switch events when event wakes device
- i2c: pca-platform: Fix GPIO lookup code
- ALSA: hda/realtek: Add quirks for several Clevo notebook barebones
- ARM: dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node
- drm/amd/powerplay: use hardware fan control if no powerplay fan table
- drm/etnaviv: add missing failure path to destroy suballoc
- mlxsw: spectrum: Handle VLAN device unlinking
- media: s5p-mfc: fix incorrect bus assignment in virtual child device
- net: hns: Fixes the missing put_device in positive leg for roce reset
- ALSA: hda: Initialize power_state field properly
- rds: Fix warning.
- ip6: fix skb leak in ip6frag_expire_frag_queue()
- netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
- sc16is7xx: move label 'err_spi' to correct section
- netfilter: ipv6: nf_defrag: accept duplicate fragments again
- nfsd: Fix overflow causing non-working mounts on 1 TB machines
- MIPS: have "plain" make calls build dtbs for selected platforms
- dmaengine: qcom: bam_dma: Fix completed descriptors count
* Bionic update: upstream stable patchset 2019-08-01 (LP: #1838700)
- x86: Hide the int3_emulate_call/jmp functions from UML
- ext4: do not delete unlinked inode from orphan list on failed truncate
- f2fs: Fix use of number of devices
- KVM: x86: fix return value for reserved EFER
- bio: fix improper use of smp_mb__before_atomic()
- sbitmap: fix improper use of smp_mb__before_atomic()
- Revert "scsi: sd: Keep disk read-only when re-reading partition"
- crypto: vmx - CTR: always increment IV as quadword
- mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time
problem
- mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem
- kvm: svm/avic: fix off-by-one in checking host APIC ID
- libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead
- arm64/iommu: handle non-remapped addresses in ->mmap and ->get_sgtable
- gfs2: Fix sign extension bug in gfs2_update_stats
- Btrfs: do not abort transaction at btrfs_update_root() after failure to COW
path
- Btrfs: avoid fallback to transaction commit during fsync of files with holes
- Btrfs: fix race between ranged fsync and writeback of adjacent ranges
- btrfs: sysfs: Fix error path kobject memory leak
- btrfs: sysfs: don't leak memory when failing add fsid
- fbdev: fix divide error in fb_var_to_videomode
- btrfs: honor path->skip_locking in backref code
- fbdev: fix WARNING in __alloc_pages_nodemask bug
- media: cpia2: Fix use-after-free in cpia2_exit
- media: serial_ir: Fix use-after-free in serial_ir_init_module
- media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
- ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
- bpf: devmap: fix use-after-free Read in __dev_map_entry_free
- batman-adv: mcast: fix multicast tt/tvlv worker locking
- at76c50x-usb: Don't register led_trigger if usb_register_driver failed
- net: erspan: fix use-after-free
- gfs2: Fix lru_count going negative
- cxgb4: Fix error path in cxgb4_init_module
- NFS: make nfs_match_client killable
- IB/hfi1: Fix WQ_MEM_RECLAIM warning
- gfs2: Fix occasional glock use-after-free
- mmc: core: Verify SD bus width
- tools/bpf: fix perf build error with uClibc (seen on ARC)
- dmaengine: tegra210-dma: free dma controller in remove()
- net: ena: gcc 8: fix compilation warning
- pinctrl: zte: fix leaked of_node references
- ASoC: hdmi-codec: unlock the device on startup errors
- powerpc/perf: Return accordingly on invalid chip-id in
- powerpc/boot: Fix missing check of lseek() return value
- ASoC: imx: fix fiq dependencies
- spi: pxa2xx: fix SCR (divisor) calculation
- brcm80211: potential NULL dereference in
brcmf_cfg80211_vndr_cmds_dcmd_handler()
- ACPI / property: fix handling of data_nodes in acpi_get_next_subnode()
- ARM: vdso: Remove dependency with the arch_timer driver internals
- arm64: Fix compiler warning from pte_unmap() with -Wunused-but-set-variable
- sched/cpufreq: Fix kobject memleak
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path
- scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending()
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in
tcm_qla2xxx_close_session()
- Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota
reserve
- btrfs: fix panic during relocation after ENOSPC before writeback happens
- btrfs: Don't panic when we can't find a root key
- iwlwifi: pcie: don't crash on invalid RX interrupt
- rtc: 88pm860x: prevent use-after-free on device remove
- scsi: qedi: Abort ep termination if offload not scheduled
- w1: fix the resume command API
- dmaengine: pl330: _stop: clear interrupt status
- mac80211/cfg80211: update bss channel on channel switch
- libbpf: fix samples/bpf build failure due to undefined UINT32_MAX
- ASoC: fsl_sai: Update is_slave_mode with correct value
- mwifiex: prevent an array overflow
- net: cw1200: fix a NULL pointer dereference
- crypto: sun4i-ss - Fix invalid calculation of hash end
- bcache: return error immediately in bch_journal_replay()
- bcache: fix failure in journal relplay
- bcache: add failure check to run_cache_set() for journal replay
- bcache: avoid clang -Wunintialized warning
- vfio-ccw: Do not call flush_workqueue while holding the spinlock
- vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev
- smpboot: Place the __percpu annotation correctly
- x86/mm: Remove in_nmi() warning from 64-bit implementation of
vmalloc_fault()
- mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC
versions
- HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
- pinctrl: pistachio: fix leaked of_node references
- pinctrl: samsung: fix leaked of_node references
- clk: rockchip: undo several noc and special clocks as critical on rk3288
- dmaengine: at_xdmac: remove BUG_ON macro in tasklet
- media: coda: clear error return value before picture run
- media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper
- media: au0828: stop video streaming only when last user stops
- media: ov2659: make S_FMT succeed even if requested format doesn't match
- audit: fix a memory leak bug
- media: stm32-dcmi: fix crash when subdev do not expose any formats
- media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable()
- media: pvrusb2: Prevent a buffer overflow
- powerpc/64: Fix booting large kernels with STRICT_KERNEL_RWX
- random: add a spinlock_t to struct batched_entropy
- cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock
- sched/core: Check quota and period overflow at usec to nsec conversion
- sched/rt: Check integer overflow at usec to nsec conversion
- sched/core: Handle overflow in cpu_shares_write_u64
- drm/msm: a5xx: fix possible object reference leak
- USB: core: Don't unbind interfaces following device reset failure
- x86/irq/64: Limit IST stack overflow check to #DB stack
- phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode
- i40e: Able to add up to 16 MAC filters on an untrusted VF
- i40e: don't allow changes to HW VLAN stripping on active port VLANs
- arm64: vdso: Fix clock_getres() for CLOCK_REALTIME
- RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
- hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
- hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
- hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
- hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
- hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
- scsi: libsas: Do discovery on empty PHY to update PHY info
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers
- mmc_spi: add a status check for spi_sync_locked
- mmc: sdhci-of-esdhc: add erratum eSDHC5 support
- mmc: sdhci-of-esdhc: add erratum A-009204 support
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
- drm/amdgpu: fix old fence check in amdgpu_fence_emit
- PM / core: Propagate dev->power.wakeup_path when no callbacks
- clk: rockchip: Fix video codec clocks on rk3288
- extcon: arizona: Disable mic detect if running when driver is removed
- clk: rockchip: Make rkpwm a critical clock on rk3288
- s390: zcrypt: initialize variables before_use
- x86/microcode: Fix the ancient deprecated microcode loading method
- s390: cio: fix cio_irb declaration
- cpufreq: ppc_cbe: fix possible object reference leak
- cpufreq/pasemi: fix possible object reference leak
- cpufreq: pmac32: fix possible object reference leak
- cpufreq: kirkwood: fix possible object reference leak
- block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR
- x86/build: Keep local relocations with ld.lld
- iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion
- iio: hmc5843: fix potential NULL pointer dereferences
- iio: common: ssp_sensors: Initialize calculated_time in
ssp_common_process_data
- rtlwifi: fix a potential NULL pointer dereference
- mwifiex: Fix mem leak in mwifiex_tm_cmd
- brcmfmac: fix missing checks for kmemdup
- b43: shut up clang -Wuninitialized variable warning
- brcmfmac: convert dev_init_lock mutex to completion
- brcmfmac: fix WARNING during USB disconnect in case of unempty psq
- brcmfmac: fix race during disconnect when USB completion is in progress
- brcmfmac: fix Oops when bringing up interface during USB disconnect
- rtc: xgene: fix possible race condition
- rtlwifi: fix potential NULL pointer dereference
- scsi: ufs: Fix regulator load and icc-level configuration
- scsi: ufs: Avoid configuring regulator with undefined voltage range
- arm64: cpu_ops: fix a leaked reference by adding missing of_node_put
- x86/uaccess, signal: Fix AC=1 bloat
- x86/ia32: Fix ia32_restore_sigcontext() AC leak
- chardev: add additional check for minor range overlap
- RDMA/hns: Fix bad endianess of port_pd variable
- HID: core: move Usage Page concatenation to Main item
- ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put
- ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put
- cxgb3/l2t: Fix undefined behaviour
- HID: logitech-hidpp: change low battery level threshold from 31 to 30
percent
- spi: tegra114: reset controller on probe
- kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.
- media: video-mux: fix null pointer dereferences
- media: wl128x: prevent two potential buffer overflows
- scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload
check
- virtio_console: initialize vtermno value for ports
- tty: ipwireless: fix missing checks for ioremap
- x86/mce: Fix machine_check_poll() tests for error types
- rcutorture: Fix cleanup path for invalid torture_type strings
- rcuperf: Fix cleanup path for invalid perf_type strings
- usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
- scsi: qla4xxx: avoid freeing unallocated dma memory
- batman-adv: allow updating DAT entry timeouts on incoming ARP Replies
- dmaengine: tegra210-adma: use devm_clk_*() helpers
- hwrng: omap - Set default quality
- thunderbolt: Fix to check for kmemdup failure
- media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
- media: vimc: stream: fix thread state before sleep
- media: go7007: avoid clang frame overflow warning with KASAN
- media: vimc: zero the media_device on probe
- scsi: lpfc: Fix FDMI manufacturer attribute value
- scsi: lpfc: Fix fc4type information for FDMI
- media: saa7146: avoid high stack usage with clang
- scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
- spi: rspi: Fix sequencer reset during initialization
- spi: Fix zero length xfer bug
- ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM
- drm/drv: Hold ref on parent device during drm_device lifetime
- drm: Wake up next in drm_read() chain if we are forced to putback the event
- vfio-ccw: Prevent quiesce function going into an infinite loop
- NFS: Fix a double unlock from nfs_match,get_client
- ext4: wait for outstanding dio during truncate in nojournal mode
- NFSv4.1 fix incorrect return value in copy_file_range
- media: vb2: add waiting_in_dqbuf flag
- acct_on(): don't mess with freeze protection
- hv_netvsc: fix race that may miss tx queue wakeup
- Bluetooth: Ignore CC events not matching the last HCI command
- powerpc/perf: Fix loop exit condition in nest_imc_event_init
- drm/nouveau/bar/nv50: ensure BAR is mapped
- media: stm32-dcmi: return appropriate error codes during probe
- powerpc/watchdog: Use hrtimers for per-CPU heartbeat
- scsi: qla2xxx: Fix hardirq-unsafe locking
- x86/modules: Avoid breaking W^X while loading modules
- sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs
- s390: qeth: address type mismatch warning
- rsi: Fix NULL pointer dereference in kmalloc
- nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE
- bcache: avoid potential memleak of list of journal_replay(s) in the
CACHE_SYNC branch of run_cache_set
- RDMA/cma: Consider scope_id while binding to ipv6 ll address
- block: fix use-after-free on gendisk
- staging: vc04_services: handle kzalloc failure
- irq_work: Do not raise an IPI when queueing work on the local CPU
- thunderbolt: Take domain lock in switch sysfs attribute callbacks
- drm: etnaviv: avoid DMA API warning when importing buffers
- ACPI/IORT: Reject platform device creation on NUMA node mapping failure
- perf/x86/msr: Add Icelake support
- perf/x86/intel/rapl: Add Icelake support
- perf/x86/intel/cstate: Add Icelake support
- drm/panel: otm8009a: Add delay at the end of initialization
- thunderbolt: property: Fix a missing check of kzalloc
- thunderbolt: Fix to check the return value of kmemdup
- x86/mce: Handle varying MCA bank counts
- scsi: lpfc: avoid uninitialized variable warning
- thunderbolt: Fix to check return value of ida_simple_get
- drm/amd/display: fix releasing planes when exiting odm
- thunderbolt: property: Fix a NULL pointer dereference
- e1000e: Disable runtime PM on CNP+
- igb: Exclude device from suspend direct complete optimization
- media: si2165: fix a missing check of return value
- drm/amd/display: Fix Divide by 0 in memory calculations
- spi: imx: stop buffer overflow in RX FIFO flush
- bonding/802.3ad: fix slave link initialization transition states
- cxgb4: offload VLAN flows regardless of VLAN ethtype
- inet: switch IP ID generator to siphash
- ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
- ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST
- ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
- llc: fix skb leak in llc_build_and_send_ui_pkt()
- net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT
- net: fec: fix the clk mismatch in failed_reset path
- net-gro: fix use-after-free read in napi_gro_frags()
- net: mvneta: Fix err code path of probe
- net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
- net: phy: marvell10g: report if the PHY fails to boot firmware
- net: stmmac: fix reset gpio free missing
- usbnet: fix kernel crash after disconnect
- tipc: Avoid copying bytes beyond the supplied data
- net/mlx5: Allocate root ns memory using kzalloc to match kfree
- bnxt_en: Fix aggregation buffer leak under OOM condition.
- crypto: vmx - ghash: do nosimd fallback manually
- include/linux/compiler*.h: define asm_volatile_goto
- compiler.h: give up __compiletime_assert_fallback()
- xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
- tipc: fix modprobe tipc failed after switch order of device registration
- sparc64: Fix regression in non-hypervisor TLB flush xcall
- include/linux/bitops.h: sanitize rotate primitives
- xhci: update bounce buffer with correct sg num
- xhci: Use %zu for printing size_t type
- xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
- usb: xhci: avoid null pointer deref when bos field is NULL
- usbip: usbip_host: fix BUG: sleeping function called from invalid context
- usbip: usbip_host: fix stub_dev lock context imbalance regression
- USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
- USB: sisusbvga: fix oops in error path of sisusb_probe
- USB: Add LPM quirk for Surface Dock GigE adapter
- USB: rio500: refuse more than one device at a time
- USB: rio500: fix memory leak in close after disconnect
- media: usb: siano: Fix general protection fault in smsusb
- media: usb: siano: Fix false-positive "uninitialized variable" warning
- media: smsusb: better handle optional alignment
- scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
- scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
- Btrfs: fix wrong ctime and mtime of a directory after log replay
- Btrfs: fix race updating log root item during fsync
- Btrfs: fix fsync not persisting changed attributes of a directory
- Btrfs: incremental send, fix file corruption when no-holes feature is
enabled
- KVM: PPC: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts
- powerpc/perf: Fix MMCRA corruption by bhrb_filter
- ALSA: hda/realtek - Set default power save node to 0
- KVM: s390: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID
- drm/nouveau/i2c: Disable i2c bus access after ->fini()
- tty: serial: msm_serial: Fix XON/XOFF
- tty: max310x: Fix external crystal register setup
- memcg: make it work on sparse non-0-node systems
- kernel/signal.c: trace_signal_deliver when signal_group_exit
- docs: Fix conf.py for Sphinx 2.0
- doc: Cope with the deprecation of AutoReporter
- doc: Cope with Sphinx logging deprecations
- ima: show rules with IMA_INMASK correctly
- serial: sh-sci: disable DMA for uart_console
- staging: vc04_services: prevent integer overflow in create_pagelist()
- staging: wlan-ng: fix adapter initialization failure
- CIFS: cifs_read_allocate_pages: don't iterate through whole page array on
ENOMEM
- gcc-plugins: Fix build failures under Darwin host
- drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set
- drm/rockchip: shutdown drm subsystem on shutdown
- Compiler Attributes: add support for __copy (gcc >= 9)
- include/linux/module.h: copy __init/__exit attrs to init/cleanup_module
- binder: fix race between munmap() and direct reclaim
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
- brcmfmac: fix NULL pointer derefence during USB disconnect
- iio: dac: ds4422/ds4424 fix chip verification
- s390/crypto: fix possible sleep during spinlock aquired
- ALSA: line6: Assure canceling delayed work at disconnection
- vt/fbcon: deinitialize resources in visual_init() after failed memory
allocation
- cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case
- x86/ftrace: Do not call function graph from dynamic trampolines
- x86/ftrace: Set trampoline pages as executable
- x86/kprobes: Set instruction page as executable
- of: overlay: validate overlay properties #address-cells and #size-cells
- of: overlay: set node fields from properties when add new overlay node
- ethtool: fix potential userspace buffer overflow
- Fix memory leak in sctp_process_init
- neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
- net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
- net: rds: fix memory leak in rds_ib_flush_mr_pool
- pktgen: do not sleep with the thread lock held.
- ipv6: fix EFAULT on sendto with icmpv6 and hdrincl
- ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
- net: sfp: read eeprom in maximum 16 byte increments
- ipv6: fix the check before getting the cookie in rt6_get_cookie
- rcu: locking and unlocking need to always be at least barriers
- parisc: Use implicit space register selection for loading the coherence
index of I/O pdirs
- fuse: fallocate: fix return with locked inode
- pstore: Remove needless lock during console writes
- pstore: Convert buf_lock to semaphore
- pstore/ram: Run without kernel crash dump region
- x86/power: Fix 'nosmt' vs hibernation triple fault during resume
- i2c: xiic: Add max_read_len quirk
- MIPS: Bounds check virt_addr_valid
- MIPS: pistachio: Build uImage.gz by default
- genwqe: Prevent an integer overflow in the ioctl
- test_firmware: Use correct snprintf() limit
- drm/gma500/cdv: Check vbt config bits when detecting lvds panels
- drm/amdgpu/psp: move psp version specific function pointers to early_init
- drm/i915: Fix I915_EXEC_RING_MASK
- drm/i915/fbc: disable framebuffer compression on GeminiLake
- TTY: serial_core, add ->install
- qmi_wwan: Add quirk for Quectel dynamic config
- ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
- ethtool: check the return value of get_regs_len
- net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set
- net: mvpp2: Use strscpy to handle stat strings
- packet: unconditionally free po->rollover
- NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter
- NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled
- s390/mm: fix address space detection in exception handling
- drm/msm: fix fb references in async update
- drm: add non-desktop quirk for Valve HMDs
- drm: add non-desktop quirks to Sensics and OSVR headsets.
- drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in
* CVE-2019-14283
- floppy: fix out-of-bounds read in copy_buffer
* CVE-2019-14284
- floppy: fix div-by-zero in setup_format_params
* Bionic linux 4.15.0-56.62 fails to build with CONFIG_NVM disabled
(LP: #1838533)
- Revert "nvme: warn when finding multi-port subsystems without multipathing
enabled"
* Bionic update: upstream stable patchset 2019-07-31 (LP: #1838576)
- netfilter: compat: initialize all fields in xt_init
- platform/x86: sony-laptop: Fix unintentional fall-through
- platform/x86: thinkpad_acpi: Disable Bluetooth for some machines
- hwmon: (pwm-fan) Disable PWM if fetching cooling data fails
- kernfs: fix barrier usage in __kernfs_new_node()
- USB: serial: fix unthrottle races
- iio: adc: xilinx: fix potential use-after-free on remove
- libnvdimm/namespace: Fix a potential NULL pointer dereference
- HID: input: add mapping for Expose/Overview key
- HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
- HID: input: add mapping for "Toggle Display" key
- libnvdimm/btt: Fix a kmemdup failure check
- s390/dasd: Fix capacity calculation for large volumes
- mac80211: fix unaligned access in mesh table hash function
- mac80211: Increase MAX_MSG_LEN
- mac80211: fix memory accounting with A-MSDU aggregation
- nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands
- s390/3270: fix lockdep false positive on view->lock
- clocksource/drivers/oxnas: Fix OX820 compatible
- mISDN: Check address length before reading address family
- s390/pkey: add one more argument space for debug feature entry
- x86/reboot, efi: Use EFI reboot for Acer TravelMate X514-51T
- KVM: fix spectrev1 gadgets
- KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in
tracing
- tools lib traceevent: Fix missing equality check for strcmp
- mm: fix inactive list balancing between NUMA nodes and cgroups
- init: initialize jump labels before command line option parsing
- selftests: netfilter: check icmp pkttoobig errors are set as related
- ipvs: do not schedule icmp errors from tunnels
- netfilter: ctnetlink: don't use conntrack/expect object addresses as id
- s390: ctcm: fix ctcm_new_device error return code
- drm/sun4i: Set device driver data at bind time for use in unbind
- gpu: ipu-v3: dp: fix CSC handling
- drm/imx: don't skip DP channel disable for background plane
- spi: Micrel eth switch: declare missing of table
- spi: ST ST95HF NFC: declare missing of table
- Input: synaptics-rmi4 - fix possible double free
- MIPS: VDSO: Reduce VDSO_RANDOMIZE_SIZE to 64MB for 64bit
- ima: open a new file instance if no read permissions
- drm/i915: Disable LP3 watermarks on all SNB machines
- net: stmmac: Move debugfs init/exit to ->probe()/->remove()
- x86/vdso: Pass --eh-frame-hdr to the linker
- mm/memory.c: fix modifying of page protection by insert_pfn()
- net: fec: manage ahb clock in runtime pm
- mlxsw: spectrum_switchdev: Add MDB entries in prepare phase
- mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue
- NFC: nci: Add some bounds checking in nci_hci_cmd_received()
- nfc: nci: Potential off by one in ->pipes[] array
- x86/kprobes: Avoid kretprobe recursion bug
- cw1200: fix missing unlock on error in cw1200_hw_scan()
- mwl8k: Fix rate_idx underflow
- rtlwifi: rtl8723ae: Fix missing break in switch statement
- bonding: fix arp_validate toggling in active-backup mode
- bridge: Fix error path for kobject_init_and_add()
- dpaa_eth: fix SG frame cleanup
- ipv4: Fix raw socket lookup for local traffic
- net: dsa: Fix error cleanup path in dsa_init_module
- net: ethernet: stmmac: dwmac-sun8i: enable support of unicast filtering
- net: seeq: fix crash caused by not set dev.parent
- net: ucc_geth - fix Oops when changing number of buffers in the ring
- packet: Fix error path in packet_init
- vlan: disable SIOCSHWTSTAMP in container
- vrf: sit mtu should not be updated when vrf netdev is the link
- tipc: fix hanging clients using poll with EPOLLOUT flag
- drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl
- drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
- powerpc/powernv/idle: Restore IAMR after idle
- powerpc/booke64: set RI in default MSR
- platform/x86: dell-laptop: fix rfkill functionality
- iio: adc: xilinx: fix potential use-after-free on probe
- iio: adc: xilinx: prevent touching unclocked h/w on remove
- acpi/nfit: Always dump _DSM output payload
- libnvdimm/pmem: fix a possible OOB access when read and write pmem
- vxge: fix return of a free'd memblock on a failed dma mapping
- qede: fix write to free'd pointer error and double free of ptp
- afs: Unlock pages for __pagevec_release()
- ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash
- scsi: aic7xxx: fix EISA support
- drm/sun4i: Fix component unbinding and component master deletion
- netfilter: fix nf_l4proto_log_invalid to log invalid packets
- drm/sun4i: Unbind components before releasing DRM and memory
- usb: typec: Fix unchecked return value
- netfilter: nf_tables: use-after-free in dynamic operations
- um: Don't hardcode path as it is architecture dependent
- powerpc/book3s/64: check for NULL pointer in pgd_alloc()
- PCI: hv: Add hv_pci_remove_slots() when we unload the driver
- PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary
- net: core: another layer of lists, around PF_MEMALLOC skb handling
- locking/rwsem: Prevent decrement of reader count before increment
- PCI: hv: Fix a memory leak in hv_eject_device_work()
- x86/speculation/mds: Revert CPU buffer clear on double fault exit
- x86/speculation/mds: Improve CPU buffer clear documentation
- objtool: Fix function fallthrough detection
- ARM: dts: exynos: Fix interrupt for shared EINTs on Exynos5260
- ARM: dts: exynos: Fix audio (microphone) routing on Odroid XU3
- ARM: exynos: Fix a leaked reference by adding missing of_node_put
- power: supply: axp288_charger: Fix unchecked return value
- arm64: compat: Reduce address limit
- arm64: Clear OSDLR_EL1 on CPU boot
- arm64: Save and restore OSDLR_EL1 across suspend/resume
- sched/x86: Save [ER]FLAGS on context switch
- crypto: chacha20poly1305 - set cra_name correctly
- crypto: vmx - fix copy-paste error in CTR mode
- crypto: skcipher - don't WARN on unprocessed data after slow walk step
- crypto: crct10dif-generic - fix use via crypto_shash_digest()
- crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
- crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
- crypto: rockchip - update IV buffer to contain the next IV
- crypto: arm/aes-neonbs - don't access already-freed walk.iv
- ALSA: usb-audio: Fix a memory leak bug
- ALSA: hda/realtek - EAPD turn on later
- ASoC: max98090: Fix restore of DAPM Muxes
- ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
- bpf, arm64: remove prefetch insn in xadd mapping
- mm/mincore.c: make mincore() more conservative
- ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
- userfaultfd: use RCU to free the task struct when fork fails
- mfd: da9063: Fix OTP control register names to match datasheets for
DA9063/63L
- mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values
- mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write
- tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0
- tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
- jbd2: check superblock mapped prior to committing
- ext4: make sanity check in mballoc more strict
- ext4: ignore e_value_offs for xattrs with value-in-ea-inode
- ext4: avoid drop reference to iloc.bh twice
- Btrfs: do not start a transaction during fiemap
- Btrfs: do not start a transaction at iterate_extent_inodes()
- bcache: fix a race between cache register and cacheset unregister
- bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
- ext4: fix use-after-free race with debug_want_extra_isize
- ext4: actually request zeroing of inode table after grow
- ext4: fix ext4_show_options for file systems w/o journal
- ipmi:ssif: compare block number correctly for multi-part return messages
- crypto: arm64/aes-neonbs - don't access already-freed walk.iv
- crypto: salsa20 - don't access already-freed walk.iv
- crypto: ccm - fix incompatibility between "ccm" and "ccm_base"
- fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going
into workqueue when umount
- ext4: fix data corruption caused by overlapping unaligned and aligned IO
- ext4: fix use-after-free in dx_release()
- ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug
- KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes
- iov_iter: optimize page_copy_sane()
- ext4: fix compile error when using BUFFER_TRACE
- arm64: dts: rockchip: Disable DCMDs on RK3399's eMMC controller.
- arm64: mmap: Ensure file offset is treated as unsigned
- arm64: arch_timer: Ensure counter register reads occur with seqlock held
- crypto: crypto4xx - fix ctr-aes missing output IV
- crypto: crypto4xx - fix cfb and ofb "overran dst buffer" issues
- ALSA: line6: toneport: Fix broken usage of timer for delayed execution
- ASoC: fsl_esai: Fix missing break in switch statement
- mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned
addresses
- hugetlb: use same fault hash key for shared and private mappings
- ACPI: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle
- btrfs: Correctly free extent buffer in case btree_read_extent_buffer_pages
fails
- ext4: avoid panic during forced reboot due to aborted journal
- libnvdimm/namespace: Fix label tracking error
- ext4: don't update s_rev_level if not required
- net: avoid weird emergency message
- net/mlx4_core: Change the error print to info print
- net: test nouarg before dereferencing zerocopy pointers
- net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions
- ppp: deflate: Fix possible crash in deflate_init
- tipc: switch order of device registration to fix a crash
- vsock/virtio: free packets during the socket release
- vsock/virtio: Initialize core virtio vsock before registering the driver
- net: Always descend into dsa/
- parisc: Export running_on_qemu symbol for modules
- parisc: Skip registering LED when running in QEMU
- parisc: Use PA_ASM_LEVEL in boot code
- parisc: Rename LEVEL to PA_ASM_LEVEL to avoid name clash with DRBD code
- stm class: Fix channel free in stm output free path
- md: add mddev->pers to avoid potential NULL pointer dereference
- intel_th: msu: Fix single mode with IOMMU
- p54: drop device reference count if fails to enable device
- of: fix clang -Wunsequenced for be32_to_cpu()
- media: ov6650: Fix sensor possibly not detected on probe
- NFS4: Fix v4.0 client state corruption when mount
- PNFS fallback to MDS if no deviceid found
- clk: hi3660: Mark clk_gate_ufs_subsys as critical
- clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider
- clk: rockchip: fix wrong clock definitions for rk3328
- fuse: fix writepages on 32bit
- fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
- iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
- ceph: flush dirty inodes before proceeding with remount
- x86_64: Add gap to int3 to allow for call emulation
- x86_64: Allow breakpoints to emulate call instructions
- ftrace/x86_64: Emulate call function while updating in breakpoint handler
- tracing: Fix partial reading of trace event's id file
- memory: tegra: Fix integer overflow on tick value calculation
- perf intel-pt: Fix instructions sampling rate
- perf intel-pt: Fix improved sample timestamp
- perf intel-pt: Fix sample timestamp wrt non-taken branches
- objtool: Allow AR to be overridden with HOSTAR
- fbdev: sm712fb: fix brightness control on reboot, don't set SR30
- fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75
- fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F
- fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA
- fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping
VRAM
- fbdev: sm712fb: fix support for 1024x768-16 mode
- fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
- fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting
- PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken
- PCI: Mark Atheros AR9462 to avoid bus reset
- PCI: Factor out pcie_retrain_link() function
- PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum
- dm cache metadata: Fix loading discard bitset
- dm zoned: Fix zone report handling
- dm delay: fix a crash when invalid device is specified
- xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
- xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
- vti4: ipip tunnel deregistration fixes.
- esp4: add length check for UDP encapsulation
- xfrm4: Fix uninitialized memory read in _decode_session4
- power: supply: cpcap-battery: Fix division by zero
- securityfs: fix use-after-free on symlink traversal
- apparmorfs: fix use-after-free on symlink traversal
- mac80211: Fix kernel panic due to use of txq after free
- KVM: arm/arm64: Ensure vcpu target is unset on reset failure
- power: supply: sysfs: prevent endless uevent loop with
CONFIG_POWER_SUPPLY_DEBUG
- iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb()
- sched/cpufreq: Fix kobject memleak
- x86/mm/mem_encrypt: Disable all instrumentation for early SME setup
- ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
- perf bench numa: Add define for RUSAGE_THREAD if not present
- md/raid: raid5 preserve the writeback action after the parity check
- driver core: Postpone DMA tear-down until after devres release for probe
failure
- bpf: add map_lookup_elem_sys_only for lookups from syscall side
- bpf, lru: avoid messing with eviction heuristics upon syscall lookup
- fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough
- nfp: flower: add rcu locks when accessing netdev for tunnels
- rtnetlink: always put IFLA_LINK for links with a link-netnsid
- brd: re-enable __GFP_HIGHMEM in brd_insert_page()
- proc: prevent changes to overridden credentials
- md: batch flush requests.
- phy: ti-pipe3: fix missing bit-wise or operator when assigning val
- clk: mediatek: Disable tuner_en before change PLL rate
- PCI: rcar: Add the initialization of PCIe link in resume_noirq()
- fuse: Add FOPEN_STREAM to use stream_open()
- qmi_wwan: new Wistron, ZTE and D-Link devices
- bpf: relax inode permission check for retrieving bpf program
* Bionic update: upstream stable patchset 2019-07-30 (LP: #1838459)
- kbuild: simplify ld-option implementation
- cifs: do not attempt cifs operation on smb2+ rename error
- tracing: Fix a memory leak by early error exit in trace_pid_write()
- tracing: Fix buffer_ref pipe ops
- zram: pass down the bvec we need to read into in the work struct
- lib/Kconfig.debug: fix build error without CONFIG_BLOCK
- MIPS: scall64-o32: Fix indirect syscall number load
- trace: Fix preempt_enable_no_resched() abuse
- IB/rdmavt: Fix frwr memory registration
- sched/numa: Fix a possible divide-by-zero
- ceph: only use d_name directly when parent is locked
- ceph: ensure d_name stability in ceph_dentry_hash()
- ceph: fix ci->i_head_snapc leak
- nfsd: Don't release the callback slot unless it was actually held
- sunrpc: don't mark uninitialised items as VALID.
- Input: synaptics-rmi4 - write config register values to the right offset
- dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid
- ARM: 8857/1: efi: enable CP15 DMB instructions before cleaning the cache
- drm/vc4: Fix memory leak during gpu reset.
- drm/vc4: Fix compilation error reported by kbuild test bot
- ext4: fix some error pointer dereferences
- vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock
- tipc: handle the err returned from cmd header function
- slip: make slhc_free() silently accept an error pointer
- intel_th: gth: Fix an off-by-one in output unassigning
- fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
- ipvs: fix warning on unused variable
- sched/deadline: Correctly handle active 0-lag timers
- NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
- netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
- fm10k: Fix a potential NULL pointer dereference
- tipc: check bearer name with right length in tipc_nl_compat_bearer_enable
- tipc: check link name with right length in tipc_nl_compat_link_set
- x86, retpolines: Raise limit for generating indirect calls from switch-case
- x86/retpolines: Disable switch jump tables when retpolines are enabled
- mm: Fix warning in insert_pfn()
- ipv4: add sanity checks in ipv4_link_failure()
- mlxsw: spectrum: Fix autoneg status in ethtool
- net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query
- net: rds: exchange of 8K and 1M pool
- net: stmmac: move stmmac_check_ether_addr() to driver probe
- stmmac: pci: Adjust IOT2000 matching
- team: fix possible recursive locking when add slaves
- net/rose: fix unbound loop in rose_loopback_timer()
- ipv4: set the tcp_min_rtt_wlen range from 0 to one day
- powerpc/fsl: Add FSL_PPC_BOOK3E as supported arch for nospectre_v2 boot arg
- Documentation: Add nospectre_v1 parameter
- netfilter: nf_tables: warn when expr implements only one of
activate/deactivate
- net/ibmvnic: Fix RTNL deadlock during device reset
- drm/rockchip: fix for mailbox read validation.
- powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64
- perf/x86/intel: Enable C-state residency events for Cannon Lake
- perf/x86/intel: Update KBL Package C-state events to also include
PC8/PC9/PC10 counters
- powerpc/mm/radix: Make Radix require HUGETLB_PAGE
- workqueue: Try to catch flush_work() without INIT_WORK().
- mlxsw: pci: Reincrease PCI reset timeout
- mm: make page ref count overflow check tighter and more explicit
- mm: add 'try_get_page()' helper function
- mm: prevent get_user_pages() from overflowing page refcount
- fs: prevent page refcount overflow in pipe_buf_get
- ARM: dts: bcm283x: Fix hdmi hpd gpio pull
- s390: limit brk randomization to 32MB
- qlcnic: Avoid potential NULL pointer dereference
- netfilter: nft_set_rbtree: check for inactive element after flag mismatch
- netfilter: bridge: set skb transport_header before entering
NF_INET_PRE_ROUTING
- s390/qeth: fix race when initializing the IP address table
- sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init()
- serial: ar933x_uart: Fix build failure with disabled console
- KVM: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots
- usb: gadget: net2280: Fix overrun of OUT messages
- usb: gadget: net2280: Fix net2280_dequeue()
- usb: gadget: net2272: Fix net2272_dequeue()
- ARM: dts: pfla02: increase phy reset duration
- net: ks8851: Dequeue RX packets explicitly
- net: ks8851: Reassert reset pin if chip ID check fails
- net: ks8851: Delay requesting IRQ until opened
- net: ks8851: Set initial carrier state to down
- staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc
- staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference
- staging: rtl8712: uninitialized memory in read_bbreg_hdl()
- staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc
- net: macb: Add null check for PCLK and HCLK
- net/sched: don't dereference a->goto_chain to read the chain index
- ARM: dts: imx6qdl: Fix typo in imx6qdl-icore-rqs.dtsi
- NFS: Fix a typo in nfs_init_timeout_values()
- net: xilinx: fix possible object reference leak
- net: ibm: fix possible object reference leak
- net: ethernet: ti: fix possible object reference leak
- gpio: aspeed: fix a potential NULL pointer dereference
- drm/meson: Fix invalid pointer in meson_drv_unbind()
- drm/meson: Uninstall IRQ handler
- scsi: qla4xxx: fix a potential NULL pointer dereference
- usb: usb251xb: fix to avoid potential NULL pointer dereference
- usb: u132-hcd: fix resource leak
- ceph: fix use-after-free on symlink traversal
- scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN
- libata: fix using DMA buffers on stack
- gpio: of: Fix of_gpiochip_add() error path
- kconfig/[mn]conf: handle backspace (^H) key
- ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK
- leds: pca9532: fix a potential NULL pointer dereference
- KVM: arm64: Reset the PMU in preemptible context
- KVM: arm/arm64: vgic-its: Take the srcu lock when writing to guest memory
- scsi: aacraid: Insure we don't access PCIe space during AER/EEH
- x86/realmode: Don't leak the trampoline kernel address
- x86/mm: Don't exceed the valid physical address space
- ipv4: ip_do_fragment: Preserve skb_iif during fragmentation
- ipv6/flowlabel: wait rcu grace period before put_pid()
- ipv6: invert flowlabel sharing check in process and user mode
- l2ip: fix possible use-after-free
- l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv()
- net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc
- net: phy: marvell: Fix buffer overrun with stats counters
- sctp: avoid running the sctp state machine recursively
- packet: validate msg_namelen in send directly
- bnxt_en: Improve multicast address setup logic.
- bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one()
- ALSA: line6: use dynamic buffers
- rxrpc: Fix net namespace cleanup
- kasan: remove redundant initialization of variable 'real_size'
- kasan: prevent compiler from optimizing away memset in tests
- caif: reduce stack size with KASAN
- ALSA: hda/realtek - Add new Dell platform for headset mode
- USB: yurex: Fix protection fault after device removal
- USB: w1 ds2490: Fix bug caused by improper use of altsetting array
- usb: usbip: fix isoc packet num validation in get_pipe
- USB: core: Fix unterminated string returned by usb_string()
- USB: core: Fix bug caused by duplicate interface PM usage counter
- nvme-loop: init nvmet_ctrl fatal_err_work when allocate
- HID: logitech: check the return value of create_singlethread_workqueue
- HID: debug: fix race condition with between rdesc_show() and device removal
- rtc: sh: Fix invalid alarm warning for non-enabled alarm
- batman-adv: Reduce claim hash refcnt only for removed entry
- batman-adv: Reduce tt_local hash refcnt only for removed entry
- batman-adv: Reduce tt_global hash refcnt only for removed entry
- ARM: dts: rockchip: Fix gpu opp node names for rk3288
- net/mlx5: E-Switch, Fix esw manager vport indication for more vport commands
- bonding: show full hw address in sysfs for slave entries
- net: stmmac: ratelimit RX error logs
- net: stmmac: don't overwrite discard_frame status
- net: stmmac: fix dropping of multi-descriptor RX frames
- net: stmmac: don't log oversized frames
- jffs2: fix use-after-free on symlink traversal
- debugfs: fix use-after-free on symlink traversal
- rtc: da9063: set uie_unsupported when relevant
- HID: input: add mapping for Assistant key
- vfio/pci: use correct format characters
- scsi: core: add new RDAC LENOVO/DE_Series device
- scsi: storvsc: Fix calculation of sub-channel count
- net: hns: Fix WARNING when remove HNS driver with SMMU enabled
- kmemleak: powerpc: skip scanning holes in the .bss section
- hugetlbfs: fix memory leak for resv_map
- sh: fix multiple function definition build errors
- xsysace: Fix error handling in ace_setup
- ARM: orion: don't use using 64-bit DMA masks
- ARM: iop: don't use using 64-bit DMA masks
- perf/x86/amd: Update generic hardware cache events for Family 17h
- Bluetooth: btusb: request wake pin with NOAUTOEN
- staging: iio: adt7316: allow adt751x to use internal vref for all dacs
- staging: iio: adt7316: fix the dac read calculation
- staging: iio: adt7316: fix the dac write calculation
- scsi: RDMA/srpt: Fix a credit leak for aborted commands
- ASoC: stm32: fix sai driver name initialisation
- IB/core: Unregister notifier before freeing MAD security
- IB/core: Fix potential memory leak while creating MAD agents
- IB/core: Destroy QP if XRC QP fails
- Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ
- Input: stmfts - acknowledge that setting brightness is a blocking call
- selinux: never allow relabeling on context mounts
- powerpc/mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown
search
- x86/mce: Improve error message when kernel cannot recover, p2
- clk: x86: Add system specific quirk to mark clocks as critical
- i2c: i2c-stm32f7: Fix SDADEL minimum formula
- media: v4l2: i2c: ov7670: Fix PLL bypass register values
- mm/kmemleak.c: fix unused-function warning
- mac80211: don't attempt to rename ERR_PTR() debugfs dirs
- i2c: Remove unnecessary call to irq_find_mapping
- i2c: Clear client->irq in i2c_device_remove
- i2c: Allow recovery of the initial IRQ by an I2C client device.
- i2c: Prevent runtime suspend of adapter when Host Notify is required
- USB: dummy-hcd: Fix failure to give back unlinked URBs
- batman-adv: fix warning in function batadv_v_elp_get_throughput
- riscv: fix accessing 8-byte variable from RV32
- net: stmmac: don't stop NAPI processing when dropping a packet
- mfd: twl-core: Disable IRQ while suspended
- block: use blk_free_flush_queue() to free hctx->fq in blk_mq_init_hctx
- arm/mach-at91/pm : fix possible object reference leak
- fs: stream_open - opener for stream-like files so that read and write can
run simultaneously without deadlock
- block: pass no-op callback to INIT_WORK().
- platform/x86: intel_pmc_core: Fix PCH IP name
- platform/x86: intel_pmc_core: Handle CFL regmap properly
- x86/mm: Fix a crash with kmemleak_scan()
- Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup()
- ubsan: Fix nasty -Wbuiltin-declaration-mismatch GCC-9 warnings
- staging: greybus: power_supply: fix prop-descriptor request size
- ASoC: hdmi-codec: fix S/PDIF DAI
- ASoC:soc-pcm:fix a codec fixup issue in TDM case
- ASoC: nau8824: fix the issue of the widget with prefix name
- ASoC: nau8810: fix the issue of widget with prefixed name
- ASoC: samsung: odroid: Fix clock configuration for 44100 sample rate
- ASoC: wm_adsp: Add locking to wm_adsp2_bus_error
- ASoC: cs4270: Set auto-increment bit for register writes
- IB/hfi1: Eliminate opcode tests on mr deref
- MIPS: KGDB: fix kgdb support for SMP platforms.
- ASoC: tlv320aic32x4: Fix Common Pins
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata()
- perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS
- perf/x86/intel: Initialize TFA MSR
- linux/kernel.h: Use parentheses around argument in u64_to_user_ptr()
- ASoC: rockchip: pdm: fix regmap_ops hang issue
- slab: fix a crash by reading /proc/slab_allocators
- virtio_pci: fix a NULL pointer reference in vp_del_vqs
- RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove
- scsi: csiostor: fix missing data copy in csio_scsi_err_handler()
- drm/mediatek: fix possible object reference leak
- ASoC: Intel: kbl: fix wrong number of channels
- virtio-blk: limit number of hw queues by nr_cpu_ids
- platform/x86: pmc_atom: Drop __initconst on dmi table
- genirq: Prevent use-after-free and work list corruption
- usb: dwc3: Fix default lpm_nyet_threshold value
- USB: serial: f81232: fix interrupt worker not stop
- USB: cdc-acm: fix unthrottle races
- usb-storage: Set virt_boundary_mask to avoid SG overflows
- intel_th: pci: Add Comet Lake support
- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines
- UAS: fix alignment of scatter/gather segments
- ASoC: Intel: avoid Oops if DMA setup fails
- locking/futex: Allow low-level atomic operations to return -EAGAIN
- arm64: futex: Bound number of LDXR/STXR loops in FUTEX_WAKE_OP
- ASoC: tlv320aic3x: fix reset gpio reference counting
- ASoC: stm32: sai: fix exposed capabilities in spdif mode
- ASoC:intel:skl:fix a simultaneous playback & capture issue on hda platform
- ASoC: dapm: Fix NULL pointer dereference in snd_soc_dapm_free_kcontrol
- drm/omap: hdmi4_cec: Fix CEC clock handling for PM
- IB/hfi1: Fix the allocation of RSM table
- drm/amd/display: fix cursor black issue
- objtool: Add machine_real_restart() to the noreturn list
- objtool: Add rewind_stack_do_exit() to the noreturn list
- RDMA/hns: Fix bug that caused srq creation to fail
- perf/core: Fix perf_event_disable_inatomic() race
- soc: sunxi: Fix missing dependency on REGMAP_MMIO
- scsi: lpfc: change snprintf to scnprintf for possible overflow
* [ZenBook S UX391UA, Realtek ALC294, Mic, Internal] No sound at all
(LP: #1784485) // Bionic update: upstream stable patchset 2019-07-30
(LP: #1838459)
- ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR
* Bionic update: upstream stable patchset 2019-07-29 (LP: #1838349)
- ARC: u-boot args: check that magic number is correct
- arc: hsdk_defconfig: Enable CONFIG_BLK_DEV_RAM
- perf/core: Restore mmap record type correctly
- ext4: add missing brelse() in add_new_gdb_meta_bg()
- ext4: report real fs size after failed resize
- ALSA: echoaudio: add a check for ioremap_nocache
- ALSA: sb8: add a check for request_region
- auxdisplay: hd44780: Fix memory leak on ->remove()
- IB/mlx4: Fix race condition between catas error reset and aliasguid flows
- mmc: davinci: remove extraneous __init annotation
- ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and
declaration
- thermal/intel_powerclamp: fix __percpu declaration of worker_data
- thermal: bcm2835: Fix crash in bcm2835_thermal_debugfs
- thermal/int340x_thermal: Add additional UUIDs
- thermal/int340x_thermal: fix mode setting
- thermal/intel_powerclamp: fix truncated kthread name
- scsi: iscsi: flush running unbind operations when removing a session
- x86/mm: Don't leak kernel addresses
- tools/power turbostat: return the exit status of a command
- perf list: Don't forget to drop the reference to the allocated thread_map
- perf config: Fix an error in the config template documentation
- perf config: Fix a memory leak in collect_config()
- perf build-id: Fix memory leak in print_sdt_events()
- perf top: Fix error handling in cmd_top()
- perf hist: Add missing map__put() in error case
- perf evsel: Free evsel->counts in perf_evsel__exit()
- perf tests: Fix a memory leak of cpu_map object in the
openat_syscall_event_on_all_cpus test
- perf tests: Fix memory leak by expr__find_other() in test__expr()
- perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test()
- irqchip/mbigen: Don't clear eventid when freeing an MSI
- x86/hpet: Prevent potential NULL pointer dereference
- x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors
- drm/nouveau/debugfs: Fix check of pm_runtime_get_sync failure
- iommu/vt-d: Check capability before disabling protected memory
- x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return
an error
- fix incorrect error code mapping for OBJECTID_NOT_FOUND
- ext4: prohibit fstrim in norecovery mode
- gpio: pxa: handle corner case of unprobed device
- rsi: improve kernel thread handling to fix kernel panic
- 9p: do not trust pdu content for stat item size
- 9p locks: add mount option for lock retry interval
- f2fs: fix to do sanity check with current segment number
- netfilter: xt_cgroup: shrink size of v2 path
- serial: uartps: console_setup() can't be placed to init section
- powerpc/pseries: Remove prrn_work workqueue
- media: au0828: cannot kfree dev before usb disconnect
- HID: i2c-hid: override HID descriptors for certain devices
- ARM: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms
- [Config] updateconfigs for CONFIG_SAMSUNG_PM_CHECK
- usbip: fix vhci_hcd controller counting
- ACPI / SBS: Fix GPE storm on recent MacBookPro's
- KVM: nVMX: restore host state in nested_vmx_vmexit for VMFail
- cifs: fallback to older infolevels on findfirst queryinfo retry
- kernel: hung_task.c: disable on suspend
- crypto: sha256/arm - fix crash bug in Thumb2 build
- crypto: sha512/arm - fix crash bug in Thumb2 build
- iommu/dmar: Fix buffer overflow during PCI bus notification
- soc/tegra: pmc: Drop locking from tegra_powergate_is_powered()
- lkdtm: Print real addresses
- lkdtm: Add tests for NULL pointer dereference
- drm/panel: panel-innolux: set display off in innolux_panel_unprepare
- crypto: axis - fix for recursive locking from bottom half
- Revert "ACPI / EC: Remove old CLEAR_ON_RESUME quirk"
- coresight: cpu-debug: Support for CA73 CPUs
- drm/nouveau/volt/gf117: fix speedo readout register
- ARM: 8839/1: kprobe: make patch_lock a raw_spinlock_t
- drm/amdkfd: use init_mqd function to allocate object for hid_mqd (CI)
- appletalk: Fix use-after-free in atalk_proc_exit
- lib/div64.c: off by one in shift
- include/linux/swap.h: use offsetof() instead of custom __swapoffset macro
- bpf: fix use after free in bpf_evict_inode
- dm: disable CRYPTO_TFM_REQ_MAY_SLEEP to fix a GFP_KERNEL recursion deadlock
- net: stmmac: Set dma ring length before enabling the DMA
- mm: hide incomplete nr_indirectly_reclaimable in sysfs
- appletalk: Fix compile regression
- ext4: avoid panic during forced reboot
- i40iw: Avoid panic when handling the inetdev event
- sched/core: Fix buffer overflow in cgroup2 property cpu.max
- ACPI / utils: Drop reference in test for device presence
- PM / Domains: Avoid a potential deadlock
- drm/exynos/mixer: fix MIXER shadow registry synchronisation code
- Bluetooth: Fix debugfs NULL pointer dereference
- f2fs: cleanup dirty pages if recover failed
- [Config] updateconfigs for CONFIG_INTEL_ATOMISP2_PM
- platform/x86: Add Intel AtomISP2 dummy / power-management driver
- drm/ttm: Fix bo_global and mem_global kfree error
- ALSA: hda: fix front speakers on Huawei MBXP
- ACPI: EC / PM: Disable non-wakeup GPEs for suspend-to-idle
- net/rds: fix warn in rds_message_alloc_sgs
- scsi: core: Avoid that system resume triggers a kernel warning
- PCI: Blacklist power management of Gigabyte X299 DESIGNARE EX PCIe ports
- rxrpc: Fix client call connect/disconnect race
- f2fs: fix to dirty inode for i_mode recovery
- bonding: fix event handling for stacked bonds
- net: atm: Fix potential Spectre v1 vulnerabilities
- net: bridge: fix per-port af_packet sockets
- net: bridge: multicast: use rcu to access port list from
br_multicast_start_querier
- net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv
- tcp: tcp_grow_window() needs to respect tcp_space()
- team: set slave to promisc if team is already in promisc mode
- vhost: reject zero size iova range
- ipv4: recompile ip options in ipv4_link_failure
- ipv4: ensure rcu_read_lock() in ipv4_link_failure()
- net: thunderx: raise XDP MTU to 1508
- net: thunderx: don't allow jumbo frames with XDP
- KVM: x86: Don't clear EFER during SMM transitions for 32-bit vCPU
- KVM: x86: svm: make sure NMI is injected after nmi_singlestep
- Staging: iio: meter: fixed typo
- staging: iio: ad7192: Fix ad7193 channel address
- iio: gyro: mpu3050: fix chip ID reading
- iio/gyro/bmg160: Use millidegrees for temperature scale
- iio: cros_ec: Fix the maths for gyro scale calculation
- iio: ad_sigma_delta: select channel when reading register
- iio: dac: mcp4725: add missing powerdown bits in store eeprom
- iio: Fix scan mask selection
- iio: adc: at91: disable adc channel interrupt in timeout case
- iio: core: fix a possible circular locking dependency
- io: accel: kxcjk1013: restore the range after resume.
- staging: comedi: vmk80xx: Fix use of uninitialized semaphore
- staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf
- staging: comedi: ni_usb6501: Fix use of uninitialized mutex
- staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf
- ALSA: core: Fix card races between register and disconnect
- scsi: core: set result when the command cannot be dispatched
- coredump: fix race condition between mmget_not_zero()/get_task_mm() and core
dumping
- crypto: x86/poly1305 - fix overflow during partial reduction
- arm64: futex: Restore oldval initialization to work around buggy compilers
- x86/kprobes: Verify stack frame on kretprobe
- kprobes: Mark ftrace mcount handler functions nokprobe
- kprobes: Fix error check when reusing optimized probes
- rt2x00: do not increment sequence number while re-transmitting
- mac80211: do not call driver wake_tx_queue op during reconfig
- perf/x86/amd: Add event map for AMD Family 17h
- x86/cpu/bugs: Use __initconst for 'const' init data
- perf/x86: Fix incorrect PEBS_REGS
- x86/speculation: Prevent deadlock on ssb_state::lock
- crypto: crypto4xx - properly set IV after de- and encrypt
- mmc: sdhci: Fix data command CRC error handling
- mmc: sdhci: Rename SDHCI_ACMD12_ERR and SDHCI_INT_ACMD12ERR
- mmc: sdhci: Handle auto-command errors
- modpost: file2alias: go back to simple devtable lookup
- modpost: file2alias: check prototype of handler
- tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
- ipv6: frags: fix a lockdep false positive
- Revert "kbuild: use -Oz instead of -Os when using clang"
- device_cgroup: fix RCU imbalance in error case
- mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y
CONFIG_SMP=n
- ALSA: info: Fix racy addition/deletion of nodes
- percpu: stop printing kernel addresses
- iomap: report collisions between directio and buffered writes to userspace
- i2c-hid: properly terminate i2c_hid_dmi_desc_override_table[] array
- net: Fix missing meta data in skb with vlan packet
- nfp: flower: replace CFI with vlan present
- nfp: flower: remove vlan CFI bit from push vlan action
- ip: add helpers to process in-order fragments faster.
- net: IP defrag: encapsulate rbtree defrag code into callable functions
- ip: process in-order fragments efficiently
- ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module
- net: IP6 defrag: use rbtrees for IPv6 defrag
- net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
- cifs: fix handle leak in smb2_query_symlink()
- Input: elan_i2c - add hardware ID for multiple Lenovo laptops
- drm/ttm: fix out-of-bounds read in ttm_put_pages() v2
- timers/sched_clock: Prevent generic sched_clock wrap caused by tick_freeze()
- tpm: Fix the type of the return value in calc_tpm2_event_size()
* Bionic update: upstream stable patchset 2019-07-26 (LP: #1838116)
- mmc: pxamci: fix enum type confusion
- drm/vmwgfx: Don't double-free the mode stored in par->set_mode
- iommu/amd: fix sg->dma_address for sg->offset bigger than PAGE_SIZE
- libceph: wait for latest osdmap in ceph_monc_blacklist_add()
- udf: Fix crash on IO error during truncate
- mips: loongson64: lemote-2f: Add IRQF_NO_SUSPEND to "cascade" irqaction.
- MIPS: Ensure ELF appended dtb is relocated
- MIPS: Fix kernel crash for R6 in jump label branch function
- scsi: ibmvscsi: Protect ibmvscsi_head from concurrent modificaiton
- scsi: ibmvscsi: Fix empty event pool access during host removal
- futex: Ensure that futex address is aligned in handle_futex_death()
- perf probe: Fix getting the kernel map
- objtool: Move objtool_file struct off the stack
- ALSA: x86: Fix runtime PM for hdmi-lpe-audio
- ext4: fix NULL pointer dereference while journal is aborted
- ext4: fix data corruption caused by unaligned direct AIO
- ext4: brelse all indirect buffer in ext4_ind_remove_space()
- media: v4l2-ctrls.c/uvc: zero v4l2_event
- Bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf()
- Bluetooth: Fix decrementing reference count twice in releasing socket
- Bluetooth: hci_ldisc: Initialize hci_dev before open()
- Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in
hci_uart_set_proto()
- drm: Reorder set_property_atomic to avoid returning with an active ww_ctx
- netfilter: ebtables: remove BUGPRINT messages
- x86/unwind: Handle NULL pointer calls better in frame unwinder
- x86/unwind: Add hardcoded ORC entry for NULL
- locking/lockdep: Add debug_locks check in __lock_downgrade()
- ALSA: hda - Record the current power state before suspend/resume calls
- PCI: designware-ep: dw_pcie_ep_set_msi() should only set MMC bits
- PCI: designware-ep: Read-only registers need DBI_RO_WR_EN to be writable
- PCI: endpoint: Use EPC's device in dma_alloc_coherent()/dma_free_coherent()
- rtc: Fix overflow when converting time64_t to rtc_time
- sched/cpufreq/schedutil: Fix error path mutex unlock
- pwm-backlight: Enable/disable the PWM before/after LCD enable toggle.
- power: supply: charger-manager: Fix incorrect return value
- ath10k: avoid possible string overflow
- mmc: renesas_sdhi: limit block count to 16 bit for old revisions
- powerpc/vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038
- RDMA/cma: Rollback source IP address if failing to acquire device
- f2fs: fix to avoid deadlock of atomic file operations
- loop: access lo_backing_file only when the loop device is Lo_bound
- video: fbdev: Set pixclock = 0 in goldfishfb
- dccp: do not use ipv6 header for ipv4 flow
- genetlink: Fix a memory leak on error path
- mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S
- net: datagram: fix unbounded loop in __skb_try_recv_datagram()
- net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec
- net: rose: fix a possible stack overflow
- net: stmmac: fix memory corruption with large MTUs
- net-sysfs: call dev_hold if kobject_init_and_add success
- packets: Always register packet sk in the same order
- rhashtable: Still do rehash when we get EEXIST
- tcp: do not use ipv6 header for ipv4 flow
- thunderx: enable page recycling for non-XDP case
- thunderx: eliminate extra calls to put_page() for pages held for recycling
- vxlan: Don't call gro_cells_destroy() before device is unregistered
- sctp: get sctphdr by offset in sctp_compute_cksum
- net: aquantia: fix rx checksum offload for UDP/TCP over IPv6
- mac8390: Fix mmio access size probe
- tun: properly test for IFF_UP
- tun: add a missing rcu_read_unlock() in error path
- powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E
- powerpc/fsl: Sanitize the syscall table for NXP PowerPC 32 bit platforms
- powerpc/fsl: Add infrastructure to fixup branch predictor flush
- powerpc/fsl: Add macro to flush the branch predictor
- powerpc/fsl: Emulate SPRN_BUCSR register
- powerpc/fsl: Flush the branch predictor at each kernel entry (64bit)
- powerpc/fsl: Flush the branch predictor at each kernel entry (32 bit)
- powerpc/fsl: Flush branch predictor when entering KVM
- powerpc/fsl: Enable runtime patching if nospectre_v2 boot arg is used
- powerpc/fsl: Fixed warning: orphan section `__btb_flush_fixup'
- powerpc/fsl: Fix the flush of branch predictor.
- Btrfs: fix incorrect file size after shrinking truncate and fsync
- btrfs: remove WARN_ON in log_dir_items
- ARM: imx6q: cpuidle: fix bug that CPU might not wake up at expected time
- powerpc: bpf: Fix generation of load/store DW instructions
- NFSv4.1 don't free interrupted slot on open
- net: dsa: qca8k: remove leftover phy accessors
- ALSA: pcm: Fix possible OOB access in PCM oss plugins
- ALSA: pcm: Don't suspend stream in unrecoverable PCM state
- kbuild: modversions: Fix relative CRC byte order interpretation
- fs/open.c: allow opening only regular files during execve()
- ocfs2: fix inode bh swapping mixup in ocfs2_reflink_inodes_lock
- scsi: sd: Fix a race between closing an sd device and sd I/O
- scsi: sd: Quiesce warning if device does not report optimal I/O size
- scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host
- scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP
devices
- tty: atmel_serial: fix a potential NULL pointer dereference
- staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest
- staging: vt6655: Remove vif check from vnt_interrupt
- staging: vt6655: Fix interrupt race condition on device start up.
- serial: max310x: Fix to avoid potential NULL pointer dereference
- serial: sh-sci: Fix setting SCSCR_TIE while transferring data
- USB: serial: cp210x: add new device id
- USB: serial: ftdi_sio: add additional NovaTech products
- USB: serial: mos7720: fix mos_parport refcount imbalance on error path
- USB: serial: option: set driver_info for SIM5218 and compatibles
- USB: serial: option: add support for Quectel EM12
- USB: serial: option: add Olicard 600
- Disable kgdboc failed by echo space to /sys/module/kgdboc/parameters/kgdboc
- fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links
- drm/vgem: fix use-after-free when drm_gem_handle_create() fails
- gpio: exar: add a check for the return value of ida_simple_get fails
- gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input
- phy: sun4i-usb: Support set_mode to USB_HOST for non-OTG PHYs
- usb: mtu3: fix EXTCON dependency
- USB: gadget: f_hid: fix deadlock in f_hidg_write()
- usb: common: Consider only available nodes for dr_mode
- usb: host: xhci-rcar: Add XHCI_TRUST_TX_LENGTH quirk
- xhci: Fix port resume done detection for SS ports with LPM enabled
- usb: cdc-acm: fix race during wakeup blocking TX traffic
- mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate
- perf intel-pt: Fix TSC slip
- cpu/hotplug: Prevent crash when CPU bringup fails on CONFIG_HOTPLUG_CPU=n
- x86/smp: Enforce CONFIG_HOTPLUG_CPU when SMP=y
- KVM: Reject device ioctls from processes other than the VM's creator
- KVM: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts
- vfio: ccw: only free cp on final interrupt
- ipmi_si: Fix crash when using hard-coded device
- gtp: change NET_UDP_TUNNEL dependency to select
- Btrfs: fix assertion failure on fsync with NO_HOLES enabled
- NFS: fix mount/umount race in nlmclnt.
- ALSA: hda/realtek: Enable headset MIC of Acer AIO with ALC286
- ALSA: hda/realtek: Enable headset MIC of Acer Aspire Z24-890 with ALC286
- ALSA: hda/realtek - Add support for Acer Aspire E5-523G/ES1-432 headset mic
- ALSA: hda/realtek: Enable ASUS X441MB and X705FD headset MIC with ALC256
- ALSA: hda/realtek: Enable headset mic of ASUS P5440FF with ALC256
- ALSA: hda/realtek: Enable headset MIC of ASUS X430UN and X512DK with ALC256
- ALSA: hda/realtek - Fix speakers on Acer Predator Helios 500 Ryzen laptops
- drm/rockchip: Do not use memcpy for MMIO addresses
- drm/rockchip: vop: reset scale mode when win is disabled
- tty: mxs-auart: fix a potential NULL pointer dereference
- staging: speakup_soft: Fix alternate speech with other synths
- serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference
- drm/i915/gvt: Fix MI_FLUSH_DW parsing with correct index check
- usb: xhci: dbc: Don't free all memory with spinlock held
- xhci: Don't let USB3 ports stuck in polling state prevent suspend
- mm: add support for kmem caches in DMA32 zone
- iommu/io-pgtable-arm-v7s: request DMA32 memory, and improve debugging
- mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified
- perf pmu: Fix parser error for uncore event alias
- objtool: Query pkg-config for libelf location
- bpf: do not restore dst_reg when cur_state is freed
- arm64: debug: Don't propagate UNKNOWN FAR into si_code for debug signals
- ext4: cleanup bh release code in ext4_ind_remove_space()
- tty/serial: atmel: Add is_half_duplex helper
- tty/serial: atmel: RS485 HD w/DMA: enable RX after TX is stopped
- CIFS: fix POSIX lock leak and invalid ptr deref
- h8300: use cc-cross-prefix instead of hardcoding h8300-unknown-linux-
- f2fs: fix to avoid deadlock in f2fs_read_inline_dir()
- tracing: kdb: Fix ftdump to not sleep
- net/mlx5: Avoid panic when setting vport rate
- net/mlx5: Avoid panic when setting vport mac, getting vport config
- gpio: gpio-omap: fix level interrupt idling
- include/linux/relay.h: fix percpu annotation in struct rchan
- enic: fix build warning without CONFIG_CPUMASK_OFFSTACK
- scsi: hisi_sas: Set PHY linkrate when disconnected
- iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver
- perf c2c: Fix c2c report for empty numa node
- mm/cma.c: cma_declare_contiguous: correct err handling
- mm/page_ext.c: fix an imbalance with kmemleak
- mm, mempolicy: fix uninit memory access
- mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512!
- mm/slab.c: kmemleak no scan alien caches
- ocfs2: fix a panic problem caused by o2cb_ctl
- f2fs: do not use mutex lock in atomic context
- fs/file.c: initialize init_files.resize_wait
- page_poison: play nicely with KASAN
- cifs: use correct format characters
- dm thin: add sanity checks to thin-pool and external snapshot creation
- cifs: Fix NULL pointer dereference of devname
- jbd2: fix invalid descriptor block checksum
- fs: fix guard_bio_eod to check for real EOD errors
- tools lib traceevent: Fix buffer overflow in arg_eval
- PCI/PME: Fix hotplug/sysfs remove deadlock in pcie_pme_remove()
- wil6210: check null pointer in _wil_cfg80211_merge_extra_ies
- crypto: crypto4xx - add missing of_node_put after of_device_is_available
- crypto: cavium/zip - fix collision with generic cra_driver_name
- usb: chipidea: Grab the (legacy) USB PHY by phandle first
- scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c
- powerpc/xmon: Fix opcode being uninitialized in print_insn_powerpc
- coresight: etm4x: Add support to enable ETMv4.2
- serial: 8250_pxa: honor the port number from devicetree
- ARM: 8840/1: use a raw_spinlock_t in unwind
- iommu/io-pgtable-arm-v7s: Only kmemleak_ignore L2 tables
- powerpc/hugetlb: Handle mmap_min_addr correctly in get_unmapped_area
callback
- mmc: omap: fix the maximum timeout setting
- e1000e: Fix -Wformat-truncation warnings
- mlxsw: spectrum: Avoid -Wformat-truncation warnings
- IB/mlx4: Increase the timeout for CM cache
- clk: fractional-divider: check parent rate only if flag is set
- cpufreq: acpi-cpufreq: Report if CPU doesn't support boost technologies
- efi: cper: Fix possible out-of-bounds access
- scsi: megaraid_sas: return error when create DMA pool failed
- scsi: fcoe: make use of fip_mode enum complete
- perf test: Fix failure of 'evsel-tp-sched' test on s390
- SoC: imx-sgtl5000: add missing put_device()
- media: sh_veu: Correct return type for mem2mem buffer helpers
- media: s5p-jpeg: Correct return type for mem2mem buffer helpers
- media: s5p-g2d: Correct return type for mem2mem buffer helpers
- media: mx2_emmaprp: Correct return type for mem2mem buffer helpers
- media: mtk-jpeg: Correct return type for mem2mem buffer helpers
- vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1
- HID: intel-ish-hid: avoid binding wrong ishtp_cl_device
- jbd2: fix race when writing superblock
- leds: lp55xx: fix null deref on firmware load failure
- iwlwifi: pcie: fix emergency path
- ACPI / video: Refactor and fix dmi_is_desktop()
- kprobes: Prohibit probing on bsearch()
- netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in
__nf_conntrack_confirm
- ARM: 8833/1: Ensure that NEON code always compiles with Clang
- ALSA: PCM: check if ops are defined before suspending PCM
- usb: f_fs: Avoid crash due to out-of-scope stack ptr access
- sched/topology: Fix percpu data types in struct sd_data & struct s_data
- bcache: fix input overflow to cache set sysfs file io_error_halflife
- bcache: fix input overflow to sequential_cutoff
- bcache: improve sysfs_strtoul_clamp()
- genirq: Avoid summation loops for /proc/stat
- iw_cxgb4: fix srqidx leak during connection abort
- fbdev: fbmem: fix memory access if logo is bigger than the screen
- cdrom: Fix race condition in cdrom_sysctl_register
- platform/x86: intel_pmc_core: Fix PCH IP sts reading
- ASoC: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe
- sched/debug: Initialize sd_sysctl_cpus if !CONFIG_CPUMASK_OFFSTACK
- efi/memattr: Don't bail on zero VA if it equals the region's PA
- ARM: dts: lpc32xx: Remove leading 0x and 0s from bindings notation
- soc: qcom: gsbi: Fix error handling in gsbi_probe()
- mt7601u: bump supported EEPROM version
- ARM: 8830/1: NOMMU: Toggle only bits in EXC_RETURN we are really care of
- ARM: avoid Cortex-A9 livelock on tight dmb loops
- bpf: fix missing prototype warnings
- cgroup/pids: turn cgroup_subsys->free() into cgroup_subsys->release() to fix
the accounting
- backlight: pwm_bl: Use gpiod_get_value_cansleep() to get initial state
- tty: increase the default flip buffer limit to 2*640K
- powerpc/pseries: Perform full re-add of CPU for topology update post-
migration
- usb: dwc3: gadget: Fix OTG events when gadget driver isn't loaded
- media: mt9m111: set initial frame size other than 0x0
- hwrng: virtio - Avoid repeated init of completion
- soc/tegra: fuse: Fix illegal free of IO base address
- HID: intel-ish: ipc: handle PIMR before ish_wakeup also clear PISR
busy_clear bit
- hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable
- cpu/hotplug: Mute hotplug lockdep during init
- dmaengine: imx-dma: fix warning comparison of distinct pointer types
- dmaengine: qcom_hidma: assign channel cookie correctly
- dmaengine: qcom_hidma: initialize tx flags in hidma_prep_dma_*
- netfilter: physdev: relax br_netfilter dependency
- media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration
- regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting
- drm: Auto-set allow_fb_modifiers when given modifiers at plane init
- drm/nouveau: Stop using drm_crtc_force_disable
- x86/build: Specify elf_i386 linker emulation explicitly for i386 objects
- selinux: do not override context on context mounts
- wlcore: Fix memory leak in case wl12xx_fetch_firmware failure
- x86/build: Mark per-CPU symbols as absolute explicitly for LLD
- clk: rockchip: fix frac settings of GPLL clock for rk3328
- dmaengine: tegra: avoid overflow of byte tracking
- drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers
- ACPI / video: Extend chassis-type detection with a "Lunch Box" check
- f2fs: fix to adapt small inline xattr space in __find_inline_xattr()
- net: stmmac: Avoid sometimes uninitialized Clang warnings
- libbpf: force fixdep compilation at the start of the build
- scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO
- x86/hyperv: Fix kernel panic when kexec on HyperV
- mm/sparse: fix a bad comparison
- mm, swap: bounds check swap_info array accesses to avoid NULL derefs
- memcg: killed threads should not invoke memcg OOM killer
- cifs: Accept validate negotiate if server return NT_STATUS_NOT_SUPPORTED
- netfilter: nf_tables: check the result of dereferencing base_chain->stats
- netfilter: conntrack: tcp: only close if RST matches exact sequence
- kbuild: invoke syncconfig if include/config/auto.conf.cmd is missing
- mwifiex: don't advertise IBSS features without FW support
- perf report: Don't shadow inlined symbol with different addr range
- media: rockchip/rga: Correct return type for mem2mem buffer helpers
- selftests: skip seccomp get_metadata test if not real root
- kprobes: Prohibit probing on RCU debug routine
- bcache: fix potential div-zero error of writeback_rate_i_term_inverse
- drm: rcar-du: add missing of_node_put
- perf/aux: Make perf_event accessible to setup_aux()
- e1000e: Exclude device from suspend direct complete optimization
- i2c: of: Try to find an I2C adapter matching the parent
- sched/core: Use READ_ONCE()/WRITE_ONCE() in
move_queued_task()/task_rq_lock()
- powerpc/64s: Clear on-stack exception marker upon exception return
- platform/x86: intel-hid: Missing power button release on some Dell models
- pinctrl: meson: meson8b: add the eth_rxd2 and eth_rxd3 pins
- net: stmmac: Avoid one more sometimes uninitialized Clang warning
- bcache: fix potential div-zero error of writeback_rate_p_term_inverse
- net: sfp: move sfp_register_socket call from sfp_remove to sfp_probe
- drm/i915/gvt: do not let pin count of shadow mm go negative
- powerpc/tm: Limit TM code inside PPC_TRANSACTIONAL_MEM
- kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD
- x86: vdso: Use $LD instead of $CC to link
- x86/vdso: Drop implicit common-page-size linker flag
- lib/string.c: implement a basic bcmp
- stating: ccree: revert "staging: ccree: fix leak of import() after init()"
- arm64: kaslr: Reserve size of ARM64_MEMSTART_ALIGN in linear region
- tty: mark Siemens R3964 line discipline as BROKEN
- [Config] updateconfigs for CONFIG_R3964 (BROKEN)
- [Config] updateconfigs for CONFIG_LDISC_AUTOLOAD
- tty: ldisc: add sysctl to prevent autoloading of ldiscs
- ipv6: Fix dangling pointer when ipv6 fragment
- ipv6: sit: reset ip header pointer in ipip6_rcv
- kcm: switch order of device registration to fix a crash
- net-gro: Fix GRO flush when receiving a GSO packet.
- net/mlx5: Decrease default mr cache size
- net/sched: fix ->get helper of the matchall cls
- qmi_wwan: add Olicard 600
- sctp: initialize _pad of sockaddr_in before copying to user memory
- tcp: Ensure DCTCP reacts to losses
- vrf: check accept_source_route on the original netdevice
- net/mlx5e: Fix error handling when refreshing TIRs
- net/mlx5e: Add a lock on tir list
- nfp: validate the return code from dev_queue_xmit()
- bnxt_en: Improve RX consumer index validity check.
- bnxt_en: Reset device on RX buffer errors.
- net/sched: act_sample: fix divide by zero in the traffic path
- netns: provide pure entropy for net_hash_mix()
- net: ethtool: not call vzalloc for zero sized memory request
- ALSA: seq: Fix OOB-reads from strlcpy
- ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
- hv_netvsc: Fix unwanted wakeup after tx_disable
- arm64: dts: rockchip: fix rk3328 sdmmc0 write errors
- parisc: Detect QEMU earlier in boot process
- parisc: regs_return_value() should return gpr28
- alarmtimer: Return correct remaining time
- drm/udl: add a release method and delay modeset teardown
- include/linux/bitrev.h: fix constant bitrev
- ASoC: fsl_esai: fix channel swap issue when stream starts
- Btrfs: do not allow trimming when a fs is mounted with the nologreplay
option
- btrfs: prop: fix zstd compression parameter validation
- btrfs: prop: fix vanished compression property after failed set
- block: do not leak memory in bio_copy_user_iov()
- block: fix the return errno for direct IO
- genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
- genirq: Initialize request_mutex if CONFIG_SPARSE_IRQ=n
- virtio: Honour 'may_reduce_num' in vring_create_virtqueue
- ARM: dts: am335x-evmsk: Correct the regulators for the audio codec
- ARM: dts: am335x-evm: Correct the regulators for the audio codec
- ARM: dts: at91: Fix typo in ISC_D0 on PC9
- arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
- arm64: dts: rockchip: fix rk3328 rgmii high tx error rate
- arm64: backtrace: Don't bother trying to unwind the userspace stack
- xen: Prevent buffer overflow in privcmd ioctl
- sched/fair: Do not re-read ->h_load_next during hierarchical load
calculation
- xtensa: fix return_address
- x86/perf/amd: Resolve race condition when disabling PMC
- x86/perf/amd: Resolve NMI latency issues for active PMCs
- x86/perf/amd: Remove need to check "running" bit in NMI handler
- PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
- dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors
- arm64: dts: rockchip: fix vcc_host1_5v pin assign on rk3328-rock64
- arm64: dts: rockchip: Fix vcc_host1_5v GPIO polarity on rk3328-rock64
- tcp: fix a potential NULL pointer dereference in tcp_sk_exit
- nfp: disable netpoll on representors
- r8169: disable default rx interrupt coalescing on RTL8168
- kbuild: deb-pkg: fix bindeb-pkg breakage when O= is used
- ACPICA: Namespace: remove address node from global list after method
termination
- ALSA: hda/realtek - Add quirk for Tuxedo XC 1509
- mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd()
- riscv: Fix syscall_get_arguments() and syscall_set_arguments()
- x86/asm: Remove dead __GNUC__ conditionals
- dm integrity: change memcmp to strncmp in dm_integrity_ctr
* Bionic update: upstream stable patchset 2019-07-25 (LP: #1837952)
- ACPICA: Reference Counts: increase max to 0x4000 for large servers
- gro_cells: make sure device is up in gro_cells_receive()
- ipv4/route: fail early when inet dev is missing
- l2tp: fix infoleak in l2tp_ip6_recvmsg()
- net: hsr: fix memory leak in hsr_dev_finalize()
- net/hsr: fix possible crash in add_timer()
- net: sit: fix UBSAN Undefined behaviour in check_6rd
- net/x25: fix use-after-free in x25_device_event()
- net/x25: reset state in x25_connect()
- pptp: dst_release sk_dst_cache in pptp_sock_destruct
- ravb: Decrease TxFIFO depth of Q3 and Q2 to one
- route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race
- rxrpc: Fix client call queueing, waiting for channel
- tcp: Don't access TCP_SKB_CB before initializing it
- tcp: handle inet_csk_reqsk_queue_add() failures
- vxlan: Fix GRO cells race condition between receive and link delete
- vxlan: test dev->flags & IFF_UP before calling gro_cells_receive()
- net/mlx4_core: Fix reset flow when in command polling mode
- net/mlx4_core: Fix locking in SRIOV mode when switching between events and
polling
- net/mlx4_core: Fix qp mtt size calculation
- net/x25: fix a race in x25_bind()
- net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255
- bonding: fix PACKET_ORIGDEV regression
- missing barriers in some of unix_sock ->addr and ->path accesses
- ipvlan: disallow userns cap_net_admin to change global mode/flags
- perf/x86: Fixup typo in stub functions
- ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against
Liquid Saffire 56
- ALSA: firewire-motu: fix construction of PCM frame for capture direction
- perf/x86/intel: Fix memory corruption
- perf/x86/intel: Make dev_attr_allow_tsx_force_abort static
- It's wrong to add len to sector_nr in raid10 reshape twice
- sctp: remove sched init from sctp_stream_init
- team: use operstate consistently for linkup
- ipv6: route: enforce RCU protection in rt6_update_exception_stamp_rt()
- ALSA: hda - add more quirks for HP Z2 G4 and HP Z240
- ALSA: hda/realtek: Enable audio jacks of ASUS UX362FA with ALC294
- i40e: report correct statistics when XDP is enabled
- 9p: use inode->i_lock to protect i_size_write() under 32-bit
- 9p/net: fix memory leak in p9_client_create
- ASoC: fsl_esai: fix register setting issue in RIGHT_J mode
- iio: adc: exynos-adc: Fix NULL pointer exception on unbind
- stm class: Fix an endless loop in channel allocation
- crypto: caam - fixed handling of sg list
- crypto: ahash - fix another early termination in hash walk
- crypto: rockchip - fix scatterlist nents error
- crypto: rockchip - update new iv to device in multiple operations
- drm/imx: ignore plane updates on disabled crtcs
- gpu: ipu-v3: Fix i.MX51 CSI control registers offset
- drm/imx: imx-ldb: add missing of_node_puts
- gpu: ipu-v3: Fix CSI offsets for imx53
- s390/dasd: fix using offset into zero size array error
- Input: pwm-vibra - prevent unbalanced regulator
- Input: pwm-vibra - stop regulator after disabling pwm, not before
- ARM: OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be
uninitialized
- ASoC: dapm: fix out-of-bounds accesses to DAPM lookup tables
- ASoC: rsnd: fixup rsnd_ssi_master_clk_start() user count check
- KVM: arm/arm64: Reset the VCPU without preemption and vcpu state loaded
- ARM: OMAP2+: fix lack of timer interrupts on CPU1 after hotplug
- Input: cap11xx - switch to using set_brightness_blocking()
- Input: ps2-gpio - flush TX work when closing port
- Input: matrix_keypad - use flush_delayed_work()
- mac80211: Fix Tx aggregation session tear down with ITXQs
- ipvs: fix dependency on nf_defrag_ipv6
- floppy: check_events callback should not return a negative number
- NFS: Don't use page_file_mapping after removing the page
- mm/gup: fix gup_pmd_range() for dax
- Revert "mm: use early_pfn_to_nid in page_ext_init"
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs
- net: hns: Fix object reference leaks in hns_dsaf_roce_reset()
- i2c: cadence: Fix the hold bit setting
- i2c: bcm2835: Clear current buffer pointers and counts after a transfer
- auxdisplay: ht16k33: fix potential user-after-free on module unload
- Input: st-keyscan - fix potential zalloc NULL dereference
- clk: sunxi-ng: v3s: Fix TCON reset de-assert bit
- clk: sunxi: A31: Fix wrong AHB gate number
- esp: Skip TX bytes accounting when sending from a request socket
- ARM: 8824/1: fix a migrating irq bug when hotplug cpu
- af_key: unconditionally clone on broadcast
- assoc_array: Fix shortcut creation
- keys: Fix dependency loop between construction record and auth key
- scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task
- net: systemport: Fix reception of BPDUs
- pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins
- qmi_wwan: apply SET_DTR quirk to Sierra WP7607
- net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe()
- mailbox: bcm-flexrm-mailbox: Fix FlexRM ring flush timeout issue
- ASoC: topology: free created components in tplg load error
- qed: Fix iWARP syn packet mac address validation.
- arm64: Relax GIC version check during early boot
- net: marvell: mvneta: fix DMA debug warning
- tmpfs: fix link accounting when a tmpfile is linked in
- ixgbe: fix older devices that do not support IXGBE_MRQC_L3L4TXSWEN
- ARCv2: lib: memcpy: fix doing prefetchw outside of buffer
- ARC: uacces: remove lp_start, lp_end from clobber list
- ARCv2: support manual regfile save on interrupts
- phonet: fix building with clang
- mac80211_hwsim: propagate genlmsg_reply return code
- net: thunderx: make CFG_DONE message to run through generic send-ack
sequence
- nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K
- nfp: bpf: fix ALU32 high bits clearance bug
- net: set static variable an initial value in atl2_probe()
- tmpfs: fix uninitialized return value in shmem_link
- media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused()
- stm class: Prevent division by zero
- libnvdimm/label: Clear 'updating' flag after label-set update
- libnvdimm, pfn: Fix over-trim in trim_pfn_device()
- libnvdimm/pmem: Honor force_raw for legacy pmem regions
- libnvdimm: Fix altmap reservation size calculation
- fix cgroup_do_mount() handling of failure exits
- crypto: arm/crct10dif - revert to C code for short inputs
- crypto: arm64/crct10dif - revert to C code for short inputs
- crypto: hash - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
- crypto: testmgr - skip crc32c context test for ahash algorithms
- crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling
- crypto: arm64/aes-ccm - fix bugs in non-NEON fallback routine
- CIFS: Do not reset lease state to NONE on lease break
- CIFS: Fix read after write for files with read caching
- tracing: Use strncpy instead of memcpy for string keys in hist triggers
- tracing: Do not free iter->trace in fail path of tracing_open_pipe()
- xen: fix dom0 boot on huge systems
- ACPI / device_sysfs: Avoid OF modalias creation for removed device
- mmc: sdhci-esdhc-imx: fix HS400 timing issue
- spi: ti-qspi: Fix mmap read when more than one CS in use
- spi: pxa2xx: Setup maximum supported DMA transfer length
- regulator: s2mps11: Fix steps for buck7, buck8 and LDO35
- regulator: max77620: Initialize values for DT properties
- regulator: s2mpa01: Fix step values for some LDOs
- clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR
- clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown
- s390/setup: fix early warning messages
- s390/virtio: handle find on invalid queue gracefully
- scsi: virtio_scsi: don't send sc payload with tmfs
- scsi: aacraid: Fix performance issue on logical drives
- scsi: sd: Optimal I/O size should be a multiple of physical block size
- scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
- fs/devpts: always delete dcache dentry-s in dput()
- splice: don't merge into linked buffers
- m68k: Add -ffreestanding to CFLAGS
- Btrfs: setup a nofs context for memory allocation at __btrfs_set_acl
- btrfs: ensure that a DUP or RAID1 block group has exactly two stripes
- Btrfs: fix corruption reading shared and compressed extents after hole
punching
- crypto: pcbc - remove bogus memcpy()s with src == dest
- libertas_tf: don't set URB_ZERO_PACKET on IN USB transfer
- irqchip/gic-v3-its: Avoid parsing _indirect_ twice for Device table
- x86/kprobes: Prohibit probing on optprobe template code
- cpufreq: tegra124: add missing of_node_put()
- cpufreq: pxa2xx: remove incorrect __init annotation
- ext4: add mask of ext4 flags to swap
- ext4: fix crash during online resizing
- IB/hfi1: Close race condition on user context disable and close
- cxl: Wrap iterations over afu slices inside 'afu_list_lock'
- ext2: Fix underflow in ext2_max_size()
- clk: uniphier: Fix update register for CPU-gear
- clk: clk-twl6040: Fix imprecise external abort for pdmclk
- clk: ingenic: Fix round_rate misbehaving with non-integer dividers
- clk: ingenic: Fix doc of ingenic_cgu_div_info
- usb: chipidea: tegra: Fix missed ci_hdrc_remove_device()
- nfit: acpi_nfit_ctl(): Check out_obj->type in the right place
- mm: hwpoison: fix thp split handing in soft_offline_in_use_page()
- mm/vmalloc: fix size check for remap_vmalloc_range_partial()
- kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv
- device property: Fix the length used in PROPERTY_ENTRY_STRING()
- intel_th: Don't reference unassigned outputs
- parport_pc: fix find_superio io compare code, should use equal test.
- i2c: tegra: fix maximum transfer size
- crypto: arm64/aes-neonbs - fix returning final keystream block
- drm/i915: Relax mmap VMA check
- serial: uartps: Fix stuck ISR if RX disabled with non-empty FIFO
- serial: 8250_of: assume reg-shift of 2 for mrvl,mmp-uart
- serial: 8250_pci: Fix number of ports for ACCES serial cards
- serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954
chip use the pci_pericom_setup()
- jbd2: clear dirty flag when revoking a buffer from an older transaction
- jbd2: fix compile warning when using JBUFFER_TRACE
- security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblock
- powerpc/32: Clear on-stack exception marker upon exception return
- powerpc/wii: properly disable use of BATs when requested.
- powerpc/powernv: Make opal log only readable by root
- powerpc/83xx: Also save/restore SPRG4-7 during suspend
- powerpc: Fix 32-bit KVM-PR lockup and host crash with MacOS guest
- powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning
- powerpc/hugetlb: Don't do runtime allocation of 16G pages in LPAR
configuration
- powerpc/traps: fix recoverability of machine check handling on book3s/32
- powerpc/traps: Fix the message printed when stack overflows
- ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify
- arm64: Fix HCR.TGE status for NMI contexts
- arm64: debug: Ensure debug handlers check triggering exception level
- arm64: KVM: Fix architecturally invalid reset value for FPEXC32_EL2
- dm: fix to_sector() for 32bit
- dm integrity: limit the rate of error messages
- cpcap-charger: generate events for userspace
- NFS: Fix I/O request leakages
- NFS: Fix an I/O request leakage in nfs_do_recoalesce
- NFS: Don't recoalesce on error in nfs_pageio_complete_mirror()
- nfsd: fix memory corruption caused by readdir
- nfsd: fix wrong check in write_v4_end_grace()
- NFSv4.1: Reinitialise sequence results before retransmitting a request
- PM / wakeup: Rework wakeup source timer cancellation
- x86/unwind/orc: Fix ORC unwind table alignment
- perf intel-pt: Fix CYC timestamp calculation after OVF
- perf auxtrace: Define auxtrace record alignment
- perf intel-pt: Fix overlap detection to identify consecutive buffers
correctly
- perf intel-pt: Fix overlap calculation for padding
- perf intel-pt: Fix divide by zero when TSC is not available
- md: Fix failed allocation of md_register_thread
- tpm/tpm_crb: Avoid unaligned reads in crb_recv()
- tpm: Unify the send callback behaviour
- rcu: Do RCU GP kthread self-wakeup from softirq and interrupt
- media: imx: prpencvf: Stop upstream before disabling IDMA channel
- media: uvcvideo: Avoid NULL pointer dereference at the end of streaming
- media: vimc: Add vimc-streamer for stream control
- media: imx: csi: Disable CSI immediately after last EOF
- media: imx: csi: Stop upstream before disabling IDMA channel
- drm/radeon/evergreen_cs: fix missing break in switch statement
- KVM: Call kvm_arch_memslots_updated() before updating memslots
- KVM: x86/mmu: Detect MMIO generation wrap in any address space
- KVM: x86/mmu: Do not cache MMIO accesses while memslots are in flux
- KVM: nVMX: Sign extend displacements of VMX instr's mem operands
- KVM: nVMX: Apply addr size mask to effective address for VMX instructions
- KVM: nVMX: Ignore limit checks on VMX instructions using flat segments
- s390/setup: fix boot crash for machine without EDAT-1
- crypto: caam - fix hash context DMA unmap size
- crypto: caam - fix DMA mapping of stack memory
- KVM: arm/arm64: vgic: Make vgic_dist->lpi_list_lock a raw_spinlock
- arm/arm64: KVM: Allow a VCPU to fully reset itself
- arm/arm64: KVM: Don't panic on failure to properly reset system registers
- ASoC: samsung: Prevent clk_get_rate() calls in atomic context
- mac80211: call drv_ibss_join() on restart
- blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue
- xprtrdma: Make sure Send CQ is allocated on an existing compvec
- net: dsa: bcm_sf2: potential array overflow in bcm_sf2_sw_suspend()
- x86/CPU: Add Icelake model number
- kallsyms: Handle too long symbols in kallsyms.c
- ARM: 8835/1: dma-mapping: Clear DMA ops on teardown
- net: dsa: bcm_sf2: Do not assume DSA master supports WoL
- qed: Fix iWARP buffer size provided for syn packet processing.
- mm: handle lru_add_drain_all for UP properly
- ARCv2: don't assume core 0x54 has dual issue
- bpf, lpm: fix lookup bug in map_delete_elem
- acpi/nfit: Fix bus command validation
- mmc:fix a bug when max_discard is 0
- netfilter: ipt_CLUSTERIP: fix warning unused variable cn
- [Config] updateconfigs for CONFIG_SUN50I_ERRATUM_UNKNOWN1
- clocksource/drivers/arch_timer: Workaround for Allwinner A64 timer
instability
- irqchip/brcmstb-l2: Use _irqsave locking variants in non-interrupt code
- ext4: fix check of inode in swap_inode_boot_loader
- ext4: cleanup pagecache before swap i_data
- ext4: update quota information while swapping boot loader inode
- dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit
- mm/memory.c: do_fault: avoid usage of stale vm_area_struct
- media: i2c: ov5640: Fix post-reset delay
- powerpc/powernv: Don't reprogram SLW image on every KVM guest entry/exit
- mfd: sm501: Fix potential NULL pointer dereference
- nfsd: fix performance-limiting session calculation
- svcrpc: fix UDP on servers with lots of threads
- stable-kernel-rules.rst: add link to networking patch queue
- bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata
* Bionic update: upstream stable patchset 2019-07-24 (LP: #1837813)
- dt-bindings: eeprom: at24: add "atmel,24c2048" compatible string
- eeprom: at24: add support for 24c2048
- blk-mq: fix a hung issue when fsync
- ARM: 8789/1: signal: copy registers using __copy_to_user()
- ARM: 8790/1: signal: always use __copy_to_user to save iwmmxt context
- ARM: 8791/1: vfp: use __copy_to_user() when saving VFP state
- ARM: 8792/1: oabi-compat: copy oabi events using __copy_to_user()
- ARM: 8793/1: signal: replace __put_user_error with __put_user
- ARM: 8794/1: uaccess: Prevent speculative use of the current addr_limit
- ARM: 8795/1: spectre-v1.1: use put_user() for __put_user()
- ARM: 8796/1: spectre-v1,v1.1: provide helpers for address sanitization
- ARM: 8797/1: spectre-v1.1: harden __copy_to_user
- ARM: 8810/1: vfp: Fix wrong assignement to ufp_exc
- ARM: make lookup_processor_type() non-__init
- ARM: split out processor lookup
- ARM: clean up per-processor check_bugs method call
- ARM: add PROC_VTABLE and PROC_TABLE macros
- ARM: spectre-v2: per-CPU vtables to work around big.Little systems
- ARM: ensure that processor vtables is not lost after boot
- ARM: fix the cockup in the previous patch
- ACPI: NUMA: Use correct type for printing addresses on i386-PAE
- perf test shell: Use a fallback to get the pathname in vfs_getname
- cpufreq: check if policy is inactive early in __cpufreq_get()
- drm/bridge: tc358767: add defines for DP1_SRCCTRL & PHY_2LANE
- drm/bridge: tc358767: fix single lane configuration
- drm/bridge: tc358767: fix initial DP0/1_SRCCTRL value
- drm/bridge: tc358767: reject modes which require too much BW
- drm/bridge: tc358767: fix output H/V syncs
- nvme-pci: use the same attributes when freeing host_mem_desc_bufs.
- ARM: dts: da850-evm: Correct the sound card name
- ARM: dts: da850-lcdk: Correct the sound card name
- ARM: dts: kirkwood: Fix polarity of GPIO fan lines
- gpio: pl061: handle failed allocations
- drm/nouveau: Don't disable polling in fallback mode
- drm/nouveau/falcon: avoid touching registers if engine is off
- cifs: Limit memory used by lock request calls to a page
- Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G"
- Input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK
- perf/core: Fix impossible ring-buffer sizes warning
- perf/x86: Add check_period PMU callback
- ALSA: hda - Add quirk for HP EliteBook 840 G5
- ALSA: usb-audio: Fix implicit fb endpoint setup by quirk
- kvm: vmx: Fix entry number check for add_atomic_switch_msr()
- Input: bma150 - register input device after setting private data
- Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780
- mm: proc: smaps_rollup: fix pss_locked calculation
- alpha: fix page fault handling for r16-r18 targets
- alpha: Fix Eiger NR_IRQS to 128
- tracing/uprobes: Fix output for multiple string arguments
- x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls
- signal: Restore the stop PTRACE_EVENT_EXIT
- md/raid1: don't clear bitmap bits on interrupted recovery.
- x86/a.out: Clear the dump structure initially
- dm crypt: don't overallocate the integrity tag space
- dm thin: fix bug where bio that overwrites thin block ignores FUA
- drm/i915: Prevent a race during I915_GEM_MMAP ioctl with WC set
- perf report: Fix wrong iteration count in --branch-history
- riscv: fix trace_sys_exit hook
- ARM: dts: da850-lcdk: Correct the audio codec regulators
- ARM: OMAP5+: Fix inverted nirq pin interrupts with irq_set_type
- ASoC: hdmi-codec: fix oops on re-probe
- riscv: Add pte bit to distinguish swap from invalid
- mmc: sunxi: Filter out unsupported modes declared in the device tree
- s390/zcrypt: fix specification exception on z196 during ap probe
- drm/i915: Block fbdev HPD processing during suspend
- dsa: mv88e6xxx: Ensure all pending interrupts are handled prior to exit
- net: fix IPv6 prefix route residue
- net: ipv4: use a dedicated counter for icmp_v4 redirect packets
- vsock: cope with memory allocation failure at socket creation time
- vxlan: test dev->flags & IFF_UP before calling netif_rx()
- hwmon: (lm80) Fix missing unlock on error in set_fan_div()
- mlxsw: __mlxsw_sp_port_headroom_set(): Fix a use of local variable
- net: Fix for_each_netdev_feature on Big endian
- net: phy: xgmiitorgmii: Support generic PHY status read
- net: stmmac: Fix a race in EEE enable callback
- net: stmmac: handle endianness in dwmac4_get_timestamp
- vhost: correctly check the return value of translate_desc() in log_used()
- net: Add header for usage of fls64()
- net: Do not allocate page fragments that are not skb aligned
- tcp: clear icsk_backoff in tcp_write_queue_purge()
- sunrpc: fix 4 more call sites that were using stack memory with a
scatterlist
- net/x25: do not hold the cpu too long in x25_new_lci()
- mISDN: fix a race in dev_expire_timer()
- ax25: fix possible use-after-free
- af_packet: fix raw sockets over 6in4 tunnel
- tcp: tcp_v4_err() should be more careful
- mmc: meson-gx: fix interrupt name
- ARM: 8834/1: Fix: kprobes: optimized kprobes illegal instruction
- tracing: Fix number of entries in trace header
- MIPS: eBPF: Always return sign extended 32b values
- mac80211: Restore vif beacon interval if start ap fails
- mac80211: Free mpath object when rhashtable insertion fails
- libceph: handle an empty authorize reply
- ceph: avoid repeatedly adding inode to mdsc->snap_flush_list
- numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES
- proc, oom: do not report alien mms when setting oom_score_adj
- KEYS: allow reaching the keys quotas exactly
- mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells
- pvcalls-back: set -ENOTCONN in pvcalls_conn_back_read
- mfd: twl-core: Fix section annotations on {,un}protect_pm_master
- mfd: db8500-prcmu: Fix some section annotations
- mfd: mt6397: Do not call irq_domain_remove if PMIC unsupported
- mfd: ab8500-core: Return zero in get_register_interruptible()
- mfd: bd9571mwv: Add volatile register to make DVFS work
- mfd: qcom_rpm: write fw_version to CTRL_REG
- mfd: wm5110: Add missing ASRC rate register
- mfd: tps65218: Use devm_regmap_add_irq_chip and clean up error path in
probe()
- mfd: mc13xxx: Fix a missing check of a register-read failure
- xen/pvcalls: remove set but not used variable 'intf'
- qed: Fix qed_chain_set_prod() for PBL chains with non power of 2 page count
- qed: Fix qed_ll2_post_rx_buffer_notify_fw() by adding a write memory barrier
- net: hns: Fix use after free identified by SLUB debug
- MIPS: ath79: Enable OF serial ports in the default config
- netfilter: nf_tables: fix leaking object reference count
- scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param
- scsi: isci: initialize shost fully before calling scsi_add_host()
- MIPS: jazz: fix 64bit build
- bpf: correctly set initial window on active Fast Open sender
- net: stmmac: Fix PCI module removal leak
- isdn: i4l: isdn_tty: Fix some concurrency double-free bugs
- scsi: ufs: Fix system suspend status
- scsi: qedi: Add ep_state for login completion on un-reachable targets
- always clear the X2APIC_ENABLE bit for PV guest
- drm/meson: add missing of_node_put
- atm: he: fix sign-extension overflow on large shift
- hwmon: (tmp421) Correct the misspelling of the tmp442 compatible attribute
in OF device ID table
- leds: lp5523: fix a missing check of return value of lp55xx_read
- bpf: bpf_setsockopt: reset sock dst on SO_MARK changes
- mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky
- net/mlx5e: Fix wrong (zero) TX drop counter indication for representor
- isdn: avm: Fix string plus integer warning from Clang
- batman-adv: fix uninit-value in batadv_interface_tx()
- ipv6: propagate genlmsg_reply return code
- net/mlx5e: Don't overwrite pedit action when multiple pedit used
- net/packet: fix 4gb buffer limit due to overflow check
- net: sfp: do not probe SFP module before we're attached
- sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment
- team: avoid complex list operations in team_nl_cmd_options_set()
- sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach()
- net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames
- inet_diag: fix reporting cgroup classid and fallback to priority
- RDMA/srp: Rework SCSI device reset handling
- KEYS: user: Align the payload buffer
- KEYS: always initialize keyring_index_key::desc_len
- parisc: Fix ptrace syscall number modification
- ARCv2: Enable unaligned access in early ASM code
- ARC: U-boot: check arguments paranoidly
- ARC: define ARCH_SLAB_MINALIGN = 8
- net: validate untrusted gso packets without csum offload
- net: avoid false positives in untrusted gso validation
- Revert "bridge: do not add port to router list when receives query with
source 0.0.0.0"
- netfilter: nf_tables: fix flush after rule deletion in the same batch
- netfilter: nft_compat: use-after-free when deleting targets
- netfilter: ipv6: Don't preserve original oif for loopback address
- pinctrl: max77620: Use define directive for max77620_pinconf_param values
- phy: tegra: remove redundant self assignment of 'map'
- net: phylink: avoid resolving link state too early
- gpio: pxa: avoid attempting to set pin direction via pinctrl on MMP2
- pvcalls-front: read all data before closing the connection
- pvcalls-front: don't try to free unallocated rings
- pvcalls-front: properly allocate sk
- mfd: cros_ec_dev: Add missing mfd_remove_devices() call in remove
- bpf: Fix [::] -> [::1] rewrite in sys_sendmsg
- watchdog: mt7621_wdt/rt2880_wdt: Fix compilation problem
- net/mlx4: Get rid of page operation after dma_alloc_coherent
- xprtrdma: Double free in rpcrdma_sendctxs_create()
- RDMA/mthca: Clear QP objects during their allocation
- powerpc/8xx: fix setting of pagetable for Abatron BDI debug tool.
- net: stmmac: Fix the logic of checking if RX Watchdog must be enabled
- scsi: ufs: Fix geometry descriptor size
- scsi: cxgb4i: add wait_for_completion()
- afs: Fix key refcounting in file locking code
- dpaa_eth: NETIF_F_LLTX requires to do our own update of trans_start
- mlxsw: pci: Return error on PCI reset timeout
- sctp: set stream ext to NULL after freeing it in sctp_stream_outq_migrate
- drm/amdgpu: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime
- gpu: drm: radeon: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime
- drm/amd/display: Fix MST reboot/poweroff sequence
- mac80211: allocate tailroom for forwarded mesh packets
- netfilter: ipt_CLUSTERIP: fix sleep-in-atomic bug in
clusterip_config_entry_put()
- net: stmmac: Fix reception of Broadcom switches tags
- drm/msm: Unblock writer if reader closes file
- ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field
- ALSA: compress: prevent potential divide by zero bugs
- ASoC: Variable "val" in function rt274_i2c_probe() could be uninitialized
- clk: vc5: Abort clock configuration without upstream clock
- thermal: int340x_thermal: Fix a NULL vs IS_ERR() check
- usb: dwc3: gadget: synchronize_irq dwc irq in suspend
- usb: dwc3: gadget: Fix the uninitialized link_state when udc starts
- usb: gadget: Potential NULL dereference on allocation error
- genirq: Make sure the initial affinity is not empty
- ASoC: dapm: change snprintf to scnprintf for possible overflow
- ASoC: imx-audmux: change snprintf to scnprintf for possible overflow
- selftests: seccomp: use LDLIBS instead of LDFLAGS
- selftests: gpio-mockup-chardev: Check asprintf() for error
- ARC: fix __ffs return value to avoid build warnings
- drivers: thermal: int340x_thermal: Fix sysfs race condition
- staging: rtl8723bs: Fix build error with Clang when inlining is disabled
- mac80211: fix miscounting of ttl-dropped frames
- sched/wait: Fix rcuwait_wake_up() ordering
- futex: Fix (possible) missed wakeup
- locking/rwsem: Fix (possible) missed wakeup
- drm/amd/powerplay: OD setting fix on Vega10
- serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling
- staging: android: ion: Support cpu access during dma_buf_detach
- direct-io: allow direct writes to empty inodes
- writeback: synchronize sync(2) against cgroup writeback membership switches
- scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state()
- net: altera_tse: fix connect_local_phy error path
- hv_netvsc: Fix ethtool change hash key error
- net: usb: asix: ax88772_bind return error when hw_reset fail
- net: dev_is_mac_header_xmit() true for ARPHRD_RAWIP
- ibmveth: Do not process frames after calling napi_reschedule
- mac80211: don't initiate TDLS connection if station is not associated to AP
- mac80211: Add attribute aligned(2) to struct 'action'
- cfg80211: extend range deviation for DMG
- KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting
to L1
- mmc: spi: Fix card detection during probe
- mmc: tmio_mmc_core: don't claim spurious interrupts
- mmc: tmio: fix access width of Block Count Register
- mmc: sdhci-esdhc-imx: correct the fix of ERR004536
- MIPS: fix truncation in __cmpxchg_small for short values
- MIPS: eBPF: Fix icache flush end address
- x86/uaccess: Don't leak the AC flag into __put_user() value evaluation
- irq/matrix: Split out the CPU selection code into a helper
- irq/matrix: Spread managed interrupts on allocation
- genirq/matrix: Improve target CPU selection for managed interrupts.
- clk: tegra: dfll: Fix a potential Oop in remove()
- selftests/vm/gup_benchmark.c: match gup struct to kernel
- ARC: show_regs: lockdep: avoid page allocator...
- sched/wake_q: Fix wakeup ordering for wake_q
- drm/sun4i: hdmi: Fix usage of TMDS clock
- scsi: lpfc: nvme: avoid hang / use-after-free when destroying localport
- scsi: lpfc: nvmet: avoid hang / use-after-free when destroying targetport
- mmc: core: Fix NULL ptr crash from mmc_should_fail_request
- drm: Block fb changes for async plane updates
- hugetlbfs: fix races and page leaks during migration
- MIPS: BCM63XX: provide DMA masks for ethernet devices
- cpufreq: Use struct kobj_attribute instead of struct global_attr
- USB: serial: option: add Telit ME910 ECM composition
- USB: serial: cp210x: add ID for Ingenico 3070
- USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485
- staging: comedi: ni_660x: fix missing break in switch statement
- staging: wilc1000: fix to set correct value for 'vif_num'
- staging: android: ion: fix sys heap pool's gfp_flags
- ip6mr: Do not call __IP6_INC_STATS() from preemptible context
- net: dsa: mv88e6xxx: handle unknown duplex modes gracefully in
mv88e6xxx_port_set_duplex
- net-sysfs: Fix mem leak in netdev_register_kobject
- team: Free BPF filter when unregistering netdev
- tipc: fix RDM/DGRAM connect() regression
- bnxt_en: Drop oversize TX packets to prevent errors.
- hv_netvsc: Fix IP header checksum for coalesced packets
- net: dsa: mv88e6xxx: Fix statistics on mv88e6161
- net: dsa: mv88e6xxx: Fix u64 statistics
- netlabel: fix out-of-bounds memory accesses
- net: netem: fix skb length BUG_ON in __skb_to_sgvec
- net: phy: Micrel KSZ8061: link failure after cable connect
- net: phy: phylink: fix uninitialized variable in phylink_get_mac_state
- net: sit: fix memory leak in sit_init_net()
- tipc: fix race condition causing hung sendto
- tun: fix blocking read
- xen-netback: don't populate the hash cache on XenBus disconnect
- xen-netback: fix occasional leak of grant ref mappings under memory pressure
- tun: remove unnecessary memory barrier
- net: Add __icmp_send helper.
- net: avoid use IPCB in cipso_v4_error
- ipv4: Return error for RTA_VIA attribute
- ipv6: Return error for RTA_VIA attribute
- mpls: Return error for RTA_GATEWAY attribute
- net/sched: act_ipt: fix refcount leak when replace fails
- x86/CPU/AMD: Set the CPB bit unconditionally on F17h
- MIPS: irq: Allocate accurate order pages for irq stack
- xtensa: fix get_wchan
- Bluetooth: Fix locking in bt_accept_enqueue() for BH context
- scsi: core: reset host byte in DID_NEXUS_FAILURE case
- bpf: fix sanitation rewrite in case of non-pointers
- vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel
- perf core: Fix perf_proc_update_handler() bug
- perf tools: Handle TOPOLOGY headers with no CPU
- IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM
- iommu/amd: Call free_iova_fast with pfn in map_sg
- iommu/amd: Unmap all mapped pages in error path of map_sg
- ipvs: Fix signed integer overflow when setsockopt timeout
- iommu/amd: Fix IOMMU page flush when detach device from a domain
- xtensa: SMP: fix ccount_timer_shutdown
- selftests: cpu-hotplug: fix case where CPUs offline > CPUs present
- xtensa: SMP: fix secondary CPU initialization
- xtensa: smp_lx200_defconfig: fix vectors clash
- xtensa: SMP: mark each possible CPU as present
- xtensa: SMP: limit number of possible CPUs by NR_CPUS
- net: altera_tse: fix msgdma_tx_completion on non-zero fill_level case
- net: hns: Fix for missing of_node_put() after of_parse_phandle()
- net: hns: Fix wrong read accesses via Clause 45 MDIO protocol
- net: stmmac: dwmac-rk: fix error handling in rk_gmac_powerup()
- netfilter: ebtables: compat: un-break 32bit setsockopt when no rules are
present
- gpio: vf610: Mask all GPIO interrupts
- selftests: timers: use LDLIBS instead of LDFLAGS
- nfs: Fix NULL pointer dereference of dev_name
- qed: Fix bug in tx promiscuous mode settings
- qed: Fix LACP pdu drops for VFs
- qed: Fix VF probe failure while FLR
- qed: Fix system crash in ll2 xmit
- qed: Fix stack out of bounds bug
- scsi: libfc: free skb when receiving invalid flogi resp
- scsi: 53c700: pass correct "dev" to dma_alloc_attrs()
- platform/x86: Fix unmet dependency warning for SAMSUNG_Q10
- cifs: fix computation for MAX_SMB2_HDR_SIZE
- x86/microcode/amd: Don't falsely trick the late loading mechanism
- arm64: kprobe: Always blacklist the KVM world-switch code
- apparmor: Fix aa_label_build() error handling for failed merges
- x86/kexec: Don't setup EFI info if EFI runtime is not enabled
- x86_64: increase stack size for KASAN_EXTRA
- mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone
- mm, memory_hotplug: test_pages_in_a_zone do not pass the end of zone
- lib/test_kmod.c: potential double free in error handling
- fs/drop_caches.c: avoid softlockups in drop_pagecache_sb()
- autofs: drop dentry reference only when it is never used
- autofs: fix error return in autofs_fill_super()
- ARM: dts: omap4-droid4: Fix typo in cpcap IRQ flags
- arm64: dts: renesas: r8a7796: Enable DMA for SCIF2
- soc: fsl: qbman: avoid race in clearing QMan interrupt
- bpf: sock recvbuff must be limited by rmem_max in bpf_setsockopt()
- ARM: pxa: ssp: unneeded to free devm_ allocated data
- arm64: dts: add msm8996 compatible to gicv3
- DTS: CI20: Fix bugs in ci20's device tree.
- usb: phy: fix link errors
- irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable
- net: stmmac: Fallback to Platform Data clock in Watchdog conversion
- net: stmmac: Send TSO packets always from Queue 0
- net: stmmac: Disable EEE mode earlier in XMIT callback
- irqchip/gic-v3-its: Fix ITT_entry_size accessor
- relay: check return of create_buf_file() properly
- bpf, selftests: fix handling of sparse CPU allocations
- bpf: fix lockdep false positive in percpu_freelist
- drm/sun4i: tcon: Prepare and enable TCON channel 0 clock at init
- dmaengine: at_xdmac: Fix wrongfull report of a channel as in use
- vsock/virtio: fix kernel panic after device hot-unplug
- vsock/virtio: reset connected sockets on device removal
- dmaengine: dmatest: Abort test in case of mapping error
- selftests: netfilter: fix config fragment CONFIG_NF_TABLES_INET
- selftests: netfilter: add simple masq/redirect test cases
- s390/qeth: fix use-after-free in error path
- perf symbols: Filter out hidden symbols from labels
- perf trace: Support multiple "vfs_getname" probes
- MIPS: Remove function size check in get_frame_info()
- i2c: omap: Use noirq system sleep pm ops to idle device for suspend
- fs: ratelimit __find_get_block_slow() failure message.
- qed: Fix EQ full firmware assert.
- qed: Consider TX tcs while deriving the max num_queues for PF.
- Input: wacom_serial4 - add support for Wacom ArtPad II tablet
- Input: elan_i2c - add id for touchpad found in Lenovo s21e-20
- iscsi_ibft: Fix missing break in switch statement
- scsi: aacraid: Fix missing break in switch statement
- arm64: dts: hikey: Give wifi some time after power-on
- ARM: dts: exynos: Fix pinctrl definition for eMMC RTSN line on Odroid X2/U3
- ARM: dts: exynos: Add minimal clkout parameters to Exynos3250 PMU
- drm: disable uncached DMA optimization for ARM and arm64
- ARM: 8781/1: Fix Thumb-2 syscall return for binutils 2.29+
- gfs2: Fix missed wakeups in find_insert_glock
- ath9k: Avoid OF no-EEPROM quirks without qca,no-eeprom
- perf/x86/intel: Make cpuc allocations consistent
- perf/x86/intel: Generalize dynamic constraint creation
- x86: Add TSX Force Abort CPUID/MSR
- perf/x86/intel: Implement support for TSX Force Abort
- perf script: Fix crash with printing mixed trace point and other events
- clk: ti: Fix error handling in ti_clk_parse_divider_data()
- riscv: Adjust mmap base address at a third of task size
- IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start
- iomap: fix a use after free in iomap_dio_rw
- selftests: net: use LDLIBS instead of LDFLAGS
- scsi: scsi_debug: fix write_same with virtual_gb problem
- scsi: bnx2fc: Fix error handling in probe()
- ARM: OMAP: dts: N950/N9: fix onenand timings
- ARM: dts: sun8i: h3: Add ethernet0 alias to Beelink X2
- ARM: dts: imx6sx: correct backward compatible of gpt
- pinctrl: mcp23s08: spi: Fix regmap allocation for mcp23s18
- bpftool: Fix prog dump by tag
- bpftool: fix percpu maps updating
- batman-adv: release station info tidstats
- irqchip/gic-v4: Fix occasional VLPI drop
- s390/qeth: release cmd buffer in error paths
- nvme-pci: add missing unlock for reset error
- x86/PCI: Fixup RTIT_BAR of Intel Denverton Trace Hub
- ARM: dts: exynos: Fix max voltage for buck8 regulator on Odroid XU3/XU4
* Bionic update: upstream stable patchset 2019-07-23 (LP: #1837664)
- amd-xgbe: Fix mdio access for non-zero ports and clause 45 PHYs
- net: bridge: Fix ethernet header pointer before check skb forwardable
- net: Fix usage of pskb_trim_rcsum
- net: phy: mdio_bus: add missing device_del() in mdiobus_register() error
handling
- net_sched: refetch skb protocol for each filter
- openvswitch: Avoid OOB read when parsing flow nlattrs
- vhost: log dirty page correctly
- net: ipv4: Fix memory leak in network namespace dismantle
- tcp: allow MSG_ZEROCOPY transmission also in CLOSE_WAIT state
- mei: me: add denverton innovation engine device IDs
- USB: serial: simple: add Motorola Tetra TPG2200 device id
- USB: serial: pl2303: add new PID to support PL2303TB
- ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages
- ASoC: rt5514-spi: Fix potential NULL pointer dereference
- ARCv2: lib: memeset: fix doing prefetchw outside of buffer
- ARC: adjust memblock_reserve of kernel memory
- ARC: perf: map generic branches to correct hardware condition
- s390/smp: fix CPU hotplug deadlock with CPU rescan
- staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1
- tty: Handle problem if line discipline does not have receive_buf
- uart: Fix crash in uart_write and uart_put_char
- tty/n_hdlc: fix __might_sleep warning
- hv_balloon: avoid touching uninitialized struct page during tail onlining
- Drivers: hv: vmbus: Check for ring when getting debug info
- CIFS: Fix possible hang during async MTU reads and writes
- CIFS: Fix credits calculations for reads with errors
- CIFS: Fix credit calculation for encrypted reads with errors
- CIFS: Do not reconnect TCP session in add_credits()
- Input: xpad - add support for SteelSeries Stratus Duo
- compiler.h: enable builtin overflow checkers and add fallback code
- Input: uinput - fix undefined behavior in uinput_validate_absinfo()
- acpi/nfit: Block function zero DSMs
- acpi/nfit: Fix command-supported detection
- dm thin: fix passdown_double_checking_shared_status()
- dm crypt: fix parsing of extended IV arguments
- KVM: x86: Fix single-step debugging
- x86/pkeys: Properly copy pkey state at fork()
- x86/selftests/pkeys: Fork() to check for state being preserved
- x86/kaslr: Fix incorrect i8254 outb() parameters
- posix-cpu-timers: Unbreak timer rearming
- irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size
- can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by
removing it
- can: bcm: check timer values before ktime conversion
- vt: invoke notifier on screen size change
- Revert "seccomp: add a selftest for get_metadata"
- s390/smp: Fix calling smp_call_ipl_cpu() from ipl CPU
- nvmet-rdma: Add unlikely for response allocated check
- nvmet-rdma: fix null dereference under heavy load
- usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup
- x86/xen/time: Output xen sched_clock time from 0
- xen: Fix x86 sched_clock() interface for xen
- mlxsw: pci: Increase PCI SW reset timeout
- mlxsw: spectrum_fid: Update dummy FID index
- ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode
- s390/mm: always force a load of the primary ASCE on context switch
- mmc: meson-gx: Free irq in release() callback
- vgacon: unconfuse vc_origin when using soft scrollback
- drm/amdgpu: Add APTX quirk for Lenovo laptop
- vt: always call notifier with the console lock held
- drm/meson: Fix atomic mode switching regression
- bpf: improve verifier branch analysis
- bpf: add per-insn complexity limit
- ipv6: Consider sk_bound_dev_if when binding a socket to an address
- ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation
- l2tp: copy 4 more bytes to linear part if necessary
- net/mlx4_core: Add masking for a few queries on HCA caps
- netrom: switch to sock timer API
- net/rose: fix NULL ax25_cb kernel panic
- net: set default network namespace in init_dummy_netdev()
- net/mlx5e: Allow MAC invalidation while spoofchk is ON
- Revert "net/mlx5e: E-Switch, Initialize eswitch only if eswitch manager"
- virtio_net: Don't enable NAPI when interface is down
- virtio_net: Don't call free_old_xmit_skbs for xdp_frames
- virtio_net: Fix not restoring real_num_rx_queues
- sctp: improve the events for sctp stream adding
- sctp: improve the events for sctp stream reset
- l2tp: remove l2specific_len dependency in l2tp_core
- l2tp: fix reading optional fields of L2TPv3
- ipvlan, l3mdev: fix broken l3s mode wrt local routes
- CIFS: Do not count -ENODATA as failure for query directory
- fs/dcache: Fix incorrect nr_dentry_unused accounting in shrink_dcache_sb()
- iommu/vt-d: Fix memory leak in intel_iommu_put_resv_regions()
- NFS: Fix up return value on fatal errors in nfs_page_async_flush()
- ARM: cns3xxx: Fix writing to wrong PCI config registers after alignment
- arm64: kaslr: ensure randomized quantities are clean also when kaslr is off
- arm64: hyp-stub: Forbid kprobing of the hyp-stub
- arm64: hibernate: Clean the __hyp_text to PoC after resume
- gpio: altera-a10sr: Set proper output level for direction_output
- gpio: pcf857x: Fix interrupts on multiple instances
- mmc: bcm2835: Fix DMA channel leak on probe error
- IB/hfi1: Remove overly conservative VM_EXEC flag check
- platform/x86: asus-nb-wmi: Map 0x35 to KEY_SCREENLOCK
- platform/x86: asus-nb-wmi: Drop mapping of 0x33 and 0x34 scan codes
- mmc: sdhci-iproc: handle mmc_of_parse() errors during probe
- kernel/exit.c: release ptraced tasks before zap_pid_ns_processes
- oom, oom_reaper: do not enqueue same task twice
- mm, oom: fix use-after-free in oom_kill_process
- mm: hwpoison: use do_send_sig_info() instead of force_sig()
- mm: migrate: don't rely on __PageMovable() of newpage after unlocking it
- md/raid5: fix 'out of memory' during raid cache recovery
- cifs: Always resolve hostname before reconnecting
- drivers: core: Remove glue dirs from sysfs earlier
- fanotify: fix handling of events on child sub-directory
- drm/msm/gpu: fix building without debugfs
- ravb: expand rx descriptor data to accommodate hw checksum
- tun: move the call to tun_set_real_num_queues
- sctp: set chunk transport correctly when it's a new asoc
- sctp: set flow sport from saddr only when it's 0
- virtio_net: Don't process redirected XDP frames when XDP is disabled
- CIFS: Do not consider -ENODATA as stat failure for reads
- mmc: mediatek: fix incorrect register setting of hs400_cmd_int_delay
- ALSA: usb-audio: Add Opus #3 to quirks for native DSD support
- Btrfs: fix deadlock when allocating tree block during leaf/node split
- mm/hugetlb.c: teach follow_hugetlb_page() to handle FOLL_NOWAIT
- mm,memory_hotplug: fix scan_movable_pages() for gigantic hugepages
- of: Convert to using %pOFn instead of device_node.name
- of: overlay: add tests to validate kfrees from overlay removal
- of: overlay: add missing of_node_get() in __of_attach_node_sysfs
- of: overlay: use prop add changeset entry for property in new nodes
- ucc_geth: Reset BQL queue when stopping device
- staging: iio: adc: ad7280a: handle error from __ad7280_read32()
- drm/vgem: Fix vgem_init to get drm device available.
- pinctrl: bcm2835: Use raw spinlock for RT compatibility
- ASoC: Intel: mrfld: fix uninitialized variable access
- gpu: ipu-v3: image-convert: Prevent race between run and unprepare
- ath9k: dynack: use authentication messages for 'late' ack
- scsi: lpfc: Correct LCB RJT handling
- scsi: mpt3sas: Call sas_remove_host before removing the target devices
- scsi: lpfc: Fix LOGO/PLOGI handling when triggerd by ABTS Timeout event
- ARM: 8808/1: kexec:offline panic_smp_self_stop CPU
- clk: boston: fix possible memory leak in clk_boston_setup()
- dlm: Don't swamp the CPU with callbacks queued during recovery
- x86/PCI: Fix Broadcom CNB20LE unintended sign extension (redux)
- powerpc/pseries: add of_node_put() in dlpar_detach_node()
- crypto: aes_ti - disable interrupts while accessing S-box
- drm/vc4: ->x_scaling[1] should never be set to VC4_SCALING_NONE
- serial: fsl_lpuart: clear parity enable bit when disable parity
- ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl
- MIPS: Boston: Disable EG20T prefetch
- staging:iio:ad2s90: Make probe handle spi_setup failure
- fpga: altera-cvp: Fix registration for CvP incapable devices
- Tools: hv: kvp: Fix a warning of buffer overflow with gcc 8.0.1
- platform/chrome: don't report EC_MKBP_EVENT_SENSOR_FIFO as wakeup
- staging: iio: ad7780: update voltage on read
- usbnet: smsc95xx: fix rx packet alignment
- drm/rockchip: fix for mailbox read size
- ARM: OMAP2+: hwmod: Fix some section annotations
- net/mlx5: EQ, Use the right place to store/read IRQ affinity hint
- modpost: validate symbol names also in find_elf_symbol
- perf tools: Add Hygon Dhyana support
- soc/tegra: Don't leak device tree node reference
- media: mtk-vcodec: Release device nodes in mtk_vcodec_init_enc_pm()
- ptp: Fix pass zero to ERR_PTR() in ptp_clock_register
- dmaengine: xilinx_dma: Remove __aligned attribute on zynqmp_dma_desc_ll
- iio: adc: meson-saradc: check for devm_kasprintf failure
- iio: adc: meson-saradc: fix internal clock names
- iio: accel: kxcjk1013: Add KIOX010A ACPI Hardware-ID
- media: adv*/tc358743/ths8200: fill in min width/height/pixelclock
- ACPI: SPCR: Consider baud rate 0 as preconfigured state
- staging: pi433: fix potential null dereference
- f2fs: move dir data flush to write checkpoint process
- f2fs: fix race between write_checkpoint and write_begin
- f2fs: fix wrong return value of f2fs_acl_create
- i2c: sh_mobile: add support for r8a77990 (R-Car E3)
- arm64: io: Ensure calls to delay routines are ordered against prior readX()
- sunvdc: Do not spin in an infinite loop when vio_ldc_send() returns EAGAIN
- soc: bcm: brcmstb: Don't leak device tree node reference
- nfsd4: fix crash on writing v4_end_grace before nfsd startup
- drm: Clear state->acquire_ctx before leaving
drm_atomic_helper_commit_duplicated_state()
- arm64: io: Ensure value passed to __iormb() is held in a 64-bit register
- Thermal: do not clear passive state during system sleep
- firmware/efi: Add NULL pointer checks in efivars API functions
- s390/zcrypt: improve special ap message cmd handling
- arm64: ftrace: don't adjust the LR value
- ARM: dts: mmp2: fix TWSI2
- x86/fpu: Add might_fault() to user_insn()
- media: DaVinci-VPBE: fix error handling in vpbe_initialize()
- smack: fix access permissions for keyring
- usb: dwc3: Correct the logic for checking TRB full in
__dwc3_prepare_one_trb()
- usb: hub: delay hub autosuspend if USB3 port is still link training
- timekeeping: Use proper seqcount initializer
- usb: mtu3: fix the issue about SetFeature(U1/U2_Enable)
- clk: sunxi-ng: a33: Set CLK_SET_RATE_PARENT for all audio module clocks
- driver core: Move async_synchronize_full call
- kobject: return error code if writing /sys/.../uevent fails
- IB/hfi1: Unreserve a reserved request when it is completed
- usb: dwc3: trace: add missing break statement to make compiler happy
- pinctrl: sx150x: handle failure case of devm_kstrdup
- iommu/amd: Fix amd_iommu=force_isolation
- ARM: dts: Fix OMAP4430 SDP Ethernet startup
- mips: bpf: fix encoding bug for mm_srlv32_op
- media: coda: fix H.264 deblocking filter controls
- ARM: dts: Fix up the D-Link DIR-685 MTD partition info
- watchdog: renesas_wdt: don't set divider while watchdog is running
- usb: dwc3: gadget: Disable CSP for stream OUT ep
- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
- sata_rcar: fix deferred probing
- clk: imx6sl: ensure MMDC CH0 handshake is bypassed
- cpuidle: big.LITTLE: fix refcount leak
- OPP: Use opp_table->regulators to verify no regulator case
- i2c-axxia: check for error conditions first
- phy: sun4i-usb: add support for missing USB PHY index
- udf: Fix BUG on corrupted inode
- switchtec: Fix SWITCHTEC_IOCTL_EVENT_IDX_ALL flags overwrite
- selftests/bpf: use __bpf_constant_htons in test_prog.c
- ARM: pxa: avoid section mismatch warning
- ASoC: fsl: Fix SND_SOC_EUKREA_TLV320 build error on i.MX8M
- KVM: PPC: Book3S: Only report KVM_CAP_SPAPR_TCE_VFIO on powernv machines
- mmc: bcm2835: Recover from MMC_SEND_EXT_CSD
- mmc: bcm2835: reset host on timeout
- mmc: sdhci-of-esdhc: Fix timeout checks
- mmc: sdhci-xenon: Fix timeout checks
- tty: serial: samsung: Properly set flags in autoCTS mode
- perf test: Fix perf_event_attr test failure
- perf header: Fix unchecked usage of strncpy()
- perf probe: Fix unchecked usage of strncpy()
- arm64: KVM: Skip MMIO insn after emulation
- usb: musb: dsps: fix otg state machine
- percpu: convert spin_lock_irq to spin_lock_irqsave.
- powerpc/uaccess: fix warning/error with access_ok()
- mac80211: fix radiotap vendor presence bitmap handling
- xfrm6_tunnel: Fix spi check in __xfrm6_tunnel_alloc_spi
- mlxsw: spectrum: Properly cleanup LAG uppers when removing port from LAG
- scsi: smartpqi: correct host serial num for ssa
- scsi: smartpqi: correct volume status
- scsi: smartpqi: increase fw status register read timeout
- cw1200: Fix concurrency use-after-free bugs in cw1200_hw_scan()
- powerpc/perf: Fix thresholding counter data for unknown type
- drbd: narrow rcu_read_lock in drbd_sync_handshake
- drbd: disconnect, if the wrong UUIDs are attached on a connected peer
- drbd: skip spurious timeout (ping-timeo) when failing promote
- drbd: Avoid Clang warning about pointless switch statment
- video: clps711x-fb: release disp device node in probe()
- fbdev: fbmem: behave better with small rotated displays and many CPUs
- i40e: define proper net_device::neigh_priv_len
- ACPI/APEI: Clear GHES block_status before panic()
- fbdev: fbcon: Fix unregister crash when more than one framebuffer
- powerpc/mm: Fix reporting of kernel execute faults on the 8xx
- pinctrl: meson: meson8: fix the GPIO function for the GPIOAO pins
- pinctrl: meson: meson8b: fix the GPIO function for the GPIOAO pins
- KVM: x86: svm: report MSR_IA32_MCG_EXT_CTL as unsupported
- powerpc/fadump: Do not allow hot-remove memory from fadump reserved area.
- kvm: Change offset in kvm_write_guest_offset_cached to unsigned
- NFS: nfs_compare_mount_options always compare auth flavors.
- hwmon: (lm80) fix a missing check of the status of SMBus read
- hwmon: (lm80) fix a missing check of bus read in lm80 probe
- seq_buf: Make seq_buf_puts() null-terminate the buffer
- crypto: ux500 - Use proper enum in cryp_set_dma_transfer
- crypto: ux500 - Use proper enum in hash_set_dma_transfer
- MIPS: ralink: Select CONFIG_CPU_MIPSR2_IRQ_VI on MT7620/8
- cifs: check ntwrk_buf_start for NULL before dereferencing it
- um: Avoid marking pages with "changed protection"
- niu: fix missing checks of niu_pci_eeprom_read
- f2fs: fix sbi->extent_list corruption issue
- cgroup: fix parsing empty mount option string
- scripts/decode_stacktrace: only strip base path when a prefix of the path
- ocfs2: don't clear bh uptodate for block read
- ocfs2: improve ocfs2 Makefile
- isdn: hisax: hfc_pci: Fix a possible concurrency use-after-free bug in
HFCPCI_l1hw()
- gdrom: fix a memory leak bug
- fsl/fman: Use GFP_ATOMIC in {memac,tgec}_add_hash_mac_address()
- block/swim3: Fix -EBUSY error when re-opening device after unmount
- thermal: bcm2835: enable hwmon explicitly
- kdb: Don't back trace on a cpu that didn't round up
- thermal: generic-adc: Fix adc to temp interpolation
- HID: lenovo: Add checks to fix of_led_classdev_register
- kernel/hung_task.c: break RCU locks based on jiffies
- proc/sysctl: fix return error for proc_doulongvec_minmax()
- kernel/hung_task.c: force console verbose before panic
- fs/epoll: drop ovflist branch prediction
- scripts/gdb: fix lx-version string output
- thermal: hwmon: inline helpers when CONFIG_THERMAL_HWMON is not set
- dccp: fool proof ccid_hc_[rt]x_parse_options()
- enic: fix checksum validation for IPv6
- net: dp83640: expire old TX-skb
- rxrpc: bad unlock balance in rxrpc_recvmsg
- skge: potential memory corruption in skge_get_regs()
- rds: fix refcount bug in rds_sock_addref
- net: systemport: Fix WoL with password after deep sleep
- net/mlx5e: Force CHECKSUM_UNNECESSARY for short ethernet frames
- net: dsa: slave: Don't propagate flag changes on down slave interfaces
- ALSA: compress: Fix stop handling on compressed capture streams
- ALSA: hda - Serialize codec registrations
- dmaengine: bcm2835: Fix interrupt race on RT
- dmaengine: bcm2835: Fix abort of transactions
- dmaengine: imx-dma: fix wrong callback invoke
- futex: Handle early deadlock return correctly
- irqchip/gic-v3-its: Plug allocation race for devices sharing a DevID
- usb: phy: am335x: fix race condition in _probe
- usb: dwc3: gadget: Handle 0 xfer length for OUT EP
- usb: gadget: udc: net2272: Fix bitwise and boolean operations
- usb: gadget: musb: fix short isoc packets with inventra dma
- staging: speakup: fix tty-operation NULL derefs
- scsi: cxlflash: Prevent deadlock when adapter probe fails
- scsi: aic94xx: fix module loading
- cpu/hotplug: Fix "SMT disabled by BIOS" detection for KVM
- perf/x86/intel/uncore: Add Node ID mask
- x86/MCE: Initialize mce.bank in the case of a fatal error in
mce_no_way_out()
- perf/core: Don't WARN() for impossible ring-buffer sizes
- perf tests evsel-tp-sched: Fix bitwise operator
- serial: fix race between flush_to_ldisc and tty_open
- serial: 8250_pci: Make PCI class test non fatal
- IB/hfi1: Add limit test for RC/UC send via loopback
- perf/x86/intel: Delay memory deallocation until x86_pmu_dead_cpu()
- ath9k: dynack: make ewma estimation faster
- ath9k: dynack: check da->enabled first in sampling routines
- devres: Align data[] to ARCH_KMALLOC_MINALIGN
- genirq/affinity: Spread IRQs to all available NUMA nodes
- wil6210: fix memory leak in wil_find_tx_bcast_2
- fpga: altera-cvp: fix 'bad IO access' on x86_64
- drm/amd/display: calculate stream->phy_pix_clk before clock mapping
- net: aquantia: return 'err' if set MPI_DEINIT state fails
- perf: arm_spe: handle devm_kasprintf() failure
- xtensa: xtfpga.dtsi: fix dtc warnings about SPI
- media: imx274: select REGMAP_I2C
- drm/amdgpu/powerplay: fix clock stretcher limits on polaris (v2)
- tipc: fix node keep alive interval calculation
- mmc: meson-mx-sdio: check devm_kasprintf for failure
- mmc: sdhci-omap: Fix timeout checks
- mmc: jz4740: Get CD/WP GPIOs from descriptors
- usb: renesas_usbhs: add support for RZ/G2E
- i2c: sh_mobile: Add support for r8a774c0 (RZ/G2E)
- livepatch: check kzalloc return values
- usb: musb: dsps: fix runtime pm for peripheral mode
- perf header: Fix up argument to ctime()
- drm/amd/display: Add retry to read ddc_clock pin
- Bluetooth: hci_bcm: Handle deferred probing for the clock supply
- mlx5: update timecounter at least twice per counter overflow
- drm/amd/display: validate extended dongle caps
- perf build: Don't unconditionally link the libbfd feature test to -liberty
and -lz
- PCI: imx: Enable MSI from downstream components
- arm64/sve: ptrace: Fix SVE_PT_REGS_OFFSET definition
- kernel/kcov.c: mark write_comp_data() as notrace
- xfs: Fix xqmstats offsets in /proc/fs/xfs/xqmstat
- xfs: Fix error code in 'xfs_ioc_getbmap()'
- xfs: fix shared extent data corruption due to missing cow reservation
- xfs: fix transient reference count error in xfs_buf_resubmit_failed_buffers
- xfs: delalloc -> unwritten COW fork allocation can go wrong
- fs/xfs: fix f_ffree value for statfs when project quota is set
- lib/test_rhashtable: Make test_insert_dup() allocate its hash table
dynamically
- net: dsa: Fix lockdep false positive splat
- Revert "net: phy: marvell: avoid pause mode on SGMII-to-Copper for 88e151x"
- ALSA: hda/realtek - Fix lose hp_pins for disable auto mute
- serial: sh-sci: Do not free irqs that have already been freed
- mtd: rawnand: gpmi: fix MX28 bus master lockup problem
- iio: adc: axp288: Fix TS-pin handling
- iio: chemical: atlas-ph-sensor: correct IIO_TEMP values to millicelsius
- signal: Always notice exiting tasks
- signal: Better detection of synchronous signals
- misc: vexpress: Off by one in vexpress_syscfg_exec()
- samples: mei: use /dev/mei0 instead of /dev/mei
- debugfs: fix debugfs_rename parameter checking
- tracing: uprobes: Fix typo in pr_fmt string
- mips: cm: reprime error cause
- MIPS: OCTEON: don't set octeon_dma_bar_type if PCI is disabled
- MIPS: VDSO: Include $(ccflags-vdso) in o32,n32 .lds builds
- ARM: iop32x/n2100: fix PCI IRQ mapping
- ARM: tango: Improve ARCH_MULTIPLATFORM compatibility
- mac80211: ensure that mgmt tx skbs have tailroom for encryption
- drm/modes: Prevent division by zero htotal
- drm/vmwgfx: Fix setting of dma masks
- drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user
- HID: debug: fix the ring buffer implementation
- libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive()
- xfrm: refine validation of template and selector families
- batman-adv: Avoid WARN on net_device without parent in netns
- batman-adv: Force mac header to start of data on xmit
- uio: Reduce return paths from uio_write()
- uio: Prevent device destruction while fds are open
- uio: change to use the mutex lock instead of the spin lock
- uio: fix crash after the device is unregistered
- uio: fix wrong return value from uio_mmap()
- uio: fix possible circular locking dependency
- mtd: Make sure mtd->erasesize is valid even if the partition is of size 0
- libata: Add NOLPM quirk for SAMSUNG MZ7TE512HMHP-000L1 SSD
- mips: loongson64: remove unreachable(), fix loongson_poweroff().
- SUNRPC: Always drop the XPRT_LOCK on XPRT_CLOSE_WAIT
* HP ProBook 470 G5, LED's in Hotkeys f5, f8 and f11 without function
(LP: #1811254) // Bionic update: upstream stable patchset 2019-07-23
(LP: #1837664)
- ALSA: hda - Add mute LED support for HP ProBook 470 G5
* Bionic update: upstream stable patchset 2019-07-22 (LP: #1837477)
- pinctrl: meson: fix pull enable register calculation
- powerpc: Fix COFF zImage booting on old powermacs
- powerpc/mm: Fix linux page tables build with some configs
- HID: ite: Add USB id match for another ITE based keyboard rfkill key quirk
- ARM: imx: update the cpu power up timing setting on i.mx6sx
- ARM: dts: imx7d-nitrogen7: Fix the description of the Wifi clock
- Input: restore EV_ABS ABS_RESERVED
- checkstack.pl: fix for aarch64
- xfrm: Fix error return code in xfrm_output_one()
- xfrm: Fix bucket count reported to userspace
- xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force clears
the dst_entry.
- netfilter: seqadj: re-load tcp header pointer after possible head
reallocation
- scsi: bnx2fc: Fix NULL dereference in error handling
- Input: omap-keypad - fix idle configuration to not block SoC idle states
- Input: synaptics - enable RMI on ThinkPad T560
- ibmvnic: Fix non-atomic memory allocation in IRQ context
- ieee802154: ca8210: fix possible u8 overflow in ca8210_rx_done
- i40e: fix mac filter delete when setting mac address
- netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel
- netfilter: nat: can't use dst_hold on noref dst
- bnx2x: Clear fip MAC when fcoe offload support is disabled
- bnx2x: Remove configured vlans as part of unload sequence.
- bnx2x: Send update-svid ramrod with retry/poll flags enabled
- scsi: target: iscsi: cxgbit: add missing spin_lock_init()
- x86, hyperv: remove PCI dependency
- drivers: net: xgene: Remove unnecessary forward declarations
- w90p910_ether: remove incorrect __init annotation
- SUNRPC: Fix a race with XPRT_CONNECTING
- qed: Fix an error code qed_ll2_start_xmit()
- net: macb: fix random memory corruption on RX with 64-bit DMA
- net: macb: fix dropped RX frames due to a race
- lan78xx: Resolve issue with changing MAC address
- vxge: ensure data0 is initialized in when fetching firmware version
information
- mac80211: free skb fraglist before freeing the skb
- kbuild: fix false positive warning/error about missing libelf
- virtio: fix test build after uio.h change
- gpio: mvebu: only fail on missing clk if pwm is actually to be used
- Input: synaptics - enable SMBus for HP EliteBook 840 G4
- net: netxen: fix a missing check and an uninitialized use
- qmi_wwan: Fix qmap header retrieval in qmimux_rx_fixup
- serial/sunsu: fix refcount leak
- scsi: zfcp: fix posting too many status read buffers leading to adapter
shutdown
- scsi: lpfc: do not set queue->page_count to 0 if pc_sli4_params.wqpcnt is
invalid
- tools: fix cross-compile var clobbering
- zram: fix double free backing device
- hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined
- mm, devm_memremap_pages: mark devm_memremap_pages() EXPORT_SYMBOL_GPL
- mm, devm_memremap_pages: kill mapping "System RAM" support
- mm, hmm: use devm semantics for hmm_devmem_{add, remove}
- mm, hmm: mark hmm_devmem_{add, add_resource} EXPORT_SYMBOL_GPL
- mm, swap: fix swapoff with KSM pages
- sunrpc: fix cache_head leak due to queued request
- powerpc: avoid -mno-sched-epilog on GCC 4.9 and newer
- powerpc: Disable -Wbuiltin-requires-header when setjmp is used
- ftrace: Build with CPPFLAGS to get -Qunused-arguments
- kbuild: add -no-integrated-as Clang option unconditionally
- kbuild: consolidate Clang compiler flags
- Makefile: Export clang toolchain variables
- powerpc/boot: Set target when cross-compiling for clang
- raid6/ppc: Fix build for clang
- ALSA: cs46xx: Potential NULL dereference in probe
- ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit()
- ALSA: usb-audio: Fix an out-of-bound read in create_composite_quirks
- dlm: fixed memory leaks after failed ls_remove_names allocation
- dlm: possible memory leak on error path in create_lkb()
- dlm: lost put_lkb on error path in receive_convert() and receive_unlock()
- dlm: memory leaks on error path in dlm_user_request()
- gfs2: Get rid of potential double-freeing in gfs2_create_inode
- b43: Fix error in cordic routine
- selinux: policydb - fix byte order and alignment issues
- scripts/kallsyms: filter arm64's __efistub_ symbols
- arm64: drop linker script hack to hide __efistub_ symbols
- arm64: relocatable: fix inconsistencies in linker script and options
- powerpc/tm: Set MSR[TS] just prior to recheckpoint
- 9p/net: put a lower bound on msize
- rxe: fix error completion wr_id and qp_num
- iommu/vt-d: Handle domain agaw being less than iommu agaw
- sched/fair: Fix infinite loop in update_blocked_averages() by reverting
a9e7f6544b9c
- ceph: don't update importing cap's mseq when handing cap export
- genwqe: Fix size check
- intel_th: msu: Fix an off-by-one in attribute store
- power: supply: olpc_battery: correct the temperature units
- lib: fix build failure in CONFIG_DEBUG_VIRTUAL test
- drm/vc4: Set ->is_yuv to false when num_planes == 1
- bnx2x: Fix NULL pointer dereference in bnx2x_del_all_vlans() on some hw
- tools: power/acpi, revert to LD = gcc
- ARM: dts: sun8i: a83t: bananapi-m3: increase vcc-pd voltage to 3.3V
- arm64: dts: mt7622: fix no more console output on rfb1
- ibmvnic: Convert reset work item mutex to spin lock
- ixgbe: Fix race when the VF driver does a reset
- net: macb: add missing barriers when reading descriptors
- powerpc: remove old GCC version checks
- Fix failure path in alloc_pid()
- block: deactivate blk_stat timer in wbt_disable_default()
- PCI / PM: Allow runtime PM without callback functions
- leds: pwm: silently error out on EPROBE_DEFER
- Revert "powerpc/tm: Unset MSR[TS] if not recheckpointing"
- iio: dac: ad5686: fix bit shift read register
- video: fbdev: pxafb: Fix "WARNING: invalid free of devm_ allocated data"
- drivers/perf: hisi: Fixup one DDRC PMU register offset
- drm/nouveau/drm/nouveau: Check rc from drm_dp_mst_topology_mgr_resume()
- drm/rockchip: psr: do not dereference encoder before it is null checked.
- CIFS: Fix adjustment of credits for MTU requests
- CIFS: Do not hide EINTR after sending network packets
- cifs: Fix potential OOB access of lock element array
- usb: cdc-acm: send ZLP for Telit 3G Intel based modems
- USB: storage: don't insert sane sense for SPC3+ when bad sense specified
- USB: storage: add quirk for SMI SM3350
- USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB
- slab: alien caches must not be initialized if the allocation of the alien
cache failed
- mm: page_mapped: don't assume compound page is huge or THP
- mm, memcg: fix reclaim deadlock with writeback
- ACPI: power: Skip duplicate power resource references in _PRx
- ACPI / PMIC: xpower: Fix TS-pin current-source handling
- i2c: dev: prevent adapter retries and timeout being set as minus value
- drm/fb-helper: Partially bring back workaround for bugs of SDL 1.2
- rbd: don't return 0 on unmap if RBD_DEV_FLAG_REMOVING is set
- ext4: make sure enough credits are reserved for dioread_nolock writes
- ext4: fix a potential fiemap/page fault deadlock w/ inline_data
- ext4: avoid kernel warning when writing the superblock to a dead device
- ext4: track writeback errors using the generic tracking infrastructure
- KVM: arm/arm64: Fix VMID alloc race by reverting to lock-less
- Btrfs: fix deadlock when using free space tree due to block group creation
- mm/usercopy.c: no check page span for stack objects
- vfio/type1: Fix unmap overflow off-by-one
- drm/amdgpu: Don't ignore rc from drm_dp_mst_topology_mgr_resume()
- ext4: fix special inode number checks in __ext4_iget()
- Btrfs: fix access to available allocation bits when starting balance
- Btrfs: use nofs context when initializing security xattrs to avoid deadlock
- tty/ldsem: Wake up readers after timed out down_write()
- can: gw: ensure DLC boundaries after CAN frame modification
- mmc: sdhci-msm: Disable CDR function on TX
- media: em28xx: Fix misplaced reset of dev->v4l::field_count
- scsi: target: iscsi: cxgbit: fix csk leak
- scsi: target: iscsi: cxgbit: fix csk leak
- arm64/kvm: consistently handle host HCR_EL2 flags
- arm64: Don't trap host pointer auth use to EL2
- ipv6: fix kernel-infoleak in ipv6_local_error()
- net: bridge: fix a bug on using a neighbour cache entry without checking its
state
- packet: Do not leak dev refcounts on error exit
- bonding: update nest level on unlink
- ip: on queued skb use skb_header_pointer instead of pskb_may_pull
- crypto: caam - fix zero-length buffer DMA mapping
- crypto: authencesn - Avoid twice completion call in decrypt path
- crypto: bcm - convert to use crypto_authenc_extractkeys()
- btrfs: wait on ordered extents on abort cleanup
- Yama: Check for pid death before checking ancestry
- scsi: core: Synchronize request queue PM status only on successful resume
- scsi: sd: Fix cache_type_store()
- crypto: talitos - reorder code in talitos_edesc_alloc()
- crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK
- mips: fix n32 compat_ipc_parse_version
- MIPS: lantiq: Fix IPI interrupt handling
- OF: properties: add missing of_node_put
- mfd: tps6586x: Handle interrupts on suspend
- media: v4l: ioctl: Validate num_planes for debug messages
- pstore/ram: Avoid allocation and leak of platform data
- arm64: kaslr: ensure randomized quantities are clean to the PoC
- Disable MSI also when pcie-octeon.pcie_disable on
- omap2fb: Fix stack memory disclosure
- media: vivid: fix error handling of kthread_run
- media: vivid: set min width/height to a value > 0
- bpf: in __bpf_redirect_no_mac pull mac only if present
- LSM: Check for NULL cred-security on free
- media: vb2: vb2_mmap: move lock up
- sunrpc: handle ENOMEM in rpcb_getport_async
- netfilter: ebtables: account ebt_table_info to kmemcg
- selinux: fix GPF on invalid policy
- blockdev: Fix livelocks on loop device
- sctp: allocate sctp_sockaddr_entry with kzalloc
- tipc: fix uninit-value in tipc_nl_compat_link_reset_stats
- tipc: fix uninit-value in tipc_nl_compat_bearer_enable
- tipc: fix uninit-value in tipc_nl_compat_link_set
- tipc: fix uninit-value in tipc_nl_compat_name_table_dump
- tipc: fix uninit-value in tipc_nl_compat_doit
- block/loop: Don't grab "struct file" for vfs_getattr() operation.
- loop: drop caches if offset or block_size are changed
- drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock
- media: vb2: be sure to unlock mutex on errors
- nbd: Use set_blocksize() to set device blocksize
- tun: publish tfile after it's fully initialized
- crypto: sm3 - fix undefined shift by >= width of value
- MIPS: BCM47XX: Setup struct device for the SoC
- RDMA/vmw_pvrdma: Return the correct opcode when creating WR
- arm64: dts: marvell: armada-ap806: reserve PSCI area
- ipv6: make icmp6_send() robust against null skb->dev
- block: use rcu_work instead of call_rcu to avoid sleep in softirq
- selftests: Fix test errors related to lib.mk khdr target
- ipv6: Consider sk_bound_dev_if when binding a socket to a v4 mapped address
- mlxsw: spectrum: Disable lag port TX before removing it
- mlxsw: spectrum_switchdev: Set PVID correctly during VLAN deletion
- net, skbuff: do not prefer skb allocation fails early
- qmi_wwan: add MTU default to qmap network interface
- ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses
- net: dsa: mv88x6xxx: mv88e6390 errata
- gpio: pl061: Move irq_chip definition inside struct pl061
- platform/x86: asus-wmi: Tell the EC the OS will handle the display off
hotkey
- e1000e: allow non-monotonic SYSTIM readings
- writeback: don't decrement wb->refcnt if !wb->bdi
- serial: set suppress_bind_attrs flag only if builtin
- ALSA: oxfw: add support for APOGEE duet FireWire
- x86/mce: Fix -Wmissing-prototypes warnings
- MIPS: SiByte: Enable swiotlb for SWARM, LittleSur and BigSur
- arm64: perf: set suppress_bind_attrs flag to true
- usb: gadget: udc: renesas_usb3: add a safety connection way for
forced_b_device
- selinux: always allow mounting submounts
- rxe: IB_WR_REG_MR does not capture MR's iova field
- jffs2: Fix use of uninitialized delayed_work, lockdep breakage
- clk: imx: make mux parent strings const
- pstore/ram: Do not treat empty buffers as valid
- powerpc/xmon: Fix invocation inside lock region
- powerpc/pseries/cpuidle: Fix preempt warning
- media: firewire: Fix app_info parameter type in avc_ca{,_app}_info
- media: venus: core: Set dma maximum segment size
- net: call sk_dst_reset when set SO_DONTROUTE
- scsi: target: use consistent left-aligned ASCII INQUIRY data
- selftests: do not macro-expand failed assertion expressions
- clk: imx6q: reset exclusive gates on init
- arm64: Fix minor issues with the dcache_by_line_op macro
- kconfig: fix file name and line number of warn_ignored_character()
- kconfig: fix memory leak when EOF is encountered in quotation
- mmc: atmel-mci: do not assume idle after atmci_request_end
- btrfs: improve error handling of btrfs_add_link
- tty/serial: do not free trasnmit buffer page under port lock
- perf intel-pt: Fix error with config term "pt=0"
- perf svghelper: Fix unchecked usage of strncpy()
- perf parse-events: Fix unchecked usage of strncpy()
- netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is set
- dm crypt: use u64 instead of sector_t to store iv_offset
- dm kcopyd: Fix bug causing workqueue stalls
- tools lib subcmd: Don't add the kernel sources to the include path
- dm snapshot: Fix excessive memory usage and workqueue stalls
- quota: Lock s_umount in exclusive mode for Q_XQUOTA{ON,OFF} quotactls.
- clocksource/drivers/integrator-ap: Add missing of_node_put()
- ALSA: bebob: fix model-id of unit for Apogee Ensemble
- sysfs: Disable lockdep for driver bind/unbind files
- IB/usnic: Fix potential deadlock
- scsi: smartpqi: correct lun reset issues
- scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown()
- scsi: megaraid: fix out-of-bound array accesses
- ocfs2: fix panic due to unrecovered local alloc
- mm/page-writeback.c: don't break integrity writeback on ->writepage() error
- mm/swap: use nr_node_ids for avail_lists in swap_info_struct
- mm, proc: be more verbose about unstable VMA flags in /proc/<pid>/smaps
- cifs: allow disabling insecure dialects in the config
- cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs)
- PCI: dwc: Move interrupt acking into the proper callback
- ipmi:ssif: Fix handling of multi-part return messages
- net: clear skb->tstamp in bridge forwarding path
- netfilter: ipset: Allow matching on destination MAC address for mac and
ipmac sets
- drm/amdkfd: fix interrupt spin lock
- of: overlay: add missing of_node_put() after add new node to changeset
- drm/atomic-helper: Complete fake_commit->flip_done potentially earlier
- ASoC: pcm3168a: Don't disable pcm3168a when CONFIG_PM defined
- efi/libstub: Disable some warnings for x86{,_64}
- media: uvcvideo: Refactor teardown of uvc on USB disconnect
- arm64: kasan: Increase stack size for KASAN_EXTRA
- bpf: relax verifier restriction on BPF_MOV | BPF_ALU
- perf vendor events intel: Fix Load_Miss_Real_Latency on SKL/SKX
- netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine
- netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine
- x86/topology: Use total_cpus for max logical packages calculation
- perf stat: Avoid segfaults caused by negated options
- perf tools: Add missing sigqueue() prototype for systems lacking it
- perf tools: Add missing open_memstream() prototype for systems lacking it
- dm: Check for device sector overflow if CONFIG_LBDAF is not set
- userfaultfd: clear flag if remap event not enabled
* Bionic update: upstream stable patchset 2019-07-19 (LP: #1837257)
- pinctrl: sunxi: a83t: Fix IRQ offset typo for PH11
- userfaultfd: check VM_MAYWRITE was set after verifying the uffd is
registered
- arm64: dma-mapping: Fix FORCE_CONTIGUOUS buffer clearing
- MMC: OMAP: fix broken MMC on OMAP15XX/OMAP5910/OMAP310
- mmc: sdhci: fix the timeout check window for clock and reset
- ARM: mmp/mmp2: fix cpu_is_mmp2() on mmp2-dt
- dm thin: send event about thin-pool state change _after_ making it
- dm cache metadata: verify cache has blocks in
blocks_are_clean_separate_dirty()
- tracing: Fix memory leak in set_trigger_filter()
- tracing: Fix memory leak of instance function hash filters
- powerpc/msi: Fix NULL pointer access in teardown code
- drm/nouveau/kms: Fix memory leak in nv50_mstm_del()
- drm/i915/execlists: Apply a full mb before execution for Braswell
- drm/amdgpu: update SMC firmware image for polaris10 variants
- x86/build: Fix compiler support check for CONFIG_RETPOLINE
- locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath()
- locking/qspinlock: Ensure node is initialised before updating prev->next
- locking/qspinlock: Bound spinning on pending->locked transition in slowpath
- locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock'
- locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath
- locking/qspinlock: Remove duplicate clear_pending() function from PV code
- locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue
- locking/qspinlock: Re-order code
- locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound
- locking/qspinlock, x86: Provide liveness guarantee
- mac80211: don't WARN on bad WMM parameters from buggy APs
- mac80211: Fix condition validating WMM IE
- IB/hfi1: Remove race conditions in user_sdma send path
- locking/qspinlock: Fix build for anonymous union in older GCC compilers
- mac80211_hwsim: fix module init error paths for netlink
- Input: hyper-v - fix wakeup from suspend-to-idle
- scsi: libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset
- scsi: vmw_pscsi: Rearrange code to avoid multiple calls to free_irq during
unload
- x86/earlyprintk/efi: Fix infinite loop on some screen widths
- drm/msm: Grab a vblank reference when waiting for commit_done
- ARC: io.h: Implement reads{x}()/writes{x}()
- bonding: fix 802.3ad state sent to partner when unbinding slave
- bpf: Fix verifier log string check for bad alignment.
- nfs: don't dirty kernel pages read by direct-io
- SUNRPC: Fix a potential race in xprt_connect()
- sbus: char: add of_node_put()
- drivers/sbus/char: add of_node_put()
- drivers/tty: add missing of_node_put()
- ide: pmac: add of_node_put()
- drm/msm: Fix error return checking
- clk: mvebu: Off by one bugs in cp110_of_clk_get()
- clk: mmp: Off by one in mmp_clk_add()
- Input: synaptics - enable SMBus for HP 15-ay000
- Input: omap-keypad - fix keyboard debounce configuration
- libata: whitelist all SAMSUNG MZ7KM* solid-state disks
- mv88e6060: disable hardware level MAC learning
- net/mlx4_en: Fix build break when CONFIG_INET is off
- ARM: 8814/1: mm: improve/fix ARM v7_dma_inv_range() unaligned address
handling
- ARM: 8815/1: V7M: align v7m_dma_inv_range() with v7 counterpart
- ethernet: fman: fix wrong of_node_put() in probe function
- drm/ast: Fix connector leak during driver unload
- vhost/vsock: fix reset orphans race with close timeout
- mlxsw: spectrum_switchdev: Fix VLAN device deletion via ioctl
- i2c: axxia: properly handle master timeout
- i2c: scmi: Fix probe error on devices with an empty SMB0001 ACPI device node
- i2c: uniphier: fix violation of tLOW requirement for Fast-mode
- i2c: uniphier-f: fix violation of tLOW requirement for Fast-mode
- nvmet-rdma: fix response use after free
- rtc: snvs: Add timeouts to avoid kernel lockups
- bpf, arm: fix emit_ldx_r and emit_mov_i using TMP_REG_1
- scsi: raid_attrs: fix unused variable warning
- staging: olpc_dcon: add a missing dependency
- ARM: dts: qcom-apq8064-arrow-sd-600eval fix graph_endpoint warning
- mmc: core: use mrq->sbc when sending CMD23 for RPMB
- dm: call blk_queue_split() to impose device limits on bios
- media: vb2: don't call __vb2_queue_cancel if vb2_start_streaming failed
- powerpc: Look for "stdout-path" when setting up legacy consoles
- dm zoned: Fix target BIO completion handling
- block: fix infinite loop if the device loses discard capability
- ASoC: sta32x: set ->component pointer in private struct
- perf record: Synthesize features before events in pipe mode
- USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data
- xhci: Don't prevent USB2 bus suspend in state check intended for USB3 only
- USB: xhci: fix 'broken_suspend' placement in struct xchi_hcd
- USB: serial: option: add GosunCn ZTE WeLink ME3630
- USB: serial: option: add HP lt4132
- USB: serial: option: add Simcom SIM7500/SIM7600 (MBIM mode)
- USB: serial: option: add Fibocom NL668 series
- USB: serial: option: add Telit LN940 series
- scsi: sd: use mempool for discard special page
- mmc: core: Reset HPI enabled state during re-init and in case of errors
- mmc: core: Allow BKOPS and CACHE ctrl even if no HPI support
- mmc: core: Use a minimum 1600ms timeout when enabling CACHE ctrl
- mmc: omap_hsmmc: fix DMA API warning
- gpio: max7301: fix driver for use with CONFIG_VMAP_STACK
- gpiolib-acpi: Only defer request_irq for GpioInt ACPI event handlers
- posix-timers: Fix division by zero bug
- kvm: x86: Add AMD's EX_CFG to the list of ignored MSRs
- Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels
- x86/mtrr: Don't copy uninitialized gentry fields back to userspace
- panic: avoid deadlocks in re-entrant console drivers
- iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT to old firmwares
- iwlwifi: add new cards for 9560, 9462, 9461 and killer series
- ubifs: Handle re-linking of inodes correctly while recovery
- mm: don't miss the last page because of round-off error
- proc/sysctl: don't return ENOMEM on lookup when a table is unregistering
- i2c: rcar: check bus state before reinitializing
- drm/amd/display: Fix 6x4K displays light-up on Vega20 (v2)
- drm/msm: Fix task dump in gpu recovery
- drm/msm: fix handling of cmdstream offset
- net: aquantia: fix rx checksum offload bits
- liquidio: read sc->iq_no before release sc
- drm/msm/hdmi: Enable HPD after HDMI IRQ is set up
- macvlan: return correct error value
- bpf: check pending signals while verifying programs
- ARM: 8816/1: dma-mapping: fix potential uninitialized return
- tools/testing/nvdimm: Align test resources to 128M
- Btrfs: fix missing delayed iputs on unmount
- ax25: fix a use-after-free in ax25_fillin_cb()
- gro_cell: add napi_disable in gro_cells_destroy
- ibmveth: fix DMA unmap error in ibmveth_xmit_start error path
- ieee802154: lowpan_header_create check must check daddr
- ipv6: explicitly initialize udp6_addr in udp_sock_create6()
- ipv6: tunnels: fix two use-after-free
- isdn: fix kernel-infoleak in capi_unlocked_ioctl
- net: macb: restart tx after tx used bit read
- net: phy: Fix the issue that netif always links up after resuming
- netrom: fix locking in nr_find_socket()
- net/wan: fix a double free in x25_asy_open_tty()
- packet: validate address length
- packet: validate address length if non-zero
- ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()
- qmi_wwan: Added support for Telit LN940 series
- sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
- tcp: fix a race in inet_diag_dump_icsk()
- tipc: fix a double kfree_skb()
- vhost: make sure used idx is seen before log in vhost_add_used_n()
- VSOCK: Send reset control packet when socket is partially bound
- xen/netfront: tolerate frags with no data
- net/mlx5: Typo fix in del_sw_hw_rule
- net/mlx5e: RX, Fix wrong early return in receive queue poll
- mlxsw: core: Increase timeout during firmware flash process
- net/mlx5e: Remove the false indication of software timestamping support
- tipc: use lock_sock() in tipc_sk_reinit()
- tipc: compare remote and local protocols in tipc_udp_enable()
- qmi_wwan: Added support for Fibocom NL668 series
- qmi_wwan: Add support for Fibocom NL678 series
- net/smc: fix TCP fallback socket release
- sock: Make sock->sk_stamp thread-safe
- IB/hfi1: Incorrect sizing of sge for PIO will OOPs
- mtd: atmel-quadspi: disallow building on ebsa110
- ALSA: hda: add mute LED support for HP EliteBook 840 G4
- ALSA: fireface: fix for state to fetch PCM frames
- ALSA: firewire-lib: fix wrong handling payload_length as payload_quadlet
- ALSA: firewire-lib: fix wrong assignment for 'out_packet_without_header'
tracepoint
- ALSA: firewire-lib: use the same print format for 'without_header'
tracepoints
- ALSA: hda/tegra: clear pending irq handlers
- USB: serial: pl2303: add ids for Hewlett-Packard HP POS pole displays
- USB: serial: option: add Fibocom NL678 series
- usb: r8a66597: Fix a possible concurrency use-after-free bug in
r8a66597_endpoint_disable()
- staging: wilc1000: fix missing read_write setting when reading data
- qmi_wwan: apply SET_DTR quirk to the SIMCOM shared device ID
- s390/pci: fix sleeping in atomic during hotplug
- x86/speculation/l1tf: Drop the swap storage limit restriction when l1tf=off
- KVM: x86: Use jmp to invoke kvm_spurious_fault() from .fixup
- KVM: nVMX: Free the VMREAD/VMWRITE bitmaps if alloc_kvm_area() fails
- platform-msi: Free descriptors in platform_msi_domain_free()
- perf pmu: Suppress potential format-truncation warning
- ext4: add ext4_sb_bread() to disambiguate ENOMEM cases
- ext4: fix possible use after free in ext4_quota_enable
- ext4: missing unlock/put_page() in ext4_try_to_write_inline_data()
- ext4: fix EXT4_IOC_GROUP_ADD ioctl
- ext4: include terminating u32 in size of xattr entries when expanding inodes
- ext4: force inode writes when nfsd calls commit_metadata()
- ext4: check for shutdown and r/o file system in ext4_write_inode()
- spi: bcm2835: Fix race on DMA termination
- spi: bcm2835: Fix book-keeping of DMA termination
- spi: bcm2835: Avoid finishing transfer prematurely in IRQ mode
- clk: rockchip: fix typo in rk3188 spdif_frac parent
- crypto: cavium/nitrox - fix a DMA pool free failure
- cgroup: fix CSS_TASK_ITER_PROCS
- cdc-acm: fix abnormal DATA RX issue for Mediatek Preloader.
- Btrfs: fix fsync of files with multiple hard links in new directories
- f2fs: fix validation of the block count in sanity_check_raw_super
- serial: uartps: Fix interrupt mask issue to handle the RX interrupts
properly
- media: vivid: free bitmap_cap when updating std/timings/etc.
- media: v4l2-tpg: array index could become negative
- MIPS: math-emu: Write-protect delay slot emulation pages
- MIPS: c-r4k: Add r4k_blast_scache_node for Loongson-3
- MIPS: Ensure pmd_present() returns false after pmd_mknotpresent()
- MIPS: Align kernel load address to 64KB
- MIPS: Expand MIPS32 ASIDs to 64 bits
- MIPS: OCTEON: mark RGMII interface disabled on OCTEON III
- CIFS: Fix error mapping for SMB2_LOCK command which caused OFD lock problem
- arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1
- arm/arm64: KVM: vgic: Force VM halt when changing the active state of GICv3
PPIs/SGIs
- rtc: m41t80: Correct alarm month range with RTC reads
- tpm: tpm_i2c_nuvoton: use correct command duration for TPM 2.x
- spi: bcm2835: Unbreak the build of esoteric configs
- MIPS: Only include mmzone.h when CONFIG_NEED_MULTIPLE_NODES=y
- KVM: X86: Fix NULL deref in vcpu_scan_ioapic
- futex: Cure exit race
- x86/mm: Fix decoy address handling vs 32-bit builds
- x86/intel_rdt: Ensure a CPU remains online for the region's pseudo-locking
sequence
- mm: add mm_pxd_folded checks to pgtable_bytes accounting functions
- mm: make the __PAGETABLE_PxD_FOLDED defines non-empty
- mm: introduce mm_[p4d|pud|pmd]_folded
- ip: validate header length on virtual device xmit
- net: clear skb->tstamp in forwarding paths
- net/hamradio/6pack: use mod_timer() to rearm timers
- tipc: check tsk->group in tipc_wait_for_cond()
- tipc: check group dests after tipc_wait_for_cond()
- ipv6: frags: Fix bogus skb->sk in reassembled packets
- ALSA: hda/realtek: Enable audio jacks of ASUS UX391UA with ALC294
- ALSA: hda/realtek: Enable the headset mic auto detection for ASUS laptops
- ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook
Clapper
- ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook
Gnawty
- Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G
- arm64: KVM: Make VHE Stage-2 TLB invalidation operations non-interruptible
- DRM: UDL: get rid of useless vblank initialization
- clocksource/drivers/arc_timer: Utilize generic sched_clock
- ocxl: Fix endiannes bug in ocxl_link_update_pe()
- ocxl: Fix endiannes bug in read_afu_name()
- ext4: add verifier check for symlink with append/immutable flags
- ext4: avoid declaring fs inconsistent due to invalid file handles
- clk: sunxi-ng: Use u64 for calculation of NM rate
- crypto: testmgr - add AES-CFB tests
- btrfs: dev-replace: go back to suspended state if target device is missing
- btrfs: run delayed items before dropping the snapshot
- powerpc/tm: Unset MSR[TS] if not recheckpointing
- f2fs: read page index before freeing
- f2fs: sanity check of xattr entry size
- media: cec: keep track of outstanding transmits
- media: imx274: fix stack corruption in imx274_read_reg
- media: vb2: check memory model for VIDIOC_CREATE_BUFS
- MIPS: Fix a R10000_LLSC_WAR logic in atomic.h
- KVM: arm/arm64: vgic: Do not cond_resched_lock() with IRQs disabled
- KVM: arm/arm64: vgic: Cap SPIs to the VM-defined maximum
* alsa/hda: neither mute led nor mic-mute led work on several Lenovo laptops
(LP: #1837963)
- SAUCE: ALSA: hda - Add a conexant codec entry to let mute led work
[ Ubuntu: 4.15.0-58.64 ]
* unable to handle kernel NULL pointer dereference at 000000000000002c (IP:
iget5_locked+0x9e/0x1f0) (LP: #1838982)
- Revert "ovl: set I_CREATING on inode being created"
- Revert "new primitive: discard_new_inode()"
[ Ubuntu: 4.15.0-57.63 ]
* CVE-2019-1125
- x86/cpufeatures: Carve out CQM features retrieval
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word
- x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations
- x86/speculation: Enable Spectre v1 swapgs mitigations
- x86/entry/64: Use JMP instead of JMPQ
- x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS
* Packaging resync (LP: #1786013)
- update dkms package versions
[ Ubuntu: 4.15.0-56.62 ]
* bionic/linux: 4.15.0-56.62 -proposed tracker (LP: #1837626)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] update helper scripts
* CVE-2019-2101
- media: uvcvideo: Fix 'type' check leading to overflow
* hibmc-drm Causes Unreadable Display for Huawei amd64 Servers (LP: #1762940)
- [Config] Set CONFIG_DRM_HISI_HIBMC to arm64 only
- SAUCE: Make CONFIG_DRM_HISI_HIBMC depend on ARM64
* Bionic: support for Solarflare X2542 network adapter (sfc driver)
(LP: #1836635)
- sfc: make mem_bar a function rather than a constant
- sfc: support VI strides other than 8k
- sfc: add Medford2 (SFC9250) PCI Device IDs
- sfc: improve PTP error reporting
- sfc: update EF10 register definitions
- sfc: populate the timer reload field
- sfc: update MCDI protocol headers
- sfc: support variable number of MAC stats
- sfc: expose FEC stats on Medford2
- sfc: expose CTPIO stats on NICs that support them
- sfc: basic MCDI mapping of 25/50/100G link speeds
- sfc: support the ethtool ksettings API properly so that 25/50/100G works
- sfc: add bits for 25/50/100G supported/advertised speeds
- sfc: remove tx and MCDI handling from NAPI budget consideration
- sfc: handle TX timestamps in the normal data path
- sfc: add function to determine which TX timestamping method to use
- sfc: use main datapath for HW timestamps if available
- sfc: only enable TX timestamping if the adapter is licensed for it
- sfc: MAC TX timestamp handling on the 8000 series
- sfc: on 8000 series use TX queues for TX timestamps
- sfc: only advertise TX timestamping if we have the license for it
- sfc: simplify RX datapath timestamping
- sfc: support separate PTP and general timestamping
- sfc: support second + quarter ns time format for receive datapath
- sfc: support Medford2 frequency adjustment format
- sfc: add suffix to large constant in ptp
- sfc: mark some unexported symbols as static
- sfc: update MCDI protocol headers
- sfc: support FEC configuration through ethtool
- sfc: remove ctpio_dmabuf_start from stats
- sfc: stop the TX queue before pushing new buffers
* [18.04 FEAT] zKVM: Add hardware CPU Model - kernel part (LP: #1836153)
- KVM: s390: add debug logging for cpu model subfunctions
- KVM: s390: implement subfunction processor calls
- KVM: s390: add vector enhancements facility 2 to cpumodel
- KVM: s390: add vector BCD enhancements facility to cpumodel
- KVM: s390: add MSA9 to cpumodel
- KVM: s390: provide query function for instructions returning 32 byte
- KVM: s390: add enhanced sort facilty to cpu model
- KVM: s390: add deflate conversion facilty to cpu model
- KVM: s390: enable MSA9 keywrapping functions depending on cpu model
* Intel ethernet I219 has slow RX speed (LP: #1836152)
- SAUCE: e1000e: add workaround for possible stalled packet
- SAUCE: e1000e: disable force K1-off feature
* Intel ethernet I219 may wrongly detect connection speed as 10Mbps
(LP: #1836177)
- SAUCE: e1000e: Make watchdog use delayed work
* Unhide Nvidia HDA audio controller (LP: #1836308)
- PCI: Enable NVIDIA HDA controllers
* selftests: Remove broken Power9 paste tests and fix compilation issue
(LP: #1836715)
- selftests/powerpc: Remove Power9 paste tests
- selftests/powerpc: Fix Makefiles for headers_install change
* ixgbe{vf} - Physical Function gets IRQ when VF checks link state
(LP: #1836760)
- ixgbevf: Use cached link state instead of re-reading the value for ethtool
* Fix nf_conntrack races when dealing with same origin requests in NAT
environments (LP: #1836816)
- netfilter: nf_conntrack: resolve clash for matching conntracks
- netfilter: nf_nat: skip nat clash resolution for same-origin entries
* CVE-2018-5383
- crypto: ecdh - add public key verification test
* sched: Prevent CPU lockups when task groups take longer than the period
(LP: #1836971)
- sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup
* depmod may prefer unsigned l-r-m nvidia modules to signed modules
(LP: #1834479)
- [Packaging] dkms-build--nvidia-N -- clean up unsigned ko files
- [Packaging] Add update-version-dkms
- update dkms package versions
* Build Nvidia drivers in conjunction with kernel (LP: #1764792) // zfs/spl
build in conjunction with the kernel from DKMS source (LP: #1807378)
- [Packaging] dkms-build--nvidia-* -- convert to generic -N form
* zfs/spl build in conjunction with the kernel from DKMS source (LP: #1807378)
- [Packaging] dkms -- dkms package build packaging support
- [Packaging] dkms -- build zfs/spl packages
- [Packaging] dkms -- drop zfs/spl source code from kernel
* Build Nvidia drivers in conjunction with kernel (LP: #1764792)
- [Packaging] dkms -- introduce dkms package versions
- [Packaging] dkms -- add per package post-process step
- [Packaging] dkms -- switch to a consistent build prefix length and strip
- [Packaging] dkms-build -- support building against packages in PPAs
- [Packaging] dkms-build: do not redownload files on subsequent passes
- [Packaging] dkms-build -- add support for unversioned overrides
- [Packaging] dkms-build -- backport latest version from disco
- [Packaging] nvidia -- build and sign nvidia packages and ship signatures
- [Packaging] nvidia -- make nvidia package version explicit
* CVE-2019-13233
- x86/insn-eval: Fix use-after-free access to LDT entry
* kernel panic using CIFS share in smb2_push_mandatory_locks() (LP: #1795659)
- CIFS: keep FileInfo handle live during oplock break
* cifs set_oplock buffer overflow in strcat (LP: #1824981)
- cifs: fix strcat buffer overflow and reduce raciness in
smb21_set_oplock_level()
* CVE-2019-13272
- ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME
* Bionic update: upstream stable patchset 2019-07-18 (LP: #1837161)
- Kbuild: suppress packed-not-aligned warning for default setting only
- disable stringop truncation warnings for now
- test_hexdump: use memcpy instead of strncpy
- kobject: Replace strncpy with memcpy
- ALSA: intel_hdmi: Use strlcpy() instead of strncpy()
- unifdef: use memcpy instead of strncpy
- kernfs: Replace strncpy with memcpy
- ip_tunnel: Fix name string concatenate in __ip_tunnel_create()
- scsi: bfa: convert to strlcpy/strlcat
- kdb: use memmove instead of overlapping memcpy
- iser: set sector for ambiguous mr status errors
- uprobes: Fix handle_swbp() vs. unregister() + register() race once more
- MIPS: ralink: Fix mt7620 nd_sd pinmux
- mips: fix mips_get_syscall_arg o32 check
- IB/mlx5: Avoid load failure due to unknown link width
- drm/ast: Fix incorrect free on ioregs
- drm: set is_master to 0 upon drm_new_set_master() failure
- drm/meson: Enable fast_io in meson_dw_hdmi_regmap_config
- drm/meson: Fix OOB memory accesses in meson_viu_set_osd_lut()
- ALSA: trident: Suppress gcc string warning
- kgdboc: Fix restrict error
- kgdboc: Fix warning with module build
- svm: Add mutex_lock to protect apic_access_page_done on AMD systems
- drm/msm: fix OF child-node lookup
- Input: xpad - quirk all PDP Xbox One gamepads
- Input: synaptics - add PNP ID for ThinkPad P50 to SMBus
- Input: matrix_keypad - check for errors from of_get_named_gpio()
- Input: cros_ec_keyb - fix button/switch capability reports
- Input: elan_i2c - add ELAN0620 to the ACPI table
- Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR
- Input: elan_i2c - add support for ELAN0621 touchpad
- btrfs: tree-checker: Don't check max block group size as current max chunk
size limit is unreliable
- ARC: change defconfig defaults to ARCv2
- arc: [devboards] Add support of NFSv3 ACL
- reset: make device_reset_optional() really optional
- reset: remove remaining WARN_ON() in <linux/reset.h>
- mm: hide incomplete nr_indirectly_reclaimable in /proc/zoneinfo
- net: qed: use correct strncpy() size
- tipc: use destination length for copy string
- arm64: ftrace: Fix to enable syscall events on arm64
- sched, trace: Fix prev_state output in sched_switch tracepoint
- tracing/fgraph: Fix set_graph_function from showing interrupts
- drm/meson: Fixes for drm_crtc_vblank_on/off support
- scsi: lpfc: fix block guard enablement on SLI3 adapters
- media: omap3isp: Unregister media device as first
- iommu/vt-d: Fix NULL pointer dereference in prq_event_thread()
- brcmutil: really fix decoding channel info for 160 MHz bandwidth
- iommu/ipmmu-vmsa: Fix crash on early domain free
- can: rcar_can: Fix erroneous registration
- test_firmware: fix error return getting clobbered
- HID: input: Ignore battery reported by Symbol DS4308
- batman-adv: Use explicit tvlv padding for ELP packets
- batman-adv: Expand merged fragment buffer for full packet
- amd/iommu: Fix Guest Virtual APIC Log Tail Address Register
- bnx2x: Assign unique DMAE channel number for FW DMAE transactions.
- qed: Fix PTT leak in qed_drain()
- qed: Fix reading wrong value in loop condition
- net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command
- net/mlx4_core: Fix uninitialized variable compilation warning
- net/mlx4: Fix UBSAN warning of signed integer overflow
- gpio: mockup: fix indicated direction
- mtd: rawnand: qcom: Namespace prefix some commands
- mtd: spi-nor: Fix Cadence QSPI page fault kernel panic
- qed: Fix bitmap_weight() check
- qed: Fix QM getters to always return a valid pq
- net: faraday: ftmac100: remove netif_running(netdev) check before disabling
interrupts
- iommu/vt-d: Use memunmap to free memremap
- flexfiles: use per-mirror specified stateid for IO
- ibmvnic: Fix RX queue buffer cleanup
- team: no need to do team_notify_peers or team_mcast_rejoin when disabling
port
- net: amd: add missing of_node_put()
- usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device
- usb: appledisplay: Add 27" Apple Cinema Display
- USB: check usb_get_extra_descriptor for proper size
- ALSA: hda: Add support for AMD Stoney Ridge
- ALSA: pcm: Fix starvation on down_write_nonblock()
- ALSA: pcm: Call snd_pcm_unlink() conditionally at closing
- ALSA: pcm: Fix interval evaluation with openmin/max
- ALSA: hda/realtek - Fix speaker output regression on Thinkpad T570
- SUNRPC: Fix leak of krb5p encode pages
- dmaengine: dw: Fix FIFO size for Intel Merrifield
- dmaengine: cppi41: delete channel from pending list when stop channel
- ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE
- xhci: Prevent U1/U2 link pm states if exit latency is too long
- f2fs: fix to do sanity check with block address in main area v2
- swiotlb: clean up reporting
- Staging: lustre: remove two build warnings
- staging: atomisp: remove "fun" strncpy warning
- cifs: Fix separator when building path from dentry
- staging: rtl8712: Fix possible buffer overrun
- Revert commit ef9209b642f "staging: rtl8723bs: Fix indenting errors and an
off-by-one mistake in core/rtw_mlme_ext.c"
- drm/amdgpu: update mc firmware image for polaris12 variants
- drm/amdgpu/gmc8: update MC firmware for polaris
- tty: serial: 8250_mtk: always resume the device in probe.
- kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var()
- libnvdimm, pfn: Pad pfn namespaces relative to other regions
- mac80211: Clear beacon_int in ieee80211_do_stop
- mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext
- mac80211: fix reordering of buffered broadcast packets
- mac80211: ignore NullFunc frames in the duplicate detection
- qed: Fix rdma_info structure allocation
- drm/amdgpu: Add amdgpu "max bpc" connector property (v2)
- drivers/net/ethernet/qlogic/qed/qed_rdma.h: fix typo
- gpio: pxa: fix legacy non pinctrl aware builds again
- tc-testing: tdc.py: ignore errors when decoding stdout/stderr
- NFSv4: Fix a NFSv4 state manager deadlock
- USB: serial: console: fix reported terminal settings
- ALSA: usb-audio: Add SMSL D1 to quirks for native DSD support
- ALSA: hda/realtek: ALC286 mic and headset-mode fixups for Acer Aspire
U27-880
- ALSA: hda/realtek - Add support for Acer Aspire C24-860 headset mic
- ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4660G
- ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4860G/Z6860G
- media: dvb-pll: don't re-validate tuner frequencies
- parisc: Enable -ffunction-sections for modules on 32-bit kernel
- Revert "x86/e820: put !E820_TYPE_RAM regions into memblock.reserved"
- drm/lease: Send a distinct uevent
- drm/msm: Move fence put to where failure occurs
- drm/amdgpu/gmc8: always load MC firmware in the driver
- drm/i915: Downgrade Gen9 Plane WM latency error
- x86/efi: Allocate e820 buffer before calling efi_exit_boot_service
- cfg80211: Fix busy loop regression in ieee80211_ie_split_ric()
- ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changes
- ipv6: Check available headroom in ip6_xmit() even without options
- neighbour: Avoid writing before skb->head in neigh_hh_output()
- ipv6: sr: properly initialize flowi6 prior passing to ip6_route_output
- net: 8139cp: fix a BUG triggered by changing mtu with network traffic
- net/mlx4_core: Correctly set PFC param if global pause is turned off.
- net/mlx4_en: Change min MTU size to ETH_MIN_MTU
- net: phy: don't allow __set_phy_supported to add unsupported modes
- net: Prevent invalid access to skb->prev in __qdisc_drop_all
- rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
- sctp: kfree_rcu asoc
- tcp: Do not underestimate rwnd_limited
- tcp: fix NULL ref in tail loss probe
- tun: forbid iface creation with rtnl ops
- virtio-net: keep vnet header zeroed after processing XDP
- ARM: OMAP2+: prm44xx: Fix section annotation on
omap44xx_prm_enable_io_wakeup
- ASoC: rsnd: fixup clock start checker
- staging: rtl8723bs: Fix the return value in case of error in
'rtw_wx_read32()'
- ARM: dts: logicpd-somlv: Fix interrupt on mmc3_dat1
- ARM: OMAP1: ams-delta: Fix possible use of uninitialized field
- sysv: return 'err' instead of 0 in __sysv_write_inode
- selftests: add script to stress-test nft packet path vs. control plane
- netfilter: nf_tables: fix use-after-free when deleting compat expressions
- hwmon (ina2xx) Fix NULL id pointer in probe()
- ASoC: wm_adsp: Fix dma-unsafe read of scratch registers
- s390/cpum_cf: Reject request for sampling in event initialization
- hwmon: (ina2xx) Fix current value calculation
- ASoC: omap-abe-twl6040: Fix missing audio card caused by deferred probing
- ASoC: dapm: Recalculate audio map forcely when card instantiated
- netfilter: xt_hashlimit: fix a possible memory leak in htable_create()
- hwmon: (w83795) temp4_type has writable permission
- perf tools: Restore proper cwd on return from mnt namespace
- PCI: imx6: Fix link training status detection in link up check
- objtool: Fix double-free in .cold detection error path
- objtool: Fix segfault in .cold detection with -ffunction-sections
- ARM: dts: at91: sama5d2: use the divided clock for SMC
- Btrfs: send, fix infinite loop due to directory rename dependencies
- RDMA/mlx5: Fix fence type for IB_WR_LOCAL_INV WR
- RDMA/rdmavt: Fix rvt_create_ah function signature
- ASoC: omap-mcbsp: Fix latency value calculation for pm_qos
- ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE
- ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE
- exportfs: do not read dentry after free
- bpf: fix check of allowed specifiers in bpf_trace_printk
- ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf
- USB: omap_udc: use devm_request_irq()
- USB: omap_udc: fix crashes on probe error and module removal
- USB: omap_udc: fix omap_udc_start() on 15xx machines
- USB: omap_udc: fix USB gadget functionality on Palm Tungsten E
- USB: omap_udc: fix rejection of out transfers when DMA is used
- drm/meson: add support for 1080p25 mode
- netfilter: ipv6: Preserve link scope traffic original oif
- IB/mlx5: Fix page fault handling for MW
- KVM: x86: fix empty-body warnings
- x86/kvm/vmx: fix old-style function declaration
- net: thunderx: fix NULL pointer dereference in nic_remove
- usb: gadget: u_ether: fix unsafe list iteration
- netfilter: nf_tables: deactivate expressions in rule replecement routine
- igb: fix uninitialized variables
- ixgbe: recognize 1000BaseLX SFP modules as 1Gbps
- net: hisilicon: remove unexpected free_netdev
- drm/amdgpu: Add delay after enable RLC ucode
- drm/ast: fixed reading monitor EDID not stable issue
- xen: xlate_mmu: add missing header to fix 'W=1' warning
- Revert "xen/balloon: Mark unallocated host memory as UNUSABLE"
- pstore/ram: Correctly calculate usable PRZ bytes
- fscache, cachefiles: remove redundant variable 'cache'
- nvme: flush namespace scanning work just before removing namespaces
- ACPI/IORT: Fix iort_get_platform_device_domain() uninitialized pointer value
- ocfs2: fix deadlock caused by ocfs2_defrag_extent()
- mm/page_alloc.c: fix calculation of pgdat->nr_zones
- hfs: do not free node before using
- hfsplus: do not free node before using
- debugobjects: avoid recursive calls with kmemleak
- ocfs2: fix potential use after free
- printk: Add console owner and waiter logic to load balance console writes
- printk: Hide console waiter logic into helpers
- printk: Never set console_may_schedule in console_trylock()
- printk: Wake klogd when passing console_lock owner
- flexfiles: enforce per-mirror stateid only for v4 DSes
- staging: speakup: Replace strncpy with memcpy
- ALSA: fireface: fix reference to wrong register for clock configuration
- IB/hfi1: Fix an out-of-bounds access in get_hw_stats
- tcp: lack of available data can also cause TSO defer
- Revert "net/ibm/emac: wrong bit is used for STA control"
- tools: bpftool: prevent infinite loop in get_fdinfo()
- ASoC: sun8i-codec: fix crash on module removal
- ASoC: acpi: fix: continue searching when machine is ignored
- RDMA/bnxt_re: Fix system hang when registration with L2 driver fails
- RDMA/bnxt_re: Avoid accessing the device structure after it is freed
- RDMA/hns: Bugfix pbl configuration for rereg mr
- thunderbolt: Prevent root port runtime suspend during NVM upgrade
- netfilter: add missing error handling code for register functions
- netfilter: nat: fix double register in masquerade modules
- cachefiles: Fix an assertion failure when trying to update a failed object
- fscache: Fix race in fscache_op_complete() due to split atomic_sub & read
- pvcalls-front: fixes incorrect error handling
- nvme: warn when finding multi-port subsystems without multipathing enabled
- kernel/kcov.c: mark funcs in __sanitizer_cov_trace_pc() as notrace
- ALSA: hda/realtek: ALC294 mic and headset-mode fixups for ASUS X542UN
- ALSA: hda/realtek: Enable audio jacks of ASUS UX533FD with ALC294
- ALSA: hda/realtek: Enable audio jacks of ASUS UX433FN/UX333FA with ALC294
* Bionic update: upstream stable patchset 2019-07-17 (LP: #1836968)
- flow_dissector: do not dissect l4 ports for fragments
- ibmvnic: fix accelerated VLAN handling
- ip_tunnel: don't force DF when MTU is locked
- ipv6: Fix PMTU updates for UDP/raw sockets in presence of VRF
- net-gro: reset skb->pkt_type in napi_reuse_skb()
- sctp: not allow to set asoc prsctp_enable by sockopt
- tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths
- tuntap: fix multiqueue rx
- net: systemport: Protect stop from timeout
- net: qualcomm: rmnet: Fix incorrect assignment of real_dev
- net: dsa: microchip: initialize mutex before use
- sctp: fix strchange_flags name for Stream Change Event
- net: phy: mdio-gpio: Fix working over slow can_sleep GPIOs
- sctp: not increase stream's incnt before sending addstrm_in request
- mlxsw: spectrum: Fix IP2ME CPU policer configuration
- net: smsc95xx: Fix MTU range
- usbnet: smsc95xx: disable carrier check while suspending
- inet: frags: better deal with smp races
- ARM: dts: r8a7791: Correct critical CPU temperature
- ARM: dts: r8a7793: Correct critical CPU temperature
- net: bcmgenet: protect stop from timeout
- tcp: Fix SOF_TIMESTAMPING_RX_HARDWARE to use the latest timestamp during TCP
coalescing
- tipc: don't assume linear buffer when reading ancillary data
- tipc: fix link re-establish failure
- net/mlx5e: Claim TC hw offloads support only under a proper build config
- net/mlx5e: Adjust to max number of channles when re-attaching
- net/mlx5e: Fix selftest for small MTUs
- l2tp: fix a sock refcnt leak in l2tp_tunnel_register
- net/mlx5e: IPoIB, Reset QP after channels are closed
- net: dsa: mv88e6xxx: Fix clearing of stats counters
- net: phy: realtek: fix RTL8201F sysfs name
- sctp: define SCTP_SS_DEFAULT for Stream schedulers
- rxrpc: Fix lockup due to no error backoff after ack transmit error
- cifs: don't dereference smb_file_target before null check
- cifs: fix return value for cifs_listxattr
- arm64: kprobe: make page to RO mode when allocate it
- ixgbe: fix MAC anti-spoofing filter after VFLR
- reiserfs: propagate errors from fill_with_dentries() properly
- hfs: prevent btree data loss on root split
- hfsplus: prevent btree data loss on root split
- um: Give start_idle_thread() a return code
- drm/edid: Add 6 bpc quirk for BOE panel.
- platform/x86: intel_telemetry: report debugfs failure
- clk: fixed-rate: fix of_node_get-put imbalance
- perf symbols: Set PLT entry/header sizes properly on Sparc
- fs/exofs: fix potential memory leak in mount option parsing
- clk: samsung: exynos5420: Enable PERIS clocks for suspend
- apparmor: Fix uninitialized value in aa_split_fqname
- x86/earlyprintk: Add a force option for pciserial device
- platform/x86: acerhdf: Add BIOS entry for Gateway LT31 v1.3307
- arm64: percpu: Initialize ret in the default case
- s390/vdso: add missing FORCE to build targets
- netfilter: ipset: list:set: Decrease refcount synchronously on deletion and
replace
- netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net
- s390/mm: Fix ERROR: "__node_distance" undefined!
- netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment()
- netfilter: xt_IDLETIMER: add sysfs filename checking routine
- s390/qeth: fix HiperSockets sniffer
- hwmon: (ibmpowernv) Remove bogus __init annotations
- Revert "drm/exynos/decon5433: implement frame counter"
- clk: fixed-factor: fix of_node_get-put imbalance
- lib/raid6: Fix arm64 test build
- s390/perf: Change CPUM_CF return code in event init function
- sched/core: Take the hotplug lock in sched_init_smp()
- i40e: restore NETIF_F_GSO_IPXIP[46] to netdev features
- qed: Fix memory/entry leak in qed_init_sp_request()
- qed: Fix blocking/unlimited SPQ entries leak
- qed: Fix potential memory corruption
- net: stmmac: Fix RX packet size > 8191
- SUNRPC: drop pointless static qualifier in xdr_get_next_encode_buffer()
- ACPI / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM
- perf machine: Add machine__is() to identify machine arch
- perf tools: Fix kernel_start for PTI on x86
- perf machine: Add nr_cpus_avail()
- perf machine: Workaround missing maps for x86 PTI entry trampolines
- perf test code-reading: Fix perf_env setup for PTI entry trampolines
- media: v4l: event: Add subscription to list before calling "add" operation
- MIPS: OCTEON: cavium_octeon_defconfig: re-enable OCTEON USB driver
- uio: Fix an Oops on load
- usb: cdc-acm: add entry for Hiro (Conexant) modem
- usb: quirks: Add delay-init quirk for Corsair K70 LUX RGB
- misc: atmel-ssc: Fix section annotation on atmel_ssc_get_driver_data
- USB: misc: appledisplay: add 20" Apple Cinema Display
- ACPI / platform: Add SMB0001 HID to forbidden_id_list
- HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges
- libceph: fall back to sendmsg for slab pages
- drm/i915: Replace some PAGE_SIZE with I915_GTT_PAGE_SIZE
- perf unwind: Take pgoff into account when reporting elf to libdwfl
- netfilter: bridge: define INT_MIN & INT_MAX in userspace
- s390/decompressor: add missing FORCE to build targets
- Revert "HID: add NOGET quirk for Eaton Ellipse MAX UPS"
- HID: alps: allow incoming reports when only the trackstick is opened
- s390/mm: fix mis-accounting of pgtable_bytes
- drm/amd/display: Stop leaking planes
- drm/amd/amdgpu/dm: Fix dm_dp_create_fake_mst_encoder()
- ceph: quota: fix null pointer dereference in quota check
- nvme: make sure ns head inherits underlying device limits
- i2c: omap: Enable for ARCH_K3
- net: aquantia: fix potential IOMMU fault after driver unbind
- net: aquantia: fixed enable unicast on 32 macvlan
- net: aquantia: invalid checksumm offload implementation
- mtd: rawnand: atmel: fix OF child-node lookup
- efi/libstub: arm: support building with clang
- ARM: 8766/1: drop no-thumb-interwork in EABI mode
- ARM: 8767/1: add support for building ARM kernel with clang
- bus: arm-cci: remove unnecessary unreachable()
- ARM: trusted_foundations: do not use naked function
- usb: core: Fix hub port connection events lost
- usb: dwc3: gadget: fix ISOC TRB type on unaligned transfers
- usb: dwc3: gadget: Properly check last unaligned/zero chain TRB
- usb: dwc3: core: Clean up ULPI device
- xhci: Add check for invalid byte size error when UAS devices are connected.
- ALSA: oss: Use kvzalloc() for local buffer allocations
- MAINTAINERS: Add Sasha as a stable branch maintainer
- mmc: sdhci-pci: Try "cd" for card-detect lookup before using NULL
- gpio: don't free unallocated ida on gpiochip_add_data_with_key() error path
- iwlwifi: mvm: support sta_statistics() even on older firmware
- iwlwifi: mvm: fix regulatory domain update when the firmware starts
- iwlwifi: mvm: don't use SAR Geo if basic SAR is not used
- brcmfmac: fix reporting support for 160 MHz channels
- tools/power/cpupower: fix compilation with STATIC=true
- v9fs_dir_readdir: fix double-free on p9stat_read error
- selinux: Add __GFP_NOWARN to allocation at str_read()
- Input: synaptics - avoid using uninitialized variable when probing
- bfs: add sanity check at bfs_fill_super()
- sctp: clear the transport of some out_chunk_list chunks in
sctp_assoc_rm_peer
- gfs2: Don't leave s_fs_info pointing to freed memory in init_sbd
- llc: do not use sk_eat_skb()
- mm: don't warn about large allocations for slab
- mm/memory.c: recheck page table entry with page table lock held
- IB/core: Perform modify QP on real one
- usb: xhci: Prevent bus suspend if a port connect change or polling state is
detected
- drm/ast: change resolution may cause screen blurred
- drm/ast: fixed cursor may disappear sometimes
- can: dev: can_get_echo_skb(): factor out non sending code to
__can_get_echo_skb()
- can: dev: __can_get_echo_skb(): replace struct can_frame by canfd_frame to
access frame length
- can: dev: __can_get_echo_skb(): Don't crash the kernel if can_priv::echo_skb
is accessed out of bounds
- can: dev: __can_get_echo_skb(): print error message, if trying to echo non
existing skb
- can: rx-offload: introduce can_rx_offload_get_echo_skb() and
can_rx_offload_queue_sorted() functions
- can: rx-offload: rename can_rx_offload_irq_queue_err_skb() to
can_rx_offload_queue_tail()
- can: raw: check for CAN FD capable netdev in raw_sendmsg()
- can: hi311x: Use level-triggered interrupt
- IB/hfi1: Eliminate races in the SDMA send error path
- pinctrl: meson: fix pinconf bias disable
- KVM: PPC: Move and undef TRACE_INCLUDE_PATH/FILE
- cpufreq: imx6q: add return value check for voltage scale
- rtc: pcf2127: fix a kmemleak caused in pcf2127_i2c_gather_write
- crypto: simd - correctly take reqsize of wrapped skcipher into account
- floppy: fix race condition in __floppy_read_block_0()
- powerpc/io: Fix the IO workarounds code to work with Radix
- perf/x86/intel/uncore: Add more IMC PCI IDs for KabyLake and CoffeeLake CPUs
- SUNRPC: Fix a bogus get/put in generic_key_to_expire()
- kdb: Use strscpy with destination buffer size
- powerpc/numa: Suppress "VPHN is not supported" messages
- tmpfs: make lseek(SEEK_DATA/SEK_HOLE) return ENXIO with a negative offset
- mm, page_alloc: check for max order in hot path
- arm64: remove no-op -p linker flag
- ubi: fastmap: Check each mapping only once
- Input: xpad - add PDP device id 0x02a4
- Input: xpad - fix some coding style issues
- Input: xpad - avoid using __set_bit() for capabilities
- Input: xpad - add support for Xbox1 PDP Camo series gamepad
- iwlwifi: fix wrong WGDS_WIFI_DATA_SIZE
- kbuild: allow to use GCC toolchain not in Clang search path
- PCI: endpoint: Populate func_no before calling pci_epc_add_epf()
- i40iw: Fix memory leak in error path of create QP
- clk: samsung: exynos5250: Add missing clocks for FIMC LITE SYSMMU devices
- ARM: dts: exynos: Fix invalid node referenced by i2c20 alias in Peach Pit
and Pi
- include/linux/pfn_t.h: force '~' to be parsed as an unary operator
- tty: wipe buffer.
- tty: wipe buffer if not echoing data
- lan78xx: Read MAC address from DT if present
- s390/mm: Check for valid vma before zapping in gmap_discard
- rcu: Make need_resched() respond to urgent RCU-QS needs
- net: ieee802154: 6lowpan: fix frag reassembly
- EVM: Add support for portable signature format
- ima: re-introduce own integrity cache lock
- ima: re-initialize iint->atomic_flags
- xhci: Fix leaking USB3 shared_hcd at xhci removal
- Documentation/security-bugs: Clarify treatment of embargoed information
- Documentation/security-bugs: Postpone fix publication in exceptional cases
- ACPICA: AML interpreter: add region addresses in global list during
initialization
- fsnotify: generalize handling of extra event flags
- pinctrl: meson: fix gxbb ao pull register bits
- pinctrl: meson: fix gxl ao pull register bits
- pinctrl: meson: fix meson8 ao pull register bits
- pinctrl: meson: fix meson8b ao pull register bits
- riscv: add missing vdso_install target
- media: ov5640: fix wrong binning value in exposure calculation
- media: ov5640: fix auto controls values when switching to manual mode
- mm/huge_memory: rename freeze_page() to unmap_page()
- mm/huge_memory.c: reorder operations in __split_huge_page_tail()
- mm/huge_memory: splitting set mapping+index before unfreeze
- mm/huge_memory: fix lockdep complaint on 32-bit i_size_read()
- mm/khugepaged: collapse_shmem() stop if punched or truncated
- mm/khugepaged: fix crashes due to misaccounted holes
- mm/khugepaged: collapse_shmem() remember to clear holes
- mm/khugepaged: minor reorderings in collapse_shmem()
- mm/khugepaged: collapse_shmem() without freezing new_page
- mm/khugepaged: collapse_shmem() do not crash on Compound
- media: em28xx: Fix use-after-free when disconnecting
- ubi: Initialize Fastmap checkmapping correctly
- libceph: store ceph_auth_handshake pointer in ceph_connection
- libceph: factor out __prepare_write_connect()
- libceph: factor out __ceph_x_decrypt()
- libceph: factor out encrypt_authorizer()
- libceph: add authorizer challenge
- libceph: implement CEPHX_V2 calculation mode
- net/tls: Fixed return value when tls_complete_pending_work() fails
- wil6210: missing length check in wmi_set_ie
- btrfs: validate type when reading a chunk
- btrfs: Verify that every chunk has corresponding block group at mount time
- btrfs: tree-checker: Add checker for dir item
- btrfs: tree-checker: use %zu format string for size_t
- btrfs: tree-check: reduce stack consumption in check_dir_item
- btrfs: tree-checker: Verify block_group_item
- btrfs: tree-checker: Detect invalid and empty essential trees
- btrfs: Check that each block group has corresponding chunk at mount time
- btrfs: tree-checker: Check level for leaves and nodes
- btrfs: tree-checker: Fix misleading group system information
- f2fs: check blkaddr more accuratly before issue a bio
- f2fs: enhance sanity_check_raw_super() to avoid potential overflow
- f2fs: clean up with is_valid_blkaddr()
- f2fs: introduce and spread verify_blkaddr
- f2fs: fix to do sanity check with secs_per_zone
- f2fs: fix to do sanity check with user_block_count
- f2fs: fix to do sanity check with node footer and iblocks
- f2fs: fix to do sanity check with block address in main area
- f2fs: fix to do sanity check with i_extra_isize
- f2fs: fix to do sanity check with cp_pack_start_sum
- net: skb_scrub_packet(): Scrub offload_fwd_mark
- net: thunderx: set xdp_prog to NULL if bpf_prog_add fails
- virtio-net: disable guest csum during XDP set
- virtio-net: fail XDP set if guest csum is negotiated
- net: thunderx: set tso_hdrs pointer to NULL in nicvf_free_snd_queue
- packet: copy user buffers before orphan or clone
- rapidio/rionet: do not free skb before reading its length
- usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2
- kvm: mmu: Fix race in emulated page table writes
- KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall
- xtensa: enable coprocessors that are being flushed
- xtensa: fix coprocessor context offset definitions
- xtensa: fix coprocessor part of ptrace_{get,set}xregs
- Btrfs: ensure path name is null terminated at btrfs_control_ioctl
- btrfs: relocation: set trans to be NULL after ending transaction
- PCI: layerscape: Fix wrong invocation of outbound window disable accessor
- arm64: dts: rockchip: Fix PCIe reset polarity for rk3399-puma-haikou.
- x86/fpu: Disable bottom halves while loading FPU registers
- perf/x86/intel: Move branch tracing setup to the Intel-specific source file
- perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts()
- fs: fix lost error code in dio_complete
- ALSA: wss: Fix invalid snd_free_pages() at error path
- ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write
- ALSA: control: Fix race between adding and removing a user element
- ALSA: sparc: Fix invalid snd_free_pages() at error path
- ALSA: hda/realtek - Support ALC300
- ALSA: hda/realtek - fix headset mic detection for MSI MS-B171
- ext2: fix potential use after free
- ARM: dts: rockchip: Remove @0 from the veyron memory node
- dmaengine: at_hdmac: fix memory leak in at_dma_xlate()
- dmaengine: at_hdmac: fix module unloading
- staging: vchiq_arm: fix compat VCHIQ_IOC_AWAIT_COMPLETION
- staging: rtl8723bs: Add missing return for cfg80211_rtw_get_station
- usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series
- Revert "usb: dwc3: gadget: skip Set/Clear Halt when invalid"
- iio:st_magn: Fix enable device after trigger
- lib/test_kmod.c: fix rmmod double free
- mm: use swp_offset as key in shmem_replace_page()
- misc: mic/scif: fix copy-paste error in scif_create_remote_lookup
- binder: fix race that allows malicious free of live buffer
- libceph: weaken sizeof check in ceph_x_verify_authorizer_reply()
- libceph: check authorizer reply/challenge length before reading
- f2fs: fix missing up_read
- net: don't keep lonely packets forever in the gro hash
- net: phy: add workaround for issue where PHY driver doesn't bind to the
device
- KVM: nVMX/nSVM: Fix bug which sets vcpu->arch.tsc_offset to L1 tsc_offset
- udf: Allow mounting volumes with incorrect identification strings
- btrfs: Always try all copies when reading extent buffers
- Btrfs: fix rare chances for data loss when doing a fast fsync
- Btrfs: fix race between enabling quotas and subvolume creation
- perf/x86/intel: Disallow precise_ip on BTS events
- ALSA: hda: Add ASRock H81M-HDS to the power_save blacklist
- ALSA: hda: Add ASRock N68C-S UCC the power_save blacklist
- function_graph: Create function_graph_enter() to consolidate architecture
code
- ARM: function_graph: Simplify with function_graph_enter()
- microblaze: function_graph: Simplify with function_graph_enter()
- x86/function_graph: Simplify with function_graph_enter()
- powerpc/function_graph: Simplify with function_graph_enter()
- sh/function_graph: Simplify with function_graph_enter()
- sparc/function_graph: Simplify with function_graph_enter()
- parisc: function_graph: Simplify with function_graph_enter()
- s390/function_graph: Simplify with function_graph_enter()
- arm64: function_graph: Simplify with function_graph_enter()
- MIPS: function_graph: Simplify with function_graph_enter()
- function_graph: Make ftrace_push_return_trace() static
- function_graph: Use new curr_ret_depth to manage depth instead of
curr_ret_stack
- function_graph: Have profiler use curr_ret_stack and not depth
- function_graph: Move return callback before update of curr_ret_stack
- function_graph: Reverse the order of pushing the ret_stack and the callback
- ext2: initialize opts.s_mount_opt as zero before using it
- ASoC: intel: cht_bsw_max98090_ti: Add quirk for boards using pmc_plt_clk_0
- staging: most: use format specifier "%s" in snprintf
- iio/hid-sensors: Fix IIO_CHAN_INFO_RAW returning wrong values for signed
numbers
- mm: cleancache: fix corruption on missed inode invalidation
* Bionic update: upstream stable patchset 2019-07-17 (LP: #1836968) //
CVE-2000-1134 // CVE-2007-3852 // CVE-2008-0525 // CVE-2009-0416 //
CVE-2011-4834 // CVE-2015-1838 // CVE-2015-7442 // CVE-2016-7489
- namei: allow restricted O_CREAT of FIFOs and regular files
* bcache: risk of data loss on I/O errors in backing or caching devices
(LP: #1829563)
- bcache: add CACHE_SET_IO_DISABLE to struct cache_set flags
- bcache: add stop_when_cache_set_failed option to backing device
- bcache: fix inaccurate io state for detached bcache devices
- bcache: add backing_request_endio() for bi_end_io
- bcache: add io_disable to struct cached_dev
- bcache: store disk name in struct cache and struct cached_dev
- bcache: count backing device I/O error for writeback I/O
- bcache: add wait_for_kthread_stop() in bch_allocator_thread()
- bcache: set dc->io_disable to true in conditional_stop_bcache_device()
- bcache: stop bcache device when backing device is offline
- bcache: fix ioctl in flash device
* Bionic update: upstream stable patchset 2019-07-16 (LP: #1836802)
- mtd: spi-nor: fsl-quadspi: fix read error for flash size larger than 16MB
- spi: bcm-qspi: switch back to reading flash using smaller chunks
- bcache: trace missed reading by cache_missed
- bcache: fix miss key refill->end in writeback
- hwmon: (pmbus) Fix page count auto-detection.
- jffs2: free jffs2_sb_info through jffs2_kill_sb()
- cpufreq: conservative: Take limits changes into account properly
- pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
- parisc: Fix address in HPMC IVA
- parisc: Fix map_pages() to not overwrite existing pte entries
- parisc: Fix exported address of os_hpmc handler
- ALSA: hda - Add quirk for ASUS G751 laptop
- ALSA: hda - Fix headphone pin config for ASUS G751
- ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905)
- ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops
- x86/xen: Fix boot loader version reported for PVH guests
- x86/corruption-check: Fix panic in memory_corruption_check() when boot
option without value is provided
- ARM: dts: exynos: Disable pull control for MAX8997 interrupts on Origen
- bpf: do not blindly change rlimit in reuseport net selftest
- Revert "perf tools: Fix PMU term format max value calculation"
- xfrm: policy: use hlist rcu variants on insert
- perf vendor events intel: Fix wrong filter_band* values for uncore events
- sched/fair: Fix the min_vruntime update logic in dequeue_entity()
- perf tools: Fix use of alternatives to find JDIR
- perf cpu_map: Align cpu map synthesized events properly.
- x86/fpu: Remove second definition of fpu in __fpu__restore_sig()
- net: qla3xxx: Remove overflowing shift statement
- selftests: ftrace: Add synthetic event syntax testcase
- i2c: rcar: cleanup DMA for all kinds of failure
- locking/lockdep: Fix debug_locks off performance problem
- ataflop: fix error handling during setup
- swim: fix cleanup on setup error
- nfp: devlink port split support for 1x100G CXP NIC
- tun: Consistently configure generic netdev params via rtnetlink
- s390/sthyi: Fix machine name validity indication
- hwmon: (pwm-fan) Set fan speed to 0 on suspend
- lightnvm: pblk: fix two sleep-in-atomic-context bugs
- spi: spi-ep93xx: Use dma_data_direction for ep93xx_spi_dma_{finish,prepare}
- perf tools: Free temporary 'sys' string in read_event_files()
- perf tools: Cleanup trace-event-info 'tdata' leak
- perf strbuf: Match va_{add,copy} with va_end
- cpupower: Fix coredump on VMWare
- mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01
- iwlwifi: pcie: avoid empty free RB queue
- iwlwifi: mvm: clear HW_RESTART_REQUESTED when stopping the interface
- x86/olpc: Indicate that legacy PC XO-1 platform should not register RTC
- ACPI / processor: Fix the return value of acpi_processor_ids_walk()
- cpufreq: dt: Try freeing static OPPs only if we have added them
- mtd: rawnand: atmel: Fix potential NULL pointer dereference
- signal: Introduce COMPAT_SIGMINSTKSZ for use in compat_sys_sigaltstack
- Bluetooth: btbcm: Add entry for BCM4335C0 UART bluetooth
- x86: boot: Fix EFI stub alignment
- pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux
- brcmfmac: fix for proper support of 160MHz bandwidth
- net: phy: phylink: ensure the carrier is off when starting phylink
- block, bfq: correctly charge and reset entity service in all cases
- kprobes: Return error if we fail to reuse kprobe instead of BUG_ON()
- ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers
- pinctrl: qcom: spmi-mpp: Fix drive strength setting
- pinctrl: spmi-mpp: Fix pmic_mpp_config_get() to be compliant
- pinctrl: ssbi-gpio: Fix pm8xxx_pin_config_get() to be compliant
- net: dsa: mv88e6xxx: Fix writing to a PHY page.
- iwlwifi: mvm: fix BAR seq ctrl reporting
- ixgbevf: VF2VF TCP RSS
- ath10k: schedule hardware restart if WMI command times out
- thermal: da9062/61: Prevent hardware access during system suspend
- cgroup, netclassid: add a preemption point to write_classid
- scsi: esp_scsi: Track residual for PIO transfers
- UAPI: ndctl: Fix g++-unsupported initialisation in headers
- KVM: nVMX: Clear reserved bits of #DB exit qualification
- scsi: megaraid_sas: fix a missing-check bug
- RDMA/core: Do not expose unsupported counters
- IB/ipoib: Clear IPCB before icmp_send
- RDMA/bnxt_re: Fix recursive lock warning in debug kernel
- usb: host: ohci-at91: fix request of irq for optional gpio
- PCI: mediatek: Fix mtk_pcie_find_port() endpoint/port matching logic
- tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/deactivated
- Drivers: hv: vmbus: Use cpumask_var_t for on-stack cpu mask
- VMCI: Resource wildcard match fixed
- PCI / ACPI: Enable wake automatically for power managed bridges
- usb: gadget: udc: atmel: handle at91sam9rl PMC
- ext4: fix argument checking in EXT4_IOC_MOVE_EXT
- MD: fix invalid stored role for a disk
- f2fs: fix to recover inode's i_flags during POR
- PCI/MSI: Warn and return error if driver enables MSI/MSI-X twice
- coresight: etb10: Fix handling of perf mode
- PCI: dwc: pci-dra7xx: Enable errata i870 for both EP and RC mode
- crypto: caam - fix implicit casts in endianness helpers
- usb: chipidea: Prevent unbalanced IRQ disable
- driver/dma/ioat: Call del_timer_sync() without holding prep_lock
- uio: ensure class is registered before devices
- scsi: lpfc: Correct soft lockup when running mds diagnostics
- scsi: lpfc: Correct race with abort on completion path
- f2fs: report error if quota off error during umount
- signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace
init
- mfd: menelaus: Fix possible race condition and leak
- dmaengine: dma-jz4780: Return error if not probed from DT
- IB/rxe: fix for duplicate request processing and ack psns
- ALSA: hda: Check the non-cached stream buffers more explicitly
- cpupower: Fix AMD Family 0x17 msr_pstate size
- f2fs: fix to account IO correctly
- ARM: dts: exynos: Remove "cooling-{min|max}-level" for CPU nodes
- arm: dts: exynos: Add missing cooling device properties for CPUs
- ARM: dts: exynos: Convert exynos5250.dtsi to opp-v2 bindings
- ARM: dts: exynos: Mark 1 GHz CPU OPP as suspend OPP on Exynos5250
- xen-swiotlb: use actually allocated size on check physical continuous
- tpm: Restore functionality to xen vtpm driver.
- xen/blkfront: avoid NULL blkfront_info dereference on device removal
- xen/balloon: Support xend-based toolstack
- xen: fix race in xen_qlock_wait()
- xen: make xen_qlock_wait() nestable
- xen/pvh: increase early stack size
- xen/pvh: don't try to unplug emulated devices
- libertas: don't set URB_ZERO_PACKET on IN USB transfer
- usbip:vudc: BUG kmalloc-2048 (Not tainted): Poison overwritten
- usb: gadget: udc: renesas_usb3: Fix b-device mode for "workaround"
- iwlwifi: mvm: check return value of rs_rate_from_ucode_rate()
- net/ipv4: defensive cipso option parsing
- dmaengine: ppc4xx: fix off-by-one build failure
- dmaengine: stm32-dma: fix incomplete configuration in cyclic mode
- libnvdimm: Hold reference on parent while scheduling async init
- libnvdimm, region: Fail badblocks listing for inactive regions
- ASoC: intel: skylake: Add missing break in skl_tplg_get_token()
- IB/mlx5: Fix MR cache initialization
- jbd2: fix use after free in jbd2_log_do_checkpoint()
- gfs2_meta: ->mount() can get NULL dev_name
- ext4: initialize retries variable in ext4_da_write_inline_data_begin()
- ext4: fix setattr project check in fssetxattr ioctl
- ext4: propagate error from dquot_initialize() in EXT4_IOC_FSSETXATTR
- ext4: fix use-after-free race in ext4_remount()'s error path
- EDAC, amd64: Add Family 17h, models 10h-2fh support
- EDAC, {i7core,sb,skx}_edac: Fix uncorrected error counting
- EDAC, skx_edac: Fix logical channel intermediate decoding
- ARM: dts: dra7: Fix up unaligned access setting for PCIe EP
- PCI/ASPM: Fix link_state teardown on device removal
- PCI: Add Device IDs for Intel GPU "spurious interrupt" quirk
- PCI: vmd: White list for fast interrupt handlers
- signal/GenWQE: Fix sending of SIGKILL
- signal: Guard against negative signal numbers in copy_siginfo_from_user32
- crypto: lrw - Fix out-of bounds access on counter overflow
- crypto: tcrypt - fix ghash-generic speed test
- mm: /proc/pid/smaps_rollup: fix NULL pointer deref in smaps_pte_range()
- ima: fix showing large 'violations' or 'runtime_measurements_count'
- hugetlbfs: dirty pages as they are added to pagecache
- mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly
- KVM: arm64: Fix caching of host MDCR_EL2 value
- kbuild: fix kernel/bounds.c 'W=1' warning
- iio: ad5064: Fix regulator handling
- iio: adc: imx25-gcq: Fix leak of device_node in mx25_gcq_setup_cfgs()
- iio: adc: at91: fix acking DRDY irq on simple conversions
- iio: adc: at91: fix wrong channel number in triggered buffer mode
- w1: omap-hdq: fix missing bus unregister at removal
- smb3: allow stats which track session and share reconnects to be reset
- smb3: do not attempt cifs operation in smb3 query info error path
- smb3: on kerberos mount if server doesn't specify auth type use krb5
- printk: Fix panic caused by passing log_buf_len to command line
- genirq: Fix race on spurious interrupt detection
- NFSv4.1: Fix the r/wsize checking
- nfs: Fix a missed page unlock after pg_doio()
- nfsd: Fix an Oops in free_session()
- lockd: fix access beyond unterminated strings in prints
- dm ioctl: harden copy_params()'s copy_from_user() from malicious users
- dm zoned: fix metadata block ref counting
- dm zoned: fix various dmz_get_mblock() issues
- powerpc/msi: Fix compile error on mpc83xx
- MIPS: OCTEON: fix out of bounds array access on CN68XX
- iommu/arm-smmu: Ensure that page-table updates are visible before TLBI
- TC: Set DMA masks for devices
- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
- kgdboc: Passing ekgdboc to command line causes panic
- xen: fix xen_qlock_wait()
- xen-blkfront: fix kernel panic with negotiate_mq error path
- media: em28xx: use a default format if TRY_FMT fails
- media: tvp5150: avoid going past array on v4l2_querymenu()
- media: em28xx: fix input name for Terratec AV 350
- media: em28xx: make v4l2-compliance happier by starting sequence on zero
- media: media colorspaces*.rst: rename AdobeRGB to opRGB
- arm64: lse: remove -fcall-used-x0 flag
- rpmsg: smd: fix memory leak on channel create
- Cramfs: fix abad comparison when wrap-arounds occur
- ARM: dts: socfpga: Fix SDRAM node address for Arria10
- arm64: dts: stratix10: Correct System Manager register size
- soc/tegra: pmc: Fix child-node lookup
- btrfs: qgroup: Avoid calling qgroup functions if qgroup is not enabled
- btrfs: Handle owner mismatch gracefully when walking up tree
- btrfs: locking: Add extra check in btrfs_init_new_buffer() to avoid deadlock
- btrfs: fix error handling in free_log_tree
- btrfs: Enhance btrfs_trim_fs function to handle error better
- btrfs: Ensure btrfs_trim_fs can trim the whole filesystem
- btrfs: iterate all devices during trim, instead of fs_devices::alloc_list
- btrfs: don't attempt to trim devices that don't support it
- btrfs: wait on caching when putting the bg cache
- btrfs: protect space cache inode alloc with GFP_NOFS
- btrfs: reset max_extent_size on clear in a bitmap
- btrfs: make sure we create all new block groups
- Btrfs: fix warning when replaying log after fsync of a tmpfile
- Btrfs: fix wrong dentries after fsync of file that got its parent replaced
- btrfs: qgroup: Dirty all qgroups before rescan
- Btrfs: fix null pointer dereference on compressed write path error
- Btrfs: fix assertion on fsync of regular file when using no-holes feature
- btrfs: set max_extent_size properly
- btrfs: don't use ctl->free_space for max_extent_size
- btrfs: only free reserved extent if we didn't insert it
- btrfs: don't run delayed_iputs in commit
- btrfs: move the dio_sem higher up the callchain
- Btrfs: fix use-after-free during inode eviction
- Btrfs: fix use-after-free when dumping free space
- Btrfs: fix fsync after hole punching when using no-holes feature
- net: sched: Remove TCA_OPTIONS from policy
- bpf: wait for running BPF programs when updating map-in-map
- MD: fix invalid stored role for a disk - try2
- mtd: spi-nor: intel-spi: Add support for Intel Ice Lake SPI serial flash
- mtd: spi-nor: fsl-quadspi: Don't let -EINVAL on the bus
- bcache: correct dirty data statistics
- block: don't deal with discard limit in blkdev_issue_discard()
- block: make sure discard bio is aligned with logical block size
- block: make sure writesame bio is aligned with logical block size
- dma-mapping: fix panic caused by passing empty cma command line argument
- ACPI / OSL: Use 'jiffies' as the time bassis for acpi_os_get_timer()
- ACPICA: AML Parser: fix parse loop to correctly skip erroneous extended
opcodes
- kprobes/x86: Use preempt_enable() in optimized_callback()
- mailbox: PCC: handle parse error
- ALSA: hda: Add 2 more models to the power_save blacklist
- drm: fix use of freed memory in drm_mode_setcrtc
- nvme: remove ns sibling before clearing path
- nfp: flower: fix pedit set actions for multiple partial masks
- nfp: flower: use offsets provided by pedit instead of index for ipv6
- perf report: Don't crash on invalid inline debug information
- drm: Get ref on CRTC commit object when waiting for flip_done
- net: socionext: Reset tx queue in ndo_stop
- lightnvm: pblk: fix race on sysfs line state
- lightnvm: pblk: fix race condition on metadata I/O
- bcache: Populate writeback_rate_minimum attribute
- sdhci: acpi: add free_slot callback
- mtd: rawnand: denali: set SPARE_AREA_SKIP_BYTES register to 8 if unset
- iwlwifi: mvm: check for n_profiles validity in EWRD ACPI
- ACPI/PPTT: Handle architecturally unknown cache types
- ACPI / PM: LPIT: Register sysfs attributes based on FADT
- pinctrl: sunxi: fix 'pctrl->functions' allocation in
sunxi_pinctrl_build_state
- arm64: entry: Allow handling of undefined instructions from EL1
- bpf/verifier: fix verifier instability
- gpio: brcmstb: allow 0 width GPIO banks
- libata: Apply NOLPM quirk for SAMSUNG MZ7TD256HAFV-000L9
- thermal: rcar_thermal: Prevent doing work after unbind
- net: stmmac: dwmac-sun8i: fix OF child-node lookup
- f2fs: clear PageError on the read path
- xprtrdma: Reset credit grant properly after a disconnect
- nvmem: check the return value of nvmem_add_cells()
- f2fs: avoid sleeping under spin_lock
- f2fs: fix to recover cold bit of inode block during POR
- OPP: Free OPP table properly on performance state irregularities
- IB/rxe: Revise the ib_wr_opcode enum
- ext4: fix EXT4_IOC_SWAP_BOOT
- selinux: fix mounting of cgroup2 under older policies
- KVM: arm/arm64: Ensure only THP is candidate for adjustment
- NFC: nfcmrvl_uart: fix OF child-node lookup
- media: ov7670: make "xclk" clock optional
- powerpc/tm: Fix HFSCR bit for no suspend case
- powerpc/64s/hash: Do not use PPC_INVALIDATE_ERAT on CPUs before POWER9
- MIPS: memset: Fix CPU_DADDI_WORKAROUNDS `small_fixup' regression
- power: supply: twl4030-charger: fix OF sibling-node lookup
- ocxl: Fix access to the AFU Descriptor Data
- net: bcmgenet: fix OF child-node lookup
- media: cec: make cec_get_edid_spa_location() an inline function
- media: cec: integrate cec_validate_phys_addr() in cec-api.c
- media: adv7604: when the EDID is cleared, unconfigure CEC as well
- media: adv7842: when the EDID is cleared, unconfigure CEC as well
- drm/mediatek: fix OF sibling-node lookup
- media: replace ADOBERGB by OPRGB
- media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC
- btrfs: fix error handling in btrfs_dev_replace_start
- btrfs: keep trim from interfering with transaction commits
- Btrfs: don't clean dirty pages during buffered writes
- btrfs: release metadata before running delayed refs
- Btrfs: fix deadlock when writing out free space caches
- btrfs: reset max_extent_size properly
- btrfs: fix insert_reserved error handling
- powerpc/traps: restore recoverability of machine_check interrupts
- powerpc/64/module: REL32 relocation range check
- powerpc/mm: Fix page table dump to work on Radix
- powerpc/eeh: Fix possible null deref in eeh_dump_dev_log()
- tty: check name length in tty_find_polling_driver()
- ARM: imx_v6_v7_defconfig: Select CONFIG_TMPFS_POSIX_ACL
- powerpc/nohash: fix undefined behaviour when testing page size support
- powerpc/mm: Don't report hugepage tables as memory leaks when using kmemleak
- drm/omap: fix memory barrier bug in DMM driver
- drm/hisilicon: hibmc: Do not carry error code in HiBMC framebuffer pointer
- media: pci: cx23885: handle adding to list failure
- media: coda: don't overwrite h.264 profile_idc on decoder instance
- MIPS: kexec: Mark CPU offline before disabling local IRQ
- powerpc/boot: Ensure _zimage_start is a weak symbol
- powerpc/memtrace: Remove memory in chunks
- MIPS/PCI: Call pcie_bus_configure_settings() to set MPS/MRRS
- sc16is7xx: Fix for multi-channel stall
- media: tvp5150: fix width alignment during set_selection()
- powerpc/selftests: Wait all threads to join
- staging:iio:ad7606: fix voltage scales
- 9p locks: fix glock.client_id leak in do_lock
- 9p: clear dangling pointers in p9stat_free
- ovl: fix error handling in ovl_verify_set_fh()
- scsi: qla2xxx: Fix incorrect port speed being set for FC adapters
- scsi: qla2xxx: Fix process response queue for ISP26XX and above
- scsi: qla2xxx: Remove stale debug trace message from tcm_qla2xxx
- scsi: qla2xxx: shutdown chip if reset fail
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
- ovl: fix recursive oi->lock in ovl_link()
- MIPS: Loongson-3: Fix CPU UART irq delivery problem
- MIPS: Loongson-3: Fix BRIDGE irq delivery problem
- xtensa: add NOTES section to the linker script
- xtensa: make sure bFLT stack is 16 byte aligned
- xtensa: fix boot parameters address translation
- um: Drop own definition of PTRACE_SYSEMU/_SINGLESTEP
- clk: s2mps11: Fix matching when built as module and DT node contains
compatible
- clk: at91: Fix division by zero in PLL recalc_rate()
- clk: rockchip: Fix static checker warning in rockchip_ddrclk_get_parent call
- clk: mvebu: use correct bit for 98DX3236 NAND
- libceph: bump CEPH_MSG_MAX_DATA_LEN
- mach64: fix display corruption on big endian machines
- mach64: fix image corruption due to reading accelerator registers
- reset: hisilicon: fix potential NULL pointer dereference
- vhost/scsi: truncate T10 PI iov_iter to prot_bytes
- scsi: qla2xxx: Initialize port speed to avoid setting lower speed
- SCSI: fix queue cleanup race before queue initialization is done
- soc: ti: QMSS: Fix usage of irq_set_affinity_hint
- ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry
- ocfs2: free up write context when direct IO failed
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings
- netfilter: conntrack: fix calculation of next bucket number in early_drop
- ARM: 8809/1: proc-v7: fix Thumb annotation of cpu_v7_hvc_switch_mm
- mtd: docg3: don't set conflicting BCH_CONST_PARAMS option
- of, numa: Validate some distance map rules
- x86/cpu/vmware: Do not trace vmware_sched_clock()
- x86/hyper-v: Enable PIT shutdown quirk
- termios, tty/tty_baudrate.c: fix buffer overrun
- arch/alpha, termios: implement BOTHER, IBSHIFT and termios2
- watchdog/core: Add missing prototypes for weak functions
- btrfs: fix pinned underflow after transaction aborted
- Btrfs: fix cur_offset in the error case for nocow
- Btrfs: fix infinite loop on inode eviction after deduplication of eof block
- Btrfs: fix data corruption due to cloning of eof block
- clockevents/drivers/i8253: Add support for PIT shutdown quirk
- ext4: add missing brelse() update_backups()'s error path
- ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path
- ext4: add missing brelse() add_new_gdb_meta_bg()'s error path
- ext4: avoid potential extra brelse in setup_new_flex_group_blocks()
- ext4: missing !bh check in ext4_xattr_inode_write()
- ext4: fix possible inode leak in the retry loop of ext4_resize_fs()
- ext4: avoid buffer leak on shutdown in ext4_mark_iloc_dirty()
- ext4: avoid buffer leak in ext4_orphan_add() after prior errors
- ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while resizing
- ext4: avoid possible double brelse() in add_new_gdb() on error path
- ext4: fix possible leak of sbi->s_group_desc_leak in error path
- ext4: fix possible leak of s_journal_flag_rwsem in error path
- ext4: fix buffer leak in ext4_xattr_get_block() on error path
- ext4: release bs.bh before re-using in ext4_xattr_block_find()
- ext4: fix buffer leak in ext4_xattr_move_to_block() on error path
- ext4: fix buffer leak in ext4_expand_extra_isize_ea() on error path
- ext4: fix buffer leak in __ext4_read_dirblock() on error path
- mount: Prevent MNT_DETACH from disconnecting locked mounts
- kdb: use correct pointer when 'btc' calls 'btt'
- kdb: print real address of pointers instead of hashed addresses
- sunrpc: correct the computation for page_ptr when truncating
- rtc: hctosys: Add missing range error reporting
- configfs: replace strncpy with memcpy
- gfs2: Put bitmap buffers in put_super
- lib/ubsan.c: don't mark __ubsan_handle_builtin_unreachable as noreturn
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444!
- mm/swapfile.c: use kvzalloc for swap_info_struct allocation
- efi/arm/libstub: Pack FDT after populating it
- drm/amdgpu: add missing CHIP_HAINAN in amdgpu_ucode_get_load_type
- drm/nouveau: Check backlight IDs are >= 0, not > 0
- drm/dp_mst: Check if primary mstb is null
- drm/i915: Restore vblank interrupts earlier
- drm/i915: Don't unset intel_connector->mst_port
- drm/i915: Skip vcpi allocation for MSTB ports that are gone
- drm/i915: Large page offsets for pread/pwrite
- drm/i915/hdmi: Add HDMI 2.0 audio clock recovery N values
- drm/i915: Don't oops during modeset shutdown after lpe audio deinit
- drm/i915: Mark pin flags as u64
- drm/i915/execlists: Force write serialisation into context image vs
execution
- CONFIG_XEN_PV breaks xen_create_contiguous_region on ARM
- ovl: check whiteout in ovl_create_over_whiteout()
- nvme-loop: fix kernel oops in case of unhandled command
- Input: wm97xx-ts - fix exit path
- powerpc/Makefile: Fix PPC_BOOK3S_64 ASFLAGS
- tracing/kprobes: Check the probe on unloaded module correctly
- drm/amdgpu/powerplay: fix missing break in switch statements
- udf: Prevent write-unsupported filesystem to be remounted read-write
- serial: sh-sci: Fix could not remove dev_attr_rx_fifo_timeout
- zram: close udev startup race condition as default groups
- clk: rockchip: fix wrong mmc sample phase shift for rk3328
- bonding/802.3ad: fix link_failure_count tracking
- hwmon: (core) Fix double-free in __hwmon_device_register()
- perf stat: Handle different PMU names with common prefix
- mnt: fix __detach_mounts infinite loop
- NFSv4: Don't exit the state manager without clearing
NFS4CLNT_MANAGER_RUNNING
- libata: blacklist SAMSUNG MZ7TD256HAFV-000L9 SSD
- drm/i915/dp: Link train Fallback on eDP only if fallback link BW can fit
panel's native mode
- drm/i915: Fix ilk+ watermarks when disabling pipes
- drm/i915: Fix possible race in intel_dp_add_mst_connector()
* [SRU][B/B-OEM]Fix resume failure on some TPM chips (LP: #1836031)
- tpm: tpm_try_transmit() refactor error flow.
* Linux md raid-10 freezes during resync (LP: #1767992)
- md: fix raid10 hang issue caused by barrier
* hda/realtek: can't detect external mic on a Dell machine (LP: #1836755)
- ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine
* CVE-2019-12614
- powerpc/pseries/dlpar: Fix a missing check in dlpar_parse_cc_property()
* x86: mm: early boot problem on i386 with KPTI enabled (LP: #1827884)
- Revert "perf/core: Make sure the ring-buffer is mapped in all page-tables"
- x86/mm: Clarify hardware vs. software "error_code"
- x86/mm: Break out kernel address space handling
- x86/mm: Break out user address space handling
- x86/mm/fault: Allow stack access below %rsp
* bnx2x driver causes 100% CPU load (LP: #1832082)
- bnx2x: Prevent ptp_task to be rescheduled indefinitely
* Sometimes touchpad detected as mouse(i2c designware fails to get adapter
number) (LP: #1835150)
- i2c: i2c-designware-platdrv: Cleanup setting of the adapter number
- i2c: i2c-designware-platdrv: Always use a dynamic adapter number
* HP EliteBook 745 G5 (Ryzen 2500U) fails to boot unless `mce=off` is set on
command line (LP: #1796443)
- x86/MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models
- x86/MCE/AMD: Carve out the MC4_MISC thresholding quirk
- x86/MCE: Add an MCE-record filtering function
- x86/MCE/AMD: Don't report L1 BTB MCA errors on some family 17h models
* Bionic update: upstream stable patchset 2019-07-15 (LP: #1836654)
- media: af9035: prevent buffer overflow on write
- batman-adv: Avoid probe ELP information leak
- batman-adv: Fix segfault when writing to throughput_override
- batman-adv: Fix segfault when writing to sysfs elp_interval
- batman-adv: Prevent duplicated gateway_node entry
- batman-adv: Prevent duplicated nc_node entry
- batman-adv: Prevent duplicated softif_vlan entry
- batman-adv: Prevent duplicated global TT entry
- batman-adv: Prevent duplicated tvlv handler
- batman-adv: fix backbone_gw refcount on queue_work() failure
- batman-adv: fix hardif_neigh refcount on queue_work() failure
- clocksource/drivers/ti-32k: Add CLOCK_SOURCE_SUSPEND_NONSTOP flag for non-
am43 SoCs
- scsi: ibmvscsis: Fix a stringop-overflow warning
- scsi: ibmvscsis: Ensure partition name is properly NUL terminated
- intel_th: pci: Add Ice Lake PCH support
- Input: atakbd - fix Atari keymap
- Input: atakbd - fix Atari CapsLock behaviour
- net: emac: fix fixed-link setup for the RTL8363SB switch
- ravb: do not write 1 to reserved bits
- PCI: dwc: Fix scheduling while atomic issues
- drm: mali-dp: Call drm_crtc_vblank_reset on device init
- scsi: ipr: System hung while dlpar adding primary ipr adapter back
- scsi: sd: don't crash the host on invalid commands
- net/mlx4: Use cpumask_available for eq->affinity_mask
- clocksource/drivers/fttmr010: Fix set_next_event handler
- powerpc/tm: Fix userspace r13 corruption
- powerpc/tm: Avoid possible userspace r1 corruption on reclaim
- iommu/amd: Return devid as alias for ACPI HID devices
- ARC: build: Get rid of toolchain check
- ARC: build: Don't set CROSS_COMPILE in arch's Makefile
- HID: quirks: fix support for Apple Magic Keyboards
- staging: ccree: check DMA pool buf !NULL before free
- net/smc: fix sizeof to int comparison
- qed: Fix populating the invalid stag value in multi function mode.
- RDMA/uverbs: Fix validity check for modify QP
- bpf: test_maps, only support ESTABLISHED socks
- RDMA/bnxt_re: Fix system crash during RDMA resource initialization
- RISC-V: include linux/ftrace.h in asm-prototypes.h
- powerpc/numa: Use associativity if VPHN hcall is successful
- x86/boot: Fix kexec booting failure in the SEV bit detection code
- xfrm: Validate address prefix lengths in the xfrm selector.
- xfrm6: call kfree_skb when skb is toobig
- xfrm: reset transport header back to network header after all input
transforms ahave been applied
- xfrm: reset crypto_done when iterating over multiple input xfrms
- mac80211: Always report TX status
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
- mac80211: fix pending queue hang due to TX_DROP
- cfg80211: Address some corner cases in scan result channel updating
- mac80211: TDLS: fix skb queue/priority assignment
- mac80211: fix TX status reporting for ieee80211s
- ARM: 8799/1: mm: fix pci_ioremap_io() offset check
- xfrm: validate template mode
- netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev
- arm64: hugetlb: Fix handling of young ptes
- ARM: dts: BCM63xx: Fix incorrect interrupt specifiers
- net: macb: Clean 64b dma addresses if they are not detected
- soc: fsl: qbman: qman: avoid allocating from non existing gen_pool
- soc: fsl: qe: Fix copy/paste bug in ucc_get_tdm_sync_shift()
- mac80211_hwsim: do not omit multicast announce of first added radio
- Bluetooth: SMP: fix crash in unpairing
- pxa168fb: prepare the clock
- qed: Avoid implicit enum conversion in qed_set_tunn_cls_info
- qed: Fix mask parameter in qed_vf_prep_tunn_req_tlv
- qed: Avoid implicit enum conversion in qed_roce_mode_to_flavor
- qed: Avoid constant logical operation warning in qed_vf_pf_acquire
- qed: Avoid implicit enum conversion in qed_iwarp_parse_rx_pkt
- asix: Check for supported Wake-on-LAN modes
- ax88179_178a: Check for supported Wake-on-LAN modes
- lan78xx: Check for supported Wake-on-LAN modes
- sr9800: Check for supported Wake-on-LAN modes
- r8152: Check for supported Wake-on-LAN Modes
- smsc75xx: Check for Wake-on-LAN modes
- smsc95xx: Check for Wake-on-LAN modes
- cfg80211: fix use-after-free in reg_process_hint()
- perf/core: Fix perf_pmu_unregister() locking
- perf/ring_buffer: Prevent concurent ring buffer access
- perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX
- perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events
- net: fec: fix rare tx timeout
- declance: Fix continuation with the adapter identification message
- locking/ww_mutex: Fix runtime warning in the WW mutex selftest
- be2net: don't flip hw_features when VXLANs are added/deleted
- net: cxgb3_main: fix a missing-check bug
- yam: fix a missing-check bug
- ocfs2: fix crash in ocfs2_duplicate_clusters_by_page()
- iwlwifi: mvm: check for short GI only for OFDM
- iwlwifi: dbg: allow wrt collection before ALIVE
- iwlwifi: fix the ALIVE notification layout
- usbip: vhci_hcd: update 'status' file header and format
- net/mlx5: Fix mlx5_get_vector_affinity function
- powerpc/pseries: Add empty update_numa_cpu_lookup_table() for NUMA=n
- dm integrity: fail early if required HMAC key is not available
- net: phy: realtek: Use the dummy stubs for MMD register access for rtl8211b
- net: phy: Add general dummy stubs for MMD register access
- scsi: qla2xxx: Avoid double completion of abort command
- kbuild: set no-integrated-as before incl. arch Makefile
- IB/mlx5: Avoid passing an invalid QP type to firmware
- l2tp: remove configurable payload offset
- cifs: Use ULL suffix for 64-bit constant
- KVM: x86: Update the exit_qualification access bits while walking an address
- sparc64: Fix regression in pmdp_invalidate().
- tpm: move the delay_msec increment after sleep in tpm_transmit()
- bpf: sockmap, map_release does not hold refcnt for pinned maps
- tpm: tpm_crb: relinquish locality on error path.
- IB/usnic: Update with bug fixes from core code
- mmc: dw_mmc-rockchip: correct property names in debug
- MIPS: Workaround GCC __builtin_unreachable reordering bug
- iio: buffer: fix the function signature to match implementation
- selftests/powerpc: Add ptrace hw breakpoint test
- scsi: ibmvfc: Avoid unnecessary port relogin
- scsi: sd: Remember that READ CAPACITY(16) succeeded
- btrfs: quota: Set rescan progress to (u64)-1 if we hit last leaf
- net: phy: phylink: Don't release NULL GPIO
- x86/paravirt: Fix some warning messages
- net: stmmac: mark PM functions as __maybe_unused
- kconfig: fix the rule of mainmenu_stmt symbol
- libertas: call into generic suspend code before turning off power
- compiler.h: Allow arch-specific asm/compiler.h
- ARM: dts: imx53-qsb: disable 1.2GHz OPP
- perf python: Use -Wno-redundant-decls to build with PYTHON=python3
- rxrpc: Don't check RXRPC_CALL_TX_LAST after calling rxrpc_rotate_tx_window()
- rxrpc: Only take the rwind and mtu values from latest ACK
- rxrpc: Fix connection-level abort handling
- selftests: rtnetlink.sh explicitly requires bash.
- fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters()
- mtd: spi-nor: Add support for is25wp series chips
- ARM: dts: r8a7790: Correct critical CPU temperature
- media: uvcvideo: Fix driver reference counting
- Revert "netfilter: ipv6: nf_defrag: drop skb dst before queueing"
- perf tools: Disable parallelism for 'make clean'
- drm/i915/gvt: fix memory leak of a cmd_entry struct on error exit path
- bridge: do not add port to router list when receives query with source
0.0.0.0
- net: bridge: remove ipv6 zero address check in mcast queries
- ipv6: mcast: fix a use-after-free in inet6_mc_check
- ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are
called
- llc: set SOCK_RCU_FREE in llc_sap_add_socket()
- net: fec: don't dump RX FIFO register when not available
- net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs
- net: sched: gred: pass the right attribute to gred_change_table_def()
- net: socket: fix a missing-check bug
- net: stmmac: Fix stmmac_mdio_reset() when building stmmac as modules
- net: udp: fix handling of CHECKSUM_COMPLETE packets
- r8169: fix NAPI handling under high load
- sctp: fix race on sctp_id2asoc
- udp6: fix encap return code for resubmitting
- virtio_net: avoid using netif_tx_disable() for serializing tx routine
- ethtool: fix a privilege escalation bug
- bonding: fix length of actor system
- ip6_tunnel: Fix encapsulation layout
- openvswitch: Fix push/pop ethernet validation
- net/mlx5: Take only bit 24-26 of wqe.pftype_wq for page fault type
- net: sched: Fix for duplicate class dump
- net: drop skb on failure in ip_check_defrag()
- net: fix pskb_trim_rcsum_slow() with odd trim offset
- net/mlx5e: fix csum adjustments caused by RXFCS
- rtnetlink: Disallow FDB configuration for non-Ethernet device
- net: ipmr: fix unresolved entry dumps
- net: bcmgenet: Poll internal PHY for GENETv5
- net/sched: cls_api: add missing validation of netlink attributes
- net/mlx5: Fix build break when CONFIG_SMP=n
- mac80211_hwsim: fix locking when iterating radios during ns exit
- rxrpc: Fix checks as to whether we should set up a new call
- rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket
- thunderbolt: Do not handle ICM events after domain is stopped
- thunderbolt: Initialize after IOMMUs
- RISCV: Fix end PFN for low memory
- drm/amd/display: Signal hw_done() after waiting for flip_done()
- powerpc/numa: Skip onlining a offline node in kdump path
- mm/gup_benchmark: fix unsigned comparison to zero in __gup_benchmark_ioctl
- perf report: Don't try to map ip to invalid map
- perf record: Use unmapped IP for inline callchain cursors
- rxrpc: Carry call state out of locked section in rxrpc_rotate_tx_window()
- gpio: Assign gpio_irq_chip::parents to non-stack pointer
- IB/mlx5: Unmap DMA addr from HCA before IOMMU
- rds: RDS (tcp) hangs on sendto() to unresponding address
- sparc64: Export __node_distance.
- sparc64: Make corrupted user stacks more debuggable.
- sparc64: Make proc_id signed.
- sparc64: Set %l4 properly on trap return after handling signals.
- sparc: Fix single-pcr perf event counter management.
- sparc: Fix syscall fallback bugs in VDSO.
- sparc: Throttle perf events properly.
- eeprom: at24: Add support for address-width property
- vfs: swap names of {do,vfs}_clone_file_range()
- bpf: fix partial copy of map_ptr when dst is scalar
- gpio: mxs: Get rid of external API call
- xfs: truncate transaction does not modify the inobt
- cachefiles: fix the race between cachefiles_bury_object() and rmdir(2)
- drm/edid: VSDB yCBCr420 Deep Color mode bit definitions
- drm: fb-helper: Reject all pixel format changing requests
- cdc-acm: do not reset notification buffer index upon urb unlinking
- cdc-acm: correct counting of UART states in serial state notification
- cdc-acm: fix race between reset and control messaging
- usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
- USB: fix the usbfs flag sanitization for control transfers
- Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15IGM
- sched/fair: Fix throttle_list starvation with low CFS quota
- x86/tsc: Force inlining of cyc2ns bits
- x86, hibernate: Fix nosave_regions setup for hibernation
- x86/percpu: Fix this_cpu_read()
- x86/time: Correct the attribute on jiffies' definition
- x86/fpu: Fix i486 + no387 boot crash by only saving FPU registers on context
switch if there is an FPU
- clk: sunxi-ng: sun4i: Set VCO and PLL bias current to lowest setting
- drm/sun4i: Fix an ulong overflow in the dotclock driver
- x86/swiotlb: Enable swiotlb for > 4GiG RAM on 32-bit kernels
* Colour banding in HP Pavilion 15-n233sl integrated display (LP: #1794387) //
Bionic update: upstream stable patchset 2019-07-15 (LP: #1836654)
- drm/edid: Add 6 bpc quirk for BOE panel in HP Pavilion 15-n233sl
* Bionic update: upstream stable patchset 2019-07-12 (LP: #1836426)
- drm/amd/pp: initialize result to before or'ing in data
- drm/amdgpu: add another ATPX quirk for TOPAZ
- tools/power turbostat: fix possible sprintf buffer overflow
- mac80211: Run TXQ teardown code before de-registering interfaces
- mac80211_hwsim: require at least one channel
- btrfs: btrfs_shrink_device should call commit transaction at the end
- scsi: csiostor: add a check for NULL pointer after kmalloc()
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
- gpio: adp5588: Fix sleep-in-atomic-context bug
- mac80211: mesh: fix HWMP sequence numbering to follow standard
- mac80211: avoid kernel panic when building AMSDU from non-linear SKB
- gpiolib: acpi: Switch to cansleep version of GPIO library call
- gpiolib-acpi: Register GpioInt ACPI event handlers from a late_initcall
- cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE
- mac80211: do not convert to A-MSDU if frag/subframe limited
- mac80211: always account for A-MSDU header changes
- tools/kvm_stat: fix handling of invalid paths in debugfs provider
- gpio: Fix crash due to registration race
- ARC: atomics: unbork atomic_fetch_##op()
- md/raid5-cache: disable reshape completely
- RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0
- i2c: uniphier: issue STOP only for last message or I2C_M_STOP
- i2c: uniphier-f: issue STOP only for last message or I2C_M_STOP
- net: cadence: Fix a sleep-in-atomic-context bug in macb_halt_tx()
- fs/cifs: don't translate SFM_SLASH (U+F026) to backslash
- mac80211: fix an off-by-one issue in A-MSDU max_subframe computation
- cfg80211: fix a type issue in ieee80211_chandef_to_operating_class()
- mac80211: fix a race between restart and CSA flows
- mac80211: Fix station bandwidth setting after channel switch
- mac80211: don't Tx a deauth frame if the AP forbade Tx
- mac80211: shorten the IBSS debug messages
- tools/vm/slabinfo.c: fix sign-compare warning
- tools/vm/page-types.c: fix "defined but not used" warning
- mm: madvise(MADV_DODUMP): allow hugetlbfs pages
- netfilter: xt_cluster: add dependency on conntrack module
- HID: add support for Apple Magic Keyboards
- usb: gadget: fotg210-udc: Fix memory leak of fotg210->ep[i]
- HID: hid-saitek: Add device ID for RAT 7 Contagion
- scsi: qedi: Add the CRC size within iSCSI NVM image
- perf evsel: Fix potential null pointer dereference in perf_evsel__new_idx()
- perf util: Fix bad memory access in trace info.
- perf probe powerpc: Ignore SyS symbols irrespective of endianness
- netfilter: nf_tables: release chain in flushing set
- Revert "iio: temperature: maxim_thermocouple: add MAX31856 part"
- RDMA/ucma: check fd type in ucma_migrate_id()
- HID: sensor-hub: Restore fixup for Lenovo ThinkPad Helix 2 sensor hub report
- USB: yurex: Check for truncation in yurex_read()
- nvmet-rdma: fix possible bogus dereference under heavy load
- net/mlx5: Consider PCI domain in search for next dev
- drm/nouveau/TBDdevinit: don't fail when PMU/PRE_OS is missing from VBIOS
- drm/nouveau/disp: fix DP disable race
- dm raid: fix rebuild of specific devices by updating superblock
- fs/cifs: suppress a string overflow warning
- perf/x86/intel: Add support/quirk for the MISPREDICT bit on Knights Landing
CPUs
- dm thin metadata: try to avoid ever aborting transactions
- arch/hexagon: fix kernel/dma.c build warning
- hexagon: modify ffs() and fls() to return int
- arm64: jump_label.h: use asm_volatile_goto macro instead of "asm goto"
- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk
- r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED
- s390/qeth: don't dump past end of unknown HW header
- cifs: read overflow in is_valid_oplock_break()
- xen/manage: don't complain about an empty value in control/sysrq node
- xen: avoid crash in disable_hotplug_cpu
- xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage
- ovl: fix access beyond unterminated strings
- ovl: fix memory leak on unlink of indexed file
- ovl: fix format of setxattr debug
- sysfs: Do not return POSIX ACL xattrs via listxattr
- smb2: fix missing files in root share directory listing
- iommu/amd: Clear memory encryption mask from physical address
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
- crypto: mxs-dcp - Fix wait logic on chan threads
- crypto: caam/jr - fix ablkcipher_edesc pointer arithmetic
- gpiolib: Free the last requested descriptor
- Drivers: hv: vmbus: Use get/put_cpu() in vmbus_connect()
- tools: hv: fcopy: set 'error' in case an unknown operation was requested
- ocfs2: fix locking for res->tracking and dlm->tracking_list
- ixgbe: check return value of napi_complete_done()
- dm thin metadata: fix __udivdi3 undefined on 32-bit
- Btrfs: fix unexpected failure of nocow buffered writes after snapshotting
when low on space
- scsi: aacraid: fix a signedness bug
- tipc: switch to rhashtable iterator
- net: mvpp2: initialize port of_node pointer
- tc-testing: add test-cases for numeric and invalid control action
- tools/kvm_stat: fix updates for dead guests
- ibmvnic: Include missing return code checks in reset function
- net/ibm/emac: wrong emac_calc_base call was used by typo
- ceph: avoid a use-after-free in ceph_destroy_options()
- afs: Fix cell specification to permit an empty address list
- netfilter: xt_checksum: ignore gso skbs
- HID: intel-ish-hid: Enable Sunrise Point-H ish driver
- iio: imu: st_lsm6dsx: take into account ts samples in wm configuration
- riscv: Do not overwrite initrd_start and initrd_end
- drm/nouveau: fix oops in client init failure path
- drm/nouveau/mmu: don't attempt to dereference vmm without valid instance
pointer
- drm/nouveau/disp/gm200-: enforce identity-mapped SOR assignment for LVDS/eDP
panels
- sched/topology: Set correct NUMA topology type
- drm/amdgpu: Fix SDMA hang in prt mode v2
- asm-generic: io: Fix ioport_map() for !CONFIG_GENERIC_IOMAP &&
CONFIG_INDIRECT_PIO
- x86/APM: Fix build warning when PROC_FS is not enabled
- new primitive: discard_new_inode()
- ovl: set I_CREATING on inode being created
- crypto: chelsio - Fix memory corruption in DMA Mapped buffers.
- perf/core: Add sanity check to deal with pinned event failure
- mm: migration: fix migration of huge PMD shared pages
- mm, thp: fix mlocking THP page with migration enabled
- mm/vmstat.c: skip NR_TLB_REMOTE_FLUSH* properly
- KVM: x86: fix L1TF's MMIO GFN calculation
- blk-mq: I/O and timer unplugs are inverted in blktrace
- clocksource/drivers/timer-atmel-pit: Properly handle error cases
- fbdev/omapfb: fix omapfb_memory_read infoleak
- drm/amdgpu: Fix vce work queue was not cancelled when suspend
- x86/vdso: Fix asm constraints on vDSO syscall fallbacks
- selftests/x86: Add clock_gettime() tests to test_vdso
- x86/vdso: Only enable vDSO retpolines when enabled and supported
- x86/vdso: Fix vDSO syscall fallback asm constraint regression
- mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys
- PM / core: Clear the direct_complete flag on errors
- dm cache metadata: ignore hints array being too small during resize
- dm cache: fix resize crash if user doesn't reload cache table
- xhci: Add missing CAS workaround for Intel Sunrise Point xHCI
- usb: xhci-mtk: resume USB3 roothub first
- USB: serial: simple: add Motorola Tetra MTP6550 id
- usb: cdc_acm: Do not leak URB buffers
- of: unittest: Disable interrupt node tests for old world MAC systems
- perf annotate: Use asprintf when formatting objdump command line
- perf tools: Fix python extension build for gcc 8
- ath10k: fix use-after-free in ath10k_wmi_cmd_send_nowait
- ath10k: fix kernel panic issue during pci probe
- nvme_fc: fix ctrl create failures racing with workq items
- powerpc/lib: fix book3s/32 boot failure due to code patching
- ARC: clone syscall to setp r25 as thread pointer
- perf utils: Move is_directory() to path.h
- f2fs: fix invalid memory access
- ucma: fix a use-after-free in ucma_resolve_ip()
- ubifs: Check for name being NULL while mounting
- rds: rds_ib_recv_alloc_cache() should call alloc_percpu_gfp() instead
- ath10k: fix scan crash due to incorrect length calculation
- pstore/ram: Fix failure-path memory leak in ramoops_init
- mac80211: allocate TXQs for active monitor interfaces
- drm: fix use-after-free read in drm_mode_create_lease_ioctl()
- USB: serial: option: improve Quectel EP06 detection
- USB: serial: option: add two-endpoints device-id flag
- tipc: call start and done ops directly in __tipc_nl_compat_dumpit()
- bnxt_en: Fix TX timeout during netpoll.
- bnxt_en: free hwrm resources, if driver probe fails.
- bonding: avoid possible dead-lock
- ip6_tunnel: be careful when accessing the inner header
- ip_tunnel: be careful when accessing the inner header
- ipv4: fix use-after-free in ip_cmsg_recv_dstaddr()
- ipv6: take rcu lock in rawv6_send_hdrinc()
- net: dsa: bcm_sf2: Call setup during switch resume
- net: hns: fix for unmapping problem when SMMU is on
- net: ipv4: update fnhe_pmtu when first hop's MTU changes
- net/ipv6: Display all addresses in output of /proc/net/if_inet6
- netlabel: check for IPV4MASK in addrinfo_get
- net: mvpp2: Extract the correct ethtype from the skb for tx csum offload
- net: mvpp2: fix a txq_done race condition
- net: sched: Add policy validation for tc attributes
- net: systemport: Fix wake-up interrupt race during resume
- net/usb: cancel pending work when unbinding smsc75xx
- qmi_wwan: Added support for Gemalto's Cinterion ALASxx WWAN interface
- rtnl: limit IFLA_NUM_TX_QUEUES and IFLA_NUM_RX_QUEUES to 4096
- sctp: update dst pmtu with the correct daddr
- team: Forbid enslaving team device to itself
- tipc: fix flow control accounting for implicit connect
- udp: Unbreak modules that rely on external __skb_recv_udp() availability
- net: stmmac: Fixup the tail addr setting in xmit path
- net/packet: fix packet drop as of virtio gso
- net: dsa: bcm_sf2: Fix unbind ordering
- net/mlx5e: Set vlan masks for all offloaded TC rules
- net: aquantia: memory corruption on jumbo frames
- net/mlx5: E-Switch, Fix out of bound access when setting vport rate
- bonding: pass link-local packets to bonding master also.
- bonding: fix warning message
- nfp: avoid soft lockups under control message storm
- bnxt_en: don't try to offload VLAN 'modify' action
- net-ethtool: ETHTOOL_GUFO did not and should not require CAP_NET_ADMIN
- tcp/dccp: fix lockdep issue when SYN is backlogged
- inet: make sure to grab rcu_read_lock before using ireq->ireq_opt
- ASoC: rt5514: Fix the issue of the delay volume applied again
- ASoC: wm8804: Add ACPI support
- ASoC: sigmadsp: safeload should not have lower byte limit
- selftests/efivarfs: add required kernel configs
- selftests: memory-hotplug: add required configs
- ASoC: rsnd: adg: care clock-frequency size
- ASoC: rsnd: don't fallback to PIO mode when -EPROBE_DEFER
- Bluetooth: hci_ldisc: Free rw_semaphore on close
- mfd: omap-usb-host: Fix dts probe of children
- scsi: iscsi: target: Don't use stack buffer for scatterlist
- scsi: qla2xxx: Fix an endian bug in fcpcmd_is_corrupted()
- sound: enable interrupt after dma buffer initialization
- sound: don't call skl_init_chip() to reset intel skl soc
- stmmac: fix valid numbers of unicast filter entries
- net: macb: disable scatter-gather for macb on sama5d3
- ARM: dts: at91: add new compatibility string for macb on sama5d3
- PCI: hv: support reporting serial number as slot information
- clk: x86: add "ether_clk" alias for Bay Trail / Cherry Trail
- clk: x86: Stop marking clocks as CLK_IS_CRITICAL
- x86/kvm/lapic: always disable MMIO interface in x2APIC mode
- drm/amdgpu: Fix SDMA HQD destroy error on gfx_v7
- mm/vmstat.c: fix outdated vmstat_text
- MIPS: VDSO: Always map near top of user memory
- mach64: detect the dot clock divider correctly on sparc
- percpu: stop leaking bitmap metadata blocks
- perf script python: Fix export-to-postgresql.py occasional failure
- perf script python: Fix export-to-sqlite.py sample columns
- s390/cio: Fix how vfio-ccw checks pinned pages
- dm cache: destroy migration_cache if cache target registration failed
- dm: fix report zone remapping to account for partition offset
- dm linear: eliminate linear_end_io call if CONFIG_DM_ZONED disabled
- dm linear: fix linear_end_io conditional definition
- cgroup: Fix dom_cgrp propagation when enabling threaded mode
- mmc: block: avoid multiblock reads for the last sector in SPI mode
- pinctrl: mcp23s08: fix irq and irqchip setup order
- arm64: perf: Reject stand-alone CHAIN events for PMUv3
- mm/thp: fix call to mmu_notifier in set_pmd_migration_entry() v2
- mm: Preserve _PAGE_DEVMAP across mprotect() calls
- i2c: i2c-scmi: fix for i2c_smbus_write_block_data
- xhci: Don't print a warning when setting link state for disabled ports
- mm: introduce NR_INDIRECTLY_RECLAIMABLE_BYTES
- mm: treat indirectly reclaimable memory as available in MemAvailable
- dcache: account external names as indirectly reclaimable memory
- mm: treat indirectly reclaimable memory as free in overcommit logic
- mm: don't show nr_indirectly_reclaimable in /proc/vmstat
- ARM: add more CPU part numbers for Cortex and Brahma B15 CPUs
- ARM: bugs: prepare processor bug infrastructure
- ARM: bugs: hook processor bug checking into SMP and suspend paths
- ARM: bugs: add support for per-processor bug checking
- [Config] updateconfigs for CPU_SPECTRE
- ARM: spectre: add Kconfig symbol for CPUs vulnerable to Spectre
- ARM: spectre-v2: harden branch predictor on context switches
- ARM: spectre-v2: add Cortex A8 and A15 validation of the IBE bit
- ARM: spectre-v2: harden user aborts in kernel space
- ARM: spectre-v2: add firmware based hardening
- ARM: spectre-v2: warn about incorrect context switching functions
- ARM: KVM: invalidate BTB on guest exit for Cortex-A12/A17
- ARM: KVM: invalidate icache on guest exit for Cortex-A15
- ARM: spectre-v2: KVM: invalidate icache on guest exit for Brahma B15
- ARM: KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling
- ARM: KVM: report support for SMCCC_ARCH_WORKAROUND_1
- ARM: spectre-v1: add speculation barrier (csdb) macros
- ARM: spectre-v1: add array_index_mask_nospec() implementation
- ARM: spectre-v1: fix syscall entry
- ARM: signal: copy registers using __copy_from_user()
- ARM: vfp: use __copy_from_user() when restoring VFP state
- ARM: oabi-compat: copy semops using __copy_from_user()
- ARM: use __inttype() in get_user()
- ARM: spectre-v1: use get_user() for __get_user()
- ARM: spectre-v1: mitigate user accesses
- perf tools: Fix snprint warnings for gcc 8
- net: sched: cls_u32: fix hnode refcounting
- net: qualcomm: rmnet: Skip processing loopback packets
- net: qualcomm: rmnet: Fix incorrect allocation flag in transmit
- tun: remove unused parameters
- tun: initialize napi_mutex unconditionally
- tun: napi flags belong to tfile
- net: dsa: b53: Keep CPU port as tagged in all VLANs
- rtnetlink: Fail dump if target netnsid is invalid
- net: ipv4: don't let PMTU updates increase route MTU
- ASoC: dapm: Fix NULL pointer deference on CODEC to CODEC DAIs
- selftests: android: move config up a level
- selftests: add headers_install to lib.mk
- Bluetooth: SMP: Fix trying to use non-existent local OOB data
- Bluetooth: Use correct tfm to generate OOB data
- net: ethernet: ti: add missing GENERIC_ALLOCATOR dependency
- afs: Fix afs_server struct leak
- afs: Fix clearance of reply
* Volume control not working Dell XPS 27 (7760) (LP: #1775068) // Bionic
update: upstream stable patchset 2019-07-12 (LP: #1836426)
- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell XPS 27 7760
* Bionic update: upstream stable patchset 2019-07-11 (LP: #1836287)
- perf tools: Fix undefined symbol scnprintf in libperf-jvmti.so
- gso_segment: Reset skb->mac_len after modifying network header
- ipv6: fix possible use-after-free in ip6_xmit()
- net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT
- net: hp100: fix always-true check for link up state
- pppoe: fix reception of frames with no mac header
- qmi_wwan: set DTR for modems in forced USB2 mode
- udp4: fix IP_CMSG_CHECKSUM for connected sockets
- neighbour: confirm neigh entries when ARP packet is received
- udp6: add missing checks on edumux packet processing
- net/sched: act_sample: fix NULL dereference in the data path
- tls: don't copy the key out of tls12_crypto_info_aes_gcm_128
- tls: zero the crypto information from tls_context before freeing
- tls: clear key material from kernel memory when do_tls_setsockopt_conf fails
- NFC: Fix possible memory corruption when handling SHDLC I-Frame commands
- NFC: Fix the number of pipes
- ASoC: cs4265: fix MMTLR Data switch control
- ASoC: rsnd: fixup not to call clk_get/set under non-atomic
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at error
path
- ALSA: bebob: use address returned by kmalloc() instead of kernel stack for
streaming DMA mapping
- ALSA: emu10k1: fix possible info leak to userspace on
SNDRV_EMU10K1_IOCTL_INFO
- ALSA: fireface: fix memory leak in ff400_switch_fetching_mode()
- ALSA: firewire-digi00x: fix memory leak of private data
- ALSA: firewire-tascam: fix memory leak of private data
- ALSA: fireworks: fix memory leak of response buffer at error path
- ALSA: oxfw: fix memory leak for model-dependent data at error path
- ALSA: oxfw: fix memory leak of discovered stream formats at error path
- ALSA: oxfw: fix memory leak of private data
- platform/x86: alienware-wmi: Correct a memory leak
- xen/netfront: don't bug in case of too many frags
- xen/x86/vpmu: Zero struct pt_regs before calling into sample handling code
- spi: fix IDR collision on systems with both fixed and dynamic SPI bus
numbers
- ring-buffer: Allow for rescheduling when removing pages
- mm: shmem.c: Correctly annotate new inodes for lockdep
- scsi: target: iscsi: Use bin2hex instead of a re-implementation
- ocfs2: fix ocfs2 read block panic
- drm/nouveau: Fix deadlocks in nouveau_connector_detect()
- drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload
- drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement
- drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect()
- drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early
- drm/vc4: Fix the "no scaling" case on multi-planar YUV formats
- drm: udl: Destroy framebuffer only if it was initialized
- drm/amdgpu: add new polaris pci id
- ext4: check to make sure the rename(2)'s destination is not freed
- ext4: avoid divide by zero fault when deleting corrupted inline directories
- ext4: avoid arithemetic overflow that can trigger a BUG
- ext4: recalucate superblock checksum after updating free blocks/inodes
- ext4: fix online resize's handling of a too-small final block group
- ext4: fix online resizing for bigalloc file systems with a 1k block size
- ext4: don't mark mmp buffer head dirty
- ext4: show test_dummy_encryption mount option in /proc/mounts
- sched/fair: Fix vruntime_normalized() for remote non-migration wakeup
- PCI: aardvark: Size bridges before resources allocation
- vmw_balloon: include asm/io.h
- iw_cxgb4: only allow 1 flush on user qps
- tick/nohz: Prevent bogus softirq pending warning
- spi: Fix double IDR allocation with DT aliases
- hv_netvsc: fix schedule in RCU context
- bnxt_en: Fix VF mac address regression.
- net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags
- mtd: rawnand: denali: fix a race condition when DMA is kicked
- platform/x86: dell-smbios-wmi: Correct a memory leak
- fork: report pid exhaustion correctly
- mm: disable deferred struct page for 32-bit arches
- libata: mask swap internal and hardware tag
- drm/i915/bdw: Increase IPS disable timeout to 100ms
- drm/nouveau: Reset MST branching unit before enabling
- drm/nouveau: Only write DP_MSTM_CTRL when needed
- drm/nouveau: Remove duplicate poll_enable() in pmops_runtime_suspend()
- ext4, dax: set ext4_dax_aops for dax files
- crypto: skcipher - Fix -Wstringop-truncation warnings
- iio: adc: ina2xx: avoid kthread_stop() with stale task_struct
- tsl2550: fix lux1_input error in low light
- vmci: type promotion bug in qp_host_get_user_memory()
- x86/numa_emulation: Fix emulated-to-physical node mapping
- staging: rts5208: fix missing error check on call to rtsx_write_register
- power: supply: axp288_charger: Fix initial constant_charge_current value
- misc: sram: enable clock before registering regions
- serial: sh-sci: Stop RX FIFO timer during port shutdown
- uwb: hwa-rc: fix memory leak at probe
- power: vexpress: fix corruption in notifier registration
- iommu/amd: make sure TLB to be flushed before IOVA freed
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009
- USB: serial: kobil_sct: fix modem-status error handling
- 6lowpan: iphc: reset mac_header after decompress to fix panic
- iommu/msm: Don't call iommu_device_{,un}link from atomic context
- s390/mm: correct allocate_pgste proc_handler callback
- power: remove possible deadlock when unregistering power_supply
- md-cluster: clear another node's suspend_area after the copy is finished
- RDMA/bnxt_re: Fix a couple off by one bugs
- RDMA/i40w: Hold read semaphore while looking after VMA
- IB/core: type promotion bug in rdma_rw_init_one_mr()
- media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt()
- IB/mlx4: Test port number before querying type.
- powerpc/kdump: Handle crashkernel memory reservation failure
- media: fsl-viu: fix error handling in viu_of_probe()
- media: staging/imx: fill vb2_v4l2_buffer field entry
- x86/tsc: Add missing header to tsc_msr.c
- ARM: hwmod: RTC: Don't assume lock/unlock will be called with irq enabled
- x86/entry/64: Add two more instruction suffixes
- ARM: dts: ls1021a: Add missing cooling device properties for CPUs
- scsi: target/iscsi: Make iscsit_ta_authentication() respect the output
buffer size
- scsi: klist: Make it safe to use klists in atomic context
- scsi: ibmvscsi: Improve strings handling
- scsi: target: Avoid that EXTENDED COPY commands trigger lock inversion
- usb: wusbcore: security: cast sizeof to int for comparison
- ath10k: sdio: use same endpoint id for all packets in a bundle
- ath10k: sdio: set skb len for all rx packets
- powerpc/powernv/ioda2: Reduce upper limit for DMA window size
- s390/sysinfo: add missing #ifdef CONFIG_PROC_FS
- alarmtimer: Prevent overflow for relative nanosleep
- s390/dasd: correct numa_node in dasd_alloc_queue
- s390/scm_blk: correct numa_node in scm_blk_dev_setup
- s390/extmem: fix gcc 8 stringop-overflow warning
- mtd: rawnand: atmel: add module param to avoid using dma
- iio: accel: adxl345: convert address field usage in iio_chan_spec
- posix-timers: Make forward callback return s64
- ALSA: snd-aoa: add of_node_put() in error path
- media: s3c-camif: ignore -ENOIOCTLCMD from v4l2_subdev_call for s_power
- media: soc_camera: ov772x: correct setting of banding filter
- media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial data
- staging: android: ashmem: Fix mmap size validation
- drivers/tty: add error handling for pcmcia_loop_config
- media: tm6000: add error handling for dvb_register_adapter
- net: phy: xgmiitorgmii: Check read_status results
- ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock
- net: phy: xgmiitorgmii: Check phy_driver ready before accessing
- drm/sun4i: Fix releasing node when enumerating enpoints
- ath10k: transmit queued frames after processing rx packets
- rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication()
- brcmsmac: fix wrap around in conversion from constant to s16
- ARM: mvebu: declare asm symbols as character arrays in pmsu.c
- arm: dts: mediatek: Add missing cooling device properties for CPUs
- HID: hid-ntrig: add error handling for sysfs_create_group
- MIPS: boot: fix build rule of vmlinux.its.S
- perf/x86/intel/lbr: Fix incomplete LBR call stack
- scsi: bnx2i: add error handling for ioremap_nocache
- iomap: complete partial direct I/O writes synchronously
- scsi: megaraid_sas: Update controller info during resume
- EDAC, i7core: Fix memleaks and use-after-free on probe and remove
- ASoC: dapm: Fix potential DAI widget pointer deref when linking DAIs
- module: exclude SHN_UNDEF symbols from kallsyms api
- gpio: Fix wrong rounding in gpio-menz127
- nfsd: fix corrupted reply to badly ordered compound
- EDAC: Fix memleak in module init error path
- fs/lock: skip lock owner pid translation in case we are in init_pid_ns
- Input: xen-kbdfront - fix multi-touch XenStore node's locations
- iio: 104-quad-8: Fix off-by-one error in register selection
- ARM: dts: dra7: fix DCAN node addresses
- x86/mm: Expand static page table for fixmap space
- tty: serial: lpuart: avoid leaking struct tty_struct
- serial: cpm_uart: return immediately from console poll
- intel_th: Fix device removal logic
- spi: tegra20-slink: explicitly enable/disable clock
- spi: sh-msiof: Fix invalid SPI use during system suspend
- spi: sh-msiof: Fix handling of write value for SISTR register
- spi: rspi: Fix invalid SPI use during system suspend
- spi: rspi: Fix interrupted DMA transfers
- regulator: fix crash caused by null driver data
- USB: fix error handling in usb_driver_claim_interface()
- USB: handle NULL config in usb_find_alt_setting()
- usb: musb: dsps: do not disable CPPI41 irq in driver teardown
- slub: make ->cpu_partial unsigned int
- USB: usbdevfs: sanitize flags more
- USB: usbdevfs: restore warning for nonsensical flags
- USB: remove LPM management from usb_driver_claim_interface()
- IB/srp: Avoid that sg_reset -d ${srp_device} triggers an infinite loop
- IB/hfi1: Fix SL array bounds check
- IB/hfi1: Invalid user input can result in crash
- IB/hfi1: Fix context recovery when PBC has an UnsupportedVL
- RDMA/uverbs: Atomically flush and mark closed the comp event queue
- ovl: hash non-dir by lower inode for fsnotify
- drm/i915: Remove vma from object on destroy, not close
- serial: imx: restore handshaking irq for imx1
- qed: Wait for ready indication before rereading the shmem
- qed: Wait for MCP halt and resume commands to take place
- qed: Prevent a possible deadlock during driver load and unload
- qed: Avoid sending mailbox commands when MFW is not responsive
- thermal: of-thermal: disable passive polling when thermal zone is disabled
- isofs: reject hardware sector size > 2048 bytes
- tls: possible hang when do_tcp_sendpages hits sndbuf is full case
- bpf: sockmap: write_space events need to be passed to TCP handler
- net: hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES
- e1000: check on netif_running() before calling e1000_up()
- e1000: ensure to free old tx/rx rings in set_ringparam()
- crypto: cavium/nitrox - fix for command corruption in queue full case with
backlog submissions.
- hwmon: (ina2xx) fix sysfs shunt resistor read access
- hwmon: (adt7475) Make adt7475_read_word() return errors
- Revert "ARM: dts: imx7d: Invert legacy PCI irq mapping"
- drm/amdgpu: Enable/disable gfx PG feature in rlc safe mode
- drm/amdgpu: Update power state at the end of smu hw_init.
- ata: ftide010: Add a quirk for SQ201
- nvme-fcloop: Fix dropped LS's to removed target port
- ARM: dts: omap4-droid4: Fix emmc errors seen on some devices
- arm/arm64: smccc-1.1: Make return values unsigned long
- arm/arm64: smccc-1.1: Handle function result as parameters
- i2c: i801: Allow ACPI AML access I/O ports not reserved for SMBus
- x86/pti: Fix section mismatch warning/error
- media: v4l: event: Prevent freeing event subscriptions while accessed
- drm/amd/display/dc/dce: Fix multiple potential integer overflows
- drm/amd/display: fix use of uninitialized memory
- RDMA/bnxt_re: Fix a bunch of off by one bugs in qplib_fp.c
- vhost_net: Avoid tx vring kicks during busyloop
- thermal: i.MX: Allow thermal probe to fail gracefully in case of bad
calibration.
- platform/x86: asus-wireless: Fix uninitialized symbol usage
- ACPI / button: increment wakeup count only when notified
- media: ov772x: add checks for register read errors
- media: ov772x: allow i2c controllers without I2C_FUNC_PROTOCOL_MANGLING
- drm/omap: gem: Fix mm_list locking
- ASoC: rsnd: SSI parent cares SWSP bit
- staging: pi433: fix race condition in pi433_ioctl
- perf tests: Fix indexing when invoking subtests
- gpio: tegra: Fix tegra_gpio_irq_set_type()
- block: fix deadline elevator drain for zoned block devices
- serial: mvebu-uart: Fix reporting of effective CSIZE to userspace
- intel_th: Fix resource handling for ACPI glue layer
- ext2, dax: set ext2_dax_aops for dax files
- IB/hfi1: Fix destroy_qp hang after a link down
- ARM: OMAP2+: Fix null hwmod for ti-sysc debug
- ARM: OMAP2+: Fix module address for modules using mpu_rt_idx
- bus: ti-sysc: Fix module register ioremap for larger offsets
- drm/amdgpu: fix preamble handling
- amdgpu: fix multi-process hang issue
- tcp_bbr: add bbr_check_probe_rtt_done() helper
- tcp_bbr: in restart from idle, see if we should exit PROBE_RTT
- net: hns3: fix page_offset overflow when CONFIG_ARM64_64K_PAGES
- ixgbe: fix driver behaviour after issuing VFLR
- powerpc/pseries: Fix unitialized timer reset on migration
* Kernel 4.15.0-50 or newer wont boot as Xen-DomU with PVH (LP: #1829378)
- SAUCE: ACPI / bus: Fix NULL pointer dereference in
acpi_quirk_matches_bios_ids()
* CVE-2019-10126
- mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()
* CVE-2019-3846
- mwifiex: Fix possible buffer overflows at parsing bss descriptor
* CVE-2019-12818
- net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails
* CVE-2019-12984
- nfc: Ensure presence of required attributes in the deactivate_target handler
* Bionic update: upstream stable patchset 2019-07-10 (LP: #1836117)
- i2c: xiic: Make the start and the byte count write atomic
- i2c: i801: fix DNV's SMBCTRL register offset
- scsi: lpfc: Correct MDS diag and nvmet configuration
- nbd: don't allow invalid blocksize settings
- block: bfq: swap puts in bfqg_and_blkg_put
- android: binder: fix the race mmap and alloc_new_buf_locked
- MIPS: VDSO: Match data page cache colouring when D$ aliases
- SMB3: Backup intent flag missing for directory opens with backupuid mounts
- smb3: check for and properly advertise directory lease support
- Btrfs: fix data corruption when deduplicating between different files
- KVM: s390: vsie: copy wrapping keys to right place
- KVM: VMX: Do not allow reexecute_instruction() when skipping MMIO instr
- ALSA: hda - Fix cancel_work_sync() stall from jackpoll work
- cpu/hotplug: Adjust misplaced smb() in cpuhp_thread_fun()
- cpu/hotplug: Prevent state corruption on error rollback
- x86/microcode: Make sure boot_cpu_data.microcode is up-to-date
- x86/microcode: Update the new microcode revision unconditionally
- crypto: aes-generic - fix aes-generic regression on powerpc
- tpm: separate cmd_ready/go_idle from runtime_pm
- ARC: [plat-axs*]: Enable SWAP
- misc: mic: SCIF Fix scif_get_new_port() error handling
- ethtool: Remove trailing semicolon for static inline
- i2c: aspeed: Add an explicit type casting for *get_clk_reg_val
- Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV
- gpio: tegra: Move driver registration to subsys_init level
- selftests/bpf: fix a typo in map in map test
- media: davinci: vpif_display: Mix memory leak on probe error path
- media: dw2102: Fix memleak on sequence of probes
- net: phy: Fix the register offsets in Broadcom iProc mdio mux driver
- blk-mq: fix updating tags depth
- scsi: target: fix __transport_register_session locking
- md/raid5: fix data corruption of replacements after originals dropped
- timers: Clear timer_base::must_forward_clk with timer_base::lock held
- media: camss: csid: Configure data type and decode format properly
- gpu: ipu-v3: default to id 0 on missing OF alias
- misc: ti-st: Fix memory leak in the error path of probe()
- uio: potential double frees if __uio_register_device() fails
- firmware: vpd: Fix section enabled flag on vpd_section_destroy
- Drivers: hv: vmbus: Cleanup synic memory free path
- tty: rocket: Fix possible buffer overwrite on register_PCI
- f2fs: fix to active page in lru list for read path
- f2fs: do not set free of current section
- f2fs: fix defined but not used build warnings
- perf tools: Allow overriding MAX_NR_CPUS at compile time
- NFSv4.0 fix client reference leak in callback
- perf c2c report: Fix crash for empty browser
- perf evlist: Fix error out while applying initial delay and LBR
- macintosh/via-pmu: Add missing mmio accessors
- ath9k: report tx status on EOSP
- ath9k_hw: fix channel maximum power level test
- ath10k: prevent active scans on potential unusable channels
- wlcore: Set rx_status boottime_ns field on rx
- MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET
- scsi: 3ware: fix return 0 on the error path of probe
- tools/testing/nvdimm: kaddr and pfn can be NULL to ->direct_access()
- ath10k: disable bundle mgmt tx completion event support
- Bluetooth: hidp: Fix handling of strncpy for hid->name information
- pinctrl: imx: off by one in imx_pinconf_group_dbg_show()
- gpio: ml-ioh: Fix buffer underwrite on probe error path
- pinctrl/amd: only handle irq if it is pending and unmasked
- net: mvneta: fix mtu change on port without link
- f2fs: try grabbing node page lock aggressively in sync scenario
- f2fs: fix to skip GC if type in SSA and SIT is inconsistent
- tpm_tis_spi: Pass the SPI IRQ down to the driver
- tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
- f2fs: fix to do sanity check with reserved blkaddr of inline inode
- MIPS: Octeon: add missing of_node_put()
- MIPS: generic: fix missing of_node_put()
- net: dcb: For wild-card lookups, use priority -1, not 0
- dm cache: only allow a single io_mode cache feature to be requested
- Input: atmel_mxt_ts - only use first T9 instance
- media: s5p-mfc: Fix buffer look up in s5p_mfc_handle_frame_{new, copy_time}
functions
- media: helene: fix xtal frequency setting at power on
- f2fs: fix to wait on page writeback before updating page
- f2fs: Fix uninitialized return in f2fs_ioc_shutdown()
- iommu/ipmmu-vmsa: Fix allocation in atomic context
- mfd: ti_am335x_tscadc: Fix struct clk memory leak
- f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize
- NFSv4.1: Fix a potential layoutget/layoutrecall deadlock
- MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON
- RDMA/cma: Do not ignore net namespace for unbound cm_id
- inet: frags: change inet_frags_init_net() return value
- inet: frags: add a pointer to struct netns_frags
- inet: frags: refactor ipfrag_init()
- inet: frags: refactor ipv6_frag_init()
- inet: frags: refactor lowpan_net_frag_init()
- ipv6: export ip6 fragments sysctl to unprivileged users
- rhashtable: add schedule points
- inet: frags: use rhashtables for reassembly units
- inet: frags: remove some helpers
- inet: frags: get rif of inet_frag_evicting()
- inet: frags: remove inet_frag_maybe_warn_overflow()
- inet: frags: break the 2GB limit for frags storage
- inet: frags: do not clone skb in ip_expire()
- ipv6: frags: rewrite ip6_expire_frag_queue()
- rhashtable: reorganize struct rhashtable layout
- inet: frags: reorganize struct netns_frags
- inet: frags: get rid of ipfrag_skb_cb/FRAG_CB
- inet: frags: fix ip6frag_low_thresh boundary
- ip: discard IPv4 datagrams with overlapping segments.
- net: modify skb_rbtree_purge to return the truesize of all purged skbs.
- ipv6: defrag: drop non-last frags smaller than min mtu
- net: pskb_trim_rcsum() and CHECKSUM_COMPLETE are friends
- mtd: ubi: wl: Fix error return code in ubi_wl_init()
- tun: fix use after free for ptr_ring
- tuntap: fix use after free during release
- autofs: fix autofs_sbi() does not check super block type
- KVM: PPC: Book3S HV: Use correct pagesize in kvm_unmap_radix()
- ARC: [plat-axs*/plat-hsdk]: Allow U-Boot to pass MAC-address to the kernel
- x86/apic/vector: Make error return value negative
- tc-testing: flush gact actions on test teardown
- pinctrl: berlin: fix 'pctrl->functions' allocation in
berlin_pinctrl_build_state
- powerpc/4xx: Fix error return path in ppc4xx_msi_probe()
- scsi: qla2xxx: Fix unintended Logout
- iwlwifi: pcie: don't access periphery registers when not available
- f2fs: Keep alloc_valid_block_count in sync
- f2fs: issue discard align to section in LFS mode
- device-dax: avoid hang on error before devm_memremap_pages()
- regulator: tps65217: Fix NULL pointer dereference on probe
- gpio: pxa: disable pinctrl calls for PXA3xx
- thermal_hwmon: Sanitize attribute name passed to hwmon
- f2fs: fix to do sanity check with extra_attr feature
- RDMA/hns: Add illegal hop_num judgement
- RDMA/hns: Update the data type of immediate data
- be2net: Fix memory leak in be_cmd_get_profile_config()
- net/mlx5: Fix use-after-free in self-healing flow
- net: qca_spi: Fix race condition in spi transfers
- rds: fix two RCU related problems
- net/mlx5: Check for error in mlx5_attach_interface
- net/mlx5: Fix debugfs cleanup in the device init/remove flow
- net/mlx5: E-Switch, Fix memory leak when creating switchdev mode FDB tables
- net/tls: Set count of SG entries if sk_alloc_sg returns -ENOSPC
- erspan: fix error handling for erspan tunnel
- erspan: return PACKET_REJECT when the appropriate tunnel is not found
- tcp: really ignore MSG_ZEROCOPY if no SO_ZEROCOPY
- usb: dwc3: change stream event enable bit back to 13
- iommu/io-pgtable-arm-v7s: Abort allocation when table address overflows the
PTE
- ALSA: msnd: Fix the default sample sizes
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE() macro
- xfrm: fix 'passing zero to ERR_PTR()' warning
- amd-xgbe: use dma_mapping_error to check map errors
- gfs2: Special-case rindex for gfs2_grow
- clk: imx6ul: fix missing of_node_put()
- clk: core: Potentially free connection id
- clk: clk-fixed-factor: Clear OF_POPULATED flag in case of failure
- kbuild: add .DELETE_ON_ERROR special target
- media: tw686x: Fix oops on buffer alloc failure
- dmaengine: pl330: fix irq race with terminate_all
- MIPS: ath79: fix system restart
- media: videobuf2-core: check for q->error in vb2_core_qbuf()
- IB/rxe: Drop QP0 silently
- block: allow max_discard_segments to be stacked
- IB/ipoib: Fix error return code in ipoib_dev_init()
- mtd/maps: fix solutionengine.c printk format warnings
- media: ov5645: Supported external clock is 24MHz
- perf test: Fix subtest number when showing results
- gfs2: Don't reject a supposedly full bitmap if we have blocks reserved
- perf tools: Synthesize GROUP_DESC feature in pipe mode
- fbdev: omapfb: off by one in omapfb_register_client()
- perf tools: Fix struct comm_str removal crash
- video: goldfishfb: fix memory leak on driver remove
- fbdev/via: fix defined but not used warning
- perf powerpc: Fix callchain ip filtering when return address is in a
register
- video: fbdev: pxafb: clear allocated memory for video modes
- fbdev: Distinguish between interlaced and progressive modes
- ARM: exynos: Clear global variable on init error path
- perf powerpc: Fix callchain ip filtering
- nvme-rdma: unquiesce queues when deleting the controller
- powerpc/powernv: opal_put_chars partial write fix
- staging: bcm2835-camera: fix timeout handling in wait_for_completion_timeout
- staging: bcm2835-camera: handle wait_for_completion_timeout return properly
- ASoC: rt5514: Fix the issue of the delay volume applied
- MIPS: jz4740: Bump zload address
- mac80211: restrict delayed tailroom needed decrement
- Smack: Fix handling of IPv4 traffic received by PF_INET6 sockets
- wan/fsl_ucc_hdlc: use IS_ERR_VALUE() to check return value of qe_muram_alloc
- reset: imx7: Fix always writing bits as 0
- nfp: avoid buffer leak when FW communication fails
- xen-netfront: fix queue name setting
- arm64: dts: qcom: db410c: Fix Bluetooth LED trigger
- ARM: dts: qcom: msm8974-hammerhead: increase load on l20 for sdhci
- s390/qeth: fix race in used-buffer accounting
- s390/qeth: reset layer2 attribute on layer switch
- platform/x86: toshiba_acpi: Fix defined but not used build warnings
- KVM: arm/arm64: Fix vgic init race
- drivers/base: stop new probing during shutdown
- i2c: aspeed: Fix initial values of master and slave state
- dmaengine: mv_xor_v2: kill the tasklets upon exit
- crypto: sharah - Unregister correct algorithms for SAHARA 3
- xen-netfront: fix warn message as irq device name has '/'
- RDMA/cma: Protect cma dev list with lock
- pstore: Fix incorrect persistent ram buffer mapping
- xen/netfront: fix waiting for xenbus state change
- IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler
- mmc: omap_hsmmc: fix wakeirq handling on removal
- ipmi: Fix I2C client removal in the SSIF driver
- Tools: hv: Fix a bug in the key delete code
- xhci: Fix use after free for URB cancellation on a reallocated endpoint
- usb: Don't die twice if PCI xhci host is not responding in resume
- mei: ignore not found client in the enumeration
- mei: bus: need to unlink client before freeing
- USB: Add quirk to support DJI CineSSD
- usb: uas: add support for more quirk flags
- usb: Avoid use-after-free by flushing endpoints early in usb_set_interface()
- usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame()
- USB: add quirk for WORLDE Controller KS49 or Prodipe MIDI 49C USB controller
- usb: gadget: udc: renesas_usb3: fix maxpacket size of ep0
- USB: net2280: Fix erroneous synchronization change
- USB: serial: io_ti: fix array underflow in completion handler
- usb: misc: uss720: Fix two sleep-in-atomic-context bugs
- USB: serial: ti_usb_3410_5052: fix array underflow in completion handler
- USB: yurex: Fix buffer over-read in yurex_write()
- Revert "cdc-acm: implement put_char() and flush_chars()"
- cifs: prevent integer overflow in nxt_dir_entry()
- CIFS: fix wrapping bugs in num_entries()
- xtensa: ISS: don't allocate memory in platform_setup
- perf/core: Force USER_DS when recording user stack data
- NFSv4.1 fix infinite loop on I/O.
- binfmt_elf: Respect error return from `regset->active'
- net/mlx5: Add missing SET_DRIVER_VERSION command translation
- arm64: dts: uniphier: Add missing cooling device properties for CPUs
- audit: fix use-after-free in audit_add_watch
- mtdchar: fix overflows in adjustment of `count`
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
- evm: Don't deadlock if a crypto algorithm is unavailable
- KVM: PPC: Book3S HV: Add of_node_put() in success path
- security: check for kstrdup() failure in lsm_append()
- MIPS: loongson64: cs5536: Fix PCI_OHCI_INT_REG reads
- configfs: fix registered group removal
- pinctrl: rza1: Fix selector use for groups and functions
- sched/core: Use smp_mb() in wake_woken_function()
- efi/esrt: Only call efi_mem_reserve() for boot services memory
- ARM: hisi: handle of_iomap and fix missing of_node_put
- ARM: hisi: fix error handling and missing of_node_put
- ARM: hisi: check of_iomap and fix missing of_node_put
- liquidio: fix hang when re-binding VF host drv after running DPDK VF driver
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
- tty: fix termios input-speed encoding when using BOTHER
- tty: fix termios input-speed encoding
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
- mmc: tegra: prevent HS200 on Tegra 3
- mmc: sdhci: do not try to use 3.3V signaling if not supported
- drm/nouveau: Fix runtime PM leak in drm_open()
- drm/nouveau/debugfs: Wake up GPU before doing any reclocking
- drm/nouveau: tegra: Detach from ARM DMA/IOMMU mapping
- parport: sunbpp: fix error return code
- sched/fair: Fix util_avg of new tasks for asymmetric systems
- coresight: Handle errors in finding input/output ports
- coresight: tpiu: Fix disabling timeouts
- coresight: ETM: Add support for Arm Cortex-A73 and Cortex-A35
- staging: bcm2835-audio: Don't leak workqueue if open fails
- gpio: pxa: Fix potential NULL dereference
- gpiolib: Mark gpio_suffixes array with __maybe_unused
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
- input: rohm_bu21023: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
- drm/amdkfd: Fix error codes in kfd_get_process
- rtc: bq4802: add error handling for devm_ioremap
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
- scsi: libfc: fixup 'sleeping function called from invalid context'
- drm/panel: type promotion bug in s6e8aa0_read_mtp_id()
- blk-mq: only attempt to merge bio if there is rq in sw queue
- blk-mq: avoid to synchronize rcu inside blk_cleanup_queue()
- pinctrl: msm: Fix msm_config_group_get() to be compliant
- pinctrl: qcom: spmi-gpio: Fix pmic_gpio_config_get() to be compliant
- clk: tegra: bpmp: Don't crash when a clock fails to register
- mei: bus: type promotion bug in mei_nfc_if_version()
- earlycon: Initialize port->uartclk based on clock-frequency property
- earlycon: Remove hardcoded port->uartclk initialization in of_setup_earlycon
- net/ipv6: prevent use after free in ip6_route_mpath_notify
- Partial revert "e1000e: Avoid receiver overrun interrupt bursts"
- e1000e: Fix queue interrupt re-raising in Other interrupt
- e1000e: Avoid missed interrupts following ICR read
- Revert "e1000e: Separate signaling for link check/link up"
- e1000e: Fix link check race condition
- e1000e: Fix check_for_link return value with autoneg off
- tipc: orphan sock in tipc_release()
- net/mlx5: Fix not releasing read lock when adding flow rules
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
- iwlwifi: cancel the injective function between hw pointers to tfd entry
index
- kbuild: do not update config when running install targets
- omapfb: rename omap2 module to omap2fb.ko
- [Config] Rename omapfb to omap2fb
- perf script: Show correct offsets for DWARF-based unwinding
- iommu/ipmmu-vmsa: IMUCTRn.TTSEL needs a special usage on R-Car Gen3
- ipmi: Move BT capabilities detection to the detect call
- ovl: fix oopses in ovl_fill_super() failure paths
- usb: xhci: fix interrupt transfer error happened on MTK platforms
- usb: mtu3: fix error of xhci port id when enable U3 dual role
- dm verity: fix crash on bufio buffer that was allocated with vmalloc
- cifs: integer overflow in in SMB2_ioctl()
- perf tools: Fix maps__find_symbol_by_name()
- NFSv4: Fix a tracepoint Oops in initiate_file_draining()
- of: add helper to lookup compatible child node
- mmc: meson-mx-sdio: fix OF child-node lookup
- bpf: fix rcu annotations in compute_effective_progs()
- spi: dw: fix possible race condition
- PM / devfreq: use put_device() instead of kfree()
- ASoC: hdmi-codec: fix routing
- drm/amd/display: support access ddc for mst branch
- rcutorture: Use monotonic timestamp for stall detection
- selftests: vDSO - fix to return KSFT_SKIP when test couldn't be run
- selftests/android: initialize heap_type to avoid compiling warning
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
- scsi: lpfc: Fix panic if driver unloaded when port is offline
- arm64: perf: Disable PMU while processing counter overflows
- staging: fsl-dpaa2/eth: Fix DMA mapping direction
- block/DAC960.c: fix defined but not used build warnings
- IB/mlx5: fix uaccess beyond "count" in debugfs read/write handlers
* Bionic update: upstream stable patchset 2019-07-09 (LP: #1835972)
- vti6: fix PMTU caching and reporting on xmit
- xfrm: fix missing dst_release() after policy blocking lbcast and multicast
- xfrm: free skb if nlsk pointer is NULL
- esp6: fix memleak on error path in esp6_input
- mac80211: add stations tied to AP_VLANs during hw reconfig
- ext4: clear mmp sequence number when remounting read-only
- nl80211: Add a missing break in parse_station_flags
- drm/bridge: adv7511: Reset registers on hotplug
- scsi: target: iscsi: cxgbit: fix max iso npdu calculation
- scsi: libiscsi: fix possible NULL pointer dereference in case of TMF
- drm/imx: imx-ldb: disable LDB on driver bind
- drm/imx: imx-ldb: check if channel is enabled before printing warning
- nbd: don't requeue the same request twice.
- nbd: handle unexpected replies better
- usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in
init_controller()
- usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in
r8a66597_queue()
- usb: gadget: f_uac2: fix error handling in afunc_bind (again)
- usb: gadget: u_audio: fix pcm/card naming in g_audio_setup()
- usb: gadget: u_audio: update hw_ptr in iso_complete after data copied
- usb: gadget: u_audio: remove caching of stream buffer parameters
- usb: gadget: u_audio: remove cached period bytes value
- usb: gadget: u_audio: protect stream runtime fields with stream spinlock
- usb/phy: fix PPC64 build errors in phy-fsl-usb.c
- tools: usb: ffs-test: Fix build on big endian systems
- usb: gadget: f_uac2: fix endianness of 'struct cntrl_*_lay3'
- netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy()
- bpf, ppc64: fix unexpected r0=0 exit path inside bpf_xadd
- netfilter: nf_tables: fix memory leaks on chain rename
- netfilter: nf_tables: don't allow to rename to already-pending name
- KVM: vmx: use local variable for current_vmptr when emulating VMPTRST
- tools/power turbostat: fix -S on UP systems
- net: caif: Add a missing rcu_read_unlock() in caif_flow_cb
- qed: Fix link flap issue due to mismatching EEE capabilities.
- qed: Fix possible race for the link state value.
- qed: Correct Multicast API to reflect existence of 256 approximate buckets.
- atl1c: reserve min skb headroom
- net: prevent ISA drivers from building on PPC32
- can: mpc5xxx_can: check of_iomap return before use
- can: m_can: Move accessing of message ram to after clocks are enabled
- i2c: davinci: Avoid zero value of CLKH
- perf/x86/amd/ibs: Don't access non-started event
- media: staging: omap4iss: Include asm/cacheflush.h after generic includes
- bnx2x: Fix invalid memory access in rss hash config path.
- net: axienet: Fix double deregister of mdio
- locking/rtmutex: Allow specifying a subclass for nested locking
- i2c/mux, locking/core: Annotate the nested rt_mutex usage
- sched/rt: Restore rt_runtime after disabling RT_RUNTIME_SHARE
- x86/boot: Fix if_changed build flip/flop bug
- selftests/ftrace: Add snapshot and tracing_on test case
- ipc/sem.c: prevent queue.status tearing in semop
- zswap: re-check zswap_is_full() after do zswap_shrink()
- tools/power turbostat: Read extended processor family from CPUID
- ARC: dma [non-IOC] setup SMP_CACHE_BYTES and cache_line_size
- bpf: use GFP_ATOMIC instead of GFP_KERNEL in bpf_parse_prog()
- nfp: flower: fix port metadata conversion bug
- enic: handle mtu change for vf properly
- ARC: [plat-eznps] Add missing struct nps_host_reg_aux_dpc
- arc: [plat-eznps] fix data type errors in platform headers
- arc: [plat-eznps] fix printk warning in arc/plat-eznps/mtm.c
- arc: fix build errors in arc/include/asm/delay.h
- arc: fix type warnings in arc/mm/cache.c
- sparc/time: Add missing __init to init_tick_ops()
- sparc: use asm-generic version of msi.h
- enic: do not call enic_change_mtu in enic_probe
- mm: delete historical BUG from zap_pmd_range()
- drivers: net: lmc: fix case value for target abort error
- memcg: remove memcg_cgroup::id from IDR on mem_cgroup_css_alloc() failure
- gpiolib-acpi: make sure we trigger edge events at least once on boot
- scsi: fcoe: fix use-after-free in fcoe_ctlr_els_send
- scsi: fcoe: drop frames in ELS LOGO error path
- scsi: vmw_pvscsi: Return DID_RESET for status SAM_STAT_COMMAND_TERMINATED
- mm/memory.c: check return value of ioremap_prot
- mei: don't update offset in write
- cifs: add missing debug entries for kconfig options
- cifs: check kmalloc before use
- smb3: enumerating snapshots was leaving part of the data off end
- smb3: Do not send SMB3 SET_INFO if nothing changed
- smb3: don't request leases in symlink creation and query
- smb3: fill in statfs fsid and correct namelen
- btrfs: use correct compare function of dirty_metadata_bytes
- btrfs: don't leak ret from do_chunk_alloc
- Btrfs: fix btrfs_write_inode vs delayed iput deadlock
- iommu/arm-smmu: Error out only if not enough context interrupts
- printk: Split the code for storing a message into the log buffer
- printk: Create helper function to queue deferred console handling
- printk/nmi: Prevent deadlock when accessing the main log buffer in NMI
- kprobes/arm64: Fix %p uses in error messages
- arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid()
- arm64: dts: rockchip: corrected uart1 clock-names for rk3328
- KVM: arm/arm64: Skip updating PMD entry if no change
- KVM: arm/arm64: Skip updating PTE entry if no change
- stop_machine: Reflow cpu_stop_queue_two_works()
- ext4: check for NUL characters in extended attribute's name
- ext4: sysfs: print ext4_super_block fields as little-endian
- ext4: reset error code in ext4_find_entry in fallback
- platform/x86: ideapad-laptop: Apply no_hw_rfkill to Y20-15IKBM, too
- x86/vdso: Fix vDSO build if a retpoline is emitted
- x86/process: Re-export start_thread()
- x86/kvm/vmx: Remove duplicate l1d flush definitions
- fuse: Add missed unlock_page() to fuse_readpages_fill()
- udl-kms: change down_interruptible to down
- udl-kms: handle allocation failure
- udl-kms: fix crash due to uninitialized memory
- udl-kms: avoid division
- b43legacy/leds: Ensure NUL-termination of LED name string
- b43/leds: Ensure NUL-termination of LED name string
- ASoC: dpcm: don't merge format from invalid codec dai
- ASoC: zte: Fix incorrect PCM format bit usages
- ASoC: sirf: Fix potential NULL pointer dereference
- pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show()
- x86/vdso: Fix lsl operand order
- x86/irqflags: Mark native_restore_fl extern inline
- x86/entry/64: Wipe KASAN stack shadow before rewind_stack_do_exit()
- s390/mm: fix addressing exception after suspend/resume
- s390/numa: move initial setup of node_to_cpumask_map
- kprobes/arm: Fix %p uses in error messages
- kprobes: Make list and blacklist root user read only
- MIPS: Correct the 64-bit DSP accumulator register size
- MIPS: Always use -march=<arch>, not -<arch> shortcuts
- MIPS: Change definition of cpu_relax() for Loongson-3
- MIPS: lib: Provide MIPS64r6 __multi3() for GCC < 7
- tpm: Return the actual size when receiving an unsupported command
- scsi: mpt3sas: Fix _transport_smp_handler() error path
- scsi: sysfs: Introduce sysfs_{un,}break_active_protection()
- scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock
- clk: rockchip: fix clk_i2sout parent selection bits on rk3399
- PM / clk: signedness bug in of_pm_clk_add_clks()
- power: generic-adc-battery: fix out-of-bounds write when copying channel
properties
- power: generic-adc-battery: check for duplicate properties copied from iio
channels
- watchdog: Mark watchdog touch functions as notrace
- gcc-plugins: Add include required by GCC release 8
- gcc-plugins: Use dynamic initializers
- Btrfs: fix send failure when root has deleted files still open
- Btrfs: send, fix incorrect file layout after hole punching beyond eof
- hwmon: (k10temp) 27C Offset needed for Threadripper2
- KVM: arm/arm64: Fix potential loss of ptimer interrupts
- KVM: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked
- perf kvm: Fix subcommands on s390
- ext4: use ext4_warning() for sb_getblk failure
- platform/x86: wmi: Do not mix pages and kmalloc
- KVM: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd
- lib/vsprintf: Do not handle %pO[^F] as %px
- soc: qcom: rmtfs-mem: fix memleak in probe error paths
- kprobes: Show blacklist addresses as same as kallsyms does
- kprobes: Replace %p with other pointer types
- MIPS: memset.S: Fix byte_fixup for MIPSr6
- mtd: rawnand: qcom: wait for desc completion in all BAM channels
- net: 6lowpan: fix reserved space for single frames
- net: mac802154: tx: expand tailroom if necessary
- 9p/net: Fix zero-copy path in the 9p virtio transport
- spi: davinci: fix a NULL pointer dereference
- spi: pxa2xx: Add support for Intel Ice Lake
- spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe
- spi: cadence: Change usleep_range() to udelay(), for atomic context
- mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS
- readahead: stricter check for bdi io_pages
- block: blk_init_allocated_queue() set q->fq as NULL in the fail case
- block: really disable runtime-pm for blk-mq
- drm/i915/userptr: reject zero user_size
- libertas: fix suspend and resume for SDIO connected cards
- media: Revert "[media] tvp5150: fix pad format frame height"
- mailbox: xgene-slimpro: Fix potential NULL pointer dereference
- Replace magic for trusting the secondary keyring with #define
- powerpc/fadump: handle crash memory ranges array index overflow
- powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
- PCI: Add wrappers for dev_printk()
- cxl: Fix wrong comparison in cxl_adapter_context_get()
- ib_srpt: Fix a use-after-free in srpt_close_ch()
- RDMA/rxe: Set wqe->status correctly if an unexpected response is received
- 9p: fix multiple NULL-pointer-dereferences
- fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
- 9p/virtio: fix off-by-one error in sg list bounds check
- net/9p/client.c: version pointer uninitialized
- net/9p/trans_fd.c: fix race-condition by flushing workqueue before the
kfree()
- dm integrity: change 'suspending' variable from bool to int
- dm thin: stop no_space_timeout worker when switching to write-mode
- dm cache metadata: save in-core policy_hint_size to on-disk superblock
- dm cache metadata: set dirty on all cache blocks after a crash
- dm crypt: don't decrease device limits
- uart: fix race between uart_put_char() and uart_shutdown()
- Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind()
- iio: sca3000: Fix missing return in switch
- iio: ad9523: Fix displayed phase
- iio: ad9523: Fix return value for ad952x_store()
- extcon: Release locking when sending the notification of connector state
- vmw_balloon: fix inflation of 64-bit GFNs
- vmw_balloon: do not use 2MB without batching
- vmw_balloon: VMCI_DOORBELL_SET does not check status
- vmw_balloon: fix VMCI use when balloon built into kernel
- rtc: omap: fix potential crash on power off
- tracing: Do not call start/stop() functions when tracing_on does not change
- tracing/blktrace: Fix to allow setting same value
- printk/tracing: Do not trace printk_nmi_enter()
- livepatch: Validate module/old func name length
- uprobes: Use synchronize_rcu() not synchronize_sched()
- mfd: hi655x: Fix regmap area declared size for hi655x
- ovl: fix wrong use of impure dir cache in ovl_iterate()
- drivers/block/zram/zram_drv.c: fix bug storing backing_dev
- cpufreq: governor: Avoid accessing invalid governor_data
- PM / sleep: wakeup: Fix build error caused by missing SRCU support
- KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages
- xtensa: limit offsets in __loop_cache_{all,page}
- xtensa: increase ranges in ___invalidate_{i,d}cache_all
- block, bfq: return nbytes and not zero from struct cftype .write() method
- pnfs/blocklayout: off by one in bl_map_stripe()
- NFSv4 client live hangs after live data migration recovery
- NFSv4: Fix locking in pnfs_generic_recover_commit_reqs
- NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()
- ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
- iommu/vt-d: Add definitions for PFSID
- iommu/vt-d: Fix dev iotlb pfsid use
- sys: don't hold uts_sem while accessing userspace memory
- userns: move user access out of the mutex
- ubifs: Fix memory leak in lprobs self-check
- ubifs: Check data node size before truncate
- ubifs: Fix synced_i_size calculation for xattr inodes
- pwm: tiehrpwm: Don't use emulation mode bits to control PWM output
- pwm: tiehrpwm: Fix disabling of output of PWMs
- fb: fix lost console when the user unplugs a USB adapter
- udlfb: set optimal write delay
- libnvdimm: fix ars_status output length calculation
- bcache: release dc->writeback_lock properly in bch_writeback_thread()
- perf auxtrace: Fix queue resize
- crypto: caam - fix DMA mapping direction for RSA forms 2 & 3
- crypto: caam/jr - fix descriptor DMA unmapping
- crypto: caam/qi - fix error path in xts setkey
- arm64: mm: always enable CONFIG_HOLES_IN_ZONE
- mmc: renesas_sdhi_internal_dmac: mask DMAC interrupts
- blkcg: Introduce blkg_root_lookup()
- powerpc64/ftrace: Include ftrace.h needed for enable/disable calls
- IB/mlx5: Fix leaking stack memory to userspace
- rtc: omap: fix resource leak in registration error path
- ACPICA: AML Parser: skip opcodes that open a scope upon parse failure
- ALSA: ac97: fix device initialization in the compat layer
- ALSA: ac97: fix check of pm_runtime_get_sync failure
- ALSA: ac97: fix unbalanced pm_runtime_enable
- nfsd: fix leaked file lock with nfs exported overlayfs
- ubifs: Fix directory size calculation for symlinks
- mm, dev_pagemap: Do not clear ->mapping on final put
- act_ife: fix a potential use-after-free
- ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT
state
- net: bcmgenet: use MAC link status for fixed phy
- net: macb: do not disable MDIO bus at open/close time
- qlge: Fix netdev features configuration.
- r8169: add support for NCube 8168 network card
- tcp: do not restart timewait timer on rst reception
- vti6: remove !skb->ignore_df check from vti6_xmit()
- net/sched: act_pedit: fix dump of extended layered op
- tipc: fix a missing rhashtable_walk_exit()
- nfp: wait for posted reconfigs when disabling the device
- sctp: hold transport before accessing its asoc in sctp_transport_get_next
- mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge
- vhost: correctly check the iova range when waking virtqueue
- hv_netvsc: ignore devices that are not PCI
- act_ife: move tcfa_lock down to where necessary
- act_ife: fix a potential deadlock
- net: sched: action_ife: take reference to meta module
- cifs: check if SMB2 PDU size has been padded and suppress the warning
- hfsplus: don't return 0 when fill_super() failed
- hfs: prevent crash on exit from failed search
- sunrpc: Don't use stack buffer with scatterlist
- fork: don't copy inconsistent signal handler state to child
- reiserfs: change j_timestamp type to time64_t
- hfsplus: fix NULL dereference in hfsplus_lookup()
- fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries
- fat: validate ->i_start before using
- scripts: modpost: check memory allocation results
- virtio: pci-legacy: Validate queue pfn
- x86/mce: Add notifier_block forward declaration
- IB/hfi1: Invalid NUMA node information can cause a divide by zero
- pwm: meson: Fix mux clock names
- mm/fadvise.c: fix signed overflow UBSAN complaint
- fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot()
- platform/x86: intel_punit_ipc: fix build errors
- netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
- s390/kdump: Fix memleak in nt_vmcoreinfo
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
- mfd: sm501: Set coherent_dma_mask when creating subdevices
- platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360
- netfilter: fix memory leaks on netlink_dump_start error
- tcp, ulp: add alias for all ulp modules
- RDMA/hns: Fix usage of bitmap allocation functions return values
- net: hns3: Fix for command format parsing error in
hclge_is_all_function_id_zero
- perf tools: Check for null when copying nsinfo.
- irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP
- net/9p/trans_fd.c: fix race by holding the lock
- net/9p: fix error path of p9_virtio_probe
- powerpc/uaccess: Enable get_user(u64, *p) on 32-bit
- powerpc: Fix size calculation using resource_size()
- perf probe powerpc: Fix trace event post-processing
- block: bvec_nr_vecs() returns value for wrong slab
- s390/dasd: fix hanging offline processing due to canceled worker
- s390/dasd: fix panic for failed online processing
- ACPI / scan: Initialize status to ACPI_STA_DEFAULT
- scsi: aic94xx: fix an error code in aic94xx_init()
- NFSv4: Fix error handling in nfs4_sp4_select_mode()
- Input: do not use WARN() in input_alloc_absinfo()
- xen/balloon: fix balloon initialization for PVH Dom0
- PCI: mvebu: Fix I/O space end address calculation
- dm kcopyd: avoid softlockup in run_complete_job
- staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice
- ASoC: rt5677: Fix initialization of rt5677_of_match.data
- iommu/omap: Fix cache flushes on L2 table entries
- selftests/powerpc: Kill child processes on SIGINT
- RDS: IB: fix 'passing zero to ERR_PTR()' warning
- cfq: Suppress compiler warnings about comparisons
- smb3: fix reset of bytes read and written stats
- SMB3: Number of requests sent should be displayed for SMB3 not just CIFS
- powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning
- powerpc/64s: Make rfi_flush_fallback a little more robust
- powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX.
- clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399
- KVM: vmx: track host_state.loaded using a loaded_vmcs pointer
- kvm: nVMX: Fix fault vector for VMX operation at CPL > 0
- btrfs: Exit gracefully when chunk map cannot be inserted to the tree
- btrfs: replace: Reset on-disk dev stats value after replace
- btrfs: relocation: Only remove reloc rb_trees if reloc control has been
initialized
- btrfs: Don't remove block group that still has pinned down bytes
- arm64: rockchip: Force CONFIG_PM on Rockchip systems
- ARM: rockchip: Force CONFIG_PM on Rockchip systems
- drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks"
- drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode
- drm/amd/pp/Polaris12: Fix a chunk of registers missed to program
- drm/amdgpu: update tmr mc address
- drm/amdgpu:add tmr mc address into amdgpu_firmware_info
- drm/amdgpu:add new firmware id for VCN
- drm/amdgpu:add VCN support in PSP driver
- drm/amdgpu:add VCN booting with firmware loaded by PSP
- debugobjects: Make stack check warning more informative
- mm: Fix devm_memremap_pages() collision handling
- HID: add quirk for another PIXART OEM mouse used by HP
- usb: dwc3: core: Fix ULPI PHYs and prevent phy_get/ulpi_init during
suspend/resume
- x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear
- x86/xen: don't write ptes directly in 32-bit PV guests
- drm/i915: Increase LSPCON timeout
- kbuild: make missing $DEPMOD a Warning instead of an Error
- kvm: x86: Set highest physical address bits in non-present/reserved SPTEs
- x86: kvm: avoid unused variable warning
- arm64: cpu_errata: include required headers
- ASoC: wm8994: Fix missing break in switch
- arm64: Fix mismatched cache line size detection
- arm64: Handle mismatched cache type
- tipc: fix the big/little endian issue in tipc_dest
- ip6_vti: fix a null pointer deference when destroy vti6 tunnel
- workqueue: skip lockdep wq dependency in cancel_work_sync()
- workqueue: re-add lockdep dependencies for flushing
- apparmor: fix an error code in __aa_create_ns()
- tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach
- netfilter: x_tables: do not fail xt_alloc_table_info too easilly
- ACPICA: ACPICA: add status check for acpi_hw_read before assigning return
value
- PCI: Match Root Port's MPS to endpoint's MPSS as necessary
- coccicheck: return proper error code on fail
- RISC-V: Use KBUILD_CFLAGS instead of KCFLAGS when building the vDSO
- blk-mq: count the hctx as active before allocating tag
- selinux: cleanup dentry and inodes on error in selinuxfs
- drm/amd/display: Read back max backlight value at boot
- btrfs: check-integrity: Fix NULL pointer dereference for degraded mount
- btrfs: lift uuid_mutex to callers of btrfs_open_devices
- btrfs: Fix a C compliance issue
- drm/i915: Nuke the LVDS lid notifier
- drm/edid: Quirk Vive Pro VR headset non-desktop.
- drm/amd/display: fix type of variable
- drm/amd/display: Don't share clk source between DP and HDMI
- drm/amd/display: update clk for various HDMI color depths
- drm/amd/display: Use requested HDMI aspect ratio
- drm/rockchip: lvds: add missing of_node_put
- drm/amd/display: Pass connector id when executing VBIOS CT
- drm/amd/display: Check if clock source in use before disabling
- drm/amdgpu: fix incorrect use of fcheck
- drm/amdgpu: fix incorrect use of drm_file->pid
- drm/i915: set DP Main Stream Attribute for color range on DDI platforms
- x86/tsc: Prevent result truncation on 32bit
* [Regression] Colour banding appears on Lenovo B50-80 integrated display
(LP: #1788308) // Bionic update: upstream stable patchset 2019-07-09
(LP: #1835972)
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80
* CVE-2019-12819
- mdio_bus: Fix use-after-free on device_register fails
* proc_thermal flooding dmesg (LP: #1824690)
- drivers: thermal: processor_thermal: Downgrade error message
* Bionic update: upstream stable patchset 2019-07-08 (LP: #1835845)
- bonding: avoid lockdep confusion in bond_get_stats()
- inet: frag: enforce memory limits earlier
- ipv4: frags: handle possible skb truesize change
- net: dsa: Do not suspend/resume closed slave_dev
- net: stmmac: Fix WoL for PCI-based setups
- rxrpc: Fix user call ID check in rxrpc_service_prealloc_one
- can: ems_usb: Fix memory leak on ems_usb_disconnect()
- virtio_balloon: fix another race between migration and ballooning
- x86/apic: Future-proof the TSC_DEADLINE quirk for SKX
- kvm: x86: vmx: fix vpid leak
- audit: fix potential null dereference 'context->module.name'
- userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
- RDMA/uverbs: Expand primary and alt AV port checks
- crypto: padlock-aes - Fix Nano workaround data corruption
- drm/vc4: Reset ->{x, y}_scaling[1] when dealing with uniplanar formats
- scsi: sg: fix minor memory leak in error path
- net/mlx5e: E-Switch, Initialize eswitch only if eswitch manager
- net/mlx5e: Set port trust mode to PCP as default
- x86/efi: Access EFI MMIO data as unencrypted when SEV is active
- drm/atomic: Check old_plane_state->crtc in drm_atomic_helper_async_check()
- drm/atomic: Initialize variables in drm_atomic_helper_async_check() to make
gcc happy
- scsi: qla2xxx: Fix unintialized List head crash
- scsi: qla2xxx: Fix NPIV deletion by calling wait_for_sess_deletion
- scsi: qla2xxx: Fix ISP recovery on unload
- scsi: qla2xxx: Return error when TMF returns
- genirq: Make force irq threading setup more robust
- nohz: Fix local_timer_softirq_pending()
- nohz: Fix missing tick reprogram when interrupting an inline softirq
- ring_buffer: tracing: Inherit the tracing setting to next ring buffer
- i2c: imx: Fix reinit_completion() use
- Btrfs: fix file data corruption after cloning a range and fsync
- nvme-pci: allocate device queues storage space at probe
- nvme-pci: Fix queue double allocations
- xfs: catch inode allocation state mismatch corruption
- xfs: validate cached inodes are free when allocated
- perf/x86/intel/uncore: Fix hardcoded index of Broadwell extra PCI devices
- parisc: Enable CONFIG_MLONGCALLS by default
- parisc: Define mb() and add memory barriers to assembler unlock sequences
- kasan: add no_sanitize attribute for clang builds
- Mark HI and TASKLET softirq synchronous
- xen/netfront: don't cache skb_shinfo()
- scsi: sr: Avoid that opening a CD-ROM hangs with runtime power management
enabled
- scsi: qla2xxx: Fix memory leak for allocating abort IOCB
- init: rename and re-order boot_cpu_state_init()
- root dentries need RCU-delayed freeing
- make sure that __dentry_kill() always invalidates d_seq, unhashed or not
- fix mntput/mntput race
- fix __legitimize_mnt()/mntput() race
- mtd: nand: qcom: Add a NULL check for devm_kasprintf()
- phy: phy-mtk-tphy: use auto instead of force to bypass utmi signals
- ARM: dts: imx6sx: fix irq for pcie bridge
- kprobes/x86: Fix %p uses in error messages
- x86/irqflags: Provide a declaration for native_save_fl
- x86/apic: Ignore secondary threads if nosmt=force
- x86/mm/kmmio: Make the tracer robust against L1TF
- tools headers: Synchronise x86 cpufeatures.h for L1TF additions
- x86/microcode: Allow late microcode loading with SMT disabled
- x86/smp: fix non-SMP broken build due to redefinition of
apic_id_is_primary_thread
- cpu/hotplug: Non-SMP machines do not make use of booted_once
- sched/deadline: Update rq_clock of later_rq when pushing a task
- zram: remove BD_CAP_SYNCHRONOUS_IO with writeback feature
- x86/l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled
- x86: i8259: Add missing include file
- kbuild: verify that $DEPMOD is installed
- crypto: x86/sha256-mb - fix digest copy in sha256_mb_mgr_get_comp_job_avx2()
- crypto: vmac - require a block cipher with 128-bit block size
- crypto: vmac - separate tfm and request context
- crypto: blkcipher - fix crash flushing dcache in error path
- crypto: ablkcipher - fix crash flushing dcache in error path
- crypto: skcipher - fix aligning block size in skcipher_copy_iv()
- crypto: skcipher - fix crash flushing dcache in error path
- x86/platform/UV: Mark memblock related init code and data correctly
- dccp: fix undefined behavior with 'cwnd' shift in ccid2_cwnd_restart()
- l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
- llc: use refcount_inc_not_zero() for llc_sap_find()
- vsock: split dwork to avoid reinitializations
- net_sched: Fix missing res info when create new tc_index filter
- vhost: reset metadata cache when initializing new IOTLB
- ip6_tunnel: use the right value for ipv4 min mtu check in ip6_tnl_xmit
- net: aquantia: Fix IFF_ALLMULTI flag functionality
- ALSA: hda - Sleep for 10ms after entering D3 on Conexant codecs
- ALSA: hda - Turn CX8200 into D3 as well upon reboot
- ALSA: vx222: Fix invalid endian conversions
- ALSA: virmidi: Fix too long output trigger loop
- ALSA: cs5535audio: Fix invalid endian conversion
- ALSA: hda: Correct Asrock B85M-ITX power_save blacklist entry
- ALSA: memalloc: Don't exceed over the requested size
- ALSA: vxpocket: Fix invalid endian conversions
- USB: serial: sierra: fix potential deadlock at close
- USB: serial: pl2303: add a new device id for ATEN
- ACPI / PM: save NVS memory for ASUS 1025C laptop
- tty: serial: 8250: Revert NXP SC16C2552 workaround
- serial: 8250_exar: Read INT0 from slave device, too
- serial: 8250_dw: always set baud rate in dw8250_set_termios
- serial: 8250_dw: Add ACPI support for uart on Broadcom SoC
- misc: sram: fix resource leaks in probe error path
- Bluetooth: avoid killing an already killed socket
- isdn: Disable IIOCDBGVAR
- cls_matchall: fix tcf_unbind_filter missing
- mlxsw: core_acl_flex_actions: Return error for conflicting actions
- ip_vti: fix a null pointer deferrence when create vti fallback tunnel
- net: ethernet: mvneta: Fix napi structure mixup on armada 3700
- net: mvneta: fix mvneta_config_rss on armada 3700
- EDAC: Add missing MEM_LRDDR4 entry in edac_mem_types[]
- pty: fix O_CLOEXEC for TIOCGPTPEER
- arm: dts: armada: Fix "#cooling-cells" property's name
- vfio: ccw: fix error return in vfio_ccw_sch_event
- perf tools: Fix error index for pmu event parser
- Input: synaptics-rmi4 - fix axis-swap behavior
- IB/mlx4: Fix an error handling path in 'mlx4_ib_rereg_user_mr()'
- drm/bridge/sii8620: fix loops in EDID fetch logic
- drm/bridge/sii8620: fix potential buffer overflow
- ARC: Explicitly add -mmedium-calls to CFLAGS
- hwmon: (nct6775) Fix loop limit
- soc: imx: gpcv2: correct PGC offset
- usb: dwc3: pci: add support for Intel IceLake
- usb: dwc2: gadget: Fix issue in dwc2_gadget_start_isoc()
- usb: dwc3: of-simple: fix use-after-free on remove
- ACPI / EC: Use ec_no_wakeup on Thinkpad X1 Carbon 6th
- netfilter: ipv6: nf_defrag: reduce struct net memory waste
- netfilter: nf_ct_helper: Fix possible panic after
nf_conntrack_helper_unregister
- selftests: pstore: return Kselftest Skip code for skipped tests
- selftests: static_keys: return Kselftest Skip code for skipped tests
- selftests: sysctl: return Kselftest Skip code for skipped tests
- selftests: zram: return Kselftest Skip code for skipped tests
- selftests: vm: return Kselftest Skip code for skipped tests
- selftests: sync: add config fragment for testing sync framework
- ARM: dts: NSP: Fix i2c controller interrupt type
- ARM: dts: NSP: Fix PCIe controllers interrupt types
- ARM: dts: BCM5301x: Fix i2c controller interrupt type
- ARM: dts: Cygnus: Fix I2C controller interrupt type
- ARM: dts: Cygnus: Fix PCIe controller interrupt type
- arm64: dts: specify 1.8V EMMC capabilities for bcm958742k
- arm64: dts: specify 1.8V EMMC capabilities for bcm958742t
- arm64: dts: ns2: Fix I2C controller interrupt type
- arm64: dts: ns2: Fix PCIe controller interrupt type
- arm64: dts: Stingray: Fix I2C controller interrupt type
- drivers/perf: xgene_pmu: Fix IOB SLOW PMU parser error
- drm: mali-dp: Enable Global SE interrupts mask for DP500
- drm/arm/malidp: Preserve LAYER_FORMAT contents when setting format
- IB/rxe: Fix missing completion for mem_reg work requests
- usb: dwc2: alloc dma aligned buffer for isoc split in
- usb: dwc2: fix isoc split in transfer with no data
- usb: gadget: composite: fix delayed_status race condition when set_interface
- usb: gadget: dwc2: fix memory leak in gadget_init()
- dwc2: gadget: Fix ISOC IN DDMA PID bitfield value calculation
- xen: add error handling for xenbus_printf
- pNFS: Always free the session slot on error in
nfs4_layoutget_handle_exception
- scsi: xen-scsifront: add error handling for xenbus_printf
- xen/scsiback: add error handling for xenbus_printf
- arm64: dma-mapping: clear buffers allocated with FORCE_CONTIGUOUS flag
- arm64: make secondary_start_kernel() notrace
- qed: Fix possible memory leak in Rx error path handling.
- qed: Add sanity check for SIMD fastpath handler.
- qed: Do not advertise DCBX_LLD_MANAGED capability.
- enic: initialize enic->rfs_h.lock in enic_probe
- net: hamradio: use eth_broadcast_addr
- net: propagate dev_get_valid_name return code
- net: stmmac: socfpga: add additional ocp reset line for Stratix10
- nvmet: reset keep alive timer in controller enable
- block: sed-opal: Fix a couple off by one bugs
- ARC: Enable machine_desc->init_per_cpu for !CONFIG_SMP
- nbd: Add the nbd NBD_DISCONNECT_ON_CLOSE config flag.
- net: davinci_emac: match the mdio device against its compatible if possible
- sctp: fix erroneous inc of snmp SctpFragUsrMsgs
- KVM: arm/arm64: Drop resource size check for GICV window
- drm/bridge/sii8620: fix display of packed pixel modes in MHL2
- locking/lockdep: Do not record IRQ state within lockdep code
- selftests: bpf: notification about privilege required to run test_kmod.sh
testing script
- mtd: dataflash: Use ULL suffix for 64-bit constants
- x86/microcode/intel: Fix memleak in save_microcode_patch()
- ipv6: mcast: fix unsolicited report interval after receiving querys
- Smack: Mark inode instant in smack_task_to_inode
- arm64: dts: msm8916: fix Coresight ETF graph connections
- batman-adv: Fix bat_ogm_iv best gw refcnt after netlink dump
- batman-adv: Fix bat_v best gw refcnt after netlink dump
- batman-adv: Avoid storing non-TT-sync flags on singular entries too
- batman-adv: Fix multicast TT issues with bogus ROAM flags
- cxgb4: when disabling dcb set txq dcb priority to 0
- iio: pressure: bmp280: fix relative humidity unit
- brcmfmac: stop watchdog before detach and free everything
- ARM: dts: am437x: make edt-ft5x06 a wakeup source
- ALSA: seq: Fix UBSAN warning at SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT ioctl
- usb: xhci: remove the code build warning
- usb: xhci: increase CRS timeout value
- NFC: pn533: Fix wrong GFP flag usage
- typec: tcpm: Fix a msecs vs jiffies bug
- kconfig: fix line numbers for if-entries in menu tree
- perf record: Support s390 random socket_id assignment
- perf test session topology: Fix test on s390
- perf report powerpc: Fix crash if callchain is empty
- perf tools: Fix a clang 7.0 compilation error
- perf bench: Fix numa report output code
- ARM: davinci: board-da850-evm: fix WP pin polarity for MMC/SD
- netfilter: nf_log: fix uninit read in nf_log_proc_dostring
- net/mlx5: E-Switch, Disallow vlan/spoofcheck setup if not being esw manager
- nfp: cast sizeof() to int when comparing with error code
- selftests/x86/sigreturn/64: Fix spurious failures on AMD CPUs
- selftests/x86/sigreturn: Do minor cleanups
- ARM: dts: da850: Fix interrups property for gpio
- ARM64: dts: meson-gxl: fix Mali GPU compatible string
- dmaengine: pl330: report BURST residue granularity
- dmaengine: k3dma: Off by one in k3_of_dma_simple_xlate()
- ath10k: update the phymode along with bandwidth change request
- md/raid10: fix that replacement cannot complete recovery after reassemble
- dev-dax: check_vma: ratelimit dev_info-s
- nl80211: relax ht operation checks for mesh
- nl80211: check nla_parse_nested() return values
- drm/exynos: gsc: Fix support for NV16/61, YUV420/YVU420 and YUV422 modes
- drm/exynos: decon5433: Fix per-plane global alpha for XRGB modes
- drm/exynos: decon5433: Fix WINCONx reset value
- drbd: Fix drbd_request_prepare() discard handling
- bpf, s390: fix potential memleak when later bpf_jit_prog fails
- PCI: xilinx: Add missing of_node_put()
- PCI: xilinx-nwl: Add missing of_node_put()
- PCI: faraday: Add missing of_node_put()
- bnx2x: Fix receiving tx-timeout in error or recovery state.
- fsl/fman: fix parser reporting bad checksum on short frames
- dpaa_eth: DPAA SGT needs to be 256B
- acpi/nfit: fix cmd_rc for acpi_nfit_ctl to always return a value
- openrisc: entry: Fix delay slot exception detection
- m68k: fix "bad page state" oops on ColdFire boot
- objtool: Support GCC 8 '-fnoreorder-functions'
- ipvlan: call dev_change_flags when ipvlan mode is reset
- drm/amdgpu: fix swapped emit_ib_size in vce3
- x86/mm/32: Initialize the CR4 shadow before __flush_tlb_all()
- HID: wacom: Correct touch maximum XY of 2nd-gen Intuos
- ARM: imx_v4_v5_defconfig: Select ULPI support
- bpf: hash map: decrement counter on error
- tracing: Use __printf markup to silence compiler
- kasan: fix shadow_size calculation error in kasan_module_alloc
- smsc75xx: Add workaround for gigabit link up hardware errata.
- drm/bridge/sii8620: Fix display of packed pixel modes
- samples/bpf: add missing <linux/if_vlan.h>
- samples/bpf: Check the result of system()
- samples/bpf: Check the error of write() and read()
- ieee802154: 6lowpan: set IFLA_LINK
- netfilter: x_tables: set module owner for icmp(6) matches
- ipv6: make ipv6_renew_options() interrupt/kernel safe
- net: qrtr: Broadcast messages only from control port
- sh_eth: fix invalid context bug while calling auto-negotiation by ethtool
- sh_eth: fix invalid context bug while changing link options by ethtool
- ravb: fix invalid context bug while calling auto-negotiation by ethtool
- ravb: fix invalid context bug while changing link options by ethtool
- ARM: pxa: irq: fix handling of ICMR registers in suspend/resume
- net/sched: act_tunnel_key: fix NULL dereference when 'goto chain' is used
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
- ieee802154: at86rf230: switch from BUG_ON() to WARN_ON() on problem
- ieee802154: at86rf230: use __func__ macro for debug messages
- ieee802154: fakelb: switch from BUG_ON() to WARN_ON() on problem
- gpu: host1x: Check whether size of unpin isn't 0
- drm/tegra: Fix comparison operator for buffer size
- drm/armada: fix colorkey mode property
- drm/armada: fix irq handling
- netfilter: nft_compat: explicitly reject ERROR and standard target
- netfilter: nf_conntrack: Fix possible possible crash on module loading.
- ARC: Improve cmpxchg syscall implementation
- bnxt_en: Fix inconsistent BNXT_FLAG_AGG_RINGS logic.
- bnxt_en: Always set output parameters in bnxt_get_max_rings().
- bnxt_en: Fix for system hang if request_irq fails
- scsi: qedf: Send the driver state to MFW
- scsi: qedi: Send driver state to MFW
- perf llvm-utils: Remove bashism from kernel include fetch script
- perf tools: Fix compilation errors on gcc8
- perf script python: Fix dict reference counting
- nfit: fix unchecked dereference in acpi_nfit_ctl
- RDMA/mlx5: Fix memory leak in mlx5_ib_create_srq() error path
- ARM: 8780/1: ftrace: Only set kernel memory back to read-only after boot
- ARM: DRA7/OMAP5: Enable ACTLR[0] (Enable invalidates of BTB) for secondary
cores
- ARM: dts: am3517.dtsi: Disable reference to OMAP3 OTG controller
- ixgbe: Be more careful when modifying MAC filters
- tools: build: Use HOSTLDFLAGS with fixdep
- kbuild: suppress warnings from 'getconf LFS_*'
- packet: reset network header if packet shorter than ll reserved space
- qlogic: check kstrtoul() for errors
- tcp: remove DELAYED ACK events in DCTCP
- pinctrl: ingenic: Fix inverted direction for < JZ4770
- pinctrl: nsp: off by ones in nsp_pinmux_enable()
- pinctrl: nsp: Fix potential NULL dereference
- drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply()
- net/ethernet/freescale/fman: fix cross-build error
- ibmvnic: Fix error recovery on login failure
- btrfs: scrub: Don't use inode page cache in scrub_handle_errored_block()
- octeon_mgmt: Fix MIX registers configuration on MTU setup
- net: usb: rtl8150: demote allmulti message to dev_dbg()
- PCI: OF: Fix I/O space page leak
- PCI: versatile: Fix I/O space page leak
- net: qca_spi: Avoid packet drop during initial sync
- net: qca_spi: Make sure the QCA7000 reset is triggered
- net: qca_spi: Fix log level if probe fails
- tcp: identify cryptic messages as TCP seq # bugs
- soc: imx: gpc: restrict register range for regmap access
- ACPI / EC: Use ec_no_wakeup on more Thinkpad X1 Carbon 6th systems
- ARM: dts: imx6: RDU2: fix irq type for mv88e6xxx switch
- nvme: fix handling of metadata_len for NVME_IOCTL_IO_CMD
- parisc: Remove ordered stores from syscall.S
- xfrm_user: prevent leaking 2 bytes of kernel memory
- netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
- packet: refine ring v3 block size test to hold one frame
- net/smc: no shutdown in state SMC_LISTEN
- parisc: Remove unnecessary barriers from spinlock.h
- PCI: hotplug: Don't leak pci_slot on registration failure
- PCI: Skip MPS logic for Virtual Functions (VFs)
- PCI: pciehp: Fix use-after-free on unplug
- PCI: pciehp: Fix unprotected list iteration in IRQ handler
- i2c: core: ACPI: Properly set status byte to 0 for multi-byte writes
- i2c: imx: Fix race condition in dma read
- reiserfs: fix broken xattr handling (heap corruption, bad retval)
- updateconfigs for v4.14.67
- IB/rxe: avoid double kfree skb
- RDMA/qedr: Fix NULL pointer dereference when running over iWARP without
RDMA-CM
- smb3: increase initial number of credits requested to allow write
- hwmon: (dell-smm) Disable fan support for Dell XPS13 9333
- ARM: dts: HR2: Fix interrupt types for i2c and PCIe
- drm/arm/malidp: Ensure that the crtcs are shutdown before removing any
encoder/connector
- drm/mali-dp: Rectify the width and height passed to rotmem_required()
- dmaengine: ti: omap-dma: Fix OMAP1510 incorrect residue_granularity
- nvme-rdma: fix possible double free condition when failing to create a
controller
- nvme-rdma: Fix command completion race at error recovery
- nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl
- clk: sunxi-ng: replace lib-y with obj-y
- batman-adv: Fix debugfs path for renamed hardif
- batman-adv: Fix debugfs path for renamed softif
- nfp: bpf: don't stop offload if replace failed
- perf tests: Add event parsing error handling to parse events test
- perf script: Fix crash because of missing evsel->priv
- perf tools: Fix crash caused by accessing feat_ops[HEADER_LAST_FEATURE]
- s390/qeth: consistently re-enable device features
- sched/fair: Fix bandwidth timer clock drift condition
- r8169: fix mac address change
- RISC-V: Don't include irq-riscv-intc.h
- RISC-V: Fix PTRACE_SETREGSET bug.
- net: qrtr: Reset the node and port ID of broadcast messages
- cxgb4: assume flash part size to be 4MB, if it can't be determined
- bpf: fix sk_skb programs without skb->dev assigned
- ipfrag: really prevent allocation on netns exit
- gpu: host1x: Skip IOMMU initialization if firewall is enabled
- ARC: [plat-hsdk]: Configure APB GPIO controller on ARC HSDK platform
- bnxt_en: Do not modify max IRQ count after RDMA driver requests/frees IRQs.
- scsi: hpsa: correct enclosure sas address
- perf tools: Use python-config --includes rather than --cflags
- sfp: ensure we clean up properly on bus registration failure
- amd/dc/dce100: On dce100, set clocks to 0 on suspend
- tools: build: Fixup host c flags
- kvm: nVMX: Restore exit qual for VM-entry failure due to MSR loading
- ibmvnic: Revise RX/TX queue error messages
- net/smc: reset recv timeout after clc handshake
- PCI: xgene: Fix I/O space page leak
- PCI: designware: Fix I/O space page leak
- PCI: aardvark: Fix I/O space page leak
- PCI: faraday: Fix I/O space page leak
- PCI: mediatek: Fix I/O space page leak
- PCI: v3-semi: Fix I/O space page leak
- platform/x86: dell-laptop: Fix backlight detection
- mm: use helper functions for allocating and freeing vm_area structs
- mm: make vm_area_dup() actually copy the old vma data
- mm: make vm_area_alloc() initialize core fields
- PCI / ACPI / PM: Resume all bridges on suspend-to-RAM
[ Ubuntu: 4.15.0-55.60 ]
* linux: 4.15.0-55.60 -proposed tracker (LP: #1834954)
* Request backport of ceph commits into bionic (LP: #1834235)
- ceph: use atomic_t for ceph_inode_info::i_shared_gen
- ceph: define argument structure for handle_cap_grant
- ceph: flush pending works before shutdown super
- ceph: send cap releases more aggressively
- ceph: single workqueue for inode related works
- ceph: avoid dereferencing invalid pointer during cached readdir
- ceph: quota: add initial infrastructure to support cephfs quotas
- ceph: quota: support for ceph.quota.max_files
- ceph: quota: don't allow cross-quota renames
- ceph: fix root quota realm check
- ceph: quota: support for ceph.quota.max_bytes
- ceph: quota: update MDS when max_bytes is approaching
- ceph: quota: add counter for snaprealms with quota
- ceph: avoid iput_final() while holding mutex or in dispatch thread
* QCA9377 isn't being recognized sometimes (LP: #1757218)
- SAUCE: USB: Disable USB2 LPM at shutdown
* hns: fix ICMP6 neighbor solicitation messages discard problem (LP: #1833140)
- net: hns: fix ICMP6 neighbor solicitation messages discard problem
- net: hns: fix unsigned comparison to less than zero
* Fix occasional boot time crash in hns driver (LP: #1833138)
- net: hns: Fix probabilistic memory overwrite when HNS driver initialized
* use-after-free in hns_nic_net_xmit_hw (LP: #1833136)
- net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw()
* hns: attempt to restart autoneg when disabled should report error
(LP: #1833147)
- net: hns: Restart autoneg need return failed when autoneg off
* systemd 237-3ubuntu10.14 ADT test failure on Bionic ppc64el (test-seccomp)
(LP: #1821625)
- powerpc: sys_pkey_alloc() and sys_pkey_free() system calls
- powerpc: sys_pkey_mprotect() system call
* [UBUNTU] pkey: Indicate old mkvp only if old and curr. mkvp are different
(LP: #1832625)
- pkey: Indicate old mkvp only if old and current mkvp are different
* [UBUNTU] kernel: Fix gcm-aes-s390 wrong scatter-gather list processing
(LP: #1832623)
- s390/crypto: fix gcm-aes-s390 selftest failures
* System crashes on hot adding a core with drmgr command (4.15.0-48-generic)
(LP: #1833716)
- powerpc/numa: improve control of topology updates
- powerpc/numa: document topology_updates_enabled, disable by default
* Kernel modules generated incorrectly when system is localized to a non-
English language (LP: #1828084)
- scripts: override locale from environment when running recordmcount.pl
* [UBUNTU] kernel: Fix wrong dispatching for control domain CPRBs
(LP: #1832624)
- s390/zcrypt: Fix wrong dispatching for control domain CPRBs
* CVE-2019-11815
- net: rds: force to destroy connection if t_sock is NULL in
rds_tcp_kill_sock().
* Sound device not detected after resume from hibernate (LP: #1826868)
- drm/i915: Force 2*96 MHz cdclk on glk/cnl when audio power is enabled
- drm/i915: Save the old CDCLK atomic state
- drm/i915: Remove redundant store of logical CDCLK state
- drm/i915: Skip modeset for cdclk changes if possible
* Handle overflow in proc_get_long of sysctl (LP: #1833935)
- sysctl: handle overflow in proc_get_long
* Dell XPS 13 (9370) defaults to s2idle sleep/suspend instead of deep, NVMe
drains lots of power under s2idle (LP: #1808957)
- Revert "UBUNTU: SAUCE: pci/nvme: prevent WDC PC SN720 NVMe from entering D3
and being disabled"
- Revert "UBUNTU: SAUCE: nvme: add quirk to not call disable function when
suspending"
- Revert "UBUNTU: SAUCE: pci: prevent Intel NVMe SSDPEKKF from entering D3"
- Revert "SAUCE: nvme: add quirk to not call disable function when suspending"
- Revert "SAUCE: pci: prevent sk hynix nvme from entering D3"
- PCI: PM: Avoid possible suspend-to-idle issue
- PCI: PM: Skip devices in D0 for suspend-to-idle
- nvme-pci: Sync queues on reset
- nvme: Export get and set features
- nvme-pci: Use host managed power state for suspend
* linux v4.15 ftbfs on a newer host kernel (e.g. hwe) (LP: #1823429)
- selinux: use kernel linux/socket.h for genheaders and mdp
* 32-bit x86 kernel 4.15.0-50 crash in vmalloc_sync_all (LP: #1830433)
- x86/mm/pat: Disable preemption around __flush_tlb_all()
- x86/mm: Drop usage of __flush_tlb_all() in kernel_physical_mapping_init()
- x86/mm: Disable ioremap free page handling on x86-PAE
- ioremap: Update pgtable free interfaces with addr
- x86/mm: Add TLB purge to free pmd/pte page interfaces
- x86/init: fix build with CONFIG_SWAP=n
- x86/mm: provide pmdp_establish() helper
- x86/mm: Use WRITE_ONCE() when setting PTEs
* hinic: fix oops due to race in set_rx_mode (LP: #1832048)
- hinic: fix a bug in set rx mode
* ubuntu 18.04 flickering screen with Radeon X1600 (LP: #1791312)
- drm/radeon: prefer lower reference dividers
* Login screen never appears on vmwgfx using bionic kernel 4.15 (LP: #1832138)
- drm/vmwgfx: use monotonic event timestamps
* [linux-azure] Block Layer Commits Requested in Azure Kernels (LP: #1834499)
- block: Clear kernel memory before copying to user
- block/bio: Do not zero user pages
* CONFIG_LOG_BUF_SHIFT set to 14 is too low on arm64 (LP: #1824864)
- [Config] CONFIG_LOG_BUF_SHIFT=18 on all 64bit arches
* Handle overflow for file-max (LP: #1834310)
- sysctl: handle overflow for file-max
- kernel/sysctl.c: fix out-of-bounds access when setting file-max
* [ALSA] [PATCH] Headset fixup for System76 Gazelle (gaze14) (LP: #1827555)
- ALSA: hda/realtek - Headset fixup for System76 Gazelle (gaze14)
- ALSA: hda/realtek - Corrected fixup for System76 Gazelle (gaze14)
* crashdump fails on HiSilicon D06 (LP: #1828868)
- iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in kdump kernel
- iommu/arm-smmu-v3: Don't disable SMMU in kdump kernel
* CVE-2019-11833
- ext4: zero out the unused memory region in the extent tree block
* zfs 0.7.9 fixes a bug (https://github.com/zfsonlinux/zfs/pull/7343) that
hangs the system completely (LP: #1772412)
- SAUCE: (noup) Update zfs to 0.7.5-1ubuntu16.6
* does not detect headphone when there is no other output devices
(LP: #1831065)
- ALSA: hda/realtek - Fixed hp_pin no value
- ALSA: hda/realtek - Use a common helper for hp pin reference
* kernel crash : net_sched race condition in tcindex_destroy() (LP: #1825942)
- net_sched: fix NULL pointer dereference when delete tcindex filter
- RCU, workqueue: Implement rcu_work
- net_sched: switch to rcu_work
- net_sched: fix a race condition in tcindex_destroy()
- net_sched: fix a memory leak in cls_tcindex
- net_sched: initialize net pointer inside tcf_exts_init()
- net_sched: fix two more memory leaks in cls_tcindex
* Support new ums-realtek device (LP: #1831840)
- USB: usb-storage: Add new ID to ums-realtek
* amd_iommu possible data corruption (LP: #1823037)
- iommu/amd: Reserve exclusion range in iova-domain
- iommu/amd: Set exclusion range correctly
* Add new sound card PCIID into the alsa driver (LP: #1832299)
- ALSA: hda: Add Icelake PCI ID
- ALSA: hda/intel: add CometLake PCI IDs
* sky2 ethernet card doesn't work after returning from suspend
(LP: #1807259) // sky2 ethernet card link not up after suspend
(LP: #1809843)
- sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79
* idle-page oopses when accessing page frames that are out of range
(LP: #1833410)
- mm/page_idle.c: fix oops because end_pfn is larger than max_pfn
* Add pointstick support on HP ZBook 17 G5 (LP: #1833387)
- Revert "HID: multitouch: Support ALPS PTP stick with pid 0x120A"
- SAUCE: HID: multitouch: Add pointstick support for ALPS Touchpad
* [SRU][B/B-OEM/B-OEM-OSP-1/C/D/E] Add trackpoint middle button support of 2
new thinpads (LP: #1833637)
- Input: elantech - enable middle button support on 2 ThinkPads
* CVE-2019-11085
- drm/i915/gvt: Fix mmap range check
- drm/i915: make mappable struct resource centric
- drm/i915/gvt: Fix aperture read/write emulation when enable x-no-mmap=on
* CVE-2019-11884
- Bluetooth: hidp: fix buffer overflow
* af_alg06 test from crypto test suite in LTP failed with kernel oops on B/C
(LP: #1829725)
- crypto: authenc - fix parsing key with misaligned rta_len
* CVE-2018-12126 // CVE-2018-12127 // CVE-2018-12130 // CVE-2019-11091
- SAUCE: Synchronize MDS mitigations with upstream
- Documentation: Correct the possible MDS sysfs values
- x86/speculation/mds: Fix documentation typo
* CVE-2019-11091
- x86/mds: Add MDSUM variant to the MDS documentation
* alignment test in powerpc from ubuntu_kernel_selftests failed on B/C Power9
(LP: #1813118)
- selftests/powerpc: Remove Power9 copy_unaligned test
* TRACE_syscall.ptrace_syscall_dropped in seccomp from ubuntu_kernel_selftests
failed on B/C PowerPC (LP: #1812796)
- selftests/seccomp: Enhance per-arch ptrace syscall skip tests
* Add powerpc/alignment_handler test for selftests (LP: #1828935)
- selftests/powerpc: Add alignment handler selftest
- selftests/powerpc: Fix to use ucontext_t instead of struct ucontext
* Cannot build kernel 4.15.0-48.51 due to an in-source-tree ZFS module.
(LP: #1828763)
- SAUCE: (noup) Update zfs to 0.7.5-1ubuntu16.5
* Eletrical noise occurred when external headset enter powersaving mode on a
DEll machine (LP: #1828798)
- ALSA: hda/realtek - Reduce click noise on Dell Precision 5820 headphone
- ALSA: hda/realtek - Fixup headphone noise via runtime suspend
* [18.04/18.10] File libperf-jvmti.so is missing in linux-tools-common deb on
Ubuntu (LP: #1761379)
- [Packaging] Support building libperf-jvmti.so
* TCP : race condition on socket ownership in tcp_close() (LP: #1830813)
- tcp: do not release socket ownership in tcp_close()
* bionic: netlink: potential shift overflow in netlink_bind() (LP: #1831103)
- netlink: Don't shift on 64 for ngroups
* Add support to Comet Lake LPSS (LP: #1830175)
- mfd: intel-lpss: Add Intel Comet Lake PCI IDs
* Reduce NAPI weight in hns driver from 256 to 64 (LP: #1830587)
- net: hns: Use NAPI_POLL_WEIGHT for hns driver
* x86: add support for AMD Rome (LP: #1819485)
- x86: irq_remapping: Move irq remapping mode enum
- iommu/amd: Add support for higher 64-bit IOMMU Control Register
- iommu/amd: Add support for IOMMU XT mode
- hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs
- hwmon/k10temp: Add support for AMD family 17h, model 30h CPUs
- x86/amd_nb: Add PCI device IDs for family 17h, model 30h
- x86/MCE/AMD: Fix the thresholding machinery initialization order
- x86/amd_nb: Add support for newer PCI topologies
* nx842 - CRB request time out (-110) when uninstall NX modules and initiate
NX request (LP: #1827755)
- crypto/nx: Initialize 842 high and normal RxFIFO control registers
* Require improved hypervisor detection patch in Ubuntu 18.04 (LP: #1829972)
- s390/early: improve machine detection
-- Sultan Alsawaf <email address hidden> Thu, 22 Aug 2019 14:58:58 -0700
-
linux-aws (4.15.0-1046.48) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1046.48 -proposed tracker (LP: #1839985)
* Bionic update: upstream stable patchset 2019-07-25 (LP: #1837952)
- aws: [Config] set CONFIG_SUN50I_ERRATUM_UNKNOWN1=y
* Bionic update: upstream stable patchset 2019-07-26 (LP: #1838116)
- aws: [Config] set CONFIG_LDISC_AUTOLOAD=y
- aws: [Config] remove CONFIG_R3964=m
* Bionic update: upstream stable patchset 2019-08-02 (LP: #1838824)
- aws: [Config] set CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT=y
* Bionic update: upstream stable patchset 2019-07-22 (LP: #1837477)
- aws: [Config] set CONFIG_CIFS_ALLOW_INSECURE_LEGACY=y
* Build Nvidia drivers in conjunction with kernel (LP: #1764792)
- aws: [Packaging] enable nvidia dkms build
* Add the EFA driver into linux-aws (LP: #1837638)
- RDMA/efa: Add EFA device definitions
- RDMA/efa: Add the ABI definitions
- RDMA/efa: Add the efa.h header file
- RDMA/efa: Add the efa_com.h file
- RDMA/efa: Add the com service API definitions
- RDMA/efa: Implement functions that submit and complete admin commands
- RDMA/efa: Add common command handlers
- RDMA/efa: Add EFA verbs implementation
- RDMA/efa: Add the efa module
- RDMA/efa: Add driver to Kconfig/Makefile
- [Config] aws: CONFIG_INFINIBAND_EFA=m
- RDMA/efa: Remove MAYEXEC flag check from mmap flow
- RDMA/efa: Fix success return value in case of error
- RDMA/efa: Handle mmap insertions overflow
- SAUCE: Add kernel compatibility fixups
- SAUCE: linux/efa: Be consistent with success flow return value
- SAUCE: linux/efa: Entropy in admin commands id
- SAUCE: linux/efa: Fix modify QP udata check backport
[ Ubuntu: 4.15.0-59.66 ]
* bionic/linux: 4.15.0-59.66 -proposed tracker (LP: #1840006)
* zfs not completely removed from bionic tree (LP: #1840051)
- SAUCE: (noup) remove completely the zfs code
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* [18.04 FEAT] Enhanced hardware support (LP: #1836857)
- s390: report new CPU capabilities
- s390: add alignment hints to vector load and store
* [18.04 FEAT] Enhanced CPU-MF hardware counters - kernel part (LP: #1836860)
- s390/cpum_cf: Add support for CPU-MF SVN 6
- s390/cpumf: Add extended counter set definitions for model 8561 and 8562
* ideapad_laptop disables WiFi/BT radios on Lenovo Y540 (LP: #1837136)
- platform/x86: ideapad-laptop: Remove no_hw_rfkill_list
* Stacked onexec transitions fail when under NO NEW PRIVS restrictions
(LP: #1839037)
- SAUCE: apparmor: fix nnp subset check failure when, stacking
* bcache: bch_allocator_thread(): hung task timeout (LP: #1784665) // Tight
timeout for bcache removal causes spurious failures (LP: #1796292)
- SAUCE: bcache: fix deadlock in bcache_allocator
* bcache: bch_allocator_thread(): hung task timeout (LP: #1784665)
- bcache: never writeback a discard operation
- bcache: improve bcache_reboot()
- bcache: fix writeback target calc on large devices
- bcache: add journal statistic
- bcache: fix high CPU occupancy during journal
- bcache: use pr_info() to inform duplicated CACHE_SET_IO_DISABLE set
- bcache: fix incorrect sysfs output value of strip size
- bcache: fix error return value in memory shrink
- bcache: fix using of loop variable in memory shrink
- bcache: Fix indentation
- bcache: Add __printf annotation to __bch_check_keys()
- bcache: Annotate switch fall-through
- bcache: Fix kernel-doc warnings
- bcache: Remove an unused variable
- bcache: Suppress more warnings about set-but-not-used variables
- bcache: Reduce the number of sparse complaints about lock imbalances
- bcache: Fix a compiler warning in bcache_device_init()
- bcache: Move couple of string arrays to sysfs.c
- bcache: Move couple of functions to sysfs.c
- bcache: Replace bch_read_string_list() by __sysfs_match_string()
* linux hwe i386 kernel 5.0.0-21.22~18.04.1 crashes on Lenovo x220
(LP: #1838115)
- x86/mm: Check for pfn instead of page in vmalloc_sync_one()
- x86/mm: Sync also unmappings in vmalloc_sync_all()
- mm/vmalloc.c: add priority threshold to __purge_vmap_area_lazy()
- mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy()
* [bionic] drm/i915: softpin broken, needs to be fixed for 32bit mesa
(LP: #1815172)
- drm/i915: Mark up GTT sizes as u64
- drm/i915/gvt: Use I915_GTT_PAGE_SIZE
- drm/i915: Compare user's 64b GTT offset even on 32b
* Bionic update: upstream stable patchset 2019-08-07 (LP: #1839376)
- ARM: riscpc: fix DMA
- ARM: dts: rockchip: Make rk3288-veyron-minnie run at hs200
- ARM: dts: rockchip: Make rk3288-veyron-mickey's emmc work again
- ARM: dts: rockchip: Mark that the rk3288 timer might stop in suspend
- ftrace: Enable trampoline when rec count returns back to one
- kernel/module.c: Only return -EEXIST for modules that have finished loading
- MIPS: lantiq: Fix bitfield masking
- dmaengine: rcar-dmac: Reject zero-length slave DMA requests
- clk: tegra210: fix PLLU and PLLU_OUT1
- fs/adfs: super: fix use-after-free bug
- btrfs: fix minimum number of chunk errors for DUP
- cifs: Fix a race condition with cifs_echo_request
- ceph: fix improper use of smp_mb__before_atomic()
- ceph: return -ERANGE if virtual xattr value didn't fit in buffer
- ACPI: blacklist: fix clang warning for unused DMI table
- scsi: zfcp: fix GCC compiler warning emitted with -Wmaybe-uninitialized
- x86: kvm: avoid constant-conversion warning
- ACPI: fix false-positive -Wuninitialized warning
- be2net: Signal that the device cannot transmit during reconfiguration
- x86/apic: Silence -Wtype-limits compiler warnings
- x86: math-emu: Hide clang warnings for 16-bit overflow
- mm/cma.c: fail if fixed declaration can't be honored
- coda: add error handling for fget
- coda: fix build using bare-metal toolchain
- uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
headers
- drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings
- ipc/mqueue.c: only perform resource calculation if user valid
- xen/pv: Fix a boot up hang revealed by int3 self test
- x86/kvm: Don't call kvm_spurious_fault() from .fixup
- x86/paravirt: Fix callee-saved function ELF sizes
- x86, boot: Remove multiple copy of static function sanitize_boot_params()
- drm/nouveau: fix memory leak in nouveau_conn_reset()
- kbuild: initialize CLANG_FLAGS correctly in the top Makefile
- Btrfs: fix incremental send failure after deduplication
- Btrfs: fix race leading to fs corruption after transaction abort
- mmc: dw_mmc: Fix occasional hang after tuning on eMMC
- gpiolib: fix incorrect IRQ requesting of an active-low lineevent
- IB/hfi1: Fix Spectre v1 vulnerability
- selinux: fix memory leak in policydb_init()
- s390/dasd: fix endless loop after read unit address configuration
- parisc: Fix build of compressed kernel even with debug enabled
- drivers/perf: arm_pmu: Fix failure path in PM notifier
- nbd: replace kill_bdev() with __invalidate_device() again
- xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
- IB/mlx5: Fix unreg_umr to ignore the mkey state
- IB/mlx5: Use direct mkey destroy command upon UMR unreg failure
- IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache
- IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
- IB/hfi1: Check for error on call to alloc_rsm_map_table
- eeprom: at24: make spd world-readable again
- objtool: Support GCC 9 cold subfunction naming scheme
- gcc-9: properly declare the {pv,hv}clock_page storage
- x86/vdso: Prevent segfaults due to hoisted vclock reads
- Documentation: Add swapgs description to the Spectre v1 documentation
- firmware/psci: psci_checker: Park kthreads before stopping them
- btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit()
- lib/test_string.c: avoid masking memset16/32/64 failures
- mmc: meson-mx-sdio: Fix misuse of GENMASK macro
- arm64: compat: Allow single-byte watchpoints on all addresses
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
- IB/mlx5: Fix clean_mr() to work in the expected order
- ARC: enable uboot support unconditionally
- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
* Bionic update: upstream stable patchset 2019-08-06 (LP: #1839213)
- staging: vt6656: use meaningful error code during buffer allocation
- drm/amd/display: Fill prescale_params->scale for RGB565
- drm/amd/display: Disable ABM before destroy ABM struct
- gpu: host1x: Increase maximum DMA segment size
- drm/amd/display: Always allocate initial connector state state
- drm/amd/display: fix compilation error
- mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width
- i2c: stm32f7: fix the get_irq error cases
- genksyms: Teach parser about 128-bit built-in types
- powerpc/mm: Handle page table allocation failures
- arm64: assembler: Switch ESB-instruction with a vanilla nop if
!ARM64_HAS_RAS
- dlm: check if workqueues are NULL before flushing/destroying
- proc: use down_read_killable mmap_sem for /proc/pid/pagemap
- proc: use down_read_killable mmap_sem for /proc/pid/clear_refs
- proc: use down_read_killable mmap_sem for /proc/pid/map_files
- proc: use down_read_killable mmap_sem for /proc/pid/maps
- mm: use down_read_killable for locking mmap_sem in access_remote_vm
- ALSA: ac97: Fix double free of ac97_codec_device
- libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl()
- vsock: correct removal of socket from the list
- NFS: Fix dentry revalidation on NFSv4 lookup
- NFS: Refactor nfs_lookup_revalidate()
- NFSv4: Fix lookup revalidate of regular files
- i2c: qup: fixed releasing dma without flush operation completion
- arm64: compat: Provide definition for COMPAT_SIGMINSTKSZ
- binder: fix possible UAF when freeing buffer
- ISDN: hfcsusb: checking idx of ep configuration
- media: au0828: fix null dereference in error path
- ath10k: Change the warning message string
- media: cpia2_usb: first wake up, then free in disconnect
- media: pvrusb2: use a different format for warnings
- NFS: Cleanup if nfs_match_client is interrupted
- media: radio-raremono: change devm_k*alloc to k*alloc
- iommu/vt-d: Don't queue_iova() if there is no flush queue
- iommu/iova: Fix compilation error with !CONFIG_IOMMU_IOVA
- hv_sock: Add support for delayed close
- Bluetooth: hci_uart: check for missing tty operations
- sched/fair: Don't free p->numa_faults with concurrent readers
- drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
- Fix allyesconfig output.
- ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
* Bionic update: upstream stable patchset 2019-08-05 (LP: #1839036)
- e1000e: start network tx queue only when link is up
- Input: synaptics - enable SMBUS on T480 thinkpad trackpad
- nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
- drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT
- crypto: talitos - rename alternative AEAD algos.
- samples, bpf: fix to change the buffer size for read()
- bpf: sockmap, fix use after free from sleep in psock backlog workqueue
- staging:iio:ad7150: fix threshold mode config bit
- mac80211: mesh: fix RCU warning
- mac80211: free peer keys before vif down in mesh
- iwlwifi: Fix double-free problems in iwl_req_fw_callback()
- dt-bindings: can: mcp251x: add mcp25625 support
- can: mcp251x: add support for mcp25625
- can: m_can: implement errata "Needless activation of MRAF irq"
- can: af_can: Fix error path of can_init()
- ibmvnic: Refresh device multicast list after reset
- ARM: dts: am335x phytec boards: Fix cd-gpios active level
- Input: imx_keypad - make sure keyboard can always wake up system
- KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
- mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed
- ARM: davinci: da850-evm: call regulator_has_full_constraints()
- ARM: davinci: da8xx: specify dma_coherent_mask for lcdc
- mac80211: only warn once on chanctx_conf being NULL
- qmi_wwan: add support for QMAP padding in the RX path
- qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode
- qmi_wwan: extend permitted QMAP mux_id value range
- md: fix for divide error in status_resync
- bnx2x: Check if transceiver implements DDM before access
- drm: return -EFAULT if copy_to_user() fails
- ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
- net: lio_core: fix potential sign-extension overflow on large shift
- quota: fix a problem about transfer quota
- net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge()
- net :sunrpc :clnt :Fix xps refcount imbalance on the error path
- fscrypt: don't set policy for a dead directory
- udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
- ALSA: hda/realtek - Headphone Mic can't record after S3
- block, bfq: NULL out the bic when it's no longer valid
- x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
- x86/tls: Fix possible spectre-v1 in do_get_thread_area()
- Documentation: Add section about CPU vulnerabilities for Spectre
- mwifiex: Abort at too short BSS descriptor element
- mwifiex: Don't abort on small, spec-compliant vendor IEs
- USB: serial: ftdi_sio: add ID for isodebug v1
- USB: serial: option: add support for GosunCn ME3630 RNDIS mode
- Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
- p54usb: Fix race between disconnect and firmware loading
- usb: gadget: ether: Fix race between gether_disconnect and rx_submit
- usb: renesas_usbhs: add a workaround for a race condition of workqueue
- staging: comedi: dt282x: fix a null pointer deref on interrupt
- staging: comedi: amplc_pci230: fix null pointer deref on interrupt
- binder: fix memory leak in error path
- carl9170: fix misuse of device driver API
- VMCI: Fix integer overflow in VMCI handle arrays
- MIPS: Remove superfluous check for __linux__
- clk: ti: clkctrl: Fix returning uninitialized data
- efi/bgrt: Drop BGRT status field reserved bits check
- perf/core: Fix perf_sample_regs_user() mm check
- ARM: omap2: remove incorrect __init annotation
- be2net: fix link failure after ethtool offline test
- ppp: mppe: Add softdep to arc4
- sis900: fix TX completion
- ARM: dts: imx6ul: fix PWM[1-4] interrupts
- dm verity: use message limit for data block corruption message
- x86/boot/64: Fix crash if kernel image crosses page table boundary
- cpu/hotplug: Fix out-of-bounds read when setting fail state
- linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL
- ARC: hide unused function unw_hdr_alloc
- s390: fix stfle zero padding
- s390/qdio: (re-)initialize tiqdio list entries
- s390/qdio: don't touch the dsci in tiqdio_add_input_queues()
- crypto/NX: Set receive window credits to max number of CRBs in RxFIFO
- drm/udl: introduce a macro to convert dev to udl.
- drm/udl: move to embedding drm device inside udl device.
- drm/vmwgfx: fix a warning due to missing dma_parms
- riscv: Fix udelay in RV32.
- mac80211: do not start any work during reconfigure flow
- bpf, devmap: Fix premature entry free on destroying map
- NFS4: Only set creation opendata if O_CREAT
- perf pmu: Fix uncore PMU alias list for ARM64
- Documentation/admin: Remove the vsyscall=native documentation
- drivers/usb/typec/tps6598x.c: fix portinfo width
- staging: bcm2835-camera: Ensure all buffers are returned on disable
- staging: bcm2835-camera: Remove check of the number of buffers supplied
- staging: rtl8712: reduce stack usage, again
- irqchip/gic-v3-its: Fix command queue pointer comparison bug
- x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz
- pinctrl: mcp23s08: Fix add_data and irqchip_add_nested call order
- x86/boot/64: Add missing fixup_pointer() for next_early_pgt access
- genirq: Delay deactivation in free_irq()
- genirq: Fix misleading synchronize_irq() documentation
- genirq: Update code comments wrt recycled thread_mask
- genirq: Synchronize only with single thread on free_irq()
- genirq: Add optional hardware synchronization for shutdown
- x86/ioapic: Implement irq_get_irqchip_state() callback
- x86/irq: Handle spurious interrupt after shutdown gracefully
- crypto: talitos - move struct talitos_edesc into talitos.h
- crypto: talitos - fix hash on SEC1.
- regmap-irq: do not write mask register if mask_base is zero
- MIPS: ath79: fix ar933x uart parity mode
- MIPS: fix build on non-linux hosts
- arm64/efi: Mark __efistub_stext_offset as an absolute symbol explicitly
- scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported
- dmaengine: imx-sdma: fix use-after-free on probe error path
- wil6210: fix potential out-of-bounds read
- ath10k: Do not send probe response template for mesh
- ath9k: Check for errors when reading SREV register
- ath6kl: add some bounds checking
- ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
- batman-adv: fix for leaked TVLV handler.
- media: dvb: usb: fix use after free in dvb_usb_device_exit
- media: spi: IR LED: add missing of table registration
- crypto: talitos - fix skcipher failure due to wrong output IV
- media: marvell-ccic: fix DMA s/g desc number calculation
- media: vpss: fix a potential NULL pointer dereference
- media: media_device_enum_links32: clean a reserved field
- net: stmmac: dwmac1000: Clear unused address entries
- net: stmmac: dwmac4/5: Clear unused address entries
- qed: Set the doorbell address correctly
- signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
- af_key: fix leaks in key_pol_get_resp and dump_sp.
- xfrm: Fix xfrm sel prefix length validation
- fscrypt: clean up some BUG_ON()s in block encryption/decryption
- media: mc-device.c: don't memset __user pointer contents
- media: staging: media: davinci_vpfe: - Fix for memory leak if decoder
initialization fails.
- net: phy: Check against net_device being NULL
- crypto: talitos - properly handle split ICV.
- crypto: talitos - Align SEC1 accesses to 32 bits boundaries.
- tua6100: Avoid build warnings.
- locking/lockdep: Fix merging of hlocks with non-zero references
- media: wl128x: Fix some error handling in fm_v4l2_init_video_device()
- cpupower : frequency-set -r option misses the last cpu in related cpu list
- net: stmmac: dwmac4: fix flow control issue
- net: fec: Do not use netdev messages too early
- net: axienet: Fix race condition causing TX hang
- s390/qdio: handle PENDING state for QEBSM devices
- RAS/CEC: Fix pfn insertion
- net: sfp: add mutex to prevent concurrent state checks
- ipset: Fix memory accounting for hash types on resize
- perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode
- perf tests: Add valid callback for parse-events test
- perf test 6: Fix missing kvm module load for s390
- media: fdp1: Support M3N and E3 platforms
- iommu: Fix a leak in iommu_insert_resv_region
- gpio: omap: fix lack of irqstatus_raw0 for OMAP4
- gpio: omap: ensure irq is enabled before wakeup
- regmap: fix bulk writes on paged registers
- bpf: silence warning messages in core
- rcu: Force inlining of rcu_read_lock()
- x86/cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS
- blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership
arbitration
- xfrm: fix sa selector validation
- sched/core: Add __sched tag for io_schedule()
- x86/atomic: Fix smp_mb__{before,after}_atomic()
- perf evsel: Make perf_evsel__name() accept a NULL argument
- vhost_net: disable zerocopy by default
- ipoib: correcly show a VF hardware address
- EDAC/sysfs: Fix memory leak when creating a csrow object
- ipsec: select crypto ciphers for xfrm_algo
- ipvs: defer hook registration to avoid leaks
- media: s5p-mfc: Make additional clocks optional
- media: i2c: fix warning same module names
- ntp: Limit TAI-UTC offset
- timer_list: Guard procfs specific code
- acpi/arm64: ignore 5.1 FADTs that are reported as 5.0
- media: coda: fix mpeg2 sequence number handling
- media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP
- media: coda: increment sequence offset for the last returned frame
- media: vimc: cap: check v4l2_fill_pixfmt return value
- media: hdpvr: fix locking and a missing msleep
- rtlwifi: rtl8192cu: fix error handle when usb probe failed
- mt7601u: do not schedule rx_tasklet when the device has been disconnected
- x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c
- mt7601u: fix possible memory leak when the device is disconnected
- ipvs: fix tinfo memory leak in start_sync_thread
- ath10k: add missing error handling
- ath10k: fix PCIE device wake up failed
- perf tools: Increase MAX_NR_CPUS and MAX_CACHES
- libata: don't request sense data on !ZAC ATA devices
- clocksource/drivers/exynos_mct: Increase priority over ARM arch timer
- rslib: Fix decoding of shortened codes
- rslib: Fix handling of of caller provided syndrome
- ixgbe: Check DDM existence in transceiver before access
- crypto: serpent - mark __serpent_setkey_sbox noinline
- crypto: asymmetric_keys - select CRYPTO_HASH where needed
- EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
- bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
- net: hns3: fix a -Wformat-nonliteral compile warning
- net: hns3: add some error checking in hclge_tm module
- ath10k: destroy sdio workqueue while remove sdio module
- iwlwifi: mvm: Drop large non sta frames
- perf stat: Make metric event lookup more robust
- net: usb: asix: init MAC address buffers
- gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
- Bluetooth: hci_bcsp: Fix memory leak in rx_skb
- Bluetooth: 6lowpan: search for destination address in all peers
- Bluetooth: Check state in l2cap_disconnect_rsp
- gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable()
- Bluetooth: validate BLE connection interval updates
- gtp: fix suspicious RCU usage
- gtp: fix Illegal context switch in RCU read-side critical section.
- gtp: fix use-after-free in gtp_encap_destroy()
- gtp: fix use-after-free in gtp_newlink()
- net: mvmdio: defer probe of orion-mdio if a clock is not ready
- iavf: fix dereference of null rx_buffer pointer
- floppy: fix out-of-bounds read in next_valid_format
- floppy: fix invalid pointer dereference in drive_name
- xen: let alloc_xenballooned_pages() fail if not enough memory free
- scsi: NCR5380: Reduce goto statements in NCR5380_select()
- scsi: NCR5380: Always re-enable reselection interrupt
- Revert "scsi: ncr5380: Increase register polling limit"
- scsi: core: Fix race on creating sense cache
- scsi: megaraid_sas: Fix calculation of target ID
- scsi: mac_scsi: Increase PIO/PDMA transfer length threshold
- scsi: mac_scsi: Fix pseudo DMA implementation, take 2
- crypto: ghash - fix unaligned memory access in ghash_setkey()
- crypto: ccp - Validate the the error value used to index error messages
- crypto: arm64/sha1-ce - correct digest for empty data in finup
- crypto: arm64/sha2-ce - correct digest for empty data in finup
- crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
- crypto: ccp - memset structure fields to zero before reuse
- crypto: ccp/gcm - use const time tag comparison.
- crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe
- Input: gtco - bounds check collection indent level
- Input: alps - don't handle ALPS cs19 trackpoint-only device
- Input: synaptics - whitelist Lenovo T580 SMBus intertouch
- Input: alps - fix a mismatch between a condition check and its comment
- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
- arm64: tegra: Update Jetson TX1 GPU regulator timings
- iwlwifi: pcie: don't service an interrupt that was masked
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X
- NFSv4: Handle the special Linux file open access mode
- pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error
- lib/scatterlist: Fix mapping iterator when sg->offset is greater than
PAGE_SIZE
- ASoC: dapm: Adapt for debugfs API change
- ALSA: seq: Break too long mutex context in the write loop
- media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
- media: coda: Remove unbalanced and unneeded mutex unlock
- KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed
- arm64: tegra: Fix AGIC register range
- fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys
inodes.
- drm/nouveau/i2c: Enable i2c pads & busses during preinit
- padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
- dm zoned: fix zone state management race
- xen/events: fix binding user event channels to cpus
- 9p/xen: Add cleanup path in p9_trans_xen_init
- 9p/virtio: Add cleanup path in p9_virtio_init
- x86/boot: Fix memory leak in default_get_smp_config()
- perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs
- perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs
- intel_th: pci: Add Ice Lake NNPI support
- PCI: Do not poll for PME if the device is in D3cold
- Btrfs: fix data loss after inode eviction, renaming it, and fsync it
- Btrfs: fix fsync not persisting dentry deletions due to inode evictions
- Btrfs: add missing inode version, ctime and mtime updates when punching hole
- HID: wacom: generic: only switch the mode on devices with LEDs
- HID: wacom: correct touch resolution x/y typo
- libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
- coda: pass the host file in vma->vm_file on mmap
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM
- PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
- crypto: caam - limit output IV to CBC to work around CTR mode DMA issue
- parisc: Ensure userspace privilege for ptraced processes in regset functions
- parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1
- powerpc/32s: fix suspend/resume when IBATs 4-7 are used
- powerpc/watchpoint: Restore NV GPRs while returning from exception
- eCryptfs: fix a couple type promotion bugs
- intel_th: msu: Fix single mode with disabled IOMMU
- Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
- usb: Handle USB3 remote wakeup for LPM enabled devices correctly
- net: mvmdio: allow up to four clocks to be specified for orion-mdio
- dt-bindings: allow up to four clocks for orion-mdio
- dm bufio: fix deadlock with loop device
- compiler.h, kasan: Avoid duplicating __read_once_size_nocheck()
- compiler.h: Add read_word_at_a_time() function.
- lib/strscpy: Shut up KASAN false-positives in strscpy()
- bnx2x: Prevent load reordering in tx completion processing
- caif-hsi: fix possible deadlock in cfhsi_exit_module()
- igmp: fix memory leak in igmpv3_del_delrec()
- ipv4: don't set IPv6 only flags to IPv4 addresses
- net: bcmgenet: use promisc for unsupported filters
- net: dsa: mv88e6xxx: wait after reset deactivation
- net: neigh: fix multiple neigh timer scheduling
- net: openvswitch: fix csum updates for MPLS actions
- nfc: fix potential illegal memory access
- rxrpc: Fix send on a connected, but unbound socket
- sky2: Disable MSI on ASUS P6T
- vrf: make sure skb->data contains ip header to make routing
- macsec: fix use-after-free of skb during RX
- macsec: fix checksumming after decryption
- netrom: fix a memory leak in nr_rx_frame()
- netrom: hold sock when setting skb->destructor
- bonding: validate ip header before check IPPROTO_IGMP
- net: make skb_dst_force return true when dst is refcounted
- tcp: fix tcp_set_congestion_control() use from bpf hook
- tcp: Reset bytes_acked and bytes_received when disconnecting
- net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
- net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
- net: bridge: stp: don't cache eth dest pointer before skb pull
- dma-buf: balance refcount inbalance
- dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc
- MIPS: lb60: Fix pin mappings
- ext4: don't allow any modifications to an immutable file
- ext4: enforce the immutable flag on open files
- mm: add filemap_fdatawait_range_keep_errors()
- jbd2: introduce jbd2_inode dirty range scoping
- ext4: use jbd2_inode dirty range scoping
- ext4: allow directory holes
- mm: vmscan: scan anonymous pages on file refaults
- hvsock: fix epollout hang from race condition
- drm/panel: simple: Fix panel_simple_dsi_probe
- usb: core: hub: Disable hub-initiated U1/U2
- tty: max310x: Fix invalid baudrate divisors calculator
- pinctrl: rockchip: fix leaked of_node references
- tty: serial: cpm_uart - fix init when SMC is relocated
- drm/edid: Fix a missing-check bug in drm_load_edid_firmware()
- PCI: Return error if cannot probe VF
- drm/bridge: tc358767: read display_props in get_modes()
- drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz
- drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry
- memstick: Fix error cleanup path of memstick_init
- tty/serial: digicolor: Fix digicolor-usart already registered warning
- tty: serial: msm_serial: avoid system lockup condition
- serial: 8250: Fix TX interrupt handling condition
- drm/virtio: Add memory barriers for capset cache.
- phy: renesas: rcar-gen2: Fix memory leak at error paths
- powerpc/pseries/mobility: prevent cpu hotplug during DT update
- drm/rockchip: Properly adjust to a true clock in adjusted_mode
- tty: serial_core: Set port active bit in uart_port_activate
- usb: gadget: Zero ffs_io_data
- powerpc/pci/of: Fix OF flags parsing for 64bit BARs
- drm/msm: Depopulate platform on probe failure
- serial: mctrl_gpio: Check if GPIO property exisits before requesting it
- PCI: sysfs: Ignore lockdep for remove attribute
- kbuild: Add -Werror=unknown-warning-option to CLANG_FLAGS
- PCI: xilinx-nwl: Fix Multi MSI data programming
- iio: iio-utils: Fix possible incorrect mask calculation
- powerpc/xmon: Fix disabling tracing while in xmon
- recordmcount: Fix spurious mcount entries on powerpc
- mfd: core: Set fwnode for created devices
- mfd: arizona: Fix undefined behavior
- mfd: hi655x-pmic: Fix missing return value check for
devm_regmap_init_mmio_clk
- um: Silence lockdep complaint about mmap_sem
- powerpc/4xx/uic: clear pending interrupt after irq type/pol change
- RDMA/i40iw: Set queue pair state when being queried
- serial: sh-sci: Terminate TX DMA during buffer flushing
- serial: sh-sci: Fix TX DMA buffer flushing and workqueue races
- kallsyms: exclude kasan local symbols on s390
- perf test mmap-thread-lookup: Initialize variable to suppress memory
sanitizer warning
- perf session: Fix potential NULL pointer dereference found by the smatch
tool
- perf annotate: Fix dereferencing freed memory found by the smatch tool
- RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM
- PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB
- powerpc/boot: add {get, put}_unaligned_be32 to xz_config.h
- f2fs: avoid out-of-range memory access
- mailbox: handle failed named mailbox channel request
- powerpc/eeh: Handle hugepages in ioremap space
- block/bio-integrity: fix a memory leak bug
- sh: prevent warnings when using iounmap
- mm/kmemleak.c: fix check for softirq context
- 9p: pass the correct prototype to read_cache_page
- mm/gup.c: mark undo_dev_pagemap as __maybe_unused
- mm/gup.c: remove some BUG_ONs from get_gate_page()
- mm/mmu_notifier: use hlist_add_head_rcu()
- locking/lockdep: Fix lock used or unused stats error
- locking/lockdep: Hide unused 'class' variable
- drm/crc: Only report a single overflow when a CRC fd is opened
- drm/crc-debugfs: Also sprinkle irqrestore over early exits
- usb: wusbcore: fix unbalanced get/put cluster_id
- usb: pci-quirks: Correct AMD PLL quirk detection
- KVM: nVMX: do not use dangling shadow VMCS after guest reset
- btrfs: inode: Don't compress if NODATASUM or NODATACOW set
- x86/sysfb_efi: Add quirks for some devices with swapped width and height
- x86/speculation/mds: Apply more accurate check on hypervisor platform
- binder: prevent transactions to context manager from its own process.
- fpga-manager: altera-ps-spi: Fix build error
- hpet: Fix division by zero in hpet_time_div()
- powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask()
- powerpc/tm: Fix oops on sigreturn on systems without TM
- access: avoid the RCU grace period for the temporary subjective credentials
- batman-adv: Fix duplicated OGMs on NETDEV_UP
- net: hns3: set ops to null when unregister ad_dev
- x86/cpu: Add Ice Lake NNPI to Intel family
- qed: iWARP - Fix tc for MPA ll2 connection
- net: hns3: fix for skb leak when doing selftest
- sched/fair: Fix "runnable_avg_yN_inv" not used warnings
- x86/cacheinfo: Fix a -Wtype-limits warning
- nvme-pci: properly report state change failure in nvme_reset_work
- nvme-pci: set the errno on ctrl state change error
- arm64: Do not enable IRQs for ct_user_exit
- net: stmmac: sun8i: force select external PHY when no internal one
- bcache: check CACHE_SET_IO_DISABLE in allocator code
- bcache: check CACHE_SET_IO_DISABLE bit in bch_journal()
- bcache: acquire bch_register_lock later in cached_dev_free()
- bcache: fix potential deadlock in cached_def_free()
- perf stat: Fix group lookup for metric group
- tools: bpftool: Fix json dump crash on powerpc
- Bluetooth: Add a new 13d3:3496 QCA_ROME device
- Bluetooth: Add new 13d3:3491 QCA_ROME device
- Bluetooth: Add new 13d3:3501 QCA_ROME device
- bcache: ignore read-ahead request failure on backing device
- bcache: fix mistaken sysfs entry for io_error counter
- bcache: destroy dc->writeback_write_wq if failed to create
dc->writeback_thread
- iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill
- iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices
- ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform
- media: videobuf2-core: Prevent size alignment wrapping buffer size to 0
- media: videobuf2-dma-sg: Prevent size from overflowing
- perf/x86/intel: Fix spurious NMI on fixed counter
- drm/edid: parse CEA blocks embedded in DisplayID
- PCI: qcom: Ensure that PERST is asserted for at least 100 ms
- IB/mlx5: Report correctly tag matching rendezvous capability
- include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT
architectures
- xfs: fix pagecache truncation prior to reflink
- xfs: flush removing page cache in xfs_reflink_remap_prep
- xfs: don't overflow xattr listent buffer
- xfs: don't ever put nlink > 0 inodes on the unlinked list
- xfs: fix reporting supported extra file attributes for statx()
- xfs: serialize unaligned dio writes against all other dio writes
- xfs: abort unaligned nowait directio early
- powerpc/powernv/npu: Fix reference leak
- powerpc/pseries: Fix oops in hotplug memory notifier
- mmc: sdhci-msm: fix mutex while in spinlock
- mtd: rawnand: mtk: Correct low level time calculation of r/w cycle
- blk-throttle: fix zero wait time for iops throttled group
- tcp: be more careful in tcp_fragment()
- net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn
- net_sched: unset TCQ_F_CAN_BYPASS when adding filters
- net: bridge: don't cache ether dest pointer on input
- net: sched: verify that q!=NULL before setting q->flags
* Line 6 POD HD500 driver fault (LP: #1790595) // Bionic update: upstream
stable patchset 2019-08-05 (LP: #1839036)
- ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1
* Bionic update: upstream stable patchset 2019-08-02 (LP: #1838824)
- rapidio: fix a NULL pointer dereference when create_workqueue() fails
- fs/fat/file.c: issue flush after the writeback of FAT
- sysctl: return -EINVAL if val violates minmax
- ipc: prevent lockup on alloc_msg and free_msg
- ARM: prevent tracing IPI_CPU_BACKTRACE
- mm/hmm: select mmu notifier when selecting HMM
- hugetlbfs: on restore reserve error path retain subpool reservation
- mem-hotplug: fix node spanned pages when we have a node with only
ZONE_MOVABLE
- mm/cma.c: fix crash on CMA allocation if bitmap allocation fails
- mm/cma.c: fix the bitmap status to show failed allocation reason
- mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
- mm/slab.c: fix an infinite loop in leaks_show()
- kernel/sys.c: prctl: fix false positive in validate_prctl_map()
- thermal: rcar_gen3_thermal: disable interrupt in .remove
- drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER
- mfd: tps65912-spi: Add missing of table registration
- mfd: intel-lpss: Set the device in reset state when init
- drm/nouveau/disp/dp: respect sink limits when selecting failsafe link
configuration
- mfd: twl6040: Fix device init errors for ACCCTL register
- perf/x86/intel: Allow PEBS multi-entry in watermark mode
- drm/bridge: adv7511: Fix low refresh rate selection
- objtool: Don't use ignore flag for fake jumps
- EDAC/mpc85xx: Prevent building as a module
- pwm: meson: Use the spin-lock only to protect register modifications
- ntp: Allow TAI-UTC offset to be set to zero
- f2fs: fix to avoid panic in do_recover_data()
- f2fs: fix to clear dirty inode in error path of f2fs_iget()
- f2fs: fix to avoid panic in dec_valid_block_count()
- f2fs: fix to do sanity check on valid block count of segment
- percpu: remove spurious lock dependency between percpu and sched
- configfs: fix possible use-after-free in configfs_register_group
- uml: fix a boot splat wrt use of cpu_all_mask
- mmc: mmci: Prevent polling for busy detection in IRQ context
- watchdog: imx2_wdt: Fix set_timeout for big timeout values
- watchdog: fix compile time error of pretimeout governors
- blk-mq: move cancel of requeue_work into blk_mq_release
- iommu/vt-d: Set intel_iommu_gfx_mapped correctly
- misc: pci_endpoint_test: Fix test_reg_bar to be updated in pci_endpoint_test
- nvme-pci: unquiesce admin queue on shutdown
- ALSA: hda - Register irq handler after the chip initialization
- nvmem: core: fix read buffer in place
- fuse: retrieve: cap requested size to negotiated max_write
- nfsd: allow fh_want_write to be called twice
- vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING"
- x86/PCI: Fix PCI IRQ routing table memory leak
- platform/chrome: cros_ec_proto: check for NULL transfer function
- PCI: keystone: Prevent ARM32 specific code to be compiled for ARM64
- soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
- clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
- soc: rockchip: Set the proper PWM for rk3288
- ARM: dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA
- ARM: dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA
- ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
- ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
- PCI: rpadlpar: Fix leaked device_node references in add/remove paths
- platform/x86: intel_pmc_ipc: adding error handling
- power: supply: max14656: fix potential use-before-alloc
- PCI: rcar: Fix a potential NULL pointer dereference
- PCI: rcar: Fix 64bit MSI message address handling
- video: hgafb: fix potential NULL pointer dereference
- video: imsttfb: fix potential NULL pointer dereferences
- block, bfq: increase idling for weight-raised queues
- PCI: xilinx: Check for __get_free_pages() failure
- gpio: gpio-omap: add check for off wake capable gpios
- dmaengine: idma64: Use actual device for DMA transfers
- pwm: tiehrpwm: Update shadow register for disabling PWMs
- ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on
Arndale Octa
- pwm: Fix deadlock warning when removing PWM device
- ARM: exynos: Fix undefined instruction during Exynos5422 resume
- usb: typec: fusb302: Check vconn is off when we start toggling
- gpio: vf610: Do not share irq_chip
- percpu: do not search past bitmap when allocating an area
- drm: don't block fb changes for async plane updates
- ALSA: seq: Cover unsubscribe_port() in list_mutex
- initramfs: free initrd memory if opening /initrd.image fails
- bpf: fix undefined behavior in narrow load handling
- f2fs: fix to avoid panic in f2fs_remove_inode_page()
- f2fs: fix to use inline space only if inline_xattr is enable
- netfilter: nf_conntrack_h323: restore boundary check correctness
- mips: Make sure dt memory regions are valid
- nvmem: sunxi_sid: Support SID on A83T and H5
- nfsd: avoid uninitialized variable warning
- switchtec: Fix unintended mask of MRPC event
- net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending
- i40e: Queues are reserved despite "Invalid argument" error
- net: hns3: return 0 and print warning when hit duplicate MAC
- soc: renesas: Identify R-Car M3-W ES1.1
- soc: renesas: Identify R-Car M3-W ES1.3
- [Config] updateconfigs for CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT
- drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3)
- nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled
- HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth
- HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary
- ALSA: oxfw: allow PCM capture for Stanton SCS.1m
- ALSA: hda/realtek - Update headset mode for ALC256
- ALSA: firewire-motu: fix destruction of data for isochronous resources
- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
- mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
- fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
- mm/vmscan.c: fix trying to reclaim unevictable LRU page
- signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
- ptrace: restore smp_rmb() in __ptrace_may_access()
- media: v4l2-ioctl: clear fields in s_parm
- iommu/arm-smmu: Avoid constant zero in TLBI writes
- i2c: acorn: fix i2c warning
- bcache: fix stack corruption by PRECEDING_KEY()
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
- ASoC: cs42xx8: Add regcache mask dirty
- ASoC: fsl_asrc: Fix the issue about unsupported rate
- drm/i915/sdvo: Implement proper HDMI audio support for SDVO
- x86/uaccess, kcov: Disable stack protector
- ALSA: seq: Protect in-kernel ioctl calls with mutex
- ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
- Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
- s390/kasan: fix strncpy_from_user kasan checks
- Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
- scsi: qedi: remove memset/memcpy to nfunc and use func instead
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
- scsi: lpfc: add check for loss of ndlp when sending RRQ
- arm64/mm: Inhibit huge-vmap with ptdump
- nvme: remove the ifdef around nvme_nvm_ioctl
- platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI
table
- platform/x86: pmc_atom: Add several Beckhoff Automation boards to
critclk_systems DMI table
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
- libnvdimm: Fix compilation warnings with W=1
- selftests/timers: Add missing fflush(stdout) calls
- usbnet: ipheth: fix racing condition
- KVM: x86/pmu: do not mask the value that is written to fixed PMUs
- KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
- drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an
invalid read
- drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
- usb: dwc2: Fix DMA cache alignment issues
- usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression)
- USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
- USB: serial: pl2303: add Allied Telesis VT-Kit3
- USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
- USB: serial: option: add Telit 0x1260 and 0x1261 compositions
- RAS/CEC: Fix binary search function
- x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback
- x86/kasan: Fix boot with 5-level paging and KASAN
- rtc: pcf8523: don't return invalid date when battery is low
- HID: wacom: Don't set tool type until we're in range
- HID: wacom: Don't report anything prior to the tool entering range
- HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact
- bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached
- f2fs: fix to avoid accessing xattr across the boundary
- nvme: fix srcu locking on error return in nvme_get_ns_from_disk
- nvme: merge nvme_ns_ioctl into nvme_ioctl
- nvme: release namespace SRCU protection before performing controller ioctls
- nvme: fix memory leak for power latency tolerance
- KVM: x86/pmu: mask the result of rdpmc according to the width of the
counters
- tools/kvm_stat: fix fields filter for child events
- RAS/CEC: Convert the timer callback to a workqueue
- x86/mm/KASLR: Compute the size of the vmemmap section properly
- ax25: fix inconsistent lock state in ax25_destroy_timer
- be2net: Fix number of Rx queues used for flow hashing
- ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
- lapb: fixed leak of control-blocks.
- neigh: fix use-after-free read in pneigh_get_next
- net: openvswitch: do not free vport if register_netdevice() is failed.
- sctp: Free cookie before we memdup a new one
- sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg
- Staging: vc04_services: Fix a couple error codes
- perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints
- netfilter: nf_queue: fix reinject verdict handling
- ipvs: Fix use-after-free in ip_vs_in
- selftests: netfilter: missing error check when setting up veth interface
- clk: ti: clkctrl: Fix clkdm_clk handling
- powerpc/powernv: Return for invalid IMC domain
- mISDN: make sure device name is NUL terminated
- x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor
- perf/ring_buffer: Fix exposing a temporarily decreased data_head
- perf/ring_buffer: Add ordering to rb->nest increment
- perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data
- gpio: fix gpio-adp5588 build errors
- net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()
- net: aquantia: fix LRO with FCS error
- i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
- ALSA: hda - Force polling mode on CNL for fixing codec communication
- configfs: Fix use-after-free when accessing sd->s_dentry
- perf data: Fix 'strncat may truncate' build failure with recent gcc
- perf record: Fix s390 missing module symbol and warning for non-root users
- ia64: fix build errors by exporting paddr_to_nid()
- KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list
- KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu
- net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs
- net: phy: dp83867: Set up RGMII TX delay
- scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
- scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask
- scsi: scsi_dh_alua: Fix possible null-ptr-deref
- scsi: libsas: delete sas port if expander discover failed
- mlxsw: spectrum: Prevent force of 56G
- coredump: fix race condition between collapse_huge_page() and core dumping
- infiniband: fix race condition between infiniband mlx4, mlx5 driver and core
dumping
- Abort file_remove_privs() for non-reg. files
- tipc: purge deferredq list for each grp member in tipc_group_delete
- vsock/virtio: set SOCK_DONE on peer shutdown
- usb: xhci: Fix a potential null pointer dereference in
xhci_debugfs_create_endpoint()
- ACPI/PCI: PM: Add missing wakeup.flags.valid checks
- drm/etnaviv: lock MMU while dumping core
- net: aquantia: tx clean budget logic error
- perf namespace: Protect reading thread's namespace
- xen/pvcalls: Remove set but not used variable
- xen: xenbus: Catch closing of non existent transactions
- xen: xenbus_dev_frontend: Verify body of XS_TRANSACTION_END
- xenbus: Avoid deadlock during suspend due to open transactions
- tracing: Silence GCC 9 array bounds warning
- objtool: Support per-function rodata sections
- gcc-9: silence 'address-of-packed-member' warning
- net: phy: broadcom: Use strlcpy() for ethtool::get_strings
- mmc: core: Prevent processing SDIO IRQs when the card is suspended
- scsi: ufs: Avoid runtime suspend possibly being blocked forever
- usb: chipidea: udc: workaround for endpoint conflict issue
- IB/hfi1: Silence txreq allocation warnings
- Input: synaptics - enable SMBus on ThinkPad E480 and E580
- Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD
- apparmor: enforce nullbyte at end of tag string
- ARC: fix build warnings
- ARC: [plat-hsdk]: Add missing multicast filter bins number to GMAC node
- ARC: [plat-hsdk]: Add missing FIFO size entry in GMAC node
- parport: Fix mem leak in parport_register_dev_model
- parisc: Fix compiler warnings in float emulation code
- IB/rdmavt: Fix alloc_qpn() WARN_ON()
- IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
- IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value
- IB/hfi1: Validate page aligned for a given virtual address
- MIPS: uprobes: remove set but not used variable 'epc'
- xtensa: Fix section mismatch between memblock_reserve and mem_reserve
- net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0
- net: hns: Fix loopback test failed at copper ports
- mdesc: fix a missing-check bug in get_vdev_port_node_info()
- sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD
- net: ethernet: mediatek: Use hw_feature to judge if HWLRO is supported
- net: ethernet: mediatek: Use NET_IP_ALIGN to judge if HW RX_2BYTE_OFFSET is
enabled
- drm/arm/hdlcd: Actually validate CRTC modes
- drm/arm/hdlcd: Allow a bit of clock tolerance
- scripts/checkstack.pl: Fix arm64 wrong or unknown architecture
- scsi: ufs: Check that space was properly alloced in copy_query_response
- scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous()
- net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set
- s390/qeth: fix VLAN attribute in bridge_hostnotify udev event
- hwmon: (core) add thermal sensors only if dev->of_node is present
- hwmon: (pmbus/core) Treat parameters as paged if on multiple pages
- nvme: Fix u32 overflow in the number of namespace list calculation
- btrfs: start readahead also in seed devices
- can: flexcan: fix timeout when set small bitrate
- can: purge socket error queue on sock destruct
- powerpc/bpf: use unsigned division instruction for 64-bit operations
- ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX
- ARM: dts: am57xx-idk: Remove support for voltage switching for SD card
- Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
- Bluetooth: Fix regression with minimum encryption key size alignment
- SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write
- cfg80211: fix memory leak of wiphy device name
- mac80211: drop robust management frames from unknown TA
- mac80211: handle deauthentication/disassociation from TDLS peer
- mac80211: Do not use stack memory with scatterlist for GMAC
- s390/jump_label: Use "jdd" constraint on gcc9
- s390/ap: rework assembler functions to use unions for in/out register
variables
- mmc: core: API to temporarily disable retuning for SDIO CRC errors
- mmc: core: Add sdio_retune_hold_now() and sdio_retune_release()
- Input: silead - add MSSL0017 to acpi_device_id
- selftests: vm: install test_vmalloc.sh for run_vmtests
- arm64: Silence gcc warnings about arch ABI drift
- riscv: mm: synchronize MMU after pte change
- arm64/sve: <uapi/asm/ptrace.h> should not depend on <uapi/linux/prctl.h>
- drm/vmwgfx: Use the backdoor port if the HB port is not available
- {nl,mac}80211: allow 4addr AP operation on crypto controlled devices
- perf ui helpline: Use strlcpy() as a shorter form of strncpy() + explicit
set nul
- perf help: Remove needless use of strncpy()
- perf header: Fix unchecked usage of strncpy()
- IB/hfi1: Close PSM sdma_progress sleep window
- 9p/xen: fix check for xenbus_read error in front_probe
- 9p/rdma: do not disconnect on down_interruptible EAGAIN
- 9p: acl: fix uninitialized iattr access
- 9p/rdma: remove useless check in cm_event_handler
- 9p: p9dirent_read: check network-provided name length
- net/9p: include trans_common.h to fix missing prototype warning.
- qmi_wwan: Fix out-of-bounds read
- fs/proc/array.c: allow reporting eip/esp for all coredumping threads
- mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask
- fs/binfmt_flat.c: make load_flat_shared_library() work
- dm log writes: make sure super sector log updates are written in order
- scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()
- x86/speculation: Allow guests to use SSBD even if host does not
- x86/microcode: Fix the microcode load on CPU hotplug for real
- NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O
- cpu/speculation: Warn on unsupported mitigations= parameter
- eeprom: at24: fix unexpected timeout under high load
- af_packet: Block execution of tasks waiting for transmit to complete in
AF_PACKET
- ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop
- net/packet: fix memory leak in packet_set_ring()
- net: remove duplicate fetch in sock_getsockopt
- net: stmmac: fixed new system time seconds value calculation
- sctp: change to hold sk after auth shkey is created successfully
- tipc: change to use register_pernet_device
- tipc: check msg->req data len in tipc_nl_compat_bearer_disable
- tun: wake up waitqueues after IFF_UP is set
- team: Always enable vlan tx offload
- bonding: Always enable vlan tx offload
- bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro
- bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err
- arm64: futex: Avoid copying out uninitialised stack in failed cmpxchg()
- bpf, arm64: use more scalable stadd over ldxr / stxr loop in xadd
- futex: Update comments and docs about return values of arch futex code
- tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
- arm64: insn: Fix ldadd instruction encoding
- arm64: Don't unconditionally add -Wno-psabi to KBUILD_CFLAGS
- irqchip/mips-gic: Use the correct local interrupt map registers
- Bluetooth: Fix faulty expression for minimum encryption key size check
- ASoC : cs4265 : readable register too low
- ASoC: soc-pcm: BE dai needs prepare when pause release after resume
- spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
- drm/mediatek: fix unbind functions
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable()
- ASoC: max98090: remove 24-bit format support if RJ is 0
- ASoC: sun4i-i2s: Fix sun8i tx channel offset mask
- ASoC: sun4i-i2s: Add offset to RX channel select
- usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i]
- usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC
- SoC: rt274: Fix internal jack assignment in set_jack callback
- scsi: hpsa: correct ioaccel2 chaining
- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device
registration
- cpuset: restore sanity to cpuset_cpus_allowed_fallback()
- scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE
- mm/mlock.c: change count_mm_mlocked_page_nr return type
- module: Fix livepatch/ftrace module text permissions race
- ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper()
- MIPS: netlogic: xlr: Remove erroneous check in nlm_fmn_send()
- drm/i915/dmc: protect against reading random memory
- crypto: user - prevent operating on larval algorithms
- crypto: cryptd - Fix skcipher instance memory leak
- ALSA: seq: fix incorrect order of dest_client/dest_ports arguments
- ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages
- ALSA: line6: Fix write on zero-sized buffer
- ALSA: usb-audio: fix sign unintended sign extension on left shifts
- ALSA: hda/realtek - Change front mic location for Lenovo M710q
- lib/mpi: Fix karactx leak in mpi_powm
- tracing/snapshot: Resize spare buffer if size changed
- arm64: kaslr: keep modules inside module region when KASAN is enabled
- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
- drm/imx: notify drm core before sending event during crtc disable
- drm/imx: only send event on crtc disable if kept disabled
- ftrace/x86: Remove possible deadlock between register_kprobe() and
ftrace_run_update_code()
- mm/vmscan.c: prevent useless kswapd loops
- btrfs: Ensure replaced device doesn't have pending chunk allocation
- vhost-net: set packet weight of tx polling to 2 * vq size
- vhost_net: use packet weight for rx handler, too
- vhost_net: introduce vhost_exceeds_weight()
- vhost: introduce vhost_exceeds_weight()
- vhost_net: fix possible infinite loop
- vhost: vsock: add weight support
- vhost: scsi: add weight support
- tty: rocket: fix incorrect forward declaration of 'rp_init()'
- KVM: x86: degrade WARN to pr_warn_ratelimited
- KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC
- svcrdma: Ignore source port when computing DRC hash
- MIPS: Fix bounds check virt_addr_valid
- MIPS: Add missing EHB in mtc0 -> mfc0 sequence.
- dmaengine: imx-sdma: remove BD_INTR for channel0
- drm/mediatek: unbind components in mtk_drm_unbind()
- drm/mediatek: clear num_pipes when unbind driver
- x86/CPU: Add more Icelake model numbers
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from
asus_nb_wmi
- platform/x86: intel-vbtn: Report switch events when event wakes device
- i2c: pca-platform: Fix GPIO lookup code
- ALSA: hda/realtek: Add quirks for several Clevo notebook barebones
- ARM: dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node
- drm/amd/powerplay: use hardware fan control if no powerplay fan table
- drm/etnaviv: add missing failure path to destroy suballoc
- mlxsw: spectrum: Handle VLAN device unlinking
- media: s5p-mfc: fix incorrect bus assignment in virtual child device
- net: hns: Fixes the missing put_device in positive leg for roce reset
- ALSA: hda: Initialize power_state field properly
- rds: Fix warning.
- ip6: fix skb leak in ip6frag_expire_frag_queue()
- netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
- sc16is7xx: move label 'err_spi' to correct section
- netfilter: ipv6: nf_defrag: accept duplicate fragments again
- nfsd: Fix overflow causing non-working mounts on 1 TB machines
- MIPS: have "plain" make calls build dtbs for selected platforms
- dmaengine: qcom: bam_dma: Fix completed descriptors count
* Bionic update: upstream stable patchset 2019-08-01 (LP: #1838700)
- x86: Hide the int3_emulate_call/jmp functions from UML
- ext4: do not delete unlinked inode from orphan list on failed truncate
- f2fs: Fix use of number of devices
- KVM: x86: fix return value for reserved EFER
- bio: fix improper use of smp_mb__before_atomic()
- sbitmap: fix improper use of smp_mb__before_atomic()
- Revert "scsi: sd: Keep disk read-only when re-reading partition"
- crypto: vmx - CTR: always increment IV as quadword
- mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time
problem
- mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem
- kvm: svm/avic: fix off-by-one in checking host APIC ID
- libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead
- arm64/iommu: handle non-remapped addresses in ->mmap and ->get_sgtable
- gfs2: Fix sign extension bug in gfs2_update_stats
- Btrfs: do not abort transaction at btrfs_update_root() after failure to COW
path
- Btrfs: avoid fallback to transaction commit during fsync of files with holes
- Btrfs: fix race between ranged fsync and writeback of adjacent ranges
- btrfs: sysfs: Fix error path kobject memory leak
- btrfs: sysfs: don't leak memory when failing add fsid
- fbdev: fix divide error in fb_var_to_videomode
- btrfs: honor path->skip_locking in backref code
- fbdev: fix WARNING in __alloc_pages_nodemask bug
- media: cpia2: Fix use-after-free in cpia2_exit
- media: serial_ir: Fix use-after-free in serial_ir_init_module
- media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
- ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
- bpf: devmap: fix use-after-free Read in __dev_map_entry_free
- batman-adv: mcast: fix multicast tt/tvlv worker locking
- at76c50x-usb: Don't register led_trigger if usb_register_driver failed
- net: erspan: fix use-after-free
- gfs2: Fix lru_count going negative
- cxgb4: Fix error path in cxgb4_init_module
- NFS: make nfs_match_client killable
- IB/hfi1: Fix WQ_MEM_RECLAIM warning
- gfs2: Fix occasional glock use-after-free
- mmc: core: Verify SD bus width
- tools/bpf: fix perf build error with uClibc (seen on ARC)
- dmaengine: tegra210-dma: free dma controller in remove()
- net: ena: gcc 8: fix compilation warning
- pinctrl: zte: fix leaked of_node references
- ASoC: hdmi-codec: unlock the device on startup errors
- powerpc/perf: Return accordingly on invalid chip-id in
- powerpc/boot: Fix missing check of lseek() return value
- ASoC: imx: fix fiq dependencies
- spi: pxa2xx: fix SCR (divisor) calculation
- brcm80211: potential NULL dereference in
brcmf_cfg80211_vndr_cmds_dcmd_handler()
- ACPI / property: fix handling of data_nodes in acpi_get_next_subnode()
- ARM: vdso: Remove dependency with the arch_timer driver internals
- arm64: Fix compiler warning from pte_unmap() with -Wunused-but-set-variable
- sched/cpufreq: Fix kobject memleak
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path
- scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending()
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in
tcm_qla2xxx_close_session()
- Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota
reserve
- btrfs: fix panic during relocation after ENOSPC before writeback happens
- btrfs: Don't panic when we can't find a root key
- iwlwifi: pcie: don't crash on invalid RX interrupt
- rtc: 88pm860x: prevent use-after-free on device remove
- scsi: qedi: Abort ep termination if offload not scheduled
- w1: fix the resume command API
- dmaengine: pl330: _stop: clear interrupt status
- mac80211/cfg80211: update bss channel on channel switch
- libbpf: fix samples/bpf build failure due to undefined UINT32_MAX
- ASoC: fsl_sai: Update is_slave_mode with correct value
- mwifiex: prevent an array overflow
- net: cw1200: fix a NULL pointer dereference
- crypto: sun4i-ss - Fix invalid calculation of hash end
- bcache: return error immediately in bch_journal_replay()
- bcache: fix failure in journal relplay
- bcache: add failure check to run_cache_set() for journal replay
- bcache: avoid clang -Wunintialized warning
- vfio-ccw: Do not call flush_workqueue while holding the spinlock
- vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev
- smpboot: Place the __percpu annotation correctly
- x86/mm: Remove in_nmi() warning from 64-bit implementation of
vmalloc_fault()
- mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC
versions
- HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
- pinctrl: pistachio: fix leaked of_node references
- pinctrl: samsung: fix leaked of_node references
- clk: rockchip: undo several noc and special clocks as critical on rk3288
- dmaengine: at_xdmac: remove BUG_ON macro in tasklet
- media: coda: clear error return value before picture run
- media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper
- media: au0828: stop video streaming only when last user stops
- media: ov2659: make S_FMT succeed even if requested format doesn't match
- audit: fix a memory leak bug
- media: stm32-dcmi: fix crash when subdev do not expose any formats
- media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable()
- media: pvrusb2: Prevent a buffer overflow
- powerpc/64: Fix booting large kernels with STRICT_KERNEL_RWX
- random: add a spinlock_t to struct batched_entropy
- cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock
- sched/core: Check quota and period overflow at usec to nsec conversion
- sched/rt: Check integer overflow at usec to nsec conversion
- sched/core: Handle overflow in cpu_shares_write_u64
- drm/msm: a5xx: fix possible object reference leak
- USB: core: Don't unbind interfaces following device reset failure
- x86/irq/64: Limit IST stack overflow check to #DB stack
- phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode
- i40e: Able to add up to 16 MAC filters on an untrusted VF
- i40e: don't allow changes to HW VLAN stripping on active port VLANs
- arm64: vdso: Fix clock_getres() for CLOCK_REALTIME
- RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
- hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
- hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
- hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
- hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
- hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
- scsi: libsas: Do discovery on empty PHY to update PHY info
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers
- mmc_spi: add a status check for spi_sync_locked
- mmc: sdhci-of-esdhc: add erratum eSDHC5 support
- mmc: sdhci-of-esdhc: add erratum A-009204 support
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
- drm/amdgpu: fix old fence check in amdgpu_fence_emit
- PM / core: Propagate dev->power.wakeup_path when no callbacks
- clk: rockchip: Fix video codec clocks on rk3288
- extcon: arizona: Disable mic detect if running when driver is removed
- clk: rockchip: Make rkpwm a critical clock on rk3288
- s390: zcrypt: initialize variables before_use
- x86/microcode: Fix the ancient deprecated microcode loading method
- s390: cio: fix cio_irb declaration
- cpufreq: ppc_cbe: fix possible object reference leak
- cpufreq/pasemi: fix possible object reference leak
- cpufreq: pmac32: fix possible object reference leak
- cpufreq: kirkwood: fix possible object reference leak
- block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR
- x86/build: Keep local relocations with ld.lld
- iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion
- iio: hmc5843: fix potential NULL pointer dereferences
- iio: common: ssp_sensors: Initialize calculated_time in
ssp_common_process_data
- rtlwifi: fix a potential NULL pointer dereference
- mwifiex: Fix mem leak in mwifiex_tm_cmd
- brcmfmac: fix missing checks for kmemdup
- b43: shut up clang -Wuninitialized variable warning
- brcmfmac: convert dev_init_lock mutex to completion
- brcmfmac: fix WARNING during USB disconnect in case of unempty psq
- brcmfmac: fix race during disconnect when USB completion is in progress
- brcmfmac: fix Oops when bringing up interface during USB disconnect
- rtc: xgene: fix possible race condition
- rtlwifi: fix potential NULL pointer dereference
- scsi: ufs: Fix regulator load and icc-level configuration
- scsi: ufs: Avoid configuring regulator with undefined voltage range
- arm64: cpu_ops: fix a leaked reference by adding missing of_node_put
- x86/uaccess, signal: Fix AC=1 bloat
- x86/ia32: Fix ia32_restore_sigcontext() AC leak
- chardev: add additional check for minor range overlap
- RDMA/hns: Fix bad endianess of port_pd variable
- HID: core: move Usage Page concatenation to Main item
- ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put
- ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put
- cxgb3/l2t: Fix undefined behaviour
- HID: logitech-hidpp: change low battery level threshold from 31 to 30
percent
- spi: tegra114: reset controller on probe
- kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.
- media: video-mux: fix null pointer dereferences
- media: wl128x: prevent two potential buffer overflows
- scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload
check
- virtio_console: initialize vtermno value for ports
- tty: ipwireless: fix missing checks for ioremap
- x86/mce: Fix machine_check_poll() tests for error types
- rcutorture: Fix cleanup path for invalid torture_type strings
- rcuperf: Fix cleanup path for invalid perf_type strings
- usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
- scsi: qla4xxx: avoid freeing unallocated dma memory
- batman-adv: allow updating DAT entry timeouts on incoming ARP Replies
- dmaengine: tegra210-adma: use devm_clk_*() helpers
- hwrng: omap - Set default quality
- thunderbolt: Fix to check for kmemdup failure
- media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
- media: vimc: stream: fix thread state before sleep
- media: go7007: avoid clang frame overflow warning with KASAN
- media: vimc: zero the media_device on probe
- scsi: lpfc: Fix FDMI manufacturer attribute value
- scsi: lpfc: Fix fc4type information for FDMI
- media: saa7146: avoid high stack usage with clang
- scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
- spi: rspi: Fix sequencer reset during initialization
- spi: Fix zero length xfer bug
- ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM
- drm/drv: Hold ref on parent device during drm_device lifetime
- drm: Wake up next in drm_read() chain if we are forced to putback the event
- vfio-ccw: Prevent quiesce function going into an infinite loop
- NFS: Fix a double unlock from nfs_match,get_client
- ext4: wait for outstanding dio during truncate in nojournal mode
- NFSv4.1 fix incorrect return value in copy_file_range
- media: vb2: add waiting_in_dqbuf flag
- acct_on(): don't mess with freeze protection
- hv_netvsc: fix race that may miss tx queue wakeup
- Bluetooth: Ignore CC events not matching the last HCI command
- powerpc/perf: Fix loop exit condition in nest_imc_event_init
- drm/nouveau/bar/nv50: ensure BAR is mapped
- media: stm32-dcmi: return appropriate error codes during probe
- powerpc/watchdog: Use hrtimers for per-CPU heartbeat
- scsi: qla2xxx: Fix hardirq-unsafe locking
- x86/modules: Avoid breaking W^X while loading modules
- sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs
- s390: qeth: address type mismatch warning
- rsi: Fix NULL pointer dereference in kmalloc
- nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE
- bcache: avoid potential memleak of list of journal_replay(s) in the
CACHE_SYNC branch of run_cache_set
- RDMA/cma: Consider scope_id while binding to ipv6 ll address
- block: fix use-after-free on gendisk
- staging: vc04_services: handle kzalloc failure
- irq_work: Do not raise an IPI when queueing work on the local CPU
- thunderbolt: Take domain lock in switch sysfs attribute callbacks
- drm: etnaviv: avoid DMA API warning when importing buffers
- ACPI/IORT: Reject platform device creation on NUMA node mapping failure
- perf/x86/msr: Add Icelake support
- perf/x86/intel/rapl: Add Icelake support
- perf/x86/intel/cstate: Add Icelake support
- drm/panel: otm8009a: Add delay at the end of initialization
- thunderbolt: property: Fix a missing check of kzalloc
- thunderbolt: Fix to check the return value of kmemdup
- x86/mce: Handle varying MCA bank counts
- scsi: lpfc: avoid uninitialized variable warning
- thunderbolt: Fix to check return value of ida_simple_get
- drm/amd/display: fix releasing planes when exiting odm
- thunderbolt: property: Fix a NULL pointer dereference
- e1000e: Disable runtime PM on CNP+
- igb: Exclude device from suspend direct complete optimization
- media: si2165: fix a missing check of return value
- drm/amd/display: Fix Divide by 0 in memory calculations
- spi: imx: stop buffer overflow in RX FIFO flush
- bonding/802.3ad: fix slave link initialization transition states
- cxgb4: offload VLAN flows regardless of VLAN ethtype
- inet: switch IP ID generator to siphash
- ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
- ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST
- ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
- llc: fix skb leak in llc_build_and_send_ui_pkt()
- net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT
- net: fec: fix the clk mismatch in failed_reset path
- net-gro: fix use-after-free read in napi_gro_frags()
- net: mvneta: Fix err code path of probe
- net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
- net: phy: marvell10g: report if the PHY fails to boot firmware
- net: stmmac: fix reset gpio free missing
- usbnet: fix kernel crash after disconnect
- tipc: Avoid copying bytes beyond the supplied data
- net/mlx5: Allocate root ns memory using kzalloc to match kfree
- bnxt_en: Fix aggregation buffer leak under OOM condition.
- crypto: vmx - ghash: do nosimd fallback manually
- include/linux/compiler*.h: define asm_volatile_goto
- compiler.h: give up __compiletime_assert_fallback()
- xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
- tipc: fix modprobe tipc failed after switch order of device registration
- sparc64: Fix regression in non-hypervisor TLB flush xcall
- include/linux/bitops.h: sanitize rotate primitives
- xhci: update bounce buffer with correct sg num
- xhci: Use %zu for printing size_t type
- xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
- usb: xhci: avoid null pointer deref when bos field is NULL
- usbip: usbip_host: fix BUG: sleeping function called from invalid context
- usbip: usbip_host: fix stub_dev lock context imbalance regression
- USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
- USB: sisusbvga: fix oops in error path of sisusb_probe
- USB: Add LPM quirk for Surface Dock GigE adapter
- USB: rio500: refuse more than one device at a time
- USB: rio500: fix memory leak in close after disconnect
- media: usb: siano: Fix general protection fault in smsusb
- media: usb: siano: Fix false-positive "uninitialized variable" warning
- media: smsusb: better handle optional alignment
- scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
- scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
- Btrfs: fix wrong ctime and mtime of a directory after log replay
- Btrfs: fix race updating log root item during fsync
- Btrfs: fix fsync not persisting changed attributes of a directory
- Btrfs: incremental send, fix file corruption when no-holes feature is
enabled
- KVM: PPC: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts
- powerpc/perf: Fix MMCRA corruption by bhrb_filter
- ALSA: hda/realtek - Set default power save node to 0
- KVM: s390: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID
- drm/nouveau/i2c: Disable i2c bus access after ->fini()
- tty: serial: msm_serial: Fix XON/XOFF
- tty: max310x: Fix external crystal register setup
- memcg: make it work on sparse non-0-node systems
- kernel/signal.c: trace_signal_deliver when signal_group_exit
- docs: Fix conf.py for Sphinx 2.0
- doc: Cope with the deprecation of AutoReporter
- doc: Cope with Sphinx logging deprecations
- ima: show rules with IMA_INMASK correctly
- serial: sh-sci: disable DMA for uart_console
- staging: vc04_services: prevent integer overflow in create_pagelist()
- staging: wlan-ng: fix adapter initialization failure
- CIFS: cifs_read_allocate_pages: don't iterate through whole page array on
ENOMEM
- gcc-plugins: Fix build failures under Darwin host
- drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set
- drm/rockchip: shutdown drm subsystem on shutdown
- Compiler Attributes: add support for __copy (gcc >= 9)
- include/linux/module.h: copy __init/__exit attrs to init/cleanup_module
- binder: fix race between munmap() and direct reclaim
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
- brcmfmac: fix NULL pointer derefence during USB disconnect
- iio: dac: ds4422/ds4424 fix chip verification
- s390/crypto: fix possible sleep during spinlock aquired
- ALSA: line6: Assure canceling delayed work at disconnection
- vt/fbcon: deinitialize resources in visual_init() after failed memory
allocation
- cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case
- x86/ftrace: Do not call function graph from dynamic trampolines
- x86/ftrace: Set trampoline pages as executable
- x86/kprobes: Set instruction page as executable
- of: overlay: validate overlay properties #address-cells and #size-cells
- of: overlay: set node fields from properties when add new overlay node
- ethtool: fix potential userspace buffer overflow
- Fix memory leak in sctp_process_init
- neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
- net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
- net: rds: fix memory leak in rds_ib_flush_mr_pool
- pktgen: do not sleep with the thread lock held.
- ipv6: fix EFAULT on sendto with icmpv6 and hdrincl
- ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
- net: sfp: read eeprom in maximum 16 byte increments
- ipv6: fix the check before getting the cookie in rt6_get_cookie
- rcu: locking and unlocking need to always be at least barriers
- parisc: Use implicit space register selection for loading the coherence
index of I/O pdirs
- fuse: fallocate: fix return with locked inode
- pstore: Remove needless lock during console writes
- pstore: Convert buf_lock to semaphore
- pstore/ram: Run without kernel crash dump region
- x86/power: Fix 'nosmt' vs hibernation triple fault during resume
- i2c: xiic: Add max_read_len quirk
- MIPS: Bounds check virt_addr_valid
- MIPS: pistachio: Build uImage.gz by default
- genwqe: Prevent an integer overflow in the ioctl
- test_firmware: Use correct snprintf() limit
- drm/gma500/cdv: Check vbt config bits when detecting lvds panels
- drm/amdgpu/psp: move psp version specific function pointers to early_init
- drm/i915: Fix I915_EXEC_RING_MASK
- drm/i915/fbc: disable framebuffer compression on GeminiLake
- TTY: serial_core, add ->install
- qmi_wwan: Add quirk for Quectel dynamic config
- ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
- ethtool: check the return value of get_regs_len
- net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set
- net: mvpp2: Use strscpy to handle stat strings
- packet: unconditionally free po->rollover
- NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter
- NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled
- s390/mm: fix address space detection in exception handling
- drm/msm: fix fb references in async update
- drm: add non-desktop quirk for Valve HMDs
- drm: add non-desktop quirks to Sensics and OSVR headsets.
- drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in
* CVE-2019-14283
- floppy: fix out-of-bounds read in copy_buffer
* CVE-2019-14284
- floppy: fix div-by-zero in setup_format_params
* Bionic linux 4.15.0-56.62 fails to build with CONFIG_NVM disabled
(LP: #1838533)
- Revert "nvme: warn when finding multi-port subsystems without multipathing
enabled"
* Bionic update: upstream stable patchset 2019-07-31 (LP: #1838576)
- netfilter: compat: initialize all fields in xt_init
- platform/x86: sony-laptop: Fix unintentional fall-through
- platform/x86: thinkpad_acpi: Disable Bluetooth for some machines
- hwmon: (pwm-fan) Disable PWM if fetching cooling data fails
- kernfs: fix barrier usage in __kernfs_new_node()
- USB: serial: fix unthrottle races
- iio: adc: xilinx: fix potential use-after-free on remove
- libnvdimm/namespace: Fix a potential NULL pointer dereference
- HID: input: add mapping for Expose/Overview key
- HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
- HID: input: add mapping for "Toggle Display" key
- libnvdimm/btt: Fix a kmemdup failure check
- s390/dasd: Fix capacity calculation for large volumes
- mac80211: fix unaligned access in mesh table hash function
- mac80211: Increase MAX_MSG_LEN
- mac80211: fix memory accounting with A-MSDU aggregation
- nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands
- s390/3270: fix lockdep false positive on view->lock
- clocksource/drivers/oxnas: Fix OX820 compatible
- mISDN: Check address length before reading address family
- s390/pkey: add one more argument space for debug feature entry
- x86/reboot, efi: Use EFI reboot for Acer TravelMate X514-51T
- KVM: fix spectrev1 gadgets
- KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in
tracing
- tools lib traceevent: Fix missing equality check for strcmp
- mm: fix inactive list balancing between NUMA nodes and cgroups
- init: initialize jump labels before command line option parsing
- selftests: netfilter: check icmp pkttoobig errors are set as related
- ipvs: do not schedule icmp errors from tunnels
- netfilter: ctnetlink: don't use conntrack/expect object addresses as id
- s390: ctcm: fix ctcm_new_device error return code
- drm/sun4i: Set device driver data at bind time for use in unbind
- gpu: ipu-v3: dp: fix CSC handling
- drm/imx: don't skip DP channel disable for background plane
- spi: Micrel eth switch: declare missing of table
- spi: ST ST95HF NFC: declare missing of table
- Input: synaptics-rmi4 - fix possible double free
- MIPS: VDSO: Reduce VDSO_RANDOMIZE_SIZE to 64MB for 64bit
- ima: open a new file instance if no read permissions
- drm/i915: Disable LP3 watermarks on all SNB machines
- net: stmmac: Move debugfs init/exit to ->probe()/->remove()
- x86/vdso: Pass --eh-frame-hdr to the linker
- mm/memory.c: fix modifying of page protection by insert_pfn()
- net: fec: manage ahb clock in runtime pm
- mlxsw: spectrum_switchdev: Add MDB entries in prepare phase
- mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue
- NFC: nci: Add some bounds checking in nci_hci_cmd_received()
- nfc: nci: Potential off by one in ->pipes[] array
- x86/kprobes: Avoid kretprobe recursion bug
- cw1200: fix missing unlock on error in cw1200_hw_scan()
- mwl8k: Fix rate_idx underflow
- rtlwifi: rtl8723ae: Fix missing break in switch statement
- bonding: fix arp_validate toggling in active-backup mode
- bridge: Fix error path for kobject_init_and_add()
- dpaa_eth: fix SG frame cleanup
- ipv4: Fix raw socket lookup for local traffic
- net: dsa: Fix error cleanup path in dsa_init_module
- net: ethernet: stmmac: dwmac-sun8i: enable support of unicast filtering
- net: seeq: fix crash caused by not set dev.parent
- net: ucc_geth - fix Oops when changing number of buffers in the ring
- packet: Fix error path in packet_init
- vlan: disable SIOCSHWTSTAMP in container
- vrf: sit mtu should not be updated when vrf netdev is the link
- tipc: fix hanging clients using poll with EPOLLOUT flag
- drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl
- drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
- powerpc/powernv/idle: Restore IAMR after idle
- powerpc/booke64: set RI in default MSR
- platform/x86: dell-laptop: fix rfkill functionality
- iio: adc: xilinx: fix potential use-after-free on probe
- iio: adc: xilinx: prevent touching unclocked h/w on remove
- acpi/nfit: Always dump _DSM output payload
- libnvdimm/pmem: fix a possible OOB access when read and write pmem
- vxge: fix return of a free'd memblock on a failed dma mapping
- qede: fix write to free'd pointer error and double free of ptp
- afs: Unlock pages for __pagevec_release()
- ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash
- scsi: aic7xxx: fix EISA support
- drm/sun4i: Fix component unbinding and component master deletion
- netfilter: fix nf_l4proto_log_invalid to log invalid packets
- drm/sun4i: Unbind components before releasing DRM and memory
- usb: typec: Fix unchecked return value
- netfilter: nf_tables: use-after-free in dynamic operations
- um: Don't hardcode path as it is architecture dependent
- powerpc/book3s/64: check for NULL pointer in pgd_alloc()
- PCI: hv: Add hv_pci_remove_slots() when we unload the driver
- PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary
- net: core: another layer of lists, around PF_MEMALLOC skb handling
- locking/rwsem: Prevent decrement of reader count before increment
- PCI: hv: Fix a memory leak in hv_eject_device_work()
- x86/speculation/mds: Revert CPU buffer clear on double fault exit
- x86/speculation/mds: Improve CPU buffer clear documentation
- objtool: Fix function fallthrough detection
- ARM: dts: exynos: Fix interrupt for shared EINTs on Exynos5260
- ARM: dts: exynos: Fix audio (microphone) routing on Odroid XU3
- ARM: exynos: Fix a leaked reference by adding missing of_node_put
- power: supply: axp288_charger: Fix unchecked return value
- arm64: compat: Reduce address limit
- arm64: Clear OSDLR_EL1 on CPU boot
- arm64: Save and restore OSDLR_EL1 across suspend/resume
- sched/x86: Save [ER]FLAGS on context switch
- crypto: chacha20poly1305 - set cra_name correctly
- crypto: vmx - fix copy-paste error in CTR mode
- crypto: skcipher - don't WARN on unprocessed data after slow walk step
- crypto: crct10dif-generic - fix use via crypto_shash_digest()
- crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
- crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
- crypto: rockchip - update IV buffer to contain the next IV
- crypto: arm/aes-neonbs - don't access already-freed walk.iv
- ALSA: usb-audio: Fix a memory leak bug
- ALSA: hda/realtek - EAPD turn on later
- ASoC: max98090: Fix restore of DAPM Muxes
- ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
- bpf, arm64: remove prefetch insn in xadd mapping
- mm/mincore.c: make mincore() more conservative
- ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
- userfaultfd: use RCU to free the task struct when fork fails
- mfd: da9063: Fix OTP control register names to match datasheets for
DA9063/63L
- mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values
- mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write
- tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0
- tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
- jbd2: check superblock mapped prior to committing
- ext4: make sanity check in mballoc more strict
- ext4: ignore e_value_offs for xattrs with value-in-ea-inode
- ext4: avoid drop reference to iloc.bh twice
- Btrfs: do not start a transaction during fiemap
- Btrfs: do not start a transaction at iterate_extent_inodes()
- bcache: fix a race between cache register and cacheset unregister
- bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
- ext4: fix use-after-free race with debug_want_extra_isize
- ext4: actually request zeroing of inode table after grow
- ext4: fix ext4_show_options for file systems w/o journal
- ipmi:ssif: compare block number correctly for multi-part return messages
- crypto: arm64/aes-neonbs - don't access already-freed walk.iv
- crypto: salsa20 - don't access already-freed walk.iv
- crypto: ccm - fix incompatibility between "ccm" and "ccm_base"
- fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going
into workqueue when umount
- ext4: fix data corruption caused by overlapping unaligned and aligned IO
- ext4: fix use-after-free in dx_release()
- ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug
- KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes
- iov_iter: optimize page_copy_sane()
- ext4: fix compile error when using BUFFER_TRACE
- arm64: dts: rockchip: Disable DCMDs on RK3399's eMMC controller.
- arm64: mmap: Ensure file offset is treated as unsigned
- arm64: arch_timer: Ensure counter register reads occur with seqlock held
- crypto: crypto4xx - fix ctr-aes missing output IV
- crypto: crypto4xx - fix cfb and ofb "overran dst buffer" issues
- ALSA: line6: toneport: Fix broken usage of timer for delayed execution
- ASoC: fsl_esai: Fix missing break in switch statement
- mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned
addresses
- hugetlb: use same fault hash key for shared and private mappings
- ACPI: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle
- btrfs: Correctly free extent buffer in case btree_read_extent_buffer_pages
fails
- ext4: avoid panic during forced reboot due to aborted journal
- libnvdimm/namespace: Fix label tracking error
- ext4: don't update s_rev_level if not required
- net: avoid weird emergency message
- net/mlx4_core: Change the error print to info print
- net: test nouarg before dereferencing zerocopy pointers
- net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions
- ppp: deflate: Fix possible crash in deflate_init
- tipc: switch order of device registration to fix a crash
- vsock/virtio: free packets during the socket release
- vsock/virtio: Initialize core virtio vsock before registering the driver
- net: Always descend into dsa/
- parisc: Export running_on_qemu symbol for modules
- parisc: Skip registering LED when running in QEMU
- parisc: Use PA_ASM_LEVEL in boot code
- parisc: Rename LEVEL to PA_ASM_LEVEL to avoid name clash with DRBD code
- stm class: Fix channel free in stm output free path
- md: add mddev->pers to avoid potential NULL pointer dereference
- intel_th: msu: Fix single mode with IOMMU
- p54: drop device reference count if fails to enable device
- of: fix clang -Wunsequenced for be32_to_cpu()
- media: ov6650: Fix sensor possibly not detected on probe
- NFS4: Fix v4.0 client state corruption when mount
- PNFS fallback to MDS if no deviceid found
- clk: hi3660: Mark clk_gate_ufs_subsys as critical
- clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider
- clk: rockchip: fix wrong clock definitions for rk3328
- fuse: fix writepages on 32bit
- fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
- iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
- ceph: flush dirty inodes before proceeding with remount
- x86_64: Add gap to int3 to allow for call emulation
- x86_64: Allow breakpoints to emulate call instructions
- ftrace/x86_64: Emulate call function while updating in breakpoint handler
- tracing: Fix partial reading of trace event's id file
- memory: tegra: Fix integer overflow on tick value calculation
- perf intel-pt: Fix instructions sampling rate
- perf intel-pt: Fix improved sample timestamp
- perf intel-pt: Fix sample timestamp wrt non-taken branches
- objtool: Allow AR to be overridden with HOSTAR
- fbdev: sm712fb: fix brightness control on reboot, don't set SR30
- fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75
- fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F
- fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA
- fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping
VRAM
- fbdev: sm712fb: fix support for 1024x768-16 mode
- fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
- fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting
- PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken
- PCI: Mark Atheros AR9462 to avoid bus reset
- PCI: Factor out pcie_retrain_link() function
- PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum
- dm cache metadata: Fix loading discard bitset
- dm zoned: Fix zone report handling
- dm delay: fix a crash when invalid device is specified
- xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
- xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
- vti4: ipip tunnel deregistration fixes.
- esp4: add length check for UDP encapsulation
- xfrm4: Fix uninitialized memory read in _decode_session4
- power: supply: cpcap-battery: Fix division by zero
- securityfs: fix use-after-free on symlink traversal
- apparmorfs: fix use-after-free on symlink traversal
- mac80211: Fix kernel panic due to use of txq after free
- KVM: arm/arm64: Ensure vcpu target is unset on reset failure
- power: supply: sysfs: prevent endless uevent loop with
CONFIG_POWER_SUPPLY_DEBUG
- iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb()
- sched/cpufreq: Fix kobject memleak
- x86/mm/mem_encrypt: Disable all instrumentation for early SME setup
- ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
- perf bench numa: Add define for RUSAGE_THREAD if not present
- md/raid: raid5 preserve the writeback action after the parity check
- driver core: Postpone DMA tear-down until after devres release for probe
failure
- bpf: add map_lookup_elem_sys_only for lookups from syscall side
- bpf, lru: avoid messing with eviction heuristics upon syscall lookup
- fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough
- nfp: flower: add rcu locks when accessing netdev for tunnels
- rtnetlink: always put IFLA_LINK for links with a link-netnsid
- brd: re-enable __GFP_HIGHMEM in brd_insert_page()
- proc: prevent changes to overridden credentials
- md: batch flush requests.
- phy: ti-pipe3: fix missing bit-wise or operator when assigning val
- clk: mediatek: Disable tuner_en before change PLL rate
- PCI: rcar: Add the initialization of PCIe link in resume_noirq()
- fuse: Add FOPEN_STREAM to use stream_open()
- qmi_wwan: new Wistron, ZTE and D-Link devices
- bpf: relax inode permission check for retrieving bpf program
* Bionic update: upstream stable patchset 2019-07-30 (LP: #1838459)
- kbuild: simplify ld-option implementation
- cifs: do not attempt cifs operation on smb2+ rename error
- tracing: Fix a memory leak by early error exit in trace_pid_write()
- tracing: Fix buffer_ref pipe ops
- zram: pass down the bvec we need to read into in the work struct
- lib/Kconfig.debug: fix build error without CONFIG_BLOCK
- MIPS: scall64-o32: Fix indirect syscall number load
- trace: Fix preempt_enable_no_resched() abuse
- IB/rdmavt: Fix frwr memory registration
- sched/numa: Fix a possible divide-by-zero
- ceph: only use d_name directly when parent is locked
- ceph: ensure d_name stability in ceph_dentry_hash()
- ceph: fix ci->i_head_snapc leak
- nfsd: Don't release the callback slot unless it was actually held
- sunrpc: don't mark uninitialised items as VALID.
- Input: synaptics-rmi4 - write config register values to the right offset
- dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid
- ARM: 8857/1: efi: enable CP15 DMB instructions before cleaning the cache
- drm/vc4: Fix memory leak during gpu reset.
- drm/vc4: Fix compilation error reported by kbuild test bot
- ext4: fix some error pointer dereferences
- vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock
- tipc: handle the err returned from cmd header function
- slip: make slhc_free() silently accept an error pointer
- intel_th: gth: Fix an off-by-one in output unassigning
- fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
- ipvs: fix warning on unused variable
- sched/deadline: Correctly handle active 0-lag timers
- NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
- netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
- fm10k: Fix a potential NULL pointer dereference
- tipc: check bearer name with right length in tipc_nl_compat_bearer_enable
- tipc: check link name with right length in tipc_nl_compat_link_set
- x86, retpolines: Raise limit for generating indirect calls from switch-case
- x86/retpolines: Disable switch jump tables when retpolines are enabled
- mm: Fix warning in insert_pfn()
- ipv4: add sanity checks in ipv4_link_failure()
- mlxsw: spectrum: Fix autoneg status in ethtool
- net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query
- net: rds: exchange of 8K and 1M pool
- net: stmmac: move stmmac_check_ether_addr() to driver probe
- stmmac: pci: Adjust IOT2000 matching
- team: fix possible recursive locking when add slaves
- net/rose: fix unbound loop in rose_loopback_timer()
- ipv4: set the tcp_min_rtt_wlen range from 0 to one day
- powerpc/fsl: Add FSL_PPC_BOOK3E as supported arch for nospectre_v2 boot arg
- Documentation: Add nospectre_v1 parameter
- netfilter: nf_tables: warn when expr implements only one of
activate/deactivate
- net/ibmvnic: Fix RTNL deadlock during device reset
- drm/rockchip: fix for mailbox read validation.
- powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64
- perf/x86/intel: Enable C-state residency events for Cannon Lake
- perf/x86/intel: Update KBL Package C-state events to also include
PC8/PC9/PC10 counters
- powerpc/mm/radix: Make Radix require HUGETLB_PAGE
- workqueue: Try to catch flush_work() without INIT_WORK().
- mlxsw: pci: Reincrease PCI reset timeout
- mm: make page ref count overflow check tighter and more explicit
- mm: add 'try_get_page()' helper function
- mm: prevent get_user_pages() from overflowing page refcount
- fs: prevent page refcount overflow in pipe_buf_get
- ARM: dts: bcm283x: Fix hdmi hpd gpio pull
- s390: limit brk randomization to 32MB
- qlcnic: Avoid potential NULL pointer dereference
- netfilter: nft_set_rbtree: check for inactive element after flag mismatch
- netfilter: bridge: set skb transport_header before entering
NF_INET_PRE_ROUTING
- s390/qeth: fix race when initializing the IP address table
- sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init()
- serial: ar933x_uart: Fix build failure with disabled console
- KVM: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots
- usb: gadget: net2280: Fix overrun of OUT messages
- usb: gadget: net2280: Fix net2280_dequeue()
- usb: gadget: net2272: Fix net2272_dequeue()
- ARM: dts: pfla02: increase phy reset duration
- net: ks8851: Dequeue RX packets explicitly
- net: ks8851: Reassert reset pin if chip ID check fails
- net: ks8851: Delay requesting IRQ until opened
- net: ks8851: Set initial carrier state to down
- staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc
- staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference
- staging: rtl8712: uninitialized memory in read_bbreg_hdl()
- staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc
- net: macb: Add null check for PCLK and HCLK
- net/sched: don't dereference a->goto_chain to read the chain index
- ARM: dts: imx6qdl: Fix typo in imx6qdl-icore-rqs.dtsi
- NFS: Fix a typo in nfs_init_timeout_values()
- net: xilinx: fix possible object reference leak
- net: ibm: fix possible object reference leak
- net: ethernet: ti: fix possible object reference leak
- gpio: aspeed: fix a potential NULL pointer dereference
- drm/meson: Fix invalid pointer in meson_drv_unbind()
- drm/meson: Uninstall IRQ handler
- scsi: qla4xxx: fix a potential NULL pointer dereference
- usb: usb251xb: fix to avoid potential NULL pointer dereference
- usb: u132-hcd: fix resource leak
- ceph: fix use-after-free on symlink traversal
- scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN
- libata: fix using DMA buffers on stack
- gpio: of: Fix of_gpiochip_add() error path
- kconfig/[mn]conf: handle backspace (^H) key
- ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK
- leds: pca9532: fix a potential NULL pointer dereference
- KVM: arm64: Reset the PMU in preemptible context
- KVM: arm/arm64: vgic-its: Take the srcu lock when writing to guest memory
- scsi: aacraid: Insure we don't access PCIe space during AER/EEH
- x86/realmode: Don't leak the trampoline kernel address
- x86/mm: Don't exceed the valid physical address space
- ipv4: ip_do_fragment: Preserve skb_iif during fragmentation
- ipv6/flowlabel: wait rcu grace period before put_pid()
- ipv6: invert flowlabel sharing check in process and user mode
- l2ip: fix possible use-after-free
- l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv()
- net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc
- net: phy: marvell: Fix buffer overrun with stats counters
- sctp: avoid running the sctp state machine recursively
- packet: validate msg_namelen in send directly
- bnxt_en: Improve multicast address setup logic.
- bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one()
- ALSA: line6: use dynamic buffers
- rxrpc: Fix net namespace cleanup
- kasan: remove redundant initialization of variable 'real_size'
- kasan: prevent compiler from optimizing away memset in tests
- caif: reduce stack size with KASAN
- ALSA: hda/realtek - Add new Dell platform for headset mode
- USB: yurex: Fix protection fault after device removal
- USB: w1 ds2490: Fix bug caused by improper use of altsetting array
- usb: usbip: fix isoc packet num validation in get_pipe
- USB: core: Fix unterminated string returned by usb_string()
- USB: core: Fix bug caused by duplicate interface PM usage counter
- nvme-loop: init nvmet_ctrl fatal_err_work when allocate
- HID: logitech: check the return value of create_singlethread_workqueue
- HID: debug: fix race condition with between rdesc_show() and device removal
- rtc: sh: Fix invalid alarm warning for non-enabled alarm
- batman-adv: Reduce claim hash refcnt only for removed entry
- batman-adv: Reduce tt_local hash refcnt only for removed entry
- batman-adv: Reduce tt_global hash refcnt only for removed entry
- ARM: dts: rockchip: Fix gpu opp node names for rk3288
- net/mlx5: E-Switch, Fix esw manager vport indication for more vport commands
- bonding: show full hw address in sysfs for slave entries
- net: stmmac: ratelimit RX error logs
- net: stmmac: don't overwrite discard_frame status
- net: stmmac: fix dropping of multi-descriptor RX frames
- net: stmmac: don't log oversized frames
- jffs2: fix use-after-free on symlink traversal
- debugfs: fix use-after-free on symlink traversal
- rtc: da9063: set uie_unsupported when relevant
- HID: input: add mapping for Assistant key
- vfio/pci: use correct format characters
- scsi: core: add new RDAC LENOVO/DE_Series device
- scsi: storvsc: Fix calculation of sub-channel count
- net: hns: Fix WARNING when remove HNS driver with SMMU enabled
- kmemleak: powerpc: skip scanning holes in the .bss section
- hugetlbfs: fix memory leak for resv_map
- sh: fix multiple function definition build errors
- xsysace: Fix error handling in ace_setup
- ARM: orion: don't use using 64-bit DMA masks
- ARM: iop: don't use using 64-bit DMA masks
- perf/x86/amd: Update generic hardware cache events for Family 17h
- Bluetooth: btusb: request wake pin with NOAUTOEN
- staging: iio: adt7316: allow adt751x to use internal vref for all dacs
- staging: iio: adt7316: fix the dac read calculation
- staging: iio: adt7316: fix the dac write calculation
- scsi: RDMA/srpt: Fix a credit leak for aborted commands
- ASoC: stm32: fix sai driver name initialisation
- IB/core: Unregister notifier before freeing MAD security
- IB/core: Fix potential memory leak while creating MAD agents
- IB/core: Destroy QP if XRC QP fails
- Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ
- Input: stmfts - acknowledge that setting brightness is a blocking call
- selinux: never allow relabeling on context mounts
- powerpc/mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown
search
- x86/mce: Improve error message when kernel cannot recover, p2
- clk: x86: Add system specific quirk to mark clocks as critical
- i2c: i2c-stm32f7: Fix SDADEL minimum formula
- media: v4l2: i2c: ov7670: Fix PLL bypass register values
- mm/kmemleak.c: fix unused-function warning
- mac80211: don't attempt to rename ERR_PTR() debugfs dirs
- i2c: Remove unnecessary call to irq_find_mapping
- i2c: Clear client->irq in i2c_device_remove
- i2c: Allow recovery of the initial IRQ by an I2C client device.
- i2c: Prevent runtime suspend of adapter when Host Notify is required
- USB: dummy-hcd: Fix failure to give back unlinked URBs
- batman-adv: fix warning in function batadv_v_elp_get_throughput
- riscv: fix accessing 8-byte variable from RV32
- net: stmmac: don't stop NAPI processing when dropping a packet
- mfd: twl-core: Disable IRQ while suspended
- block: use blk_free_flush_queue() to free hctx->fq in blk_mq_init_hctx
- arm/mach-at91/pm : fix possible object reference leak
- fs: stream_open - opener for stream-like files so that read and write can
run simultaneously without deadlock
- block: pass no-op callback to INIT_WORK().
- platform/x86: intel_pmc_core: Fix PCH IP name
- platform/x86: intel_pmc_core: Handle CFL regmap properly
- x86/mm: Fix a crash with kmemleak_scan()
- Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup()
- ubsan: Fix nasty -Wbuiltin-declaration-mismatch GCC-9 warnings
- staging: greybus: power_supply: fix prop-descriptor request size
- ASoC: hdmi-codec: fix S/PDIF DAI
- ASoC:soc-pcm:fix a codec fixup issue in TDM case
- ASoC: nau8824: fix the issue of the widget with prefix name
- ASoC: nau8810: fix the issue of widget with prefixed name
- ASoC: samsung: odroid: Fix clock configuration for 44100 sample rate
- ASoC: wm_adsp: Add locking to wm_adsp2_bus_error
- ASoC: cs4270: Set auto-increment bit for register writes
- IB/hfi1: Eliminate opcode tests on mr deref
- MIPS: KGDB: fix kgdb support for SMP platforms.
- ASoC: tlv320aic32x4: Fix Common Pins
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata()
- perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS
- perf/x86/intel: Initialize TFA MSR
- linux/kernel.h: Use parentheses around argument in u64_to_user_ptr()
- ASoC: rockchip: pdm: fix regmap_ops hang issue
- slab: fix a crash by reading /proc/slab_allocators
- virtio_pci: fix a NULL pointer reference in vp_del_vqs
- RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove
- scsi: csiostor: fix missing data copy in csio_scsi_err_handler()
- drm/mediatek: fix possible object reference leak
- ASoC: Intel: kbl: fix wrong number of channels
- virtio-blk: limit number of hw queues by nr_cpu_ids
- platform/x86: pmc_atom: Drop __initconst on dmi table
- genirq: Prevent use-after-free and work list corruption
- usb: dwc3: Fix default lpm_nyet_threshold value
- USB: serial: f81232: fix interrupt worker not stop
- USB: cdc-acm: fix unthrottle races
- usb-storage: Set virt_boundary_mask to avoid SG overflows
- intel_th: pci: Add Comet Lake support
- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines
- UAS: fix alignment of scatter/gather segments
- ASoC: Intel: avoid Oops if DMA setup fails
- locking/futex: Allow low-level atomic operations to return -EAGAIN
- arm64: futex: Bound number of LDXR/STXR loops in FUTEX_WAKE_OP
- ASoC: tlv320aic3x: fix reset gpio reference counting
- ASoC: stm32: sai: fix exposed capabilities in spdif mode
- ASoC:intel:skl:fix a simultaneous playback & capture issue on hda platform
- ASoC: dapm: Fix NULL pointer dereference in snd_soc_dapm_free_kcontrol
- drm/omap: hdmi4_cec: Fix CEC clock handling for PM
- IB/hfi1: Fix the allocation of RSM table
- drm/amd/display: fix cursor black issue
- objtool: Add machine_real_restart() to the noreturn list
- objtool: Add rewind_stack_do_exit() to the noreturn list
- RDMA/hns: Fix bug that caused srq creation to fail
- perf/core: Fix perf_event_disable_inatomic() race
- soc: sunxi: Fix missing dependency on REGMAP_MMIO
- scsi: lpfc: change snprintf to scnprintf for possible overflow
* [ZenBook S UX391UA, Realtek ALC294, Mic, Internal] No sound at all
(LP: #1784485) // Bionic update: upstream stable patchset 2019-07-30
(LP: #1838459)
- ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR
* Bionic update: upstream stable patchset 2019-07-29 (LP: #1838349)
- ARC: u-boot args: check that magic number is correct
- arc: hsdk_defconfig: Enable CONFIG_BLK_DEV_RAM
- perf/core: Restore mmap record type correctly
- ext4: add missing brelse() in add_new_gdb_meta_bg()
- ext4: report real fs size after failed resize
- ALSA: echoaudio: add a check for ioremap_nocache
- ALSA: sb8: add a check for request_region
- auxdisplay: hd44780: Fix memory leak on ->remove()
- IB/mlx4: Fix race condition between catas error reset and aliasguid flows
- mmc: davinci: remove extraneous __init annotation
- ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and
declaration
- thermal/intel_powerclamp: fix __percpu declaration of worker_data
- thermal: bcm2835: Fix crash in bcm2835_thermal_debugfs
- thermal/int340x_thermal: Add additional UUIDs
- thermal/int340x_thermal: fix mode setting
- thermal/intel_powerclamp: fix truncated kthread name
- scsi: iscsi: flush running unbind operations when removing a session
- x86/mm: Don't leak kernel addresses
- tools/power turbostat: return the exit status of a command
- perf list: Don't forget to drop the reference to the allocated thread_map
- perf config: Fix an error in the config template documentation
- perf config: Fix a memory leak in collect_config()
- perf build-id: Fix memory leak in print_sdt_events()
- perf top: Fix error handling in cmd_top()
- perf hist: Add missing map__put() in error case
- perf evsel: Free evsel->counts in perf_evsel__exit()
- perf tests: Fix a memory leak of cpu_map object in the
openat_syscall_event_on_all_cpus test
- perf tests: Fix memory leak by expr__find_other() in test__expr()
- perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test()
- irqchip/mbigen: Don't clear eventid when freeing an MSI
- x86/hpet: Prevent potential NULL pointer dereference
- x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors
- drm/nouveau/debugfs: Fix check of pm_runtime_get_sync failure
- iommu/vt-d: Check capability before disabling protected memory
- x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return
an error
- fix incorrect error code mapping for OBJECTID_NOT_FOUND
- ext4: prohibit fstrim in norecovery mode
- gpio: pxa: handle corner case of unprobed device
- rsi: improve kernel thread handling to fix kernel panic
- 9p: do not trust pdu content for stat item size
- 9p locks: add mount option for lock retry interval
- f2fs: fix to do sanity check with current segment number
- netfilter: xt_cgroup: shrink size of v2 path
- serial: uartps: console_setup() can't be placed to init section
- powerpc/pseries: Remove prrn_work workqueue
- media: au0828: cannot kfree dev before usb disconnect
- HID: i2c-hid: override HID descriptors for certain devices
- ARM: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms
- [Config] updateconfigs for CONFIG_SAMSUNG_PM_CHECK
- usbip: fix vhci_hcd controller counting
- ACPI / SBS: Fix GPE storm on recent MacBookPro's
- KVM: nVMX: restore host state in nested_vmx_vmexit for VMFail
- cifs: fallback to older infolevels on findfirst queryinfo retry
- kernel: hung_task.c: disable on suspend
- crypto: sha256/arm - fix crash bug in Thumb2 build
- crypto: sha512/arm - fix crash bug in Thumb2 build
- iommu/dmar: Fix buffer overflow during PCI bus notification
- soc/tegra: pmc: Drop locking from tegra_powergate_is_powered()
- lkdtm: Print real addresses
- lkdtm: Add tests for NULL pointer dereference
- drm/panel: panel-innolux: set display off in innolux_panel_unprepare
- crypto: axis - fix for recursive locking from bottom half
- Revert "ACPI / EC: Remove old CLEAR_ON_RESUME quirk"
- coresight: cpu-debug: Support for CA73 CPUs
- drm/nouveau/volt/gf117: fix speedo readout register
- ARM: 8839/1: kprobe: make patch_lock a raw_spinlock_t
- drm/amdkfd: use init_mqd function to allocate object for hid_mqd (CI)
- appletalk: Fix use-after-free in atalk_proc_exit
- lib/div64.c: off by one in shift
- include/linux/swap.h: use offsetof() instead of custom __swapoffset macro
- bpf: fix use after free in bpf_evict_inode
- dm: disable CRYPTO_TFM_REQ_MAY_SLEEP to fix a GFP_KERNEL recursion deadlock
- net: stmmac: Set dma ring length before enabling the DMA
- mm: hide incomplete nr_indirectly_reclaimable in sysfs
- appletalk: Fix compile regression
- ext4: avoid panic during forced reboot
- i40iw: Avoid panic when handling the inetdev event
- sched/core: Fix buffer overflow in cgroup2 property cpu.max
- ACPI / utils: Drop reference in test for device presence
- PM / Domains: Avoid a potential deadlock
- drm/exynos/mixer: fix MIXER shadow registry synchronisation code
- Bluetooth: Fix debugfs NULL pointer dereference
- f2fs: cleanup dirty pages if recover failed
- [Config] updateconfigs for CONFIG_INTEL_ATOMISP2_PM
- platform/x86: Add Intel AtomISP2 dummy / power-management driver
- drm/ttm: Fix bo_global and mem_global kfree error
- ALSA: hda: fix front speakers on Huawei MBXP
- ACPI: EC / PM: Disable non-wakeup GPEs for suspend-to-idle
- net/rds: fix warn in rds_message_alloc_sgs
- scsi: core: Avoid that system resume triggers a kernel warning
- PCI: Blacklist power management of Gigabyte X299 DESIGNARE EX PCIe ports
- rxrpc: Fix client call connect/disconnect race
- f2fs: fix to dirty inode for i_mode recovery
- bonding: fix event handling for stacked bonds
- net: atm: Fix potential Spectre v1 vulnerabilities
- net: bridge: fix per-port af_packet sockets
- net: bridge: multicast: use rcu to access port list from
br_multicast_start_querier
- net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv
- tcp: tcp_grow_window() needs to respect tcp_space()
- team: set slave to promisc if team is already in promisc mode
- vhost: reject zero size iova range
- ipv4: recompile ip options in ipv4_link_failure
- ipv4: ensure rcu_read_lock() in ipv4_link_failure()
- net: thunderx: raise XDP MTU to 1508
- net: thunderx: don't allow jumbo frames with XDP
- KVM: x86: Don't clear EFER during SMM transitions for 32-bit vCPU
- KVM: x86: svm: make sure NMI is injected after nmi_singlestep
- Staging: iio: meter: fixed typo
- staging: iio: ad7192: Fix ad7193 channel address
- iio: gyro: mpu3050: fix chip ID reading
- iio/gyro/bmg160: Use millidegrees for temperature scale
- iio: cros_ec: Fix the maths for gyro scale calculation
- iio: ad_sigma_delta: select channel when reading register
- iio: dac: mcp4725: add missing powerdown bits in store eeprom
- iio: Fix scan mask selection
- iio: adc: at91: disable adc channel interrupt in timeout case
- iio: core: fix a possible circular locking dependency
- io: accel: kxcjk1013: restore the range after resume.
- staging: comedi: vmk80xx: Fix use of uninitialized semaphore
- staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf
- staging: comedi: ni_usb6501: Fix use of uninitialized mutex
- staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf
- ALSA: core: Fix card races between register and disconnect
- scsi: core: set result when the command cannot be dispatched
- coredump: fix race condition between mmget_not_zero()/get_task_mm() and core
dumping
- crypto: x86/poly1305 - fix overflow during partial reduction
- arm64: futex: Restore oldval initialization to work around buggy compilers
- x86/kprobes: Verify stack frame on kretprobe
- kprobes: Mark ftrace mcount handler functions nokprobe
- kprobes: Fix error check when reusing optimized probes
- rt2x00: do not increment sequence number while re-transmitting
- mac80211: do not call driver wake_tx_queue op during reconfig
- perf/x86/amd: Add event map for AMD Family 17h
- x86/cpu/bugs: Use __initconst for 'const' init data
- perf/x86: Fix incorrect PEBS_REGS
- x86/speculation: Prevent deadlock on ssb_state::lock
- crypto: crypto4xx - properly set IV after de- and encrypt
- mmc: sdhci: Fix data command CRC error handling
- mmc: sdhci: Rename SDHCI_ACMD12_ERR and SDHCI_INT_ACMD12ERR
- mmc: sdhci: Handle auto-command errors
- modpost: file2alias: go back to simple devtable lookup
- modpost: file2alias: check prototype of handler
- tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
- ipv6: frags: fix a lockdep false positive
- Revert "kbuild: use -Oz instead of -Os when using clang"
- device_cgroup: fix RCU imbalance in error case
- mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y
CONFIG_SMP=n
- ALSA: info: Fix racy addition/deletion of nodes
- percpu: stop printing kernel addresses
- iomap: report collisions between directio and buffered writes to userspace
- i2c-hid: properly terminate i2c_hid_dmi_desc_override_table[] array
- net: Fix missing meta data in skb with vlan packet
- nfp: flower: replace CFI with vlan present
- nfp: flower: remove vlan CFI bit from push vlan action
- ip: add helpers to process in-order fragments faster.
- net: IP defrag: encapsulate rbtree defrag code into callable functions
- ip: process in-order fragments efficiently
- ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module
- net: IP6 defrag: use rbtrees for IPv6 defrag
- net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
- cifs: fix handle leak in smb2_query_symlink()
- Input: elan_i2c - add hardware ID for multiple Lenovo laptops
- drm/ttm: fix out-of-bounds read in ttm_put_pages() v2
- timers/sched_clock: Prevent generic sched_clock wrap caused by tick_freeze()
- tpm: Fix the type of the return value in calc_tpm2_event_size()
* Bionic update: upstream stable patchset 2019-07-26 (LP: #1838116)
- mmc: pxamci: fix enum type confusion
- drm/vmwgfx: Don't double-free the mode stored in par->set_mode
- iommu/amd: fix sg->dma_address for sg->offset bigger than PAGE_SIZE
- libceph: wait for latest osdmap in ceph_monc_blacklist_add()
- udf: Fix crash on IO error during truncate
- mips: loongson64: lemote-2f: Add IRQF_NO_SUSPEND to "cascade" irqaction.
- MIPS: Ensure ELF appended dtb is relocated
- MIPS: Fix kernel crash for R6 in jump label branch function
- scsi: ibmvscsi: Protect ibmvscsi_head from concurrent modificaiton
- scsi: ibmvscsi: Fix empty event pool access during host removal
- futex: Ensure that futex address is aligned in handle_futex_death()
- perf probe: Fix getting the kernel map
- objtool: Move objtool_file struct off the stack
- ALSA: x86: Fix runtime PM for hdmi-lpe-audio
- ext4: fix NULL pointer dereference while journal is aborted
- ext4: fix data corruption caused by unaligned direct AIO
- ext4: brelse all indirect buffer in ext4_ind_remove_space()
- media: v4l2-ctrls.c/uvc: zero v4l2_event
- Bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf()
- Bluetooth: Fix decrementing reference count twice in releasing socket
- Bluetooth: hci_ldisc: Initialize hci_dev before open()
- Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in
hci_uart_set_proto()
- drm: Reorder set_property_atomic to avoid returning with an active ww_ctx
- netfilter: ebtables: remove BUGPRINT messages
- x86/unwind: Handle NULL pointer calls better in frame unwinder
- x86/unwind: Add hardcoded ORC entry for NULL
- locking/lockdep: Add debug_locks check in __lock_downgrade()
- ALSA: hda - Record the current power state before suspend/resume calls
- PCI: designware-ep: dw_pcie_ep_set_msi() should only set MMC bits
- PCI: designware-ep: Read-only registers need DBI_RO_WR_EN to be writable
- PCI: endpoint: Use EPC's device in dma_alloc_coherent()/dma_free_coherent()
- rtc: Fix overflow when converting time64_t to rtc_time
- sched/cpufreq/schedutil: Fix error path mutex unlock
- pwm-backlight: Enable/disable the PWM before/after LCD enable toggle.
- power: supply: charger-manager: Fix incorrect return value
- ath10k: avoid possible string overflow
- mmc: renesas_sdhi: limit block count to 16 bit for old revisions
- powerpc/vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038
- RDMA/cma: Rollback source IP address if failing to acquire device
- f2fs: fix to avoid deadlock of atomic file operations
- loop: access lo_backing_file only when the loop device is Lo_bound
- video: fbdev: Set pixclock = 0 in goldfishfb
- dccp: do not use ipv6 header for ipv4 flow
- genetlink: Fix a memory leak on error path
- mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S
- net: datagram: fix unbounded loop in __skb_try_recv_datagram()
- net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec
- net: rose: fix a possible stack overflow
- net: stmmac: fix memory corruption with large MTUs
- net-sysfs: call dev_hold if kobject_init_and_add success
- packets: Always register packet sk in the same order
- rhashtable: Still do rehash when we get EEXIST
- tcp: do not use ipv6 header for ipv4 flow
- thunderx: enable page recycling for non-XDP case
- thunderx: eliminate extra calls to put_page() for pages held for recycling
- vxlan: Don't call gro_cells_destroy() before device is unregistered
- sctp: get sctphdr by offset in sctp_compute_cksum
- net: aquantia: fix rx checksum offload for UDP/TCP over IPv6
- mac8390: Fix mmio access size probe
- tun: properly test for IFF_UP
- tun: add a missing rcu_read_unlock() in error path
- powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E
- powerpc/fsl: Sanitize the syscall table for NXP PowerPC 32 bit platforms
- powerpc/fsl: Add infrastructure to fixup branch predictor flush
- powerpc/fsl: Add macro to flush the branch predictor
- powerpc/fsl: Emulate SPRN_BUCSR register
- powerpc/fsl: Flush the branch predictor at each kernel entry (64bit)
- powerpc/fsl: Flush the branch predictor at each kernel entry (32 bit)
- powerpc/fsl: Flush branch predictor when entering KVM
- powerpc/fsl: Enable runtime patching if nospectre_v2 boot arg is used
- powerpc/fsl: Fixed warning: orphan section `__btb_flush_fixup'
- powerpc/fsl: Fix the flush of branch predictor.
- Btrfs: fix incorrect file size after shrinking truncate and fsync
- btrfs: remove WARN_ON in log_dir_items
- ARM: imx6q: cpuidle: fix bug that CPU might not wake up at expected time
- powerpc: bpf: Fix generation of load/store DW instructions
- NFSv4.1 don't free interrupted slot on open
- net: dsa: qca8k: remove leftover phy accessors
- ALSA: pcm: Fix possible OOB access in PCM oss plugins
- ALSA: pcm: Don't suspend stream in unrecoverable PCM state
- kbuild: modversions: Fix relative CRC byte order interpretation
- fs/open.c: allow opening only regular files during execve()
- ocfs2: fix inode bh swapping mixup in ocfs2_reflink_inodes_lock
- scsi: sd: Fix a race between closing an sd device and sd I/O
- scsi: sd: Quiesce warning if device does not report optimal I/O size
- scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host
- scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP
devices
- tty: atmel_serial: fix a potential NULL pointer dereference
- staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest
- staging: vt6655: Remove vif check from vnt_interrupt
- staging: vt6655: Fix interrupt race condition on device start up.
- serial: max310x: Fix to avoid potential NULL pointer dereference
- serial: sh-sci: Fix setting SCSCR_TIE while transferring data
- USB: serial: cp210x: add new device id
- USB: serial: ftdi_sio: add additional NovaTech products
- USB: serial: mos7720: fix mos_parport refcount imbalance on error path
- USB: serial: option: set driver_info for SIM5218 and compatibles
- USB: serial: option: add support for Quectel EM12
- USB: serial: option: add Olicard 600
- Disable kgdboc failed by echo space to /sys/module/kgdboc/parameters/kgdboc
- fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links
- drm/vgem: fix use-after-free when drm_gem_handle_create() fails
- gpio: exar: add a check for the return value of ida_simple_get fails
- gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input
- phy: sun4i-usb: Support set_mode to USB_HOST for non-OTG PHYs
- usb: mtu3: fix EXTCON dependency
- USB: gadget: f_hid: fix deadlock in f_hidg_write()
- usb: common: Consider only available nodes for dr_mode
- usb: host: xhci-rcar: Add XHCI_TRUST_TX_LENGTH quirk
- xhci: Fix port resume done detection for SS ports with LPM enabled
- usb: cdc-acm: fix race during wakeup blocking TX traffic
- mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate
- perf intel-pt: Fix TSC slip
- cpu/hotplug: Prevent crash when CPU bringup fails on CONFIG_HOTPLUG_CPU=n
- x86/smp: Enforce CONFIG_HOTPLUG_CPU when SMP=y
- KVM: Reject device ioctls from processes other than the VM's creator
- KVM: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts
- vfio: ccw: only free cp on final interrupt
- ipmi_si: Fix crash when using hard-coded device
- gtp: change NET_UDP_TUNNEL dependency to select
- Btrfs: fix assertion failure on fsync with NO_HOLES enabled
- NFS: fix mount/umount race in nlmclnt.
- ALSA: hda/realtek: Enable headset MIC of Acer AIO with ALC286
- ALSA: hda/realtek: Enable headset MIC of Acer Aspire Z24-890 with ALC286
- ALSA: hda/realtek - Add support for Acer Aspire E5-523G/ES1-432 headset mic
- ALSA: hda/realtek: Enable ASUS X441MB and X705FD headset MIC with ALC256
- ALSA: hda/realtek: Enable headset mic of ASUS P5440FF with ALC256
- ALSA: hda/realtek: Enable headset MIC of ASUS X430UN and X512DK with ALC256
- ALSA: hda/realtek - Fix speakers on Acer Predator Helios 500 Ryzen laptops
- drm/rockchip: Do not use memcpy for MMIO addresses
- drm/rockchip: vop: reset scale mode when win is disabled
- tty: mxs-auart: fix a potential NULL pointer dereference
- staging: speakup_soft: Fix alternate speech with other synths
- serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference
- drm/i915/gvt: Fix MI_FLUSH_DW parsing with correct index check
- usb: xhci: dbc: Don't free all memory with spinlock held
- xhci: Don't let USB3 ports stuck in polling state prevent suspend
- mm: add support for kmem caches in DMA32 zone
- iommu/io-pgtable-arm-v7s: request DMA32 memory, and improve debugging
- mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified
- perf pmu: Fix parser error for uncore event alias
- objtool: Query pkg-config for libelf location
- bpf: do not restore dst_reg when cur_state is freed
- arm64: debug: Don't propagate UNKNOWN FAR into si_code for debug signals
- ext4: cleanup bh release code in ext4_ind_remove_space()
- tty/serial: atmel: Add is_half_duplex helper
- tty/serial: atmel: RS485 HD w/DMA: enable RX after TX is stopped
- CIFS: fix POSIX lock leak and invalid ptr deref
- h8300: use cc-cross-prefix instead of hardcoding h8300-unknown-linux-
- f2fs: fix to avoid deadlock in f2fs_read_inline_dir()
- tracing: kdb: Fix ftdump to not sleep
- net/mlx5: Avoid panic when setting vport rate
- net/mlx5: Avoid panic when setting vport mac, getting vport config
- gpio: gpio-omap: fix level interrupt idling
- include/linux/relay.h: fix percpu annotation in struct rchan
- enic: fix build warning without CONFIG_CPUMASK_OFFSTACK
- scsi: hisi_sas: Set PHY linkrate when disconnected
- iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver
- perf c2c: Fix c2c report for empty numa node
- mm/cma.c: cma_declare_contiguous: correct err handling
- mm/page_ext.c: fix an imbalance with kmemleak
- mm, mempolicy: fix uninit memory access
- mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512!
- mm/slab.c: kmemleak no scan alien caches
- ocfs2: fix a panic problem caused by o2cb_ctl
- f2fs: do not use mutex lock in atomic context
- fs/file.c: initialize init_files.resize_wait
- page_poison: play nicely with KASAN
- cifs: use correct format characters
- dm thin: add sanity checks to thin-pool and external snapshot creation
- cifs: Fix NULL pointer dereference of devname
- jbd2: fix invalid descriptor block checksum
- fs: fix guard_bio_eod to check for real EOD errors
- tools lib traceevent: Fix buffer overflow in arg_eval
- PCI/PME: Fix hotplug/sysfs remove deadlock in pcie_pme_remove()
- wil6210: check null pointer in _wil_cfg80211_merge_extra_ies
- crypto: crypto4xx - add missing of_node_put after of_device_is_available
- crypto: cavium/zip - fix collision with generic cra_driver_name
- usb: chipidea: Grab the (legacy) USB PHY by phandle first
- scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c
- powerpc/xmon: Fix opcode being uninitialized in print_insn_powerpc
- coresight: etm4x: Add support to enable ETMv4.2
- serial: 8250_pxa: honor the port number from devicetree
- ARM: 8840/1: use a raw_spinlock_t in unwind
- iommu/io-pgtable-arm-v7s: Only kmemleak_ignore L2 tables
- powerpc/hugetlb: Handle mmap_min_addr correctly in get_unmapped_area
callback
- mmc: omap: fix the maximum timeout setting
- e1000e: Fix -Wformat-truncation warnings
- mlxsw: spectrum: Avoid -Wformat-truncation warnings
- IB/mlx4: Increase the timeout for CM cache
- clk: fractional-divider: check parent rate only if flag is set
- cpufreq: acpi-cpufreq: Report if CPU doesn't support boost technologies
- efi: cper: Fix possible out-of-bounds access
- scsi: megaraid_sas: return error when create DMA pool failed
- scsi: fcoe: make use of fip_mode enum complete
- perf test: Fix failure of 'evsel-tp-sched' test on s390
- SoC: imx-sgtl5000: add missing put_device()
- media: sh_veu: Correct return type for mem2mem buffer helpers
- media: s5p-jpeg: Correct return type for mem2mem buffer helpers
- media: s5p-g2d: Correct return type for mem2mem buffer helpers
- media: mx2_emmaprp: Correct return type for mem2mem buffer helpers
- media: mtk-jpeg: Correct return type for mem2mem buffer helpers
- vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1
- HID: intel-ish-hid: avoid binding wrong ishtp_cl_device
- jbd2: fix race when writing superblock
- leds: lp55xx: fix null deref on firmware load failure
- iwlwifi: pcie: fix emergency path
- ACPI / video: Refactor and fix dmi_is_desktop()
- kprobes: Prohibit probing on bsearch()
- netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in
__nf_conntrack_confirm
- ARM: 8833/1: Ensure that NEON code always compiles with Clang
- ALSA: PCM: check if ops are defined before suspending PCM
- usb: f_fs: Avoid crash due to out-of-scope stack ptr access
- sched/topology: Fix percpu data types in struct sd_data & struct s_data
- bcache: fix input overflow to cache set sysfs file io_error_halflife
- bcache: fix input overflow to sequential_cutoff
- bcache: improve sysfs_strtoul_clamp()
- genirq: Avoid summation loops for /proc/stat
- iw_cxgb4: fix srqidx leak during connection abort
- fbdev: fbmem: fix memory access if logo is bigger than the screen
- cdrom: Fix race condition in cdrom_sysctl_register
- platform/x86: intel_pmc_core: Fix PCH IP sts reading
- ASoC: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe
- sched/debug: Initialize sd_sysctl_cpus if !CONFIG_CPUMASK_OFFSTACK
- efi/memattr: Don't bail on zero VA if it equals the region's PA
- ARM: dts: lpc32xx: Remove leading 0x and 0s from bindings notation
- soc: qcom: gsbi: Fix error handling in gsbi_probe()
- mt7601u: bump supported EEPROM version
- ARM: 8830/1: NOMMU: Toggle only bits in EXC_RETURN we are really care of
- ARM: avoid Cortex-A9 livelock on tight dmb loops
- bpf: fix missing prototype warnings
- cgroup/pids: turn cgroup_subsys->free() into cgroup_subsys->release() to fix
the accounting
- backlight: pwm_bl: Use gpiod_get_value_cansleep() to get initial state
- tty: increase the default flip buffer limit to 2*640K
- powerpc/pseries: Perform full re-add of CPU for topology update post-
migration
- usb: dwc3: gadget: Fix OTG events when gadget driver isn't loaded
- media: mt9m111: set initial frame size other than 0x0
- hwrng: virtio - Avoid repeated init of completion
- soc/tegra: fuse: Fix illegal free of IO base address
- HID: intel-ish: ipc: handle PIMR before ish_wakeup also clear PISR
busy_clear bit
- hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable
- cpu/hotplug: Mute hotplug lockdep during init
- dmaengine: imx-dma: fix warning comparison of distinct pointer types
- dmaengine: qcom_hidma: assign channel cookie correctly
- dmaengine: qcom_hidma: initialize tx flags in hidma_prep_dma_*
- netfilter: physdev: relax br_netfilter dependency
- media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration
- regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting
- drm: Auto-set allow_fb_modifiers when given modifiers at plane init
- drm/nouveau: Stop using drm_crtc_force_disable
- x86/build: Specify elf_i386 linker emulation explicitly for i386 objects
- selinux: do not override context on context mounts
- wlcore: Fix memory leak in case wl12xx_fetch_firmware failure
- x86/build: Mark per-CPU symbols as absolute explicitly for LLD
- clk: rockchip: fix frac settings of GPLL clock for rk3328
- dmaengine: tegra: avoid overflow of byte tracking
- drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers
- ACPI / video: Extend chassis-type detection with a "Lunch Box" check
- f2fs: fix to adapt small inline xattr space in __find_inline_xattr()
- net: stmmac: Avoid sometimes uninitialized Clang warnings
- libbpf: force fixdep compilation at the start of the build
- scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO
- x86/hyperv: Fix kernel panic when kexec on HyperV
- mm/sparse: fix a bad comparison
- mm, swap: bounds check swap_info array accesses to avoid NULL derefs
- memcg: killed threads should not invoke memcg OOM killer
- cifs: Accept validate negotiate if server return NT_STATUS_NOT_SUPPORTED
- netfilter: nf_tables: check the result of dereferencing base_chain->stats
- netfilter: conntrack: tcp: only close if RST matches exact sequence
- kbuild: invoke syncconfig if include/config/auto.conf.cmd is missing
- mwifiex: don't advertise IBSS features without FW support
- perf report: Don't shadow inlined symbol with different addr range
- media: rockchip/rga: Correct return type for mem2mem buffer helpers
- selftests: skip seccomp get_metadata test if not real root
- kprobes: Prohibit probing on RCU debug routine
- bcache: fix potential div-zero error of writeback_rate_i_term_inverse
- drm: rcar-du: add missing of_node_put
- perf/aux: Make perf_event accessible to setup_aux()
- e1000e: Exclude device from suspend direct complete optimization
- i2c: of: Try to find an I2C adapter matching the parent
- sched/core: Use READ_ONCE()/WRITE_ONCE() in
move_queued_task()/task_rq_lock()
- powerpc/64s: Clear on-stack exception marker upon exception return
- platform/x86: intel-hid: Missing power button release on some Dell models
- pinctrl: meson: meson8b: add the eth_rxd2 and eth_rxd3 pins
- net: stmmac: Avoid one more sometimes uninitialized Clang warning
- bcache: fix potential div-zero error of writeback_rate_p_term_inverse
- net: sfp: move sfp_register_socket call from sfp_remove to sfp_probe
- drm/i915/gvt: do not let pin count of shadow mm go negative
- powerpc/tm: Limit TM code inside PPC_TRANSACTIONAL_MEM
- kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD
- x86: vdso: Use $LD instead of $CC to link
- x86/vdso: Drop implicit common-page-size linker flag
- lib/string.c: implement a basic bcmp
- stating: ccree: revert "staging: ccree: fix leak of import() after init()"
- arm64: kaslr: Reserve size of ARM64_MEMSTART_ALIGN in linear region
- tty: mark Siemens R3964 line discipline as BROKEN
- [Config] updateconfigs for CONFIG_R3964 (BROKEN)
- [Config] updateconfigs for CONFIG_LDISC_AUTOLOAD
- tty: ldisc: add sysctl to prevent autoloading of ldiscs
- ipv6: Fix dangling pointer when ipv6 fragment
- ipv6: sit: reset ip header pointer in ipip6_rcv
- kcm: switch order of device registration to fix a crash
- net-gro: Fix GRO flush when receiving a GSO packet.
- net/mlx5: Decrease default mr cache size
- net/sched: fix ->get helper of the matchall cls
- qmi_wwan: add Olicard 600
- sctp: initialize _pad of sockaddr_in before copying to user memory
- tcp: Ensure DCTCP reacts to losses
- vrf: check accept_source_route on the original netdevice
- net/mlx5e: Fix error handling when refreshing TIRs
- net/mlx5e: Add a lock on tir list
- nfp: validate the return code from dev_queue_xmit()
- bnxt_en: Improve RX consumer index validity check.
- bnxt_en: Reset device on RX buffer errors.
- net/sched: act_sample: fix divide by zero in the traffic path
- netns: provide pure entropy for net_hash_mix()
- net: ethtool: not call vzalloc for zero sized memory request
- ALSA: seq: Fix OOB-reads from strlcpy
- ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
- hv_netvsc: Fix unwanted wakeup after tx_disable
- arm64: dts: rockchip: fix rk3328 sdmmc0 write errors
- parisc: Detect QEMU earlier in boot process
- parisc: regs_return_value() should return gpr28
- alarmtimer: Return correct remaining time
- drm/udl: add a release method and delay modeset teardown
- include/linux/bitrev.h: fix constant bitrev
- ASoC: fsl_esai: fix channel swap issue when stream starts
- Btrfs: do not allow trimming when a fs is mounted with the nologreplay
option
- btrfs: prop: fix zstd compression parameter validation
- btrfs: prop: fix vanished compression property after failed set
- block: do not leak memory in bio_copy_user_iov()
- block: fix the return errno for direct IO
- genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
- genirq: Initialize request_mutex if CONFIG_SPARSE_IRQ=n
- virtio: Honour 'may_reduce_num' in vring_create_virtqueue
- ARM: dts: am335x-evmsk: Correct the regulators for the audio codec
- ARM: dts: am335x-evm: Correct the regulators for the audio codec
- ARM: dts: at91: Fix typo in ISC_D0 on PC9
- arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
- arm64: dts: rockchip: fix rk3328 rgmii high tx error rate
- arm64: backtrace: Don't bother trying to unwind the userspace stack
- xen: Prevent buffer overflow in privcmd ioctl
- sched/fair: Do not re-read ->h_load_next during hierarchical load
calculation
- xtensa: fix return_address
- x86/perf/amd: Resolve race condition when disabling PMC
- x86/perf/amd: Resolve NMI latency issues for active PMCs
- x86/perf/amd: Remove need to check "running" bit in NMI handler
- PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
- dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors
- arm64: dts: rockchip: fix vcc_host1_5v pin assign on rk3328-rock64
- arm64: dts: rockchip: Fix vcc_host1_5v GPIO polarity on rk3328-rock64
- tcp: fix a potential NULL pointer dereference in tcp_sk_exit
- nfp: disable netpoll on representors
- r8169: disable default rx interrupt coalescing on RTL8168
- kbuild: deb-pkg: fix bindeb-pkg breakage when O= is used
- ACPICA: Namespace: remove address node from global list after method
termination
- ALSA: hda/realtek - Add quirk for Tuxedo XC 1509
- mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd()
- riscv: Fix syscall_get_arguments() and syscall_set_arguments()
- x86/asm: Remove dead __GNUC__ conditionals
- dm integrity: change memcmp to strncmp in dm_integrity_ctr
* Bionic update: upstream stable patchset 2019-07-25 (LP: #1837952)
- ACPICA: Reference Counts: increase max to 0x4000 for large servers
- gro_cells: make sure device is up in gro_cells_receive()
- ipv4/route: fail early when inet dev is missing
- l2tp: fix infoleak in l2tp_ip6_recvmsg()
- net: hsr: fix memory leak in hsr_dev_finalize()
- net/hsr: fix possible crash in add_timer()
- net: sit: fix UBSAN Undefined behaviour in check_6rd
- net/x25: fix use-after-free in x25_device_event()
- net/x25: reset state in x25_connect()
- pptp: dst_release sk_dst_cache in pptp_sock_destruct
- ravb: Decrease TxFIFO depth of Q3 and Q2 to one
- route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race
- rxrpc: Fix client call queueing, waiting for channel
- tcp: Don't access TCP_SKB_CB before initializing it
- tcp: handle inet_csk_reqsk_queue_add() failures
- vxlan: Fix GRO cells race condition between receive and link delete
- vxlan: test dev->flags & IFF_UP before calling gro_cells_receive()
- net/mlx4_core: Fix reset flow when in command polling mode
- net/mlx4_core: Fix locking in SRIOV mode when switching between events and
polling
- net/mlx4_core: Fix qp mtt size calculation
- net/x25: fix a race in x25_bind()
- net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255
- bonding: fix PACKET_ORIGDEV regression
- missing barriers in some of unix_sock ->addr and ->path accesses
- ipvlan: disallow userns cap_net_admin to change global mode/flags
- perf/x86: Fixup typo in stub functions
- ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against
Liquid Saffire 56
- ALSA: firewire-motu: fix construction of PCM frame for capture direction
- perf/x86/intel: Fix memory corruption
- perf/x86/intel: Make dev_attr_allow_tsx_force_abort static
- It's wrong to add len to sector_nr in raid10 reshape twice
- sctp: remove sched init from sctp_stream_init
- team: use operstate consistently for linkup
- ipv6: route: enforce RCU protection in rt6_update_exception_stamp_rt()
- ALSA: hda - add more quirks for HP Z2 G4 and HP Z240
- ALSA: hda/realtek: Enable audio jacks of ASUS UX362FA with ALC294
- i40e: report correct statistics when XDP is enabled
- 9p: use inode->i_lock to protect i_size_write() under 32-bit
- 9p/net: fix memory leak in p9_client_create
- ASoC: fsl_esai: fix register setting issue in RIGHT_J mode
- iio: adc: exynos-adc: Fix NULL pointer exception on unbind
- stm class: Fix an endless loop in channel allocation
- crypto: caam - fixed handling of sg list
- crypto: ahash - fix another early termination in hash walk
- crypto: rockchip - fix scatterlist nents error
- crypto: rockchip - update new iv to device in multiple operations
- drm/imx: ignore plane updates on disabled crtcs
- gpu: ipu-v3: Fix i.MX51 CSI control registers offset
- drm/imx: imx-ldb: add missing of_node_puts
- gpu: ipu-v3: Fix CSI offsets for imx53
- s390/dasd: fix using offset into zero size array error
- Input: pwm-vibra - prevent unbalanced regulator
- Input: pwm-vibra - stop regulator after disabling pwm, not before
- ARM: OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be
uninitialized
- ASoC: dapm: fix out-of-bounds accesses to DAPM lookup tables
- ASoC: rsnd: fixup rsnd_ssi_master_clk_start() user count check
- KVM: arm/arm64: Reset the VCPU without preemption and vcpu state loaded
- ARM: OMAP2+: fix lack of timer interrupts on CPU1 after hotplug
- Input: cap11xx - switch to using set_brightness_blocking()
- Input: ps2-gpio - flush TX work when closing port
- Input: matrix_keypad - use flush_delayed_work()
- mac80211: Fix Tx aggregation session tear down with ITXQs
- ipvs: fix dependency on nf_defrag_ipv6
- floppy: check_events callback should not return a negative number
- NFS: Don't use page_file_mapping after removing the page
- mm/gup: fix gup_pmd_range() for dax
- Revert "mm: use early_pfn_to_nid in page_ext_init"
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs
- net: hns: Fix object reference leaks in hns_dsaf_roce_reset()
- i2c: cadence: Fix the hold bit setting
- i2c: bcm2835: Clear current buffer pointers and counts after a transfer
- auxdisplay: ht16k33: fix potential user-after-free on module unload
- Input: st-keyscan - fix potential zalloc NULL dereference
- clk: sunxi-ng: v3s: Fix TCON reset de-assert bit
- clk: sunxi: A31: Fix wrong AHB gate number
- esp: Skip TX bytes accounting when sending from a request socket
- ARM: 8824/1: fix a migrating irq bug when hotplug cpu
- af_key: unconditionally clone on broadcast
- assoc_array: Fix shortcut creation
- keys: Fix dependency loop between construction record and auth key
- scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task
- net: systemport: Fix reception of BPDUs
- pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins
- qmi_wwan: apply SET_DTR quirk to Sierra WP7607
- net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe()
- mailbox: bcm-flexrm-mailbox: Fix FlexRM ring flush timeout issue
- ASoC: topology: free created components in tplg load error
- qed: Fix iWARP syn packet mac address validation.
- arm64: Relax GIC version check during early boot
- net: marvell: mvneta: fix DMA debug warning
- tmpfs: fix link accounting when a tmpfile is linked in
- ixgbe: fix older devices that do not support IXGBE_MRQC_L3L4TXSWEN
- ARCv2: lib: memcpy: fix doing prefetchw outside of buffer
- ARC: uacces: remove lp_start, lp_end from clobber list
- ARCv2: support manual regfile save on interrupts
- phonet: fix building with clang
- mac80211_hwsim: propagate genlmsg_reply return code
- net: thunderx: make CFG_DONE message to run through generic send-ack
sequence
- nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K
- nfp: bpf: fix ALU32 high bits clearance bug
- net: set static variable an initial value in atl2_probe()
- tmpfs: fix uninitialized return value in shmem_link
- media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused()
- stm class: Prevent division by zero
- libnvdimm/label: Clear 'updating' flag after label-set update
- libnvdimm, pfn: Fix over-trim in trim_pfn_device()
- libnvdimm/pmem: Honor force_raw for legacy pmem regions
- libnvdimm: Fix altmap reservation size calculation
- fix cgroup_do_mount() handling of failure exits
- crypto: arm/crct10dif - revert to C code for short inputs
- crypto: arm64/crct10dif - revert to C code for short inputs
- crypto: hash - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
- crypto: testmgr - skip crc32c context test for ahash algorithms
- crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling
- crypto: arm64/aes-ccm - fix bugs in non-NEON fallback routine
- CIFS: Do not reset lease state to NONE on lease break
- CIFS: Fix read after write for files with read caching
- tracing: Use strncpy instead of memcpy for string keys in hist triggers
- tracing: Do not free iter->trace in fail path of tracing_open_pipe()
- xen: fix dom0 boot on huge systems
- ACPI / device_sysfs: Avoid OF modalias creation for removed device
- mmc: sdhci-esdhc-imx: fix HS400 timing issue
- spi: ti-qspi: Fix mmap read when more than one CS in use
- spi: pxa2xx: Setup maximum supported DMA transfer length
- regulator: s2mps11: Fix steps for buck7, buck8 and LDO35
- regulator: max77620: Initialize values for DT properties
- regulator: s2mpa01: Fix step values for some LDOs
- clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR
- clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown
- s390/setup: fix early warning messages
- s390/virtio: handle find on invalid queue gracefully
- scsi: virtio_scsi: don't send sc payload with tmfs
- scsi: aacraid: Fix performance issue on logical drives
- scsi: sd: Optimal I/O size should be a multiple of physical block size
- scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
- fs/devpts: always delete dcache dentry-s in dput()
- splice: don't merge into linked buffers
- m68k: Add -ffreestanding to CFLAGS
- Btrfs: setup a nofs context for memory allocation at __btrfs_set_acl
- btrfs: ensure that a DUP or RAID1 block group has exactly two stripes
- Btrfs: fix corruption reading shared and compressed extents after hole
punching
- crypto: pcbc - remove bogus memcpy()s with src == dest
- libertas_tf: don't set URB_ZERO_PACKET on IN USB transfer
- irqchip/gic-v3-its: Avoid parsing _indirect_ twice for Device table
- x86/kprobes: Prohibit probing on optprobe template code
- cpufreq: tegra124: add missing of_node_put()
- cpufreq: pxa2xx: remove incorrect __init annotation
- ext4: add mask of ext4 flags to swap
- ext4: fix crash during online resizing
- IB/hfi1: Close race condition on user context disable and close
- cxl: Wrap iterations over afu slices inside 'afu_list_lock'
- ext2: Fix underflow in ext2_max_size()
- clk: uniphier: Fix update register for CPU-gear
- clk: clk-twl6040: Fix imprecise external abort for pdmclk
- clk: ingenic: Fix round_rate misbehaving with non-integer dividers
- clk: ingenic: Fix doc of ingenic_cgu_div_info
- usb: chipidea: tegra: Fix missed ci_hdrc_remove_device()
- nfit: acpi_nfit_ctl(): Check out_obj->type in the right place
- mm: hwpoison: fix thp split handing in soft_offline_in_use_page()
- mm/vmalloc: fix size check for remap_vmalloc_range_partial()
- kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv
- device property: Fix the length used in PROPERTY_ENTRY_STRING()
- intel_th: Don't reference unassigned outputs
- parport_pc: fix find_superio io compare code, should use equal test.
- i2c: tegra: fix maximum transfer size
- crypto: arm64/aes-neonbs - fix returning final keystream block
- drm/i915: Relax mmap VMA check
- serial: uartps: Fix stuck ISR if RX disabled with non-empty FIFO
- serial: 8250_of: assume reg-shift of 2 for mrvl,mmp-uart
- serial: 8250_pci: Fix number of ports for ACCES serial cards
- serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954
chip use the pci_pericom_setup()
- jbd2: clear dirty flag when revoking a buffer from an older transaction
- jbd2: fix compile warning when using JBUFFER_TRACE
- security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblock
- powerpc/32: Clear on-stack exception marker upon exception return
- powerpc/wii: properly disable use of BATs when requested.
- powerpc/powernv: Make opal log only readable by root
- powerpc/83xx: Also save/restore SPRG4-7 during suspend
- powerpc: Fix 32-bit KVM-PR lockup and host crash with MacOS guest
- powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning
- powerpc/hugetlb: Don't do runtime allocation of 16G pages in LPAR
configuration
- powerpc/traps: fix recoverability of machine check handling on book3s/32
- powerpc/traps: Fix the message printed when stack overflows
- ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify
- arm64: Fix HCR.TGE status for NMI contexts
- arm64: debug: Ensure debug handlers check triggering exception level
- arm64: KVM: Fix architecturally invalid reset value for FPEXC32_EL2
- dm: fix to_sector() for 32bit
- dm integrity: limit the rate of error messages
- cpcap-charger: generate events for userspace
- NFS: Fix I/O request leakages
- NFS: Fix an I/O request leakage in nfs_do_recoalesce
- NFS: Don't recoalesce on error in nfs_pageio_complete_mirror()
- nfsd: fix memory corruption caused by readdir
- nfsd: fix wrong check in write_v4_end_grace()
- NFSv4.1: Reinitialise sequence results before retransmitting a request
- PM / wakeup: Rework wakeup source timer cancellation
- x86/unwind/orc: Fix ORC unwind table alignment
- perf intel-pt: Fix CYC timestamp calculation after OVF
- perf auxtrace: Define auxtrace record alignment
- perf intel-pt: Fix overlap detection to identify consecutive buffers
correctly
- perf intel-pt: Fix overlap calculation for padding
- perf intel-pt: Fix divide by zero when TSC is not available
- md: Fix failed allocation of md_register_thread
- tpm/tpm_crb: Avoid unaligned reads in crb_recv()
- tpm: Unify the send callback behaviour
- rcu: Do RCU GP kthread self-wakeup from softirq and interrupt
- media: imx: prpencvf: Stop upstream before disabling IDMA channel
- media: uvcvideo: Avoid NULL pointer dereference at the end of streaming
- media: vimc: Add vimc-streamer for stream control
- media: imx: csi: Disable CSI immediately after last EOF
- media: imx: csi: Stop upstream before disabling IDMA channel
- drm/radeon/evergreen_cs: fix missing break in switch statement
- KVM: Call kvm_arch_memslots_updated() before updating memslots
- KVM: x86/mmu: Detect MMIO generation wrap in any address space
- KVM: x86/mmu: Do not cache MMIO accesses while memslots are in flux
- KVM: nVMX: Sign extend displacements of VMX instr's mem operands
- KVM: nVMX: Apply addr size mask to effective address for VMX instructions
- KVM: nVMX: Ignore limit checks on VMX instructions using flat segments
- s390/setup: fix boot crash for machine without EDAT-1
- crypto: caam - fix hash context DMA unmap size
- crypto: caam - fix DMA mapping of stack memory
- KVM: arm/arm64: vgic: Make vgic_dist->lpi_list_lock a raw_spinlock
- arm/arm64: KVM: Allow a VCPU to fully reset itself
- arm/arm64: KVM: Don't panic on failure to properly reset system registers
- ASoC: samsung: Prevent clk_get_rate() calls in atomic context
- mac80211: call drv_ibss_join() on restart
- blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue
- xprtrdma: Make sure Send CQ is allocated on an existing compvec
- net: dsa: bcm_sf2: potential array overflow in bcm_sf2_sw_suspend()
- x86/CPU: Add Icelake model number
- kallsyms: Handle too long symbols in kallsyms.c
- ARM: 8835/1: dma-mapping: Clear DMA ops on teardown
- net: dsa: bcm_sf2: Do not assume DSA master supports WoL
- qed: Fix iWARP buffer size provided for syn packet processing.
- mm: handle lru_add_drain_all for UP properly
- ARCv2: don't assume core 0x54 has dual issue
- bpf, lpm: fix lookup bug in map_delete_elem
- acpi/nfit: Fix bus command validation
- mmc:fix a bug when max_discard is 0
- netfilter: ipt_CLUSTERIP: fix warning unused variable cn
- [Config] updateconfigs for CONFIG_SUN50I_ERRATUM_UNKNOWN1
- clocksource/drivers/arch_timer: Workaround for Allwinner A64 timer
instability
- irqchip/brcmstb-l2: Use _irqsave locking variants in non-interrupt code
- ext4: fix check of inode in swap_inode_boot_loader
- ext4: cleanup pagecache before swap i_data
- ext4: update quota information while swapping boot loader inode
- dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit
- mm/memory.c: do_fault: avoid usage of stale vm_area_struct
- media: i2c: ov5640: Fix post-reset delay
- powerpc/powernv: Don't reprogram SLW image on every KVM guest entry/exit
- mfd: sm501: Fix potential NULL pointer dereference
- nfsd: fix performance-limiting session calculation
- svcrpc: fix UDP on servers with lots of threads
- stable-kernel-rules.rst: add link to networking patch queue
- bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata
* Bionic update: upstream stable patchset 2019-07-24 (LP: #1837813)
- dt-bindings: eeprom: at24: add "atmel,24c2048" compatible string
- eeprom: at24: add support for 24c2048
- blk-mq: fix a hung issue when fsync
- ARM: 8789/1: signal: copy registers using __copy_to_user()
- ARM: 8790/1: signal: always use __copy_to_user to save iwmmxt context
- ARM: 8791/1: vfp: use __copy_to_user() when saving VFP state
- ARM: 8792/1: oabi-compat: copy oabi events using __copy_to_user()
- ARM: 8793/1: signal: replace __put_user_error with __put_user
- ARM: 8794/1: uaccess: Prevent speculative use of the current addr_limit
- ARM: 8795/1: spectre-v1.1: use put_user() for __put_user()
- ARM: 8796/1: spectre-v1,v1.1: provide helpers for address sanitization
- ARM: 8797/1: spectre-v1.1: harden __copy_to_user
- ARM: 8810/1: vfp: Fix wrong assignement to ufp_exc
- ARM: make lookup_processor_type() non-__init
- ARM: split out processor lookup
- ARM: clean up per-processor check_bugs method call
- ARM: add PROC_VTABLE and PROC_TABLE macros
- ARM: spectre-v2: per-CPU vtables to work around big.Little systems
- ARM: ensure that processor vtables is not lost after boot
- ARM: fix the cockup in the previous patch
- ACPI: NUMA: Use correct type for printing addresses on i386-PAE
- perf test shell: Use a fallback to get the pathname in vfs_getname
- cpufreq: check if policy is inactive early in __cpufreq_get()
- drm/bridge: tc358767: add defines for DP1_SRCCTRL & PHY_2LANE
- drm/bridge: tc358767: fix single lane configuration
- drm/bridge: tc358767: fix initial DP0/1_SRCCTRL value
- drm/bridge: tc358767: reject modes which require too much BW
- drm/bridge: tc358767: fix output H/V syncs
- nvme-pci: use the same attributes when freeing host_mem_desc_bufs.
- ARM: dts: da850-evm: Correct the sound card name
- ARM: dts: da850-lcdk: Correct the sound card name
- ARM: dts: kirkwood: Fix polarity of GPIO fan lines
- gpio: pl061: handle failed allocations
- drm/nouveau: Don't disable polling in fallback mode
- drm/nouveau/falcon: avoid touching registers if engine is off
- cifs: Limit memory used by lock request calls to a page
- Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G"
- Input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK
- perf/core: Fix impossible ring-buffer sizes warning
- perf/x86: Add check_period PMU callback
- ALSA: hda - Add quirk for HP EliteBook 840 G5
- ALSA: usb-audio: Fix implicit fb endpoint setup by quirk
- kvm: vmx: Fix entry number check for add_atomic_switch_msr()
- Input: bma150 - register input device after setting private data
- Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780
- mm: proc: smaps_rollup: fix pss_locked calculation
- alpha: fix page fault handling for r16-r18 targets
- alpha: Fix Eiger NR_IRQS to 128
- tracing/uprobes: Fix output for multiple string arguments
- x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls
- signal: Restore the stop PTRACE_EVENT_EXIT
- md/raid1: don't clear bitmap bits on interrupted recovery.
- x86/a.out: Clear the dump structure initially
- dm crypt: don't overallocate the integrity tag space
- dm thin: fix bug where bio that overwrites thin block ignores FUA
- drm/i915: Prevent a race during I915_GEM_MMAP ioctl with WC set
- perf report: Fix wrong iteration count in --branch-history
- riscv: fix trace_sys_exit hook
- ARM: dts: da850-lcdk: Correct the audio codec regulators
- ARM: OMAP5+: Fix inverted nirq pin interrupts with irq_set_type
- ASoC: hdmi-codec: fix oops on re-probe
- riscv: Add pte bit to distinguish swap from invalid
- mmc: sunxi: Filter out unsupported modes declared in the device tree
- s390/zcrypt: fix specification exception on z196 during ap probe
- drm/i915: Block fbdev HPD processing during suspend
- dsa: mv88e6xxx: Ensure all pending interrupts are handled prior to exit
- net: fix IPv6 prefix route residue
- net: ipv4: use a dedicated counter for icmp_v4 redirect packets
- vsock: cope with memory allocation failure at socket creation time
- vxlan: test dev->flags & IFF_UP before calling netif_rx()
- hwmon: (lm80) Fix missing unlock on error in set_fan_div()
- mlxsw: __mlxsw_sp_port_headroom_set(): Fix a use of local variable
- net: Fix for_each_netdev_feature on Big endian
- net: phy: xgmiitorgmii: Support generic PHY status read
- net: stmmac: Fix a race in EEE enable callback
- net: stmmac: handle endianness in dwmac4_get_timestamp
- vhost: correctly check the return value of translate_desc() in log_used()
- net: Add header for usage of fls64()
- net: Do not allocate page fragments that are not skb aligned
- tcp: clear icsk_backoff in tcp_write_queue_purge()
- sunrpc: fix 4 more call sites that were using stack memory with a
scatterlist
- net/x25: do not hold the cpu too long in x25_new_lci()
- mISDN: fix a race in dev_expire_timer()
- ax25: fix possible use-after-free
- af_packet: fix raw sockets over 6in4 tunnel
- tcp: tcp_v4_err() should be more careful
- mmc: meson-gx: fix interrupt name
- ARM: 8834/1: Fix: kprobes: optimized kprobes illegal instruction
- tracing: Fix number of entries in trace header
- MIPS: eBPF: Always return sign extended 32b values
- mac80211: Restore vif beacon interval if start ap fails
- mac80211: Free mpath object when rhashtable insertion fails
- libceph: handle an empty authorize reply
- ceph: avoid repeatedly adding inode to mdsc->snap_flush_list
- numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES
- proc, oom: do not report alien mms when setting oom_score_adj
- KEYS: allow reaching the keys quotas exactly
- mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells
- pvcalls-back: set -ENOTCONN in pvcalls_conn_back_read
- mfd: twl-core: Fix section annotations on {,un}protect_pm_master
- mfd: db8500-prcmu: Fix some section annotations
- mfd: mt6397: Do not call irq_domain_remove if PMIC unsupported
- mfd: ab8500-core: Return zero in get_register_interruptible()
- mfd: bd9571mwv: Add volatile register to make DVFS work
- mfd: qcom_rpm: write fw_version to CTRL_REG
- mfd: wm5110: Add missing ASRC rate register
- mfd: tps65218: Use devm_regmap_add_irq_chip and clean up error path in
probe()
- mfd: mc13xxx: Fix a missing check of a register-read failure
- xen/pvcalls: remove set but not used variable 'intf'
- qed: Fix qed_chain_set_prod() for PBL chains with non power of 2 page count
- qed: Fix qed_ll2_post_rx_buffer_notify_fw() by adding a write memory barrier
- net: hns: Fix use after free identified by SLUB debug
- MIPS: ath79: Enable OF serial ports in the default config
- netfilter: nf_tables: fix leaking object reference count
- scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param
- scsi: isci: initialize shost fully before calling scsi_add_host()
- MIPS: jazz: fix 64bit build
- bpf: correctly set initial window on active Fast Open sender
- net: stmmac: Fix PCI module removal leak
- isdn: i4l: isdn_tty: Fix some concurrency double-free bugs
- scsi: ufs: Fix system suspend status
- scsi: qedi: Add ep_state for login completion on un-reachable targets
- always clear the X2APIC_ENABLE bit for PV guest
- drm/meson: add missing of_node_put
- atm: he: fix sign-extension overflow on large shift
- hwmon: (tmp421) Correct the misspelling of the tmp442 compatible attribute
in OF device ID table
- leds: lp5523: fix a missing check of return value of lp55xx_read
- bpf: bpf_setsockopt: reset sock dst on SO_MARK changes
- mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky
- net/mlx5e: Fix wrong (zero) TX drop counter indication for representor
- isdn: avm: Fix string plus integer warning from Clang
- batman-adv: fix uninit-value in batadv_interface_tx()
- ipv6: propagate genlmsg_reply return code
- net/mlx5e: Don't overwrite pedit action when multiple pedit used
- net/packet: fix 4gb buffer limit due to overflow check
- net: sfp: do not probe SFP module before we're attached
- sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment
- team: avoid complex list operations in team_nl_cmd_options_set()
- sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach()
- net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames
- inet_diag: fix reporting cgroup classid and fallback to priority
- RDMA/srp: Rework SCSI device reset handling
- KEYS: user: Align the payload buffer
- KEYS: always initialize keyring_index_key::desc_len
- parisc: Fix ptrace syscall number modification
- ARCv2: Enable unaligned access in early ASM code
- ARC: U-boot: check arguments paranoidly
- ARC: define ARCH_SLAB_MINALIGN = 8
- net: validate untrusted gso packets without csum offload
- net: avoid false positives in untrusted gso validation
- Revert "bridge: do not add port to router list when receives query with
source 0.0.0.0"
- netfilter: nf_tables: fix flush after rule deletion in the same batch
- netfilter: nft_compat: use-after-free when deleting targets
- netfilter: ipv6: Don't preserve original oif for loopback address
- pinctrl: max77620: Use define directive for max77620_pinconf_param values
- phy: tegra: remove redundant self assignment of 'map'
- net: phylink: avoid resolving link state too early
- gpio: pxa: avoid attempting to set pin direction via pinctrl on MMP2
- pvcalls-front: read all data before closing the connection
- pvcalls-front: don't try to free unallocated rings
- pvcalls-front: properly allocate sk
- mfd: cros_ec_dev: Add missing mfd_remove_devices() call in remove
- bpf: Fix [::] -> [::1] rewrite in sys_sendmsg
- watchdog: mt7621_wdt/rt2880_wdt: Fix compilation problem
- net/mlx4: Get rid of page operation after dma_alloc_coherent
- xprtrdma: Double free in rpcrdma_sendctxs_create()
- RDMA/mthca: Clear QP objects during their allocation
- powerpc/8xx: fix setting of pagetable for Abatron BDI debug tool.
- net: stmmac: Fix the logic of checking if RX Watchdog must be enabled
- scsi: ufs: Fix geometry descriptor size
- scsi: cxgb4i: add wait_for_completion()
- afs: Fix key refcounting in file locking code
- dpaa_eth: NETIF_F_LLTX requires to do our own update of trans_start
- mlxsw: pci: Return error on PCI reset timeout
- sctp: set stream ext to NULL after freeing it in sctp_stream_outq_migrate
- drm/amdgpu: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime
- gpu: drm: radeon: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime
- drm/amd/display: Fix MST reboot/poweroff sequence
- mac80211: allocate tailroom for forwarded mesh packets
- netfilter: ipt_CLUSTERIP: fix sleep-in-atomic bug in
clusterip_config_entry_put()
- net: stmmac: Fix reception of Broadcom switches tags
- drm/msm: Unblock writer if reader closes file
- ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field
- ALSA: compress: prevent potential divide by zero bugs
- ASoC: Variable "val" in function rt274_i2c_probe() could be uninitialized
- clk: vc5: Abort clock configuration without upstream clock
- thermal: int340x_thermal: Fix a NULL vs IS_ERR() check
- usb: dwc3: gadget: synchronize_irq dwc irq in suspend
- usb: dwc3: gadget: Fix the uninitialized link_state when udc starts
- usb: gadget: Potential NULL dereference on allocation error
- genirq: Make sure the initial affinity is not empty
- ASoC: dapm: change snprintf to scnprintf for possible overflow
- ASoC: imx-audmux: change snprintf to scnprintf for possible overflow
- selftests: seccomp: use LDLIBS instead of LDFLAGS
- selftests: gpio-mockup-chardev: Check asprintf() for error
- ARC: fix __ffs return value to avoid build warnings
- drivers: thermal: int340x_thermal: Fix sysfs race condition
- staging: rtl8723bs: Fix build error with Clang when inlining is disabled
- mac80211: fix miscounting of ttl-dropped frames
- sched/wait: Fix rcuwait_wake_up() ordering
- futex: Fix (possible) missed wakeup
- locking/rwsem: Fix (possible) missed wakeup
- drm/amd/powerplay: OD setting fix on Vega10
- serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling
- staging: android: ion: Support cpu access during dma_buf_detach
- direct-io: allow direct writes to empty inodes
- writeback: synchronize sync(2) against cgroup writeback membership switches
- scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state()
- net: altera_tse: fix connect_local_phy error path
- hv_netvsc: Fix ethtool change hash key error
- net: usb: asix: ax88772_bind return error when hw_reset fail
- net: dev_is_mac_header_xmit() true for ARPHRD_RAWIP
- ibmveth: Do not process frames after calling napi_reschedule
- mac80211: don't initiate TDLS connection if station is not associated to AP
- mac80211: Add attribute aligned(2) to struct 'action'
- cfg80211: extend range deviation for DMG
- KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting
to L1
- mmc: spi: Fix card detection during probe
- mmc: tmio_mmc_core: don't claim spurious interrupts
- mmc: tmio: fix access width of Block Count Register
- mmc: sdhci-esdhc-imx: correct the fix of ERR004536
- MIPS: fix truncation in __cmpxchg_small for short values
- MIPS: eBPF: Fix icache flush end address
- x86/uaccess: Don't leak the AC flag into __put_user() value evaluation
- irq/matrix: Split out the CPU selection code into a helper
- irq/matrix: Spread managed interrupts on allocation
- genirq/matrix: Improve target CPU selection for managed interrupts.
- clk: tegra: dfll: Fix a potential Oop in remove()
- selftests/vm/gup_benchmark.c: match gup struct to kernel
- ARC: show_regs: lockdep: avoid page allocator...
- sched/wake_q: Fix wakeup ordering for wake_q
- drm/sun4i: hdmi: Fix usage of TMDS clock
- scsi: lpfc: nvme: avoid hang / use-after-free when destroying localport
- scsi: lpfc: nvmet: avoid hang / use-after-free when destroying targetport
- mmc: core: Fix NULL ptr crash from mmc_should_fail_request
- drm: Block fb changes for async plane updates
- hugetlbfs: fix races and page leaks during migration
- MIPS: BCM63XX: provide DMA masks for ethernet devices
- cpufreq: Use struct kobj_attribute instead of struct global_attr
- USB: serial: option: add Telit ME910 ECM composition
- USB: serial: cp210x: add ID for Ingenico 3070
- USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485
- staging: comedi: ni_660x: fix missing break in switch statement
- staging: wilc1000: fix to set correct value for 'vif_num'
- staging: android: ion: fix sys heap pool's gfp_flags
- ip6mr: Do not call __IP6_INC_STATS() from preemptible context
- net: dsa: mv88e6xxx: handle unknown duplex modes gracefully in
mv88e6xxx_port_set_duplex
- net-sysfs: Fix mem leak in netdev_register_kobject
- team: Free BPF filter when unregistering netdev
- tipc: fix RDM/DGRAM connect() regression
- bnxt_en: Drop oversize TX packets to prevent errors.
- hv_netvsc: Fix IP header checksum for coalesced packets
- net: dsa: mv88e6xxx: Fix statistics on mv88e6161
- net: dsa: mv88e6xxx: Fix u64 statistics
- netlabel: fix out-of-bounds memory accesses
- net: netem: fix skb length BUG_ON in __skb_to_sgvec
- net: phy: Micrel KSZ8061: link failure after cable connect
- net: phy: phylink: fix uninitialized variable in phylink_get_mac_state
- net: sit: fix memory leak in sit_init_net()
- tipc: fix race condition causing hung sendto
- tun: fix blocking read
- xen-netback: don't populate the hash cache on XenBus disconnect
- xen-netback: fix occasional leak of grant ref mappings under memory pressure
- tun: remove unnecessary memory barrier
- net: Add __icmp_send helper.
- net: avoid use IPCB in cipso_v4_error
- ipv4: Return error for RTA_VIA attribute
- ipv6: Return error for RTA_VIA attribute
- mpls: Return error for RTA_GATEWAY attribute
- net/sched: act_ipt: fix refcount leak when replace fails
- x86/CPU/AMD: Set the CPB bit unconditionally on F17h
- MIPS: irq: Allocate accurate order pages for irq stack
- xtensa: fix get_wchan
- Bluetooth: Fix locking in bt_accept_enqueue() for BH context
- scsi: core: reset host byte in DID_NEXUS_FAILURE case
- bpf: fix sanitation rewrite in case of non-pointers
- vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel
- perf core: Fix perf_proc_update_handler() bug
- perf tools: Handle TOPOLOGY headers with no CPU
- IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM
- iommu/amd: Call free_iova_fast with pfn in map_sg
- iommu/amd: Unmap all mapped pages in error path of map_sg
- ipvs: Fix signed integer overflow when setsockopt timeout
- iommu/amd: Fix IOMMU page flush when detach device from a domain
- xtensa: SMP: fix ccount_timer_shutdown
- selftests: cpu-hotplug: fix case where CPUs offline > CPUs present
- xtensa: SMP: fix secondary CPU initialization
- xtensa: smp_lx200_defconfig: fix vectors clash
- xtensa: SMP: mark each possible CPU as present
- xtensa: SMP: limit number of possible CPUs by NR_CPUS
- net: altera_tse: fix msgdma_tx_completion on non-zero fill_level case
- net: hns: Fix for missing of_node_put() after of_parse_phandle()
- net: hns: Fix wrong read accesses via Clause 45 MDIO protocol
- net: stmmac: dwmac-rk: fix error handling in rk_gmac_powerup()
- netfilter: ebtables: compat: un-break 32bit setsockopt when no rules are
present
- gpio: vf610: Mask all GPIO interrupts
- selftests: timers: use LDLIBS instead of LDFLAGS
- nfs: Fix NULL pointer dereference of dev_name
- qed: Fix bug in tx promiscuous mode settings
- qed: Fix LACP pdu drops for VFs
- qed: Fix VF probe failure while FLR
- qed: Fix system crash in ll2 xmit
- qed: Fix stack out of bounds bug
- scsi: libfc: free skb when receiving invalid flogi resp
- scsi: 53c700: pass correct "dev" to dma_alloc_attrs()
- platform/x86: Fix unmet dependency warning for SAMSUNG_Q10
- cifs: fix computation for MAX_SMB2_HDR_SIZE
- x86/microcode/amd: Don't falsely trick the late loading mechanism
- arm64: kprobe: Always blacklist the KVM world-switch code
- apparmor: Fix aa_label_build() error handling for failed merges
- x86/kexec: Don't setup EFI info if EFI runtime is not enabled
- x86_64: increase stack size for KASAN_EXTRA
- mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone
- mm, memory_hotplug: test_pages_in_a_zone do not pass the end of zone
- lib/test_kmod.c: potential double free in error handling
- fs/drop_caches.c: avoid softlockups in drop_pagecache_sb()
- autofs: drop dentry reference only when it is never used
- autofs: fix error return in autofs_fill_super()
- ARM: dts: omap4-droid4: Fix typo in cpcap IRQ flags
- arm64: dts: renesas: r8a7796: Enable DMA for SCIF2
- soc: fsl: qbman: avoid race in clearing QMan interrupt
- bpf: sock recvbuff must be limited by rmem_max in bpf_setsockopt()
- ARM: pxa: ssp: unneeded to free devm_ allocated data
- arm64: dts: add msm8996 compatible to gicv3
- DTS: CI20: Fix bugs in ci20's device tree.
- usb: phy: fix link errors
- irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable
- net: stmmac: Fallback to Platform Data clock in Watchdog conversion
- net: stmmac: Send TSO packets always from Queue 0
- net: stmmac: Disable EEE mode earlier in XMIT callback
- irqchip/gic-v3-its: Fix ITT_entry_size accessor
- relay: check return of create_buf_file() properly
- bpf, selftests: fix handling of sparse CPU allocations
- bpf: fix lockdep false positive in percpu_freelist
- drm/sun4i: tcon: Prepare and enable TCON channel 0 clock at init
- dmaengine: at_xdmac: Fix wrongfull report of a channel as in use
- vsock/virtio: fix kernel panic after device hot-unplug
- vsock/virtio: reset connected sockets on device removal
- dmaengine: dmatest: Abort test in case of mapping error
- selftests: netfilter: fix config fragment CONFIG_NF_TABLES_INET
- selftests: netfilter: add simple masq/redirect test cases
- s390/qeth: fix use-after-free in error path
- perf symbols: Filter out hidden symbols from labels
- perf trace: Support multiple "vfs_getname" probes
- MIPS: Remove function size check in get_frame_info()
- i2c: omap: Use noirq system sleep pm ops to idle device for suspend
- fs: ratelimit __find_get_block_slow() failure message.
- qed: Fix EQ full firmware assert.
- qed: Consider TX tcs while deriving the max num_queues for PF.
- Input: wacom_serial4 - add support for Wacom ArtPad II tablet
- Input: elan_i2c - add id for touchpad found in Lenovo s21e-20
- iscsi_ibft: Fix missing break in switch statement
- scsi: aacraid: Fix missing break in switch statement
- arm64: dts: hikey: Give wifi some time after power-on
- ARM: dts: exynos: Fix pinctrl definition for eMMC RTSN line on Odroid X2/U3
- ARM: dts: exynos: Add minimal clkout parameters to Exynos3250 PMU
- drm: disable uncached DMA optimization for ARM and arm64
- ARM: 8781/1: Fix Thumb-2 syscall return for binutils 2.29+
- gfs2: Fix missed wakeups in find_insert_glock
- ath9k: Avoid OF no-EEPROM quirks without qca,no-eeprom
- perf/x86/intel: Make cpuc allocations consistent
- perf/x86/intel: Generalize dynamic constraint creation
- x86: Add TSX Force Abort CPUID/MSR
- perf/x86/intel: Implement support for TSX Force Abort
- perf script: Fix crash with printing mixed trace point and other events
- clk: ti: Fix error handling in ti_clk_parse_divider_data()
- riscv: Adjust mmap base address at a third of task size
- IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start
- iomap: fix a use after free in iomap_dio_rw
- selftests: net: use LDLIBS instead of LDFLAGS
- scsi: scsi_debug: fix write_same with virtual_gb problem
- scsi: bnx2fc: Fix error handling in probe()
- ARM: OMAP: dts: N950/N9: fix onenand timings
- ARM: dts: sun8i: h3: Add ethernet0 alias to Beelink X2
- ARM: dts: imx6sx: correct backward compatible of gpt
- pinctrl: mcp23s08: spi: Fix regmap allocation for mcp23s18
- bpftool: Fix prog dump by tag
- bpftool: fix percpu maps updating
- batman-adv: release station info tidstats
- irqchip/gic-v4: Fix occasional VLPI drop
- s390/qeth: release cmd buffer in error paths
- nvme-pci: add missing unlock for reset error
- x86/PCI: Fixup RTIT_BAR of Intel Denverton Trace Hub
- ARM: dts: exynos: Fix max voltage for buck8 regulator on Odroid XU3/XU4
* Bionic update: upstream stable patchset 2019-07-23 (LP: #1837664)
- amd-xgbe: Fix mdio access for non-zero ports and clause 45 PHYs
- net: bridge: Fix ethernet header pointer before check skb forwardable
- net: Fix usage of pskb_trim_rcsum
- net: phy: mdio_bus: add missing device_del() in mdiobus_register() error
handling
- net_sched: refetch skb protocol for each filter
- openvswitch: Avoid OOB read when parsing flow nlattrs
- vhost: log dirty page correctly
- net: ipv4: Fix memory leak in network namespace dismantle
- tcp: allow MSG_ZEROCOPY transmission also in CLOSE_WAIT state
- mei: me: add denverton innovation engine device IDs
- USB: serial: simple: add Motorola Tetra TPG2200 device id
- USB: serial: pl2303: add new PID to support PL2303TB
- ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages
- ASoC: rt5514-spi: Fix potential NULL pointer dereference
- ARCv2: lib: memeset: fix doing prefetchw outside of buffer
- ARC: adjust memblock_reserve of kernel memory
- ARC: perf: map generic branches to correct hardware condition
- s390/smp: fix CPU hotplug deadlock with CPU rescan
- staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1
- tty: Handle problem if line discipline does not have receive_buf
- uart: Fix crash in uart_write and uart_put_char
- tty/n_hdlc: fix __might_sleep warning
- hv_balloon: avoid touching uninitialized struct page during tail onlining
- Drivers: hv: vmbus: Check for ring when getting debug info
- CIFS: Fix possible hang during async MTU reads and writes
- CIFS: Fix credits calculations for reads with errors
- CIFS: Fix credit calculation for encrypted reads with errors
- CIFS: Do not reconnect TCP session in add_credits()
- Input: xpad - add support for SteelSeries Stratus Duo
- compiler.h: enable builtin overflow checkers and add fallback code
- Input: uinput - fix undefined behavior in uinput_validate_absinfo()
- acpi/nfit: Block function zero DSMs
- acpi/nfit: Fix command-supported detection
- dm thin: fix passdown_double_checking_shared_status()
- dm crypt: fix parsing of extended IV arguments
- KVM: x86: Fix single-step debugging
- x86/pkeys: Properly copy pkey state at fork()
- x86/selftests/pkeys: Fork() to check for state being preserved
- x86/kaslr: Fix incorrect i8254 outb() parameters
- posix-cpu-timers: Unbreak timer rearming
- irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size
- can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by
removing it
- can: bcm: check timer values before ktime conversion
- vt: invoke notifier on screen size change
- Revert "seccomp: add a selftest for get_metadata"
- s390/smp: Fix calling smp_call_ipl_cpu() from ipl CPU
- nvmet-rdma: Add unlikely for response allocated check
- nvmet-rdma: fix null dereference under heavy load
- usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup
- x86/xen/time: Output xen sched_clock time from 0
- xen: Fix x86 sched_clock() interface for xen
- mlxsw: pci: Increase PCI SW reset timeout
- mlxsw: spectrum_fid: Update dummy FID index
- ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode
- s390/mm: always force a load of the primary ASCE on context switch
- mmc: meson-gx: Free irq in release() callback
- vgacon: unconfuse vc_origin when using soft scrollback
- drm/amdgpu: Add APTX quirk for Lenovo laptop
- vt: always call notifier with the console lock held
- drm/meson: Fix atomic mode switching regression
- bpf: improve verifier branch analysis
- bpf: add per-insn complexity limit
- ipv6: Consider sk_bound_dev_if when binding a socket to an address
- ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation
- l2tp: copy 4 more bytes to linear part if necessary
- net/mlx4_core: Add masking for a few queries on HCA caps
- netrom: switch to sock timer API
- net/rose: fix NULL ax25_cb kernel panic
- net: set default network namespace in init_dummy_netdev()
- net/mlx5e: Allow MAC invalidation while spoofchk is ON
- Revert "net/mlx5e: E-Switch, Initialize eswitch only if eswitch manager"
- virtio_net: Don't enable NAPI when interface is down
- virtio_net: Don't call free_old_xmit_skbs for xdp_frames
- virtio_net: Fix not restoring real_num_rx_queues
- sctp: improve the events for sctp stream adding
- sctp: improve the events for sctp stream reset
- l2tp: remove l2specific_len dependency in l2tp_core
- l2tp: fix reading optional fields of L2TPv3
- ipvlan, l3mdev: fix broken l3s mode wrt local routes
- CIFS: Do not count -ENODATA as failure for query directory
- fs/dcache: Fix incorrect nr_dentry_unused accounting in shrink_dcache_sb()
- iommu/vt-d: Fix memory leak in intel_iommu_put_resv_regions()
- NFS: Fix up return value on fatal errors in nfs_page_async_flush()
- ARM: cns3xxx: Fix writing to wrong PCI config registers after alignment
- arm64: kaslr: ensure randomized quantities are clean also when kaslr is off
- arm64: hyp-stub: Forbid kprobing of the hyp-stub
- arm64: hibernate: Clean the __hyp_text to PoC after resume
- gpio: altera-a10sr: Set proper output level for direction_output
- gpio: pcf857x: Fix interrupts on multiple instances
- mmc: bcm2835: Fix DMA channel leak on probe error
- IB/hfi1: Remove overly conservative VM_EXEC flag check
- platform/x86: asus-nb-wmi: Map 0x35 to KEY_SCREENLOCK
- platform/x86: asus-nb-wmi: Drop mapping of 0x33 and 0x34 scan codes
- mmc: sdhci-iproc: handle mmc_of_parse() errors during probe
- kernel/exit.c: release ptraced tasks before zap_pid_ns_processes
- oom, oom_reaper: do not enqueue same task twice
- mm, oom: fix use-after-free in oom_kill_process
- mm: hwpoison: use do_send_sig_info() instead of force_sig()
- mm: migrate: don't rely on __PageMovable() of newpage after unlocking it
- md/raid5: fix 'out of memory' during raid cache recovery
- cifs: Always resolve hostname before reconnecting
- drivers: core: Remove glue dirs from sysfs earlier
- fanotify: fix handling of events on child sub-directory
- drm/msm/gpu: fix building without debugfs
- ravb: expand rx descriptor data to accommodate hw checksum
- tun: move the call to tun_set_real_num_queues
- sctp: set chunk transport correctly when it's a new asoc
- sctp: set flow sport from saddr only when it's 0
- virtio_net: Don't process redirected XDP frames when XDP is disabled
- CIFS: Do not consider -ENODATA as stat failure for reads
- mmc: mediatek: fix incorrect register setting of hs400_cmd_int_delay
- ALSA: usb-audio: Add Opus #3 to quirks for native DSD support
- Btrfs: fix deadlock when allocating tree block during leaf/node split
- mm/hugetlb.c: teach follow_hugetlb_page() to handle FOLL_NOWAIT
- mm,memory_hotplug: fix scan_movable_pages() for gigantic hugepages
- of: Convert to using %pOFn instead of device_node.name
- of: overlay: add tests to validate kfrees from overlay removal
- of: overlay: add missing of_node_get() in __of_attach_node_sysfs
- of: overlay: use prop add changeset entry for property in new nodes
- ucc_geth: Reset BQL queue when stopping device
- staging: iio: adc: ad7280a: handle error from __ad7280_read32()
- drm/vgem: Fix vgem_init to get drm device available.
- pinctrl: bcm2835: Use raw spinlock for RT compatibility
- ASoC: Intel: mrfld: fix uninitialized variable access
- gpu: ipu-v3: image-convert: Prevent race between run and unprepare
- ath9k: dynack: use authentication messages for 'late' ack
- scsi: lpfc: Correct LCB RJT handling
- scsi: mpt3sas: Call sas_remove_host before removing the target devices
- scsi: lpfc: Fix LOGO/PLOGI handling when triggerd by ABTS Timeout event
- ARM: 8808/1: kexec:offline panic_smp_self_stop CPU
- clk: boston: fix possible memory leak in clk_boston_setup()
- dlm: Don't swamp the CPU with callbacks queued during recovery
- x86/PCI: Fix Broadcom CNB20LE unintended sign extension (redux)
- powerpc/pseries: add of_node_put() in dlpar_detach_node()
- crypto: aes_ti - disable interrupts while accessing S-box
- drm/vc4: ->x_scaling[1] should never be set to VC4_SCALING_NONE
- serial: fsl_lpuart: clear parity enable bit when disable parity
- ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl
- MIPS: Boston: Disable EG20T prefetch
- staging:iio:ad2s90: Make probe handle spi_setup failure
- fpga: altera-cvp: Fix registration for CvP incapable devices
- Tools: hv: kvp: Fix a warning of buffer overflow with gcc 8.0.1
- platform/chrome: don't report EC_MKBP_EVENT_SENSOR_FIFO as wakeup
- staging: iio: ad7780: update voltage on read
- usbnet: smsc95xx: fix rx packet alignment
- drm/rockchip: fix for mailbox read size
- ARM: OMAP2+: hwmod: Fix some section annotations
- net/mlx5: EQ, Use the right place to store/read IRQ affinity hint
- modpost: validate symbol names also in find_elf_symbol
- perf tools: Add Hygon Dhyana support
- soc/tegra: Don't leak device tree node reference
- media: mtk-vcodec: Release device nodes in mtk_vcodec_init_enc_pm()
- ptp: Fix pass zero to ERR_PTR() in ptp_clock_register
- dmaengine: xilinx_dma: Remove __aligned attribute on zynqmp_dma_desc_ll
- iio: adc: meson-saradc: check for devm_kasprintf failure
- iio: adc: meson-saradc: fix internal clock names
- iio: accel: kxcjk1013: Add KIOX010A ACPI Hardware-ID
- media: adv*/tc358743/ths8200: fill in min width/height/pixelclock
- ACPI: SPCR: Consider baud rate 0 as preconfigured state
- staging: pi433: fix potential null dereference
- f2fs: move dir data flush to write checkpoint process
- f2fs: fix race between write_checkpoint and write_begin
- f2fs: fix wrong return value of f2fs_acl_create
- i2c: sh_mobile: add support for r8a77990 (R-Car E3)
- arm64: io: Ensure calls to delay routines are ordered against prior readX()
- sunvdc: Do not spin in an infinite loop when vio_ldc_send() returns EAGAIN
- soc: bcm: brcmstb: Don't leak device tree node reference
- nfsd4: fix crash on writing v4_end_grace before nfsd startup
- drm: Clear state->acquire_ctx before leaving
drm_atomic_helper_commit_duplicated_state()
- arm64: io: Ensure value passed to __iormb() is held in a 64-bit register
- Thermal: do not clear passive state during system sleep
- firmware/efi: Add NULL pointer checks in efivars API functions
- s390/zcrypt: improve special ap message cmd handling
- arm64: ftrace: don't adjust the LR value
- ARM: dts: mmp2: fix TWSI2
- x86/fpu: Add might_fault() to user_insn()
- media: DaVinci-VPBE: fix error handling in vpbe_initialize()
- smack: fix access permissions for keyring
- usb: dwc3: Correct the logic for checking TRB full in
__dwc3_prepare_one_trb()
- usb: hub: delay hub autosuspend if USB3 port is still link training
- timekeeping: Use proper seqcount initializer
- usb: mtu3: fix the issue about SetFeature(U1/U2_Enable)
- clk: sunxi-ng: a33: Set CLK_SET_RATE_PARENT for all audio module clocks
- driver core: Move async_synchronize_full call
- kobject: return error code if writing /sys/.../uevent fails
- IB/hfi1: Unreserve a reserved request when it is completed
- usb: dwc3: trace: add missing break statement to make compiler happy
- pinctrl: sx150x: handle failure case of devm_kstrdup
- iommu/amd: Fix amd_iommu=force_isolation
- ARM: dts: Fix OMAP4430 SDP Ethernet startup
- mips: bpf: fix encoding bug for mm_srlv32_op
- media: coda: fix H.264 deblocking filter controls
- ARM: dts: Fix up the D-Link DIR-685 MTD partition info
- watchdog: renesas_wdt: don't set divider while watchdog is running
- usb: dwc3: gadget: Disable CSP for stream OUT ep
- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
- sata_rcar: fix deferred probing
- clk: imx6sl: ensure MMDC CH0 handshake is bypassed
- cpuidle: big.LITTLE: fix refcount leak
- OPP: Use opp_table->regulators to verify no regulator case
- i2c-axxia: check for error conditions first
- phy: sun4i-usb: add support for missing USB PHY index
- udf: Fix BUG on corrupted inode
- switchtec: Fix SWITCHTEC_IOCTL_EVENT_IDX_ALL flags overwrite
- selftests/bpf: use __bpf_constant_htons in test_prog.c
- ARM: pxa: avoid section mismatch warning
- ASoC: fsl: Fix SND_SOC_EUKREA_TLV320 build error on i.MX8M
- KVM: PPC: Book3S: Only report KVM_CAP_SPAPR_TCE_VFIO on powernv machines
- mmc: bcm2835: Recover from MMC_SEND_EXT_CSD
- mmc: bcm2835: reset host on timeout
- mmc: sdhci-of-esdhc: Fix timeout checks
- mmc: sdhci-xenon: Fix timeout checks
- tty: serial: samsung: Properly set flags in autoCTS mode
- perf test: Fix perf_event_attr test failure
- perf header: Fix unchecked usage of strncpy()
- perf probe: Fix unchecked usage of strncpy()
- arm64: KVM: Skip MMIO insn after emulation
- usb: musb: dsps: fix otg state machine
- percpu: convert spin_lock_irq to spin_lock_irqsave.
- powerpc/uaccess: fix warning/error with access_ok()
- mac80211: fix radiotap vendor presence bitmap handling
- xfrm6_tunnel: Fix spi check in __xfrm6_tunnel_alloc_spi
- mlxsw: spectrum: Properly cleanup LAG uppers when removing port from LAG
- scsi: smartpqi: correct host serial num for ssa
- scsi: smartpqi: correct volume status
- scsi: smartpqi: increase fw status register read timeout
- cw1200: Fix concurrency use-after-free bugs in cw1200_hw_scan()
- powerpc/perf: Fix thresholding counter data for unknown type
- drbd: narrow rcu_read_lock in drbd_sync_handshake
- drbd: disconnect, if the wrong UUIDs are attached on a connected peer
- drbd: skip spurious timeout (ping-timeo) when failing promote
- drbd: Avoid Clang warning about pointless switch statment
- video: clps711x-fb: release disp device node in probe()
- fbdev: fbmem: behave better with small rotated displays and many CPUs
- i40e: define proper net_device::neigh_priv_len
- ACPI/APEI: Clear GHES block_status before panic()
- fbdev: fbcon: Fix unregister crash when more than one framebuffer
- powerpc/mm: Fix reporting of kernel execute faults on the 8xx
- pinctrl: meson: meson8: fix the GPIO function for the GPIOAO pins
- pinctrl: meson: meson8b: fix the GPIO function for the GPIOAO pins
- KVM: x86: svm: report MSR_IA32_MCG_EXT_CTL as unsupported
- powerpc/fadump: Do not allow hot-remove memory from fadump reserved area.
- kvm: Change offset in kvm_write_guest_offset_cached to unsigned
- NFS: nfs_compare_mount_options always compare auth flavors.
- hwmon: (lm80) fix a missing check of the status of SMBus read
- hwmon: (lm80) fix a missing check of bus read in lm80 probe
- seq_buf: Make seq_buf_puts() null-terminate the buffer
- crypto: ux500 - Use proper enum in cryp_set_dma_transfer
- crypto: ux500 - Use proper enum in hash_set_dma_transfer
- MIPS: ralink: Select CONFIG_CPU_MIPSR2_IRQ_VI on MT7620/8
- cifs: check ntwrk_buf_start for NULL before dereferencing it
- um: Avoid marking pages with "changed protection"
- niu: fix missing checks of niu_pci_eeprom_read
- f2fs: fix sbi->extent_list corruption issue
- cgroup: fix parsing empty mount option string
- scripts/decode_stacktrace: only strip base path when a prefix of the path
- ocfs2: don't clear bh uptodate for block read
- ocfs2: improve ocfs2 Makefile
- isdn: hisax: hfc_pci: Fix a possible concurrency use-after-free bug in
HFCPCI_l1hw()
- gdrom: fix a memory leak bug
- fsl/fman: Use GFP_ATOMIC in {memac,tgec}_add_hash_mac_address()
- block/swim3: Fix -EBUSY error when re-opening device after unmount
- thermal: bcm2835: enable hwmon explicitly
- kdb: Don't back trace on a cpu that didn't round up
- thermal: generic-adc: Fix adc to temp interpolation
- HID: lenovo: Add checks to fix of_led_classdev_register
- kernel/hung_task.c: break RCU locks based on jiffies
- proc/sysctl: fix return error for proc_doulongvec_minmax()
- kernel/hung_task.c: force console verbose before panic
- fs/epoll: drop ovflist branch prediction
- scripts/gdb: fix lx-version string output
- thermal: hwmon: inline helpers when CONFIG_THERMAL_HWMON is not set
- dccp: fool proof ccid_hc_[rt]x_parse_options()
- enic: fix checksum validation for IPv6
- net: dp83640: expire old TX-skb
- rxrpc: bad unlock balance in rxrpc_recvmsg
- skge: potential memory corruption in skge_get_regs()
- rds: fix refcount bug in rds_sock_addref
- net: systemport: Fix WoL with password after deep sleep
- net/mlx5e: Force CHECKSUM_UNNECESSARY for short ethernet frames
- net: dsa: slave: Don't propagate flag changes on down slave interfaces
- ALSA: compress: Fix stop handling on compressed capture streams
- ALSA: hda - Serialize codec registrations
- dmaengine: bcm2835: Fix interrupt race on RT
- dmaengine: bcm2835: Fix abort of transactions
- dmaengine: imx-dma: fix wrong callback invoke
- futex: Handle early deadlock return correctly
- irqchip/gic-v3-its: Plug allocation race for devices sharing a DevID
- usb: phy: am335x: fix race condition in _probe
- usb: dwc3: gadget: Handle 0 xfer length for OUT EP
- usb: gadget: udc: net2272: Fix bitwise and boolean operations
- usb: gadget: musb: fix short isoc packets with inventra dma
- staging: speakup: fix tty-operation NULL derefs
- scsi: cxlflash: Prevent deadlock when adapter probe fails
- scsi: aic94xx: fix module loading
- cpu/hotplug: Fix "SMT disabled by BIOS" detection for KVM
- perf/x86/intel/uncore: Add Node ID mask
- x86/MCE: Initialize mce.bank in the case of a fatal error in
mce_no_way_out()
- perf/core: Don't WARN() for impossible ring-buffer sizes
- perf tests evsel-tp-sched: Fix bitwise operator
- serial: fix race between flush_to_ldisc and tty_open
- serial: 8250_pci: Make PCI class test non fatal
- IB/hfi1: Add limit test for RC/UC send via loopback
- perf/x86/intel: Delay memory deallocation until x86_pmu_dead_cpu()
- ath9k: dynack: make ewma estimation faster
- ath9k: dynack: check da->enabled first in sampling routines
- devres: Align data[] to ARCH_KMALLOC_MINALIGN
- genirq/affinity: Spread IRQs to all available NUMA nodes
- wil6210: fix memory leak in wil_find_tx_bcast_2
- fpga: altera-cvp: fix 'bad IO access' on x86_64
- drm/amd/display: calculate stream->phy_pix_clk before clock mapping
- net: aquantia: return 'err' if set MPI_DEINIT state fails
- perf: arm_spe: handle devm_kasprintf() failure
- xtensa: xtfpga.dtsi: fix dtc warnings about SPI
- media: imx274: select REGMAP_I2C
- drm/amdgpu/powerplay: fix clock stretcher limits on polaris (v2)
- tipc: fix node keep alive interval calculation
- mmc: meson-mx-sdio: check devm_kasprintf for failure
- mmc: sdhci-omap: Fix timeout checks
- mmc: jz4740: Get CD/WP GPIOs from descriptors
- usb: renesas_usbhs: add support for RZ/G2E
- i2c: sh_mobile: Add support for r8a774c0 (RZ/G2E)
- livepatch: check kzalloc return values
- usb: musb: dsps: fix runtime pm for peripheral mode
- perf header: Fix up argument to ctime()
- drm/amd/display: Add retry to read ddc_clock pin
- Bluetooth: hci_bcm: Handle deferred probing for the clock supply
- mlx5: update timecounter at least twice per counter overflow
- drm/amd/display: validate extended dongle caps
- perf build: Don't unconditionally link the libbfd feature test to -liberty
and -lz
- PCI: imx: Enable MSI from downstream components
- arm64/sve: ptrace: Fix SVE_PT_REGS_OFFSET definition
- kernel/kcov.c: mark write_comp_data() as notrace
- xfs: Fix xqmstats offsets in /proc/fs/xfs/xqmstat
- xfs: Fix error code in 'xfs_ioc_getbmap()'
- xfs: fix shared extent data corruption due to missing cow reservation
- xfs: fix transient reference count error in xfs_buf_resubmit_failed_buffers
- xfs: delalloc -> unwritten COW fork allocation can go wrong
- fs/xfs: fix f_ffree value for statfs when project quota is set
- lib/test_rhashtable: Make test_insert_dup() allocate its hash table
dynamically
- net: dsa: Fix lockdep false positive splat
- Revert "net: phy: marvell: avoid pause mode on SGMII-to-Copper for 88e151x"
- ALSA: hda/realtek - Fix lose hp_pins for disable auto mute
- serial: sh-sci: Do not free irqs that have already been freed
- mtd: rawnand: gpmi: fix MX28 bus master lockup problem
- iio: adc: axp288: Fix TS-pin handling
- iio: chemical: atlas-ph-sensor: correct IIO_TEMP values to millicelsius
- signal: Always notice exiting tasks
- signal: Better detection of synchronous signals
- misc: vexpress: Off by one in vexpress_syscfg_exec()
- samples: mei: use /dev/mei0 instead of /dev/mei
- debugfs: fix debugfs_rename parameter checking
- tracing: uprobes: Fix typo in pr_fmt string
- mips: cm: reprime error cause
- MIPS: OCTEON: don't set octeon_dma_bar_type if PCI is disabled
- MIPS: VDSO: Include $(ccflags-vdso) in o32,n32 .lds builds
- ARM: iop32x/n2100: fix PCI IRQ mapping
- ARM: tango: Improve ARCH_MULTIPLATFORM compatibility
- mac80211: ensure that mgmt tx skbs have tailroom for encryption
- drm/modes: Prevent division by zero htotal
- drm/vmwgfx: Fix setting of dma masks
- drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user
- HID: debug: fix the ring buffer implementation
- libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive()
- xfrm: refine validation of template and selector families
- batman-adv: Avoid WARN on net_device without parent in netns
- batman-adv: Force mac header to start of data on xmit
- uio: Reduce return paths from uio_write()
- uio: Prevent device destruction while fds are open
- uio: change to use the mutex lock instead of the spin lock
- uio: fix crash after the device is unregistered
- uio: fix wrong return value from uio_mmap()
- uio: fix possible circular locking dependency
- mtd: Make sure mtd->erasesize is valid even if the partition is of size 0
- libata: Add NOLPM quirk for SAMSUNG MZ7TE512HMHP-000L1 SSD
- mips: loongson64: remove unreachable(), fix loongson_poweroff().
- SUNRPC: Always drop the XPRT_LOCK on XPRT_CLOSE_WAIT
* HP ProBook 470 G5, LED's in Hotkeys f5, f8 and f11 without function
(LP: #1811254) // Bionic update: upstream stable patchset 2019-07-23
(LP: #1837664)
- ALSA: hda - Add mute LED support for HP ProBook 470 G5
* Bionic update: upstream stable patchset 2019-07-22 (LP: #1837477)
- pinctrl: meson: fix pull enable register calculation
- powerpc: Fix COFF zImage booting on old powermacs
- powerpc/mm: Fix linux page tables build with some configs
- HID: ite: Add USB id match for another ITE based keyboard rfkill key quirk
- ARM: imx: update the cpu power up timing setting on i.mx6sx
- ARM: dts: imx7d-nitrogen7: Fix the description of the Wifi clock
- Input: restore EV_ABS ABS_RESERVED
- checkstack.pl: fix for aarch64
- xfrm: Fix error return code in xfrm_output_one()
- xfrm: Fix bucket count reported to userspace
- xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force clears
the dst_entry.
- netfilter: seqadj: re-load tcp header pointer after possible head
reallocation
- scsi: bnx2fc: Fix NULL dereference in error handling
- Input: omap-keypad - fix idle configuration to not block SoC idle states
- Input: synaptics - enable RMI on ThinkPad T560
- ibmvnic: Fix non-atomic memory allocation in IRQ context
- ieee802154: ca8210: fix possible u8 overflow in ca8210_rx_done
- i40e: fix mac filter delete when setting mac address
- netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel
- netfilter: nat: can't use dst_hold on noref dst
- bnx2x: Clear fip MAC when fcoe offload support is disabled
- bnx2x: Remove configured vlans as part of unload sequence.
- bnx2x: Send update-svid ramrod with retry/poll flags enabled
- scsi: target: iscsi: cxgbit: add missing spin_lock_init()
- x86, hyperv: remove PCI dependency
- drivers: net: xgene: Remove unnecessary forward declarations
- w90p910_ether: remove incorrect __init annotation
- SUNRPC: Fix a race with XPRT_CONNECTING
- qed: Fix an error code qed_ll2_start_xmit()
- net: macb: fix random memory corruption on RX with 64-bit DMA
- net: macb: fix dropped RX frames due to a race
- lan78xx: Resolve issue with changing MAC address
- vxge: ensure data0 is initialized in when fetching firmware version
information
- mac80211: free skb fraglist before freeing the skb
- kbuild: fix false positive warning/error about missing libelf
- virtio: fix test build after uio.h change
- gpio: mvebu: only fail on missing clk if pwm is actually to be used
- Input: synaptics - enable SMBus for HP EliteBook 840 G4
- net: netxen: fix a missing check and an uninitialized use
- qmi_wwan: Fix qmap header retrieval in qmimux_rx_fixup
- serial/sunsu: fix refcount leak
- scsi: zfcp: fix posting too many status read buffers leading to adapter
shutdown
- scsi: lpfc: do not set queue->page_count to 0 if pc_sli4_params.wqpcnt is
invalid
- tools: fix cross-compile var clobbering
- zram: fix double free backing device
- hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined
- mm, devm_memremap_pages: mark devm_memremap_pages() EXPORT_SYMBOL_GPL
- mm, devm_memremap_pages: kill mapping "System RAM" support
- mm, hmm: use devm semantics for hmm_devmem_{add, remove}
- mm, hmm: mark hmm_devmem_{add, add_resource} EXPORT_SYMBOL_GPL
- mm, swap: fix swapoff with KSM pages
- sunrpc: fix cache_head leak due to queued request
- powerpc: avoid -mno-sched-epilog on GCC 4.9 and newer
- powerpc: Disable -Wbuiltin-requires-header when setjmp is used
- ftrace: Build with CPPFLAGS to get -Qunused-arguments
- kbuild: add -no-integrated-as Clang option unconditionally
- kbuild: consolidate Clang compiler flags
- Makefile: Export clang toolchain variables
- powerpc/boot: Set target when cross-compiling for clang
- raid6/ppc: Fix build for clang
- ALSA: cs46xx: Potential NULL dereference in probe
- ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit()
- ALSA: usb-audio: Fix an out-of-bound read in create_composite_quirks
- dlm: fixed memory leaks after failed ls_remove_names allocation
- dlm: possible memory leak on error path in create_lkb()
- dlm: lost put_lkb on error path in receive_convert() and receive_unlock()
- dlm: memory leaks on error path in dlm_user_request()
- gfs2: Get rid of potential double-freeing in gfs2_create_inode
- b43: Fix error in cordic routine
- selinux: policydb - fix byte order and alignment issues
- scripts/kallsyms: filter arm64's __efistub_ symbols
- arm64: drop linker script hack to hide __efistub_ symbols
- arm64: relocatable: fix inconsistencies in linker script and options
- powerpc/tm: Set MSR[TS] just prior to recheckpoint
- 9p/net: put a lower bound on msize
- rxe: fix error completion wr_id and qp_num
- iommu/vt-d: Handle domain agaw being less than iommu agaw
- sched/fair: Fix infinite loop in update_blocked_averages() by reverting
a9e7f6544b9c
- ceph: don't update importing cap's mseq when handing cap export
- genwqe: Fix size check
- intel_th: msu: Fix an off-by-one in attribute store
- power: supply: olpc_battery: correct the temperature units
- lib: fix build failure in CONFIG_DEBUG_VIRTUAL test
- drm/vc4: Set ->is_yuv to false when num_planes == 1
- bnx2x: Fix NULL pointer dereference in bnx2x_del_all_vlans() on some hw
- tools: power/acpi, revert to LD = gcc
- ARM: dts: sun8i: a83t: bananapi-m3: increase vcc-pd voltage to 3.3V
- arm64: dts: mt7622: fix no more console output on rfb1
- ibmvnic: Convert reset work item mutex to spin lock
- ixgbe: Fix race when the VF driver does a reset
- net: macb: add missing barriers when reading descriptors
- powerpc: remove old GCC version checks
- Fix failure path in alloc_pid()
- block: deactivate blk_stat timer in wbt_disable_default()
- PCI / PM: Allow runtime PM without callback functions
- leds: pwm: silently error out on EPROBE_DEFER
- Revert "powerpc/tm: Unset MSR[TS] if not recheckpointing"
- iio: dac: ad5686: fix bit shift read register
- video: fbdev: pxafb: Fix "WARNING: invalid free of devm_ allocated data"
- drivers/perf: hisi: Fixup one DDRC PMU register offset
- drm/nouveau/drm/nouveau: Check rc from drm_dp_mst_topology_mgr_resume()
- drm/rockchip: psr: do not dereference encoder before it is null checked.
- CIFS: Fix adjustment of credits for MTU requests
- CIFS: Do not hide EINTR after sending network packets
- cifs: Fix potential OOB access of lock element array
- usb: cdc-acm: send ZLP for Telit 3G Intel based modems
- USB: storage: don't insert sane sense for SPC3+ when bad sense specified
- USB: storage: add quirk for SMI SM3350
- USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB
- slab: alien caches must not be initialized if the allocation of the alien
cache failed
- mm: page_mapped: don't assume compound page is huge or THP
- mm, memcg: fix reclaim deadlock with writeback
- ACPI: power: Skip duplicate power resource references in _PRx
- ACPI / PMIC: xpower: Fix TS-pin current-source handling
- i2c: dev: prevent adapter retries and timeout being set as minus value
- drm/fb-helper: Partially bring back workaround for bugs of SDL 1.2
- rbd: don't return 0 on unmap if RBD_DEV_FLAG_REMOVING is set
- ext4: make sure enough credits are reserved for dioread_nolock writes
- ext4: fix a potential fiemap/page fault deadlock w/ inline_data
- ext4: avoid kernel warning when writing the superblock to a dead device
- ext4: track writeback errors using the generic tracking infrastructure
- KVM: arm/arm64: Fix VMID alloc race by reverting to lock-less
- Btrfs: fix deadlock when using free space tree due to block group creation
- mm/usercopy.c: no check page span for stack objects
- vfio/type1: Fix unmap overflow off-by-one
- drm/amdgpu: Don't ignore rc from drm_dp_mst_topology_mgr_resume()
- ext4: fix special inode number checks in __ext4_iget()
- Btrfs: fix access to available allocation bits when starting balance
- Btrfs: use nofs context when initializing security xattrs to avoid deadlock
- tty/ldsem: Wake up readers after timed out down_write()
- can: gw: ensure DLC boundaries after CAN frame modification
- mmc: sdhci-msm: Disable CDR function on TX
- media: em28xx: Fix misplaced reset of dev->v4l::field_count
- scsi: target: iscsi: cxgbit: fix csk leak
- scsi: target: iscsi: cxgbit: fix csk leak
- arm64/kvm: consistently handle host HCR_EL2 flags
- arm64: Don't trap host pointer auth use to EL2
- ipv6: fix kernel-infoleak in ipv6_local_error()
- net: bridge: fix a bug on using a neighbour cache entry without checking its
state
- packet: Do not leak dev refcounts on error exit
- bonding: update nest level on unlink
- ip: on queued skb use skb_header_pointer instead of pskb_may_pull
- crypto: caam - fix zero-length buffer DMA mapping
- crypto: authencesn - Avoid twice completion call in decrypt path
- crypto: bcm - convert to use crypto_authenc_extractkeys()
- btrfs: wait on ordered extents on abort cleanup
- Yama: Check for pid death before checking ancestry
- scsi: core: Synchronize request queue PM status only on successful resume
- scsi: sd: Fix cache_type_store()
- crypto: talitos - reorder code in talitos_edesc_alloc()
- crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK
- mips: fix n32 compat_ipc_parse_version
- MIPS: lantiq: Fix IPI interrupt handling
- OF: properties: add missing of_node_put
- mfd: tps6586x: Handle interrupts on suspend
- media: v4l: ioctl: Validate num_planes for debug messages
- pstore/ram: Avoid allocation and leak of platform data
- arm64: kaslr: ensure randomized quantities are clean to the PoC
- Disable MSI also when pcie-octeon.pcie_disable on
- omap2fb: Fix stack memory disclosure
- media: vivid: fix error handling of kthread_run
- media: vivid: set min width/height to a value > 0
- bpf: in __bpf_redirect_no_mac pull mac only if present
- LSM: Check for NULL cred-security on free
- media: vb2: vb2_mmap: move lock up
- sunrpc: handle ENOMEM in rpcb_getport_async
- netfilter: ebtables: account ebt_table_info to kmemcg
- selinux: fix GPF on invalid policy
- blockdev: Fix livelocks on loop device
- sctp: allocate sctp_sockaddr_entry with kzalloc
- tipc: fix uninit-value in tipc_nl_compat_link_reset_stats
- tipc: fix uninit-value in tipc_nl_compat_bearer_enable
- tipc: fix uninit-value in tipc_nl_compat_link_set
- tipc: fix uninit-value in tipc_nl_compat_name_table_dump
- tipc: fix uninit-value in tipc_nl_compat_doit
- block/loop: Don't grab "struct file" for vfs_getattr() operation.
- loop: drop caches if offset or block_size are changed
- drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock
- media: vb2: be sure to unlock mutex on errors
- nbd: Use set_blocksize() to set device blocksize
- tun: publish tfile after it's fully initialized
- crypto: sm3 - fix undefined shift by >= width of value
- MIPS: BCM47XX: Setup struct device for the SoC
- RDMA/vmw_pvrdma: Return the correct opcode when creating WR
- arm64: dts: marvell: armada-ap806: reserve PSCI area
- ipv6: make icmp6_send() robust against null skb->dev
- block: use rcu_work instead of call_rcu to avoid sleep in softirq
- selftests: Fix test errors related to lib.mk khdr target
- ipv6: Consider sk_bound_dev_if when binding a socket to a v4 mapped address
- mlxsw: spectrum: Disable lag port TX before removing it
- mlxsw: spectrum_switchdev: Set PVID correctly during VLAN deletion
- net, skbuff: do not prefer skb allocation fails early
- qmi_wwan: add MTU default to qmap network interface
- ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses
- net: dsa: mv88x6xxx: mv88e6390 errata
- gpio: pl061: Move irq_chip definition inside struct pl061
- platform/x86: asus-wmi: Tell the EC the OS will handle the display off
hotkey
- e1000e: allow non-monotonic SYSTIM readings
- writeback: don't decrement wb->refcnt if !wb->bdi
- serial: set suppress_bind_attrs flag only if builtin
- ALSA: oxfw: add support for APOGEE duet FireWire
- x86/mce: Fix -Wmissing-prototypes warnings
- MIPS: SiByte: Enable swiotlb for SWARM, LittleSur and BigSur
- arm64: perf: set suppress_bind_attrs flag to true
- usb: gadget: udc: renesas_usb3: add a safety connection way for
forced_b_device
- selinux: always allow mounting submounts
- rxe: IB_WR_REG_MR does not capture MR's iova field
- jffs2: Fix use of uninitialized delayed_work, lockdep breakage
- clk: imx: make mux parent strings const
- pstore/ram: Do not treat empty buffers as valid
- powerpc/xmon: Fix invocation inside lock region
- powerpc/pseries/cpuidle: Fix preempt warning
- media: firewire: Fix app_info parameter type in avc_ca{,_app}_info
- media: venus: core: Set dma maximum segment size
- net: call sk_dst_reset when set SO_DONTROUTE
- scsi: target: use consistent left-aligned ASCII INQUIRY data
- selftests: do not macro-expand failed assertion expressions
- clk: imx6q: reset exclusive gates on init
- arm64: Fix minor issues with the dcache_by_line_op macro
- kconfig: fix file name and line number of warn_ignored_character()
- kconfig: fix memory leak when EOF is encountered in quotation
- mmc: atmel-mci: do not assume idle after atmci_request_end
- btrfs: improve error handling of btrfs_add_link
- tty/serial: do not free trasnmit buffer page under port lock
- perf intel-pt: Fix error with config term "pt=0"
- perf svghelper: Fix unchecked usage of strncpy()
- perf parse-events: Fix unchecked usage of strncpy()
- netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is set
- dm crypt: use u64 instead of sector_t to store iv_offset
- dm kcopyd: Fix bug causing workqueue stalls
- tools lib subcmd: Don't add the kernel sources to the include path
- dm snapshot: Fix excessive memory usage and workqueue stalls
- quota: Lock s_umount in exclusive mode for Q_XQUOTA{ON,OFF} quotactls.
- clocksource/drivers/integrator-ap: Add missing of_node_put()
- ALSA: bebob: fix model-id of unit for Apogee Ensemble
- sysfs: Disable lockdep for driver bind/unbind files
- IB/usnic: Fix potential deadlock
- scsi: smartpqi: correct lun reset issues
- scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown()
- scsi: megaraid: fix out-of-bound array accesses
- ocfs2: fix panic due to unrecovered local alloc
- mm/page-writeback.c: don't break integrity writeback on ->writepage() error
- mm/swap: use nr_node_ids for avail_lists in swap_info_struct
- mm, proc: be more verbose about unstable VMA flags in /proc/<pid>/smaps
- cifs: allow disabling insecure dialects in the config
- cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs)
- PCI: dwc: Move interrupt acking into the proper callback
- ipmi:ssif: Fix handling of multi-part return messages
- net: clear skb->tstamp in bridge forwarding path
- netfilter: ipset: Allow matching on destination MAC address for mac and
ipmac sets
- drm/amdkfd: fix interrupt spin lock
- of: overlay: add missing of_node_put() after add new node to changeset
- drm/atomic-helper: Complete fake_commit->flip_done potentially earlier
- ASoC: pcm3168a: Don't disable pcm3168a when CONFIG_PM defined
- efi/libstub: Disable some warnings for x86{,_64}
- media: uvcvideo: Refactor teardown of uvc on USB disconnect
- arm64: kasan: Increase stack size for KASAN_EXTRA
- bpf: relax verifier restriction on BPF_MOV | BPF_ALU
- perf vendor events intel: Fix Load_Miss_Real_Latency on SKL/SKX
- netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine
- netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine
- x86/topology: Use total_cpus for max logical packages calculation
- perf stat: Avoid segfaults caused by negated options
- perf tools: Add missing sigqueue() prototype for systems lacking it
- perf tools: Add missing open_memstream() prototype for systems lacking it
- dm: Check for device sector overflow if CONFIG_LBDAF is not set
- userfaultfd: clear flag if remap event not enabled
* Bionic update: upstream stable patchset 2019-07-19 (LP: #1837257)
- pinctrl: sunxi: a83t: Fix IRQ offset typo for PH11
- userfaultfd: check VM_MAYWRITE was set after verifying the uffd is
registered
- arm64: dma-mapping: Fix FORCE_CONTIGUOUS buffer clearing
- MMC: OMAP: fix broken MMC on OMAP15XX/OMAP5910/OMAP310
- mmc: sdhci: fix the timeout check window for clock and reset
- ARM: mmp/mmp2: fix cpu_is_mmp2() on mmp2-dt
- dm thin: send event about thin-pool state change _after_ making it
- dm cache metadata: verify cache has blocks in
blocks_are_clean_separate_dirty()
- tracing: Fix memory leak in set_trigger_filter()
- tracing: Fix memory leak of instance function hash filters
- powerpc/msi: Fix NULL pointer access in teardown code
- drm/nouveau/kms: Fix memory leak in nv50_mstm_del()
- drm/i915/execlists: Apply a full mb before execution for Braswell
- drm/amdgpu: update SMC firmware image for polaris10 variants
- x86/build: Fix compiler support check for CONFIG_RETPOLINE
- locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath()
- locking/qspinlock: Ensure node is initialised before updating prev->next
- locking/qspinlock: Bound spinning on pending->locked transition in slowpath
- locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock'
- locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath
- locking/qspinlock: Remove duplicate clear_pending() function from PV code
- locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue
- locking/qspinlock: Re-order code
- locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound
- locking/qspinlock, x86: Provide liveness guarantee
- mac80211: don't WARN on bad WMM parameters from buggy APs
- mac80211: Fix condition validating WMM IE
- IB/hfi1: Remove race conditions in user_sdma send path
- locking/qspinlock: Fix build for anonymous union in older GCC compilers
- mac80211_hwsim: fix module init error paths for netlink
- Input: hyper-v - fix wakeup from suspend-to-idle
- scsi: libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset
- scsi: vmw_pscsi: Rearrange code to avoid multiple calls to free_irq during
unload
- x86/earlyprintk/efi: Fix infinite loop on some screen widths
- drm/msm: Grab a vblank reference when waiting for commit_done
- ARC: io.h: Implement reads{x}()/writes{x}()
- bonding: fix 802.3ad state sent to partner when unbinding slave
- bpf: Fix verifier log string check for bad alignment.
- nfs: don't dirty kernel pages read by direct-io
- SUNRPC: Fix a potential race in xprt_connect()
- sbus: char: add of_node_put()
- drivers/sbus/char: add of_node_put()
- drivers/tty: add missing of_node_put()
- ide: pmac: add of_node_put()
- drm/msm: Fix error return checking
- clk: mvebu: Off by one bugs in cp110_of_clk_get()
- clk: mmp: Off by one in mmp_clk_add()
- Input: synaptics - enable SMBus for HP 15-ay000
- Input: omap-keypad - fix keyboard debounce configuration
- libata: whitelist all SAMSUNG MZ7KM* solid-state disks
- mv88e6060: disable hardware level MAC learning
- net/mlx4_en: Fix build break when CONFIG_INET is off
- ARM: 8814/1: mm: improve/fix ARM v7_dma_inv_range() unaligned address
handling
- ARM: 8815/1: V7M: align v7m_dma_inv_range() with v7 counterpart
- ethernet: fman: fix wrong of_node_put() in probe function
- drm/ast: Fix connector leak during driver unload
- vhost/vsock: fix reset orphans race with close timeout
- mlxsw: spectrum_switchdev: Fix VLAN device deletion via ioctl
- i2c: axxia: properly handle master timeout
- i2c: scmi: Fix probe error on devices with an empty SMB0001 ACPI device node
- i2c: uniphier: fix violation of tLOW requirement for Fast-mode
- i2c: uniphier-f: fix violation of tLOW requirement for Fast-mode
- nvmet-rdma: fix response use after free
- rtc: snvs: Add timeouts to avoid kernel lockups
- bpf, arm: fix emit_ldx_r and emit_mov_i using TMP_REG_1
- scsi: raid_attrs: fix unused variable warning
- staging: olpc_dcon: add a missing dependency
- ARM: dts: qcom-apq8064-arrow-sd-600eval fix graph_endpoint warning
- mmc: core: use mrq->sbc when sending CMD23 for RPMB
- dm: call blk_queue_split() to impose device limits on bios
- media: vb2: don't call __vb2_queue_cancel if vb2_start_streaming failed
- powerpc: Look for "stdout-path" when setting up legacy consoles
- dm zoned: Fix target BIO completion handling
- block: fix infinite loop if the device loses discard capability
- ASoC: sta32x: set ->component pointer in private struct
- perf record: Synthesize features before events in pipe mode
- USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data
- xhci: Don't prevent USB2 bus suspend in state check intended for USB3 only
- USB: xhci: fix 'broken_suspend' placement in struct xchi_hcd
- USB: serial: option: add GosunCn ZTE WeLink ME3630
- USB: serial: option: add HP lt4132
- USB: serial: option: add Simcom SIM7500/SIM7600 (MBIM mode)
- USB: serial: option: add Fibocom NL668 series
- USB: serial: option: add Telit LN940 series
- scsi: sd: use mempool for discard special page
- mmc: core: Reset HPI enabled state during re-init and in case of errors
- mmc: core: Allow BKOPS and CACHE ctrl even if no HPI support
- mmc: core: Use a minimum 1600ms timeout when enabling CACHE ctrl
- mmc: omap_hsmmc: fix DMA API warning
- gpio: max7301: fix driver for use with CONFIG_VMAP_STACK
- gpiolib-acpi: Only defer request_irq for GpioInt ACPI event handlers
- posix-timers: Fix division by zero bug
- kvm: x86: Add AMD's EX_CFG to the list of ignored MSRs
- Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels
- x86/mtrr: Don't copy uninitialized gentry fields back to userspace
- panic: avoid deadlocks in re-entrant console drivers
- iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT to old firmwares
- iwlwifi: add new cards for 9560, 9462, 9461 and killer series
- ubifs: Handle re-linking of inodes correctly while recovery
- mm: don't miss the last page because of round-off error
- proc/sysctl: don't return ENOMEM on lookup when a table is unregistering
- i2c: rcar: check bus state before reinitializing
- drm/amd/display: Fix 6x4K displays light-up on Vega20 (v2)
- drm/msm: Fix task dump in gpu recovery
- drm/msm: fix handling of cmdstream offset
- net: aquantia: fix rx checksum offload bits
- liquidio: read sc->iq_no before release sc
- drm/msm/hdmi: Enable HPD after HDMI IRQ is set up
- macvlan: return correct error value
- bpf: check pending signals while verifying programs
- ARM: 8816/1: dma-mapping: fix potential uninitialized return
- tools/testing/nvdimm: Align test resources to 128M
- Btrfs: fix missing delayed iputs on unmount
- ax25: fix a use-after-free in ax25_fillin_cb()
- gro_cell: add napi_disable in gro_cells_destroy
- ibmveth: fix DMA unmap error in ibmveth_xmit_start error path
- ieee802154: lowpan_header_create check must check daddr
- ipv6: explicitly initialize udp6_addr in udp_sock_create6()
- ipv6: tunnels: fix two use-after-free
- isdn: fix kernel-infoleak in capi_unlocked_ioctl
- net: macb: restart tx after tx used bit read
- net: phy: Fix the issue that netif always links up after resuming
- netrom: fix locking in nr_find_socket()
- net/wan: fix a double free in x25_asy_open_tty()
- packet: validate address length
- packet: validate address length if non-zero
- ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()
- qmi_wwan: Added support for Telit LN940 series
- sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
- tcp: fix a race in inet_diag_dump_icsk()
- tipc: fix a double kfree_skb()
- vhost: make sure used idx is seen before log in vhost_add_used_n()
- VSOCK: Send reset control packet when socket is partially bound
- xen/netfront: tolerate frags with no data
- net/mlx5: Typo fix in del_sw_hw_rule
- net/mlx5e: RX, Fix wrong early return in receive queue poll
- mlxsw: core: Increase timeout during firmware flash process
- net/mlx5e: Remove the false indication of software timestamping support
- tipc: use lock_sock() in tipc_sk_reinit()
- tipc: compare remote and local protocols in tipc_udp_enable()
- qmi_wwan: Added support for Fibocom NL668 series
- qmi_wwan: Add support for Fibocom NL678 series
- net/smc: fix TCP fallback socket release
- sock: Make sock->sk_stamp thread-safe
- IB/hfi1: Incorrect sizing of sge for PIO will OOPs
- mtd: atmel-quadspi: disallow building on ebsa110
- ALSA: hda: add mute LED support for HP EliteBook 840 G4
- ALSA: fireface: fix for state to fetch PCM frames
- ALSA: firewire-lib: fix wrong handling payload_length as payload_quadlet
- ALSA: firewire-lib: fix wrong assignment for 'out_packet_without_header'
tracepoint
- ALSA: firewire-lib: use the same print format for 'without_header'
tracepoints
- ALSA: hda/tegra: clear pending irq handlers
- USB: serial: pl2303: add ids for Hewlett-Packard HP POS pole displays
- USB: serial: option: add Fibocom NL678 series
- usb: r8a66597: Fix a possible concurrency use-after-free bug in
r8a66597_endpoint_disable()
- staging: wilc1000: fix missing read_write setting when reading data
- qmi_wwan: apply SET_DTR quirk to the SIMCOM shared device ID
- s390/pci: fix sleeping in atomic during hotplug
- x86/speculation/l1tf: Drop the swap storage limit restriction when l1tf=off
- KVM: x86: Use jmp to invoke kvm_spurious_fault() from .fixup
- KVM: nVMX: Free the VMREAD/VMWRITE bitmaps if alloc_kvm_area() fails
- platform-msi: Free descriptors in platform_msi_domain_free()
- perf pmu: Suppress potential format-truncation warning
- ext4: add ext4_sb_bread() to disambiguate ENOMEM cases
- ext4: fix possible use after free in ext4_quota_enable
- ext4: missing unlock/put_page() in ext4_try_to_write_inline_data()
- ext4: fix EXT4_IOC_GROUP_ADD ioctl
- ext4: include terminating u32 in size of xattr entries when expanding inodes
- ext4: force inode writes when nfsd calls commit_metadata()
- ext4: check for shutdown and r/o file system in ext4_write_inode()
- spi: bcm2835: Fix race on DMA termination
- spi: bcm2835: Fix book-keeping of DMA termination
- spi: bcm2835: Avoid finishing transfer prematurely in IRQ mode
- clk: rockchip: fix typo in rk3188 spdif_frac parent
- crypto: cavium/nitrox - fix a DMA pool free failure
- cgroup: fix CSS_TASK_ITER_PROCS
- cdc-acm: fix abnormal DATA RX issue for Mediatek Preloader.
- Btrfs: fix fsync of files with multiple hard links in new directories
- f2fs: fix validation of the block count in sanity_check_raw_super
- serial: uartps: Fix interrupt mask issue to handle the RX interrupts
properly
- media: vivid: free bitmap_cap when updating std/timings/etc.
- media: v4l2-tpg: array index could become negative
- MIPS: math-emu: Write-protect delay slot emulation pages
- MIPS: c-r4k: Add r4k_blast_scache_node for Loongson-3
- MIPS: Ensure pmd_present() returns false after pmd_mknotpresent()
- MIPS: Align kernel load address to 64KB
- MIPS: Expand MIPS32 ASIDs to 64 bits
- MIPS: OCTEON: mark RGMII interface disabled on OCTEON III
- CIFS: Fix error mapping for SMB2_LOCK command which caused OFD lock problem
- arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1
- arm/arm64: KVM: vgic: Force VM halt when changing the active state of GICv3
PPIs/SGIs
- rtc: m41t80: Correct alarm month range with RTC reads
- tpm: tpm_i2c_nuvoton: use correct command duration for TPM 2.x
- spi: bcm2835: Unbreak the build of esoteric configs
- MIPS: Only include mmzone.h when CONFIG_NEED_MULTIPLE_NODES=y
- KVM: X86: Fix NULL deref in vcpu_scan_ioapic
- futex: Cure exit race
- x86/mm: Fix decoy address handling vs 32-bit builds
- x86/intel_rdt: Ensure a CPU remains online for the region's pseudo-locking
sequence
- mm: add mm_pxd_folded checks to pgtable_bytes accounting functions
- mm: make the __PAGETABLE_PxD_FOLDED defines non-empty
- mm: introduce mm_[p4d|pud|pmd]_folded
- ip: validate header length on virtual device xmit
- net: clear skb->tstamp in forwarding paths
- net/hamradio/6pack: use mod_timer() to rearm timers
- tipc: check tsk->group in tipc_wait_for_cond()
- tipc: check group dests after tipc_wait_for_cond()
- ipv6: frags: Fix bogus skb->sk in reassembled packets
- ALSA: hda/realtek: Enable audio jacks of ASUS UX391UA with ALC294
- ALSA: hda/realtek: Enable the headset mic auto detection for ASUS laptops
- ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook
Clapper
- ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook
Gnawty
- Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G
- arm64: KVM: Make VHE Stage-2 TLB invalidation operations non-interruptible
- DRM: UDL: get rid of useless vblank initialization
- clocksource/drivers/arc_timer: Utilize generic sched_clock
- ocxl: Fix endiannes bug in ocxl_link_update_pe()
- ocxl: Fix endiannes bug in read_afu_name()
- ext4: add verifier check for symlink with append/immutable flags
- ext4: avoid declaring fs inconsistent due to invalid file handles
- clk: sunxi-ng: Use u64 for calculation of NM rate
- crypto: testmgr - add AES-CFB tests
- btrfs: dev-replace: go back to suspended state if target device is missing
- btrfs: run delayed items before dropping the snapshot
- powerpc/tm: Unset MSR[TS] if not recheckpointing
- f2fs: read page index before freeing
- f2fs: sanity check of xattr entry size
- media: cec: keep track of outstanding transmits
- media: imx274: fix stack corruption in imx274_read_reg
- media: vb2: check memory model for VIDIOC_CREATE_BUFS
- MIPS: Fix a R10000_LLSC_WAR logic in atomic.h
- KVM: arm/arm64: vgic: Do not cond_resched_lock() with IRQs disabled
- KVM: arm/arm64: vgic: Cap SPIs to the VM-defined maximum
* alsa/hda: neither mute led nor mic-mute led work on several Lenovo laptops
(LP: #1837963)
- SAUCE: ALSA: hda - Add a conexant codec entry to let mute led work
[ Ubuntu: 4.15.0-58.64 ]
* unable to handle kernel NULL pointer dereference at 000000000000002c (IP:
iget5_locked+0x9e/0x1f0) (LP: #1838982)
- Revert "ovl: set I_CREATING on inode being created"
- Revert "new primitive: discard_new_inode()"
[ Ubuntu: 4.15.0-57.63 ]
* CVE-2019-1125
- x86/cpufeatures: Carve out CQM features retrieval
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word
- x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations
- x86/speculation: Enable Spectre v1 swapgs mitigations
- x86/entry/64: Use JMP instead of JMPQ
- x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS
* Packaging resync (LP: #1786013)
- update dkms package versions
[ Ubuntu: 4.15.0-56.62 ]
* bionic/linux: 4.15.0-56.62 -proposed tracker (LP: #1837626)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] update helper scripts
* CVE-2019-2101
- media: uvcvideo: Fix 'type' check leading to overflow
* hibmc-drm Causes Unreadable Display for Huawei amd64 Servers (LP: #1762940)
- [Config] Set CONFIG_DRM_HISI_HIBMC to arm64 only
- SAUCE: Make CONFIG_DRM_HISI_HIBMC depend on ARM64
* Bionic: support for Solarflare X2542 network adapter (sfc driver)
(LP: #1836635)
- sfc: make mem_bar a function rather than a constant
- sfc: support VI strides other than 8k
- sfc: add Medford2 (SFC9250) PCI Device IDs
- sfc: improve PTP error reporting
- sfc: update EF10 register definitions
- sfc: populate the timer reload field
- sfc: update MCDI protocol headers
- sfc: support variable number of MAC stats
- sfc: expose FEC stats on Medford2
- sfc: expose CTPIO stats on NICs that support them
- sfc: basic MCDI mapping of 25/50/100G link speeds
- sfc: support the ethtool ksettings API properly so that 25/50/100G works
- sfc: add bits for 25/50/100G supported/advertised speeds
- sfc: remove tx and MCDI handling from NAPI budget consideration
- sfc: handle TX timestamps in the normal data path
- sfc: add function to determine which TX timestamping method to use
- sfc: use main datapath for HW timestamps if available
- sfc: only enable TX timestamping if the adapter is licensed for it
- sfc: MAC TX timestamp handling on the 8000 series
- sfc: on 8000 series use TX queues for TX timestamps
- sfc: only advertise TX timestamping if we have the license for it
- sfc: simplify RX datapath timestamping
- sfc: support separate PTP and general timestamping
- sfc: support second + quarter ns time format for receive datapath
- sfc: support Medford2 frequency adjustment format
- sfc: add suffix to large constant in ptp
- sfc: mark some unexported symbols as static
- sfc: update MCDI protocol headers
- sfc: support FEC configuration through ethtool
- sfc: remove ctpio_dmabuf_start from stats
- sfc: stop the TX queue before pushing new buffers
* [18.04 FEAT] zKVM: Add hardware CPU Model - kernel part (LP: #1836153)
- KVM: s390: add debug logging for cpu model subfunctions
- KVM: s390: implement subfunction processor calls
- KVM: s390: add vector enhancements facility 2 to cpumodel
- KVM: s390: add vector BCD enhancements facility to cpumodel
- KVM: s390: add MSA9 to cpumodel
- KVM: s390: provide query function for instructions returning 32 byte
- KVM: s390: add enhanced sort facilty to cpu model
- KVM: s390: add deflate conversion facilty to cpu model
- KVM: s390: enable MSA9 keywrapping functions depending on cpu model
* Intel ethernet I219 has slow RX speed (LP: #1836152)
- SAUCE: e1000e: add workaround for possible stalled packet
- SAUCE: e1000e: disable force K1-off feature
* Intel ethernet I219 may wrongly detect connection speed as 10Mbps
(LP: #1836177)
- SAUCE: e1000e: Make watchdog use delayed work
* Unhide Nvidia HDA audio controller (LP: #1836308)
- PCI: Enable NVIDIA HDA controllers
* selftests: Remove broken Power9 paste tests and fix compilation issue
(LP: #1836715)
- selftests/powerpc: Remove Power9 paste tests
- selftests/powerpc: Fix Makefiles for headers_install change
* ixgbe{vf} - Physical Function gets IRQ when VF checks link state
(LP: #1836760)
- ixgbevf: Use cached link state instead of re-reading the value for ethtool
* Fix nf_conntrack races when dealing with same origin requests in NAT
environments (LP: #1836816)
- netfilter: nf_conntrack: resolve clash for matching conntracks
- netfilter: nf_nat: skip nat clash resolution for same-origin entries
* CVE-2018-5383
- crypto: ecdh - add public key verification test
* sched: Prevent CPU lockups when task groups take longer than the period
(LP: #1836971)
- sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup
* depmod may prefer unsigned l-r-m nvidia modules to signed modules
(LP: #1834479)
- [Packaging] dkms-build--nvidia-N -- clean up unsigned ko files
- [Packaging] Add update-version-dkms
- update dkms package versions
* Build Nvidia drivers in conjunction with kernel (LP: #1764792) // zfs/spl
build in conjunction with the kernel from DKMS source (LP: #1807378)
- [Packaging] dkms-build--nvidia-* -- convert to generic -N form
* zfs/spl build in conjunction with the kernel from DKMS source (LP: #1807378)
- [Packaging] dkms -- dkms package build packaging support
- [Packaging] dkms -- build zfs/spl packages
- [Packaging] dkms -- drop zfs/spl source code from kernel
* Build Nvidia drivers in conjunction with kernel (LP: #1764792)
- [Packaging] dkms -- introduce dkms package versions
- [Packaging] dkms -- add per package post-process step
- [Packaging] dkms -- switch to a consistent build prefix length and strip
- [Packaging] dkms-build -- support building against packages in PPAs
- [Packaging] dkms-build: do not redownload files on subsequent passes
- [Packaging] dkms-build -- add support for unversioned overrides
- [Packaging] dkms-build -- backport latest version from disco
- [Packaging] nvidia -- build and sign nvidia packages and ship signatures
- [Packaging] nvidia -- make nvidia package version explicit
* CVE-2019-13233
- x86/insn-eval: Fix use-after-free access to LDT entry
* kernel panic using CIFS share in smb2_push_mandatory_locks() (LP: #1795659)
- CIFS: keep FileInfo handle live during oplock break
* cifs set_oplock buffer overflow in strcat (LP: #1824981)
- cifs: fix strcat buffer overflow and reduce raciness in
smb21_set_oplock_level()
* CVE-2019-13272
- ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME
* Bionic update: upstream stable patchset 2019-07-18 (LP: #1837161)
- Kbuild: suppress packed-not-aligned warning for default setting only
- disable stringop truncation warnings for now
- test_hexdump: use memcpy instead of strncpy
- kobject: Replace strncpy with memcpy
- ALSA: intel_hdmi: Use strlcpy() instead of strncpy()
- unifdef: use memcpy instead of strncpy
- kernfs: Replace strncpy with memcpy
- ip_tunnel: Fix name string concatenate in __ip_tunnel_create()
- scsi: bfa: convert to strlcpy/strlcat
- kdb: use memmove instead of overlapping memcpy
- iser: set sector for ambiguous mr status errors
- uprobes: Fix handle_swbp() vs. unregister() + register() race once more
- MIPS: ralink: Fix mt7620 nd_sd pinmux
- mips: fix mips_get_syscall_arg o32 check
- IB/mlx5: Avoid load failure due to unknown link width
- drm/ast: Fix incorrect free on ioregs
- drm: set is_master to 0 upon drm_new_set_master() failure
- drm/meson: Enable fast_io in meson_dw_hdmi_regmap_config
- drm/meson: Fix OOB memory accesses in meson_viu_set_osd_lut()
- ALSA: trident: Suppress gcc string warning
- kgdboc: Fix restrict error
- kgdboc: Fix warning with module build
- svm: Add mutex_lock to protect apic_access_page_done on AMD systems
- drm/msm: fix OF child-node lookup
- Input: xpad - quirk all PDP Xbox One gamepads
- Input: synaptics - add PNP ID for ThinkPad P50 to SMBus
- Input: matrix_keypad - check for errors from of_get_named_gpio()
- Input: cros_ec_keyb - fix button/switch capability reports
- Input: elan_i2c - add ELAN0620 to the ACPI table
- Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR
- Input: elan_i2c - add support for ELAN0621 touchpad
- btrfs: tree-checker: Don't check max block group size as current max chunk
size limit is unreliable
- ARC: change defconfig defaults to ARCv2
- arc: [devboards] Add support of NFSv3 ACL
- reset: make device_reset_optional() really optional
- reset: remove remaining WARN_ON() in <linux/reset.h>
- mm: hide incomplete nr_indirectly_reclaimable in /proc/zoneinfo
- net: qed: use correct strncpy() size
- tipc: use destination length for copy string
- arm64: ftrace: Fix to enable syscall events on arm64
- sched, trace: Fix prev_state output in sched_switch tracepoint
- tracing/fgraph: Fix set_graph_function from showing interrupts
- drm/meson: Fixes for drm_crtc_vblank_on/off support
- scsi: lpfc: fix block guard enablement on SLI3 adapters
- media: omap3isp: Unregister media device as first
- iommu/vt-d: Fix NULL pointer dereference in prq_event_thread()
- brcmutil: really fix decoding channel info for 160 MHz bandwidth
- iommu/ipmmu-vmsa: Fix crash on early domain free
- can: rcar_can: Fix erroneous registration
- test_firmware: fix error return getting clobbered
- HID: input: Ignore battery reported by Symbol DS4308
- batman-adv: Use explicit tvlv padding for ELP packets
- batman-adv: Expand merged fragment buffer for full packet
- amd/iommu: Fix Guest Virtual APIC Log Tail Address Register
- bnx2x: Assign unique DMAE channel number for FW DMAE transactions.
- qed: Fix PTT leak in qed_drain()
- qed: Fix reading wrong value in loop condition
- net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command
- net/mlx4_core: Fix uninitialized variable compilation warning
- net/mlx4: Fix UBSAN warning of signed integer overflow
- gpio: mockup: fix indicated direction
- mtd: rawnand: qcom: Namespace prefix some commands
- mtd: spi-nor: Fix Cadence QSPI page fault kernel panic
- qed: Fix bitmap_weight() check
- qed: Fix QM getters to always return a valid pq
- net: faraday: ftmac100: remove netif_running(netdev) check before disabling
interrupts
- iommu/vt-d: Use memunmap to free memremap
- flexfiles: use per-mirror specified stateid for IO
- ibmvnic: Fix RX queue buffer cleanup
- team: no need to do team_notify_peers or team_mcast_rejoin when disabling
port
- net: amd: add missing of_node_put()
- usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device
- usb: appledisplay: Add 27" Apple Cinema Display
- USB: check usb_get_extra_descriptor for proper size
- ALSA: hda: Add support for AMD Stoney Ridge
- ALSA: pcm: Fix starvation on down_write_nonblock()
- ALSA: pcm: Call snd_pcm_unlink() conditionally at closing
- ALSA: pcm: Fix interval evaluation with openmin/max
- ALSA: hda/realtek - Fix speaker output regression on Thinkpad T570
- SUNRPC: Fix leak of krb5p encode pages
- dmaengine: dw: Fix FIFO size for Intel Merrifield
- dmaengine: cppi41: delete channel from pending list when stop channel
- ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE
- xhci: Prevent U1/U2 link pm states if exit latency is too long
- f2fs: fix to do sanity check with block address in main area v2
- swiotlb: clean up reporting
- Staging: lustre: remove two build warnings
- staging: atomisp: remove "fun" strncpy warning
- cifs: Fix separator when building path from dentry
- staging: rtl8712: Fix possible buffer overrun
- Revert commit ef9209b642f "staging: rtl8723bs: Fix indenting errors and an
off-by-one mistake in core/rtw_mlme_ext.c"
- drm/amdgpu: update mc firmware image for polaris12 variants
- drm/amdgpu/gmc8: update MC firmware for polaris
- tty: serial: 8250_mtk: always resume the device in probe.
- kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var()
- libnvdimm, pfn: Pad pfn namespaces relative to other regions
- mac80211: Clear beacon_int in ieee80211_do_stop
- mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext
- mac80211: fix reordering of buffered broadcast packets
- mac80211: ignore NullFunc frames in the duplicate detection
- qed: Fix rdma_info structure allocation
- drm/amdgpu: Add amdgpu "max bpc" connector property (v2)
- drivers/net/ethernet/qlogic/qed/qed_rdma.h: fix typo
- gpio: pxa: fix legacy non pinctrl aware builds again
- tc-testing: tdc.py: ignore errors when decoding stdout/stderr
- NFSv4: Fix a NFSv4 state manager deadlock
- USB: serial: console: fix reported terminal settings
- ALSA: usb-audio: Add SMSL D1 to quirks for native DSD support
- ALSA: hda/realtek: ALC286 mic and headset-mode fixups for Acer Aspire
U27-880
- ALSA: hda/realtek - Add support for Acer Aspire C24-860 headset mic
- ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4660G
- ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4860G/Z6860G
- media: dvb-pll: don't re-validate tuner frequencies
- parisc: Enable -ffunction-sections for modules on 32-bit kernel
- Revert "x86/e820: put !E820_TYPE_RAM regions into memblock.reserved"
- drm/lease: Send a distinct uevent
- drm/msm: Move fence put to where failure occurs
- drm/amdgpu/gmc8: always load MC firmware in the driver
- drm/i915: Downgrade Gen9 Plane WM latency error
- x86/efi: Allocate e820 buffer before calling efi_exit_boot_service
- cfg80211: Fix busy loop regression in ieee80211_ie_split_ric()
- ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changes
- ipv6: Check available headroom in ip6_xmit() even without options
- neighbour: Avoid writing before skb->head in neigh_hh_output()
- ipv6: sr: properly initialize flowi6 prior passing to ip6_route_output
- net: 8139cp: fix a BUG triggered by changing mtu with network traffic
- net/mlx4_core: Correctly set PFC param if global pause is turned off.
- net/mlx4_en: Change min MTU size to ETH_MIN_MTU
- net: phy: don't allow __set_phy_supported to add unsupported modes
- net: Prevent invalid access to skb->prev in __qdisc_drop_all
- rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
- sctp: kfree_rcu asoc
- tcp: Do not underestimate rwnd_limited
- tcp: fix NULL ref in tail loss probe
- tun: forbid iface creation with rtnl ops
- virtio-net: keep vnet header zeroed after processing XDP
- ARM: OMAP2+: prm44xx: Fix section annotation on
omap44xx_prm_enable_io_wakeup
- ASoC: rsnd: fixup clock start checker
- staging: rtl8723bs: Fix the return value in case of error in
'rtw_wx_read32()'
- ARM: dts: logicpd-somlv: Fix interrupt on mmc3_dat1
- ARM: OMAP1: ams-delta: Fix possible use of uninitialized field
- sysv: return 'err' instead of 0 in __sysv_write_inode
- selftests: add script to stress-test nft packet path vs. control plane
- netfilter: nf_tables: fix use-after-free when deleting compat expressions
- hwmon (ina2xx) Fix NULL id pointer in probe()
- ASoC: wm_adsp: Fix dma-unsafe read of scratch registers
- s390/cpum_cf: Reject request for sampling in event initialization
- hwmon: (ina2xx) Fix current value calculation
- ASoC: omap-abe-twl6040: Fix missing audio card caused by deferred probing
- ASoC: dapm: Recalculate audio map forcely when card instantiated
- netfilter: xt_hashlimit: fix a possible memory leak in htable_create()
- hwmon: (w83795) temp4_type has writable permission
- perf tools: Restore proper cwd on return from mnt namespace
- PCI: imx6: Fix link training status detection in link up check
- objtool: Fix double-free in .cold detection error path
- objtool: Fix segfault in .cold detection with -ffunction-sections
- ARM: dts: at91: sama5d2: use the divided clock for SMC
- Btrfs: send, fix infinite loop due to directory rename dependencies
- RDMA/mlx5: Fix fence type for IB_WR_LOCAL_INV WR
- RDMA/rdmavt: Fix rvt_create_ah function signature
- ASoC: omap-mcbsp: Fix latency value calculation for pm_qos
- ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE
- ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE
- exportfs: do not read dentry after free
- bpf: fix check of allowed specifiers in bpf_trace_printk
- ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf
- USB: omap_udc: use devm_request_irq()
- USB: omap_udc: fix crashes on probe error and module removal
- USB: omap_udc: fix omap_udc_start() on 15xx machines
- USB: omap_udc: fix USB gadget functionality on Palm Tungsten E
- USB: omap_udc: fix rejection of out transfers when DMA is used
- drm/meson: add support for 1080p25 mode
- netfilter: ipv6: Preserve link scope traffic original oif
- IB/mlx5: Fix page fault handling for MW
- KVM: x86: fix empty-body warnings
- x86/kvm/vmx: fix old-style function declaration
- net: thunderx: fix NULL pointer dereference in nic_remove
- usb: gadget: u_ether: fix unsafe list iteration
- netfilter: nf_tables: deactivate expressions in rule replecement routine
- igb: fix uninitialized variables
- ixgbe: recognize 1000BaseLX SFP modules as 1Gbps
- net: hisilicon: remove unexpected free_netdev
- drm/amdgpu: Add delay after enable RLC ucode
- drm/ast: fixed reading monitor EDID not stable issue
- xen: xlate_mmu: add missing header to fix 'W=1' warning
- Revert "xen/balloon: Mark unallocated host memory as UNUSABLE"
- pstore/ram: Correctly calculate usable PRZ bytes
- fscache, cachefiles: remove redundant variable 'cache'
- nvme: flush namespace scanning work just before removing namespaces
- ACPI/IORT: Fix iort_get_platform_device_domain() uninitialized pointer value
- ocfs2: fix deadlock caused by ocfs2_defrag_extent()
- mm/page_alloc.c: fix calculation of pgdat->nr_zones
- hfs: do not free node before using
- hfsplus: do not free node before using
- debugobjects: avoid recursive calls with kmemleak
- ocfs2: fix potential use after free
- printk: Add console owner and waiter logic to load balance console writes
- printk: Hide console waiter logic into helpers
- printk: Never set console_may_schedule in console_trylock()
- printk: Wake klogd when passing console_lock owner
- flexfiles: enforce per-mirror stateid only for v4 DSes
- staging: speakup: Replace strncpy with memcpy
- ALSA: fireface: fix reference to wrong register for clock configuration
- IB/hfi1: Fix an out-of-bounds access in get_hw_stats
- tcp: lack of available data can also cause TSO defer
- Revert "net/ibm/emac: wrong bit is used for STA control"
- tools: bpftool: prevent infinite loop in get_fdinfo()
- ASoC: sun8i-codec: fix crash on module removal
- ASoC: acpi: fix: continue searching when machine is ignored
- RDMA/bnxt_re: Fix system hang when registration with L2 driver fails
- RDMA/bnxt_re: Avoid accessing the device structure after it is freed
- RDMA/hns: Bugfix pbl configuration for rereg mr
- thunderbolt: Prevent root port runtime suspend during NVM upgrade
- netfilter: add missing error handling code for register functions
- netfilter: nat: fix double register in masquerade modules
- cachefiles: Fix an assertion failure when trying to update a failed object
- fscache: Fix race in fscache_op_complete() due to split atomic_sub & read
- pvcalls-front: fixes incorrect error handling
- nvme: warn when finding multi-port subsystems without multipathing enabled
- kernel/kcov.c: mark funcs in __sanitizer_cov_trace_pc() as notrace
- ALSA: hda/realtek: ALC294 mic and headset-mode fixups for ASUS X542UN
- ALSA: hda/realtek: Enable audio jacks of ASUS UX533FD with ALC294
- ALSA: hda/realtek: Enable audio jacks of ASUS UX433FN/UX333FA with ALC294
* Bionic update: upstream stable patchset 2019-07-17 (LP: #1836968)
- flow_dissector: do not dissect l4 ports for fragments
- ibmvnic: fix accelerated VLAN handling
- ip_tunnel: don't force DF when MTU is locked
- ipv6: Fix PMTU updates for UDP/raw sockets in presence of VRF
- net-gro: reset skb->pkt_type in napi_reuse_skb()
- sctp: not allow to set asoc prsctp_enable by sockopt
- tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths
- tuntap: fix multiqueue rx
- net: systemport: Protect stop from timeout
- net: qualcomm: rmnet: Fix incorrect assignment of real_dev
- net: dsa: microchip: initialize mutex before use
- sctp: fix strchange_flags name for Stream Change Event
- net: phy: mdio-gpio: Fix working over slow can_sleep GPIOs
- sctp: not increase stream's incnt before sending addstrm_in request
- mlxsw: spectrum: Fix IP2ME CPU policer configuration
- net: smsc95xx: Fix MTU range
- usbnet: smsc95xx: disable carrier check while suspending
- inet: frags: better deal with smp races
- ARM: dts: r8a7791: Correct critical CPU temperature
- ARM: dts: r8a7793: Correct critical CPU temperature
- net: bcmgenet: protect stop from timeout
- tcp: Fix SOF_TIMESTAMPING_RX_HARDWARE to use the latest timestamp during TCP
coalescing
- tipc: don't assume linear buffer when reading ancillary data
- tipc: fix link re-establish failure
- net/mlx5e: Claim TC hw offloads support only under a proper build config
- net/mlx5e: Adjust to max number of channles when re-attaching
- net/mlx5e: Fix selftest for small MTUs
- l2tp: fix a sock refcnt leak in l2tp_tunnel_register
- net/mlx5e: IPoIB, Reset QP after channels are closed
- net: dsa: mv88e6xxx: Fix clearing of stats counters
- net: phy: realtek: fix RTL8201F sysfs name
- sctp: define SCTP_SS_DEFAULT for Stream schedulers
- rxrpc: Fix lockup due to no error backoff after ack transmit error
- cifs: don't dereference smb_file_target before null check
- cifs: fix return value for cifs_listxattr
- arm64: kprobe: make page to RO mode when allocate it
- ixgbe: fix MAC anti-spoofing filter after VFLR
- reiserfs: propagate errors from fill_with_dentries() properly
- hfs: prevent btree data loss on root split
- hfsplus: prevent btree data loss on root split
- um: Give start_idle_thread() a return code
- drm/edid: Add 6 bpc quirk for BOE panel.
- platform/x86: intel_telemetry: report debugfs failure
- clk: fixed-rate: fix of_node_get-put imbalance
- perf symbols: Set PLT entry/header sizes properly on Sparc
- fs/exofs: fix potential memory leak in mount option parsing
- clk: samsung: exynos5420: Enable PERIS clocks for suspend
- apparmor: Fix uninitialized value in aa_split_fqname
- x86/earlyprintk: Add a force option for pciserial device
- platform/x86: acerhdf: Add BIOS entry for Gateway LT31 v1.3307
- arm64: percpu: Initialize ret in the default case
- s390/vdso: add missing FORCE to build targets
- netfilter: ipset: list:set: Decrease refcount synchronously on deletion and
replace
- netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net
- s390/mm: Fix ERROR: "__node_distance" undefined!
- netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment()
- netfilter: xt_IDLETIMER: add sysfs filename checking routine
- s390/qeth: fix HiperSockets sniffer
- hwmon: (ibmpowernv) Remove bogus __init annotations
- Revert "drm/exynos/decon5433: implement frame counter"
- clk: fixed-factor: fix of_node_get-put imbalance
- lib/raid6: Fix arm64 test build
- s390/perf: Change CPUM_CF return code in event init function
- sched/core: Take the hotplug lock in sched_init_smp()
- i40e: restore NETIF_F_GSO_IPXIP[46] to netdev features
- qed: Fix memory/entry leak in qed_init_sp_request()
- qed: Fix blocking/unlimited SPQ entries leak
- qed: Fix potential memory corruption
- net: stmmac: Fix RX packet size > 8191
- SUNRPC: drop pointless static qualifier in xdr_get_next_encode_buffer()
- ACPI / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM
- perf machine: Add machine__is() to identify machine arch
- perf tools: Fix kernel_start for PTI on x86
- perf machine: Add nr_cpus_avail()
- perf machine: Workaround missing maps for x86 PTI entry trampolines
- perf test code-reading: Fix perf_env setup for PTI entry trampolines
- media: v4l: event: Add subscription to list before calling "add" operation
- MIPS: OCTEON: cavium_octeon_defconfig: re-enable OCTEON USB driver
- uio: Fix an Oops on load
- usb: cdc-acm: add entry for Hiro (Conexant) modem
- usb: quirks: Add delay-init quirk for Corsair K70 LUX RGB
- misc: atmel-ssc: Fix section annotation on atmel_ssc_get_driver_data
- USB: misc: appledisplay: add 20" Apple Cinema Display
- ACPI / platform: Add SMB0001 HID to forbidden_id_list
- HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges
- libceph: fall back to sendmsg for slab pages
- drm/i915: Replace some PAGE_SIZE with I915_GTT_PAGE_SIZE
- perf unwind: Take pgoff into account when reporting elf to libdwfl
- netfilter: bridge: define INT_MIN & INT_MAX in userspace
- s390/decompressor: add missing FORCE to build targets
- Revert "HID: add NOGET quirk for Eaton Ellipse MAX UPS"
- HID: alps: allow incoming reports when only the trackstick is opened
- s390/mm: fix mis-accounting of pgtable_bytes
- drm/amd/display: Stop leaking planes
- drm/amd/amdgpu/dm: Fix dm_dp_create_fake_mst_encoder()
- ceph: quota: fix null pointer dereference in quota check
- nvme: make sure ns head inherits underlying device limits
- i2c: omap: Enable for ARCH_K3
- net: aquantia: fix potential IOMMU fault after driver unbind
- net: aquantia: fixed enable unicast on 32 macvlan
- net: aquantia: invalid checksumm offload implementation
- mtd: rawnand: atmel: fix OF child-node lookup
- efi/libstub: arm: support building with clang
- ARM: 8766/1: drop no-thumb-interwork in EABI mode
- ARM: 8767/1: add support for building ARM kernel with clang
- bus: arm-cci: remove unnecessary unreachable()
- ARM: trusted_foundations: do not use naked function
- usb: core: Fix hub port connection events lost
- usb: dwc3: gadget: fix ISOC TRB type on unaligned transfers
- usb: dwc3: gadget: Properly check last unaligned/zero chain TRB
- usb: dwc3: core: Clean up ULPI device
- xhci: Add check for invalid byte size error when UAS devices are connected.
- ALSA: oss: Use kvzalloc() for local buffer allocations
- MAINTAINERS: Add Sasha as a stable branch maintainer
- mmc: sdhci-pci: Try "cd" for card-detect lookup before using NULL
- gpio: don't free unallocated ida on gpiochip_add_data_with_key() error path
- iwlwifi: mvm: support sta_statistics() even on older firmware
- iwlwifi: mvm: fix regulatory domain update when the firmware starts
- iwlwifi: mvm: don't use SAR Geo if basic SAR is not used
- brcmfmac: fix reporting support for 160 MHz channels
- tools/power/cpupower: fix compilation with STATIC=true
- v9fs_dir_readdir: fix double-free on p9stat_read error
- selinux: Add __GFP_NOWARN to allocation at str_read()
- Input: synaptics - avoid using uninitialized variable when probing
- bfs: add sanity check at bfs_fill_super()
- sctp: clear the transport of some out_chunk_list chunks in
sctp_assoc_rm_peer
- gfs2: Don't leave s_fs_info pointing to freed memory in init_sbd
- llc: do not use sk_eat_skb()
- mm: don't warn about large allocations for slab
- mm/memory.c: recheck page table entry with page table lock held
- IB/core: Perform modify QP on real one
- usb: xhci: Prevent bus suspend if a port connect change or polling state is
detected
- drm/ast: change resolution may cause screen blurred
- drm/ast: fixed cursor may disappear sometimes
- can: dev: can_get_echo_skb(): factor out non sending code to
__can_get_echo_skb()
- can: dev: __can_get_echo_skb(): replace struct can_frame by canfd_frame to
access frame length
- can: dev: __can_get_echo_skb(): Don't crash the kernel if can_priv::echo_skb
is accessed out of bounds
- can: dev: __can_get_echo_skb(): print error message, if trying to echo non
existing skb
- can: rx-offload: introduce can_rx_offload_get_echo_skb() and
can_rx_offload_queue_sorted() functions
- can: rx-offload: rename can_rx_offload_irq_queue_err_skb() to
can_rx_offload_queue_tail()
- can: raw: check for CAN FD capable netdev in raw_sendmsg()
- can: hi311x: Use level-triggered interrupt
- IB/hfi1: Eliminate races in the SDMA send error path
- pinctrl: meson: fix pinconf bias disable
- KVM: PPC: Move and undef TRACE_INCLUDE_PATH/FILE
- cpufreq: imx6q: add return value check for voltage scale
- rtc: pcf2127: fix a kmemleak caused in pcf2127_i2c_gather_write
- crypto: simd - correctly take reqsize of wrapped skcipher into account
- floppy: fix race condition in __floppy_read_block_0()
- powerpc/io: Fix the IO workarounds code to work with Radix
- perf/x86/intel/uncore: Add more IMC PCI IDs for KabyLake and CoffeeLake CPUs
- SUNRPC: Fix a bogus get/put in generic_key_to_expire()
- kdb: Use strscpy with destination buffer size
- powerpc/numa: Suppress "VPHN is not supported" messages
- tmpfs: make lseek(SEEK_DATA/SEK_HOLE) return ENXIO with a negative offset
- mm, page_alloc: check for max order in hot path
- arm64: remove no-op -p linker flag
- ubi: fastmap: Check each mapping only once
- Input: xpad - add PDP device id 0x02a4
- Input: xpad - fix some coding style issues
- Input: xpad - avoid using __set_bit() for capabilities
- Input: xpad - add support for Xbox1 PDP Camo series gamepad
- iwlwifi: fix wrong WGDS_WIFI_DATA_SIZE
- kbuild: allow to use GCC toolchain not in Clang search path
- PCI: endpoint: Populate func_no before calling pci_epc_add_epf()
- i40iw: Fix memory leak in error path of create QP
- clk: samsung: exynos5250: Add missing clocks for FIMC LITE SYSMMU devices
- ARM: dts: exynos: Fix invalid node referenced by i2c20 alias in Peach Pit
and Pi
- include/linux/pfn_t.h: force '~' to be parsed as an unary operator
- tty: wipe buffer.
- tty: wipe buffer if not echoing data
- lan78xx: Read MAC address from DT if present
- s390/mm: Check for valid vma before zapping in gmap_discard
- rcu: Make need_resched() respond to urgent RCU-QS needs
- net: ieee802154: 6lowpan: fix frag reassembly
- EVM: Add support for portable signature format
- ima: re-introduce own integrity cache lock
- ima: re-initialize iint->atomic_flags
- xhci: Fix leaking USB3 shared_hcd at xhci removal
- Documentation/security-bugs: Clarify treatment of embargoed information
- Documentation/security-bugs: Postpone fix publication in exceptional cases
- ACPICA: AML interpreter: add region addresses in global list during
initialization
- fsnotify: generalize handling of extra event flags
- pinctrl: meson: fix gxbb ao pull register bits
- pinctrl: meson: fix gxl ao pull register bits
- pinctrl: meson: fix meson8 ao pull register bits
- pinctrl: meson: fix meson8b ao pull register bits
- riscv: add missing vdso_install target
- media: ov5640: fix wrong binning value in exposure calculation
- media: ov5640: fix auto controls values when switching to manual mode
- mm/huge_memory: rename freeze_page() to unmap_page()
- mm/huge_memory.c: reorder operations in __split_huge_page_tail()
- mm/huge_memory: splitting set mapping+index before unfreeze
- mm/huge_memory: fix lockdep complaint on 32-bit i_size_read()
- mm/khugepaged: collapse_shmem() stop if punched or truncated
- mm/khugepaged: fix crashes due to misaccounted holes
- mm/khugepaged: collapse_shmem() remember to clear holes
- mm/khugepaged: minor reorderings in collapse_shmem()
- mm/khugepaged: collapse_shmem() without freezing new_page
- mm/khugepaged: collapse_shmem() do not crash on Compound
- media: em28xx: Fix use-after-free when disconnecting
- ubi: Initialize Fastmap checkmapping correctly
- libceph: store ceph_auth_handshake pointer in ceph_connection
- libceph: factor out __prepare_write_connect()
- libceph: factor out __ceph_x_decrypt()
- libceph: factor out encrypt_authorizer()
- libceph: add authorizer challenge
- libceph: implement CEPHX_V2 calculation mode
- net/tls: Fixed return value when tls_complete_pending_work() fails
- wil6210: missing length check in wmi_set_ie
- btrfs: validate type when reading a chunk
- btrfs: Verify that every chunk has corresponding block group at mount time
- btrfs: tree-checker: Add checker for dir item
- btrfs: tree-checker: use %zu format string for size_t
- btrfs: tree-check: reduce stack consumption in check_dir_item
- btrfs: tree-checker: Verify block_group_item
- btrfs: tree-checker: Detect invalid and empty essential trees
- btrfs: Check that each block group has corresponding chunk at mount time
- btrfs: tree-checker: Check level for leaves and nodes
- btrfs: tree-checker: Fix misleading group system information
- f2fs: check blkaddr more accuratly before issue a bio
- f2fs: enhance sanity_check_raw_super() to avoid potential overflow
- f2fs: clean up with is_valid_blkaddr()
- f2fs: introduce and spread verify_blkaddr
- f2fs: fix to do sanity check with secs_per_zone
- f2fs: fix to do sanity check with user_block_count
- f2fs: fix to do sanity check with node footer and iblocks
- f2fs: fix to do sanity check with block address in main area
- f2fs: fix to do sanity check with i_extra_isize
- f2fs: fix to do sanity check with cp_pack_start_sum
- net: skb_scrub_packet(): Scrub offload_fwd_mark
- net: thunderx: set xdp_prog to NULL if bpf_prog_add fails
- virtio-net: disable guest csum during XDP set
- virtio-net: fail XDP set if guest csum is negotiated
- net: thunderx: set tso_hdrs pointer to NULL in nicvf_free_snd_queue
- packet: copy user buffers before orphan or clone
- rapidio/rionet: do not free skb before reading its length
- usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2
- kvm: mmu: Fix race in emulated page table writes
- KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall
- xtensa: enable coprocessors that are being flushed
- xtensa: fix coprocessor context offset definitions
- xtensa: fix coprocessor part of ptrace_{get,set}xregs
- Btrfs: ensure path name is null terminated at btrfs_control_ioctl
- btrfs: relocation: set trans to be NULL after ending transaction
- PCI: layerscape: Fix wrong invocation of outbound window disable accessor
- arm64: dts: rockchip: Fix PCIe reset polarity for rk3399-puma-haikou.
- x86/fpu: Disable bottom halves while loading FPU registers
- perf/x86/intel: Move branch tracing setup to the Intel-specific source file
- perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts()
- fs: fix lost error code in dio_complete
- ALSA: wss: Fix invalid snd_free_pages() at error path
- ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write
- ALSA: control: Fix race between adding and removing a user element
- ALSA: sparc: Fix invalid snd_free_pages() at error path
- ALSA: hda/realtek - Support ALC300
- ALSA: hda/realtek - fix headset mic detection for MSI MS-B171
- ext2: fix potential use after free
- ARM: dts: rockchip: Remove @0 from the veyron memory node
- dmaengine: at_hdmac: fix memory leak in at_dma_xlate()
- dmaengine: at_hdmac: fix module unloading
- staging: vchiq_arm: fix compat VCHIQ_IOC_AWAIT_COMPLETION
- staging: rtl8723bs: Add missing return for cfg80211_rtw_get_station
- usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series
- Revert "usb: dwc3: gadget: skip Set/Clear Halt when invalid"
- iio:st_magn: Fix enable device after trigger
- lib/test_kmod.c: fix rmmod double free
- mm: use swp_offset as key in shmem_replace_page()
- misc: mic/scif: fix copy-paste error in scif_create_remote_lookup
- binder: fix race that allows malicious free of live buffer
- libceph: weaken sizeof check in ceph_x_verify_authorizer_reply()
- libceph: check authorizer reply/challenge length before reading
- f2fs: fix missing up_read
- net: don't keep lonely packets forever in the gro hash
- net: phy: add workaround for issue where PHY driver doesn't bind to the
device
- KVM: nVMX/nSVM: Fix bug which sets vcpu->arch.tsc_offset to L1 tsc_offset
- udf: Allow mounting volumes with incorrect identification strings
- btrfs: Always try all copies when reading extent buffers
- Btrfs: fix rare chances for data loss when doing a fast fsync
- Btrfs: fix race between enabling quotas and subvolume creation
- perf/x86/intel: Disallow precise_ip on BTS events
- ALSA: hda: Add ASRock H81M-HDS to the power_save blacklist
- ALSA: hda: Add ASRock N68C-S UCC the power_save blacklist
- function_graph: Create function_graph_enter() to consolidate architecture
code
- ARM: function_graph: Simplify with function_graph_enter()
- microblaze: function_graph: Simplify with function_graph_enter()
- x86/function_graph: Simplify with function_graph_enter()
- powerpc/function_graph: Simplify with function_graph_enter()
- sh/function_graph: Simplify with function_graph_enter()
- sparc/function_graph: Simplify with function_graph_enter()
- parisc: function_graph: Simplify with function_graph_enter()
- s390/function_graph: Simplify with function_graph_enter()
- arm64: function_graph: Simplify with function_graph_enter()
- MIPS: function_graph: Simplify with function_graph_enter()
- function_graph: Make ftrace_push_return_trace() static
- function_graph: Use new curr_ret_depth to manage depth instead of
curr_ret_stack
- function_graph: Have profiler use curr_ret_stack and not depth
- function_graph: Move return callback before update of curr_ret_stack
- function_graph: Reverse the order of pushing the ret_stack and the callback
- ext2: initialize opts.s_mount_opt as zero before using it
- ASoC: intel: cht_bsw_max98090_ti: Add quirk for boards using pmc_plt_clk_0
- staging: most: use format specifier "%s" in snprintf
- iio/hid-sensors: Fix IIO_CHAN_INFO_RAW returning wrong values for signed
numbers
- mm: cleancache: fix corruption on missed inode invalidation
* Bionic update: upstream stable patchset 2019-07-17 (LP: #1836968) //
CVE-2000-1134 // CVE-2007-3852 // CVE-2008-0525 // CVE-2009-0416 //
CVE-2011-4834 // CVE-2015-1838 // CVE-2015-7442 // CVE-2016-7489
- namei: allow restricted O_CREAT of FIFOs and regular files
* bcache: risk of data loss on I/O errors in backing or caching devices
(LP: #1829563)
- bcache: add CACHE_SET_IO_DISABLE to struct cache_set flags
- bcache: add stop_when_cache_set_failed option to backing device
- bcache: fix inaccurate io state for detached bcache devices
- bcache: add backing_request_endio() for bi_end_io
- bcache: add io_disable to struct cached_dev
- bcache: store disk name in struct cache and struct cached_dev
- bcache: count backing device I/O error for writeback I/O
- bcache: add wait_for_kthread_stop() in bch_allocator_thread()
- bcache: set dc->io_disable to true in conditional_stop_bcache_device()
- bcache: stop bcache device when backing device is offline
- bcache: fix ioctl in flash device
* Bionic update: upstream stable patchset 2019-07-16 (LP: #1836802)
- mtd: spi-nor: fsl-quadspi: fix read error for flash size larger than 16MB
- spi: bcm-qspi: switch back to reading flash using smaller chunks
- bcache: trace missed reading by cache_missed
- bcache: fix miss key refill->end in writeback
- hwmon: (pmbus) Fix page count auto-detection.
- jffs2: free jffs2_sb_info through jffs2_kill_sb()
- cpufreq: conservative: Take limits changes into account properly
- pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
- parisc: Fix address in HPMC IVA
- parisc: Fix map_pages() to not overwrite existing pte entries
- parisc: Fix exported address of os_hpmc handler
- ALSA: hda - Add quirk for ASUS G751 laptop
- ALSA: hda - Fix headphone pin config for ASUS G751
- ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905)
- ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops
- x86/xen: Fix boot loader version reported for PVH guests
- x86/corruption-check: Fix panic in memory_corruption_check() when boot
option without value is provided
- ARM: dts: exynos: Disable pull control for MAX8997 interrupts on Origen
- bpf: do not blindly change rlimit in reuseport net selftest
- Revert "perf tools: Fix PMU term format max value calculation"
- xfrm: policy: use hlist rcu variants on insert
- perf vendor events intel: Fix wrong filter_band* values for uncore events
- sched/fair: Fix the min_vruntime update logic in dequeue_entity()
- perf tools: Fix use of alternatives to find JDIR
- perf cpu_map: Align cpu map synthesized events properly.
- x86/fpu: Remove second definition of fpu in __fpu__restore_sig()
- net: qla3xxx: Remove overflowing shift statement
- selftests: ftrace: Add synthetic event syntax testcase
- i2c: rcar: cleanup DMA for all kinds of failure
- locking/lockdep: Fix debug_locks off performance problem
- ataflop: fix error handling during setup
- swim: fix cleanup on setup error
- nfp: devlink port split support for 1x100G CXP NIC
- tun: Consistently configure generic netdev params via rtnetlink
- s390/sthyi: Fix machine name validity indication
- hwmon: (pwm-fan) Set fan speed to 0 on suspend
- lightnvm: pblk: fix two sleep-in-atomic-context bugs
- spi: spi-ep93xx: Use dma_data_direction for ep93xx_spi_dma_{finish,prepare}
- perf tools: Free temporary 'sys' string in read_event_files()
- perf tools: Cleanup trace-event-info 'tdata' leak
- perf strbuf: Match va_{add,copy} with va_end
- cpupower: Fix coredump on VMWare
- mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01
- iwlwifi: pcie: avoid empty free RB queue
- iwlwifi: mvm: clear HW_RESTART_REQUESTED when stopping the interface
- x86/olpc: Indicate that legacy PC XO-1 platform should not register RTC
- ACPI / processor: Fix the return value of acpi_processor_ids_walk()
- cpufreq: dt: Try freeing static OPPs only if we have added them
- mtd: rawnand: atmel: Fix potential NULL pointer dereference
- signal: Introduce COMPAT_SIGMINSTKSZ for use in compat_sys_sigaltstack
- Bluetooth: btbcm: Add entry for BCM4335C0 UART bluetooth
- x86: boot: Fix EFI stub alignment
- pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux
- brcmfmac: fix for proper support of 160MHz bandwidth
- net: phy: phylink: ensure the carrier is off when starting phylink
- block, bfq: correctly charge and reset entity service in all cases
- kprobes: Return error if we fail to reuse kprobe instead of BUG_ON()
- ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers
- pinctrl: qcom: spmi-mpp: Fix drive strength setting
- pinctrl: spmi-mpp: Fix pmic_mpp_config_get() to be compliant
- pinctrl: ssbi-gpio: Fix pm8xxx_pin_config_get() to be compliant
- net: dsa: mv88e6xxx: Fix writing to a PHY page.
- iwlwifi: mvm: fix BAR seq ctrl reporting
- ixgbevf: VF2VF TCP RSS
- ath10k: schedule hardware restart if WMI command times out
- thermal: da9062/61: Prevent hardware access during system suspend
- cgroup, netclassid: add a preemption point to write_classid
- scsi: esp_scsi: Track residual for PIO transfers
- UAPI: ndctl: Fix g++-unsupported initialisation in headers
- KVM: nVMX: Clear reserved bits of #DB exit qualification
- scsi: megaraid_sas: fix a missing-check bug
- RDMA/core: Do not expose unsupported counters
- IB/ipoib: Clear IPCB before icmp_send
- RDMA/bnxt_re: Fix recursive lock warning in debug kernel
- usb: host: ohci-at91: fix request of irq for optional gpio
- PCI: mediatek: Fix mtk_pcie_find_port() endpoint/port matching logic
- tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/deactivated
- Drivers: hv: vmbus: Use cpumask_var_t for on-stack cpu mask
- VMCI: Resource wildcard match fixed
- PCI / ACPI: Enable wake automatically for power managed bridges
- usb: gadget: udc: atmel: handle at91sam9rl PMC
- ext4: fix argument checking in EXT4_IOC_MOVE_EXT
- MD: fix invalid stored role for a disk
- f2fs: fix to recover inode's i_flags during POR
- PCI/MSI: Warn and return error if driver enables MSI/MSI-X twice
- coresight: etb10: Fix handling of perf mode
- PCI: dwc: pci-dra7xx: Enable errata i870 for both EP and RC mode
- crypto: caam - fix implicit casts in endianness helpers
- usb: chipidea: Prevent unbalanced IRQ disable
- driver/dma/ioat: Call del_timer_sync() without holding prep_lock
- uio: ensure class is registered before devices
- scsi: lpfc: Correct soft lockup when running mds diagnostics
- scsi: lpfc: Correct race with abort on completion path
- f2fs: report error if quota off error during umount
- signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace
init
- mfd: menelaus: Fix possible race condition and leak
- dmaengine: dma-jz4780: Return error if not probed from DT
- IB/rxe: fix for duplicate request processing and ack psns
- ALSA: hda: Check the non-cached stream buffers more explicitly
- cpupower: Fix AMD Family 0x17 msr_pstate size
- f2fs: fix to account IO correctly
- ARM: dts: exynos: Remove "cooling-{min|max}-level" for CPU nodes
- arm: dts: exynos: Add missing cooling device properties for CPUs
- ARM: dts: exynos: Convert exynos5250.dtsi to opp-v2 bindings
- ARM: dts: exynos: Mark 1 GHz CPU OPP as suspend OPP on Exynos5250
- xen-swiotlb: use actually allocated size on check physical continuous
- tpm: Restore functionality to xen vtpm driver.
- xen/blkfront: avoid NULL blkfront_info dereference on device removal
- xen/balloon: Support xend-based toolstack
- xen: fix race in xen_qlock_wait()
- xen: make xen_qlock_wait() nestable
- xen/pvh: increase early stack size
- xen/pvh: don't try to unplug emulated devices
- libertas: don't set URB_ZERO_PACKET on IN USB transfer
- usbip:vudc: BUG kmalloc-2048 (Not tainted): Poison overwritten
- usb: gadget: udc: renesas_usb3: Fix b-device mode for "workaround"
- iwlwifi: mvm: check return value of rs_rate_from_ucode_rate()
- net/ipv4: defensive cipso option parsing
- dmaengine: ppc4xx: fix off-by-one build failure
- dmaengine: stm32-dma: fix incomplete configuration in cyclic mode
- libnvdimm: Hold reference on parent while scheduling async init
- libnvdimm, region: Fail badblocks listing for inactive regions
- ASoC: intel: skylake: Add missing break in skl_tplg_get_token()
- IB/mlx5: Fix MR cache initialization
- jbd2: fix use after free in jbd2_log_do_checkpoint()
- gfs2_meta: ->mount() can get NULL dev_name
- ext4: initialize retries variable in ext4_da_write_inline_data_begin()
- ext4: fix setattr project check in fssetxattr ioctl
- ext4: propagate error from dquot_initialize() in EXT4_IOC_FSSETXATTR
- ext4: fix use-after-free race in ext4_remount()'s error path
- EDAC, amd64: Add Family 17h, models 10h-2fh support
- EDAC, {i7core,sb,skx}_edac: Fix uncorrected error counting
- EDAC, skx_edac: Fix logical channel intermediate decoding
- ARM: dts: dra7: Fix up unaligned access setting for PCIe EP
- PCI/ASPM: Fix link_state teardown on device removal
- PCI: Add Device IDs for Intel GPU "spurious interrupt" quirk
- PCI: vmd: White list for fast interrupt handlers
- signal/GenWQE: Fix sending of SIGKILL
- signal: Guard against negative signal numbers in copy_siginfo_from_user32
- crypto: lrw - Fix out-of bounds access on counter overflow
- crypto: tcrypt - fix ghash-generic speed test
- mm: /proc/pid/smaps_rollup: fix NULL pointer deref in smaps_pte_range()
- ima: fix showing large 'violations' or 'runtime_measurements_count'
- hugetlbfs: dirty pages as they are added to pagecache
- mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly
- KVM: arm64: Fix caching of host MDCR_EL2 value
- kbuild: fix kernel/bounds.c 'W=1' warning
- iio: ad5064: Fix regulator handling
- iio: adc: imx25-gcq: Fix leak of device_node in mx25_gcq_setup_cfgs()
- iio: adc: at91: fix acking DRDY irq on simple conversions
- iio: adc: at91: fix wrong channel number in triggered buffer mode
- w1: omap-hdq: fix missing bus unregister at removal
- smb3: allow stats which track session and share reconnects to be reset
- smb3: do not attempt cifs operation in smb3 query info error path
- smb3: on kerberos mount if server doesn't specify auth type use krb5
- printk: Fix panic caused by passing log_buf_len to command line
- genirq: Fix race on spurious interrupt detection
- NFSv4.1: Fix the r/wsize checking
- nfs: Fix a missed page unlock after pg_doio()
- nfsd: Fix an Oops in free_session()
- lockd: fix access beyond unterminated strings in prints
- dm ioctl: harden copy_params()'s copy_from_user() from malicious users
- dm zoned: fix metadata block ref counting
- dm zoned: fix various dmz_get_mblock() issues
- powerpc/msi: Fix compile error on mpc83xx
- MIPS: OCTEON: fix out of bounds array access on CN68XX
- iommu/arm-smmu: Ensure that page-table updates are visible before TLBI
- TC: Set DMA masks for devices
- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
- kgdboc: Passing ekgdboc to command line causes panic
- xen: fix xen_qlock_wait()
- xen-blkfront: fix kernel panic with negotiate_mq error path
- media: em28xx: use a default format if TRY_FMT fails
- media: tvp5150: avoid going past array on v4l2_querymenu()
- media: em28xx: fix input name for Terratec AV 350
- media: em28xx: make v4l2-compliance happier by starting sequence on zero
- media: media colorspaces*.rst: rename AdobeRGB to opRGB
- arm64: lse: remove -fcall-used-x0 flag
- rpmsg: smd: fix memory leak on channel create
- Cramfs: fix abad comparison when wrap-arounds occur
- ARM: dts: socfpga: Fix SDRAM node address for Arria10
- arm64: dts: stratix10: Correct System Manager register size
- soc/tegra: pmc: Fix child-node lookup
- btrfs: qgroup: Avoid calling qgroup functions if qgroup is not enabled
- btrfs: Handle owner mismatch gracefully when walking up tree
- btrfs: locking: Add extra check in btrfs_init_new_buffer() to avoid deadlock
- btrfs: fix error handling in free_log_tree
- btrfs: Enhance btrfs_trim_fs function to handle error better
- btrfs: Ensure btrfs_trim_fs can trim the whole filesystem
- btrfs: iterate all devices during trim, instead of fs_devices::alloc_list
- btrfs: don't attempt to trim devices that don't support it
- btrfs: wait on caching when putting the bg cache
- btrfs: protect space cache inode alloc with GFP_NOFS
- btrfs: reset max_extent_size on clear in a bitmap
- btrfs: make sure we create all new block groups
- Btrfs: fix warning when replaying log after fsync of a tmpfile
- Btrfs: fix wrong dentries after fsync of file that got its parent replaced
- btrfs: qgroup: Dirty all qgroups before rescan
- Btrfs: fix null pointer dereference on compressed write path error
- Btrfs: fix assertion on fsync of regular file when using no-holes feature
- btrfs: set max_extent_size properly
- btrfs: don't use ctl->free_space for max_extent_size
- btrfs: only free reserved extent if we didn't insert it
- btrfs: don't run delayed_iputs in commit
- btrfs: move the dio_sem higher up the callchain
- Btrfs: fix use-after-free during inode eviction
- Btrfs: fix use-after-free when dumping free space
- Btrfs: fix fsync after hole punching when using no-holes feature
- net: sched: Remove TCA_OPTIONS from policy
- bpf: wait for running BPF programs when updating map-in-map
- MD: fix invalid stored role for a disk - try2
- mtd: spi-nor: intel-spi: Add support for Intel Ice Lake SPI serial flash
- mtd: spi-nor: fsl-quadspi: Don't let -EINVAL on the bus
- bcache: correct dirty data statistics
- block: don't deal with discard limit in blkdev_issue_discard()
- block: make sure discard bio is aligned with logical block size
- block: make sure writesame bio is aligned with logical block size
- dma-mapping: fix panic caused by passing empty cma command line argument
- ACPI / OSL: Use 'jiffies' as the time bassis for acpi_os_get_timer()
- ACPICA: AML Parser: fix parse loop to correctly skip erroneous extended
opcodes
- kprobes/x86: Use preempt_enable() in optimized_callback()
- mailbox: PCC: handle parse error
- ALSA: hda: Add 2 more models to the power_save blacklist
- drm: fix use of freed memory in drm_mode_setcrtc
- nvme: remove ns sibling before clearing path
- nfp: flower: fix pedit set actions for multiple partial masks
- nfp: flower: use offsets provided by pedit instead of index for ipv6
- perf report: Don't crash on invalid inline debug information
- drm: Get ref on CRTC commit object when waiting for flip_done
- net: socionext: Reset tx queue in ndo_stop
- lightnvm: pblk: fix race on sysfs line state
- lightnvm: pblk: fix race condition on metadata I/O
- bcache: Populate writeback_rate_minimum attribute
- sdhci: acpi: add free_slot callback
- mtd: rawnand: denali: set SPARE_AREA_SKIP_BYTES register to 8 if unset
- iwlwifi: mvm: check for n_profiles validity in EWRD ACPI
- ACPI/PPTT: Handle architecturally unknown cache types
- ACPI / PM: LPIT: Register sysfs attributes based on FADT
- pinctrl: sunxi: fix 'pctrl->functions' allocation in
sunxi_pinctrl_build_state
- arm64: entry: Allow handling of undefined instructions from EL1
- bpf/verifier: fix verifier instability
- gpio: brcmstb: allow 0 width GPIO banks
- libata: Apply NOLPM quirk for SAMSUNG MZ7TD256HAFV-000L9
- thermal: rcar_thermal: Prevent doing work after unbind
- net: stmmac: dwmac-sun8i: fix OF child-node lookup
- f2fs: clear PageError on the read path
- xprtrdma: Reset credit grant properly after a disconnect
- nvmem: check the return value of nvmem_add_cells()
- f2fs: avoid sleeping under spin_lock
- f2fs: fix to recover cold bit of inode block during POR
- OPP: Free OPP table properly on performance state irregularities
- IB/rxe: Revise the ib_wr_opcode enum
- ext4: fix EXT4_IOC_SWAP_BOOT
- selinux: fix mounting of cgroup2 under older policies
- KVM: arm/arm64: Ensure only THP is candidate for adjustment
- NFC: nfcmrvl_uart: fix OF child-node lookup
- media: ov7670: make "xclk" clock optional
- powerpc/tm: Fix HFSCR bit for no suspend case
- powerpc/64s/hash: Do not use PPC_INVALIDATE_ERAT on CPUs before POWER9
- MIPS: memset: Fix CPU_DADDI_WORKAROUNDS `small_fixup' regression
- power: supply: twl4030-charger: fix OF sibling-node lookup
- ocxl: Fix access to the AFU Descriptor Data
- net: bcmgenet: fix OF child-node lookup
- media: cec: make cec_get_edid_spa_location() an inline function
- media: cec: integrate cec_validate_phys_addr() in cec-api.c
- media: adv7604: when the EDID is cleared, unconfigure CEC as well
- media: adv7842: when the EDID is cleared, unconfigure CEC as well
- drm/mediatek: fix OF sibling-node lookup
- media: replace ADOBERGB by OPRGB
- media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC
- btrfs: fix error handling in btrfs_dev_replace_start
- btrfs: keep trim from interfering with transaction commits
- Btrfs: don't clean dirty pages during buffered writes
- btrfs: release metadata before running delayed refs
- Btrfs: fix deadlock when writing out free space caches
- btrfs: reset max_extent_size properly
- btrfs: fix insert_reserved error handling
- powerpc/traps: restore recoverability of machine_check interrupts
- powerpc/64/module: REL32 relocation range check
- powerpc/mm: Fix page table dump to work on Radix
- powerpc/eeh: Fix possible null deref in eeh_dump_dev_log()
- tty: check name length in tty_find_polling_driver()
- ARM: imx_v6_v7_defconfig: Select CONFIG_TMPFS_POSIX_ACL
- powerpc/nohash: fix undefined behaviour when testing page size support
- powerpc/mm: Don't report hugepage tables as memory leaks when using kmemleak
- drm/omap: fix memory barrier bug in DMM driver
- drm/hisilicon: hibmc: Do not carry error code in HiBMC framebuffer pointer
- media: pci: cx23885: handle adding to list failure
- media: coda: don't overwrite h.264 profile_idc on decoder instance
- MIPS: kexec: Mark CPU offline before disabling local IRQ
- powerpc/boot: Ensure _zimage_start is a weak symbol
- powerpc/memtrace: Remove memory in chunks
- MIPS/PCI: Call pcie_bus_configure_settings() to set MPS/MRRS
- sc16is7xx: Fix for multi-channel stall
- media: tvp5150: fix width alignment during set_selection()
- powerpc/selftests: Wait all threads to join
- staging:iio:ad7606: fix voltage scales
- 9p locks: fix glock.client_id leak in do_lock
- 9p: clear dangling pointers in p9stat_free
- ovl: fix error handling in ovl_verify_set_fh()
- scsi: qla2xxx: Fix incorrect port speed being set for FC adapters
- scsi: qla2xxx: Fix process response queue for ISP26XX and above
- scsi: qla2xxx: Remove stale debug trace message from tcm_qla2xxx
- scsi: qla2xxx: shutdown chip if reset fail
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
- ovl: fix recursive oi->lock in ovl_link()
- MIPS: Loongson-3: Fix CPU UART irq delivery problem
- MIPS: Loongson-3: Fix BRIDGE irq delivery problem
- xtensa: add NOTES section to the linker script
- xtensa: make sure bFLT stack is 16 byte aligned
- xtensa: fix boot parameters address translation
- um: Drop own definition of PTRACE_SYSEMU/_SINGLESTEP
- clk: s2mps11: Fix matching when built as module and DT node contains
compatible
- clk: at91: Fix division by zero in PLL recalc_rate()
- clk: rockchip: Fix static checker warning in rockchip_ddrclk_get_parent call
- clk: mvebu: use correct bit for 98DX3236 NAND
- libceph: bump CEPH_MSG_MAX_DATA_LEN
- mach64: fix display corruption on big endian machines
- mach64: fix image corruption due to reading accelerator registers
- reset: hisilicon: fix potential NULL pointer dereference
- vhost/scsi: truncate T10 PI iov_iter to prot_bytes
- scsi: qla2xxx: Initialize port speed to avoid setting lower speed
- SCSI: fix queue cleanup race before queue initialization is done
- soc: ti: QMSS: Fix usage of irq_set_affinity_hint
- ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry
- ocfs2: free up write context when direct IO failed
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings
- netfilter: conntrack: fix calculation of next bucket number in early_drop
- ARM: 8809/1: proc-v7: fix Thumb annotation of cpu_v7_hvc_switch_mm
- mtd: docg3: don't set conflicting BCH_CONST_PARAMS option
- of, numa: Validate some distance map rules
- x86/cpu/vmware: Do not trace vmware_sched_clock()
- x86/hyper-v: Enable PIT shutdown quirk
- termios, tty/tty_baudrate.c: fix buffer overrun
- arch/alpha, termios: implement BOTHER, IBSHIFT and termios2
- watchdog/core: Add missing prototypes for weak functions
- btrfs: fix pinned underflow after transaction aborted
- Btrfs: fix cur_offset in the error case for nocow
- Btrfs: fix infinite loop on inode eviction after deduplication of eof block
- Btrfs: fix data corruption due to cloning of eof block
- clockevents/drivers/i8253: Add support for PIT shutdown quirk
- ext4: add missing brelse() update_backups()'s error path
- ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path
- ext4: add missing brelse() add_new_gdb_meta_bg()'s error path
- ext4: avoid potential extra brelse in setup_new_flex_group_blocks()
- ext4: missing !bh check in ext4_xattr_inode_write()
- ext4: fix possible inode leak in the retry loop of ext4_resize_fs()
- ext4: avoid buffer leak on shutdown in ext4_mark_iloc_dirty()
- ext4: avoid buffer leak in ext4_orphan_add() after prior errors
- ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while resizing
- ext4: avoid possible double brelse() in add_new_gdb() on error path
- ext4: fix possible leak of sbi->s_group_desc_leak in error path
- ext4: fix possible leak of s_journal_flag_rwsem in error path
- ext4: fix buffer leak in ext4_xattr_get_block() on error path
- ext4: release bs.bh before re-using in ext4_xattr_block_find()
- ext4: fix buffer leak in ext4_xattr_move_to_block() on error path
- ext4: fix buffer leak in ext4_expand_extra_isize_ea() on error path
- ext4: fix buffer leak in __ext4_read_dirblock() on error path
- mount: Prevent MNT_DETACH from disconnecting locked mounts
- kdb: use correct pointer when 'btc' calls 'btt'
- kdb: print real address of pointers instead of hashed addresses
- sunrpc: correct the computation for page_ptr when truncating
- rtc: hctosys: Add missing range error reporting
- configfs: replace strncpy with memcpy
- gfs2: Put bitmap buffers in put_super
- lib/ubsan.c: don't mark __ubsan_handle_builtin_unreachable as noreturn
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444!
- mm/swapfile.c: use kvzalloc for swap_info_struct allocation
- efi/arm/libstub: Pack FDT after populating it
- drm/amdgpu: add missing CHIP_HAINAN in amdgpu_ucode_get_load_type
- drm/nouveau: Check backlight IDs are >= 0, not > 0
- drm/dp_mst: Check if primary mstb is null
- drm/i915: Restore vblank interrupts earlier
- drm/i915: Don't unset intel_connector->mst_port
- drm/i915: Skip vcpi allocation for MSTB ports that are gone
- drm/i915: Large page offsets for pread/pwrite
- drm/i915/hdmi: Add HDMI 2.0 audio clock recovery N values
- drm/i915: Don't oops during modeset shutdown after lpe audio deinit
- drm/i915: Mark pin flags as u64
- drm/i915/execlists: Force write serialisation into context image vs
execution
- CONFIG_XEN_PV breaks xen_create_contiguous_region on ARM
- ovl: check whiteout in ovl_create_over_whiteout()
- nvme-loop: fix kernel oops in case of unhandled command
- Input: wm97xx-ts - fix exit path
- powerpc/Makefile: Fix PPC_BOOK3S_64 ASFLAGS
- tracing/kprobes: Check the probe on unloaded module correctly
- drm/amdgpu/powerplay: fix missing break in switch statements
- udf: Prevent write-unsupported filesystem to be remounted read-write
- serial: sh-sci: Fix could not remove dev_attr_rx_fifo_timeout
- zram: close udev startup race condition as default groups
- clk: rockchip: fix wrong mmc sample phase shift for rk3328
- bonding/802.3ad: fix link_failure_count tracking
- hwmon: (core) Fix double-free in __hwmon_device_register()
- perf stat: Handle different PMU names with common prefix
- mnt: fix __detach_mounts infinite loop
- NFSv4: Don't exit the state manager without clearing
NFS4CLNT_MANAGER_RUNNING
- libata: blacklist SAMSUNG MZ7TD256HAFV-000L9 SSD
- drm/i915/dp: Link train Fallback on eDP only if fallback link BW can fit
panel's native mode
- drm/i915: Fix ilk+ watermarks when disabling pipes
- drm/i915: Fix possible race in intel_dp_add_mst_connector()
* [SRU][B/B-OEM]Fix resume failure on some TPM chips (LP: #1836031)
- tpm: tpm_try_transmit() refactor error flow.
* Linux md raid-10 freezes during resync (LP: #1767992)
- md: fix raid10 hang issue caused by barrier
* hda/realtek: can't detect external mic on a Dell machine (LP: #1836755)
- ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine
* CVE-2019-12614
- powerpc/pseries/dlpar: Fix a missing check in dlpar_parse_cc_property()
* x86: mm: early boot problem on i386 with KPTI enabled (LP: #1827884)
- Revert "perf/core: Make sure the ring-buffer is mapped in all page-tables"
- x86/mm: Clarify hardware vs. software "error_code"
- x86/mm: Break out kernel address space handling
- x86/mm: Break out user address space handling
- x86/mm/fault: Allow stack access below %rsp
* bnx2x driver causes 100% CPU load (LP: #1832082)
- bnx2x: Prevent ptp_task to be rescheduled indefinitely
* Sometimes touchpad detected as mouse(i2c designware fails to get adapter
number) (LP: #1835150)
- i2c: i2c-designware-platdrv: Cleanup setting of the adapter number
- i2c: i2c-designware-platdrv: Always use a dynamic adapter number
* HP EliteBook 745 G5 (Ryzen 2500U) fails to boot unless `mce=off` is set on
command line (LP: #1796443)
- x86/MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models
- x86/MCE/AMD: Carve out the MC4_MISC thresholding quirk
- x86/MCE: Add an MCE-record filtering function
- x86/MCE/AMD: Don't report L1 BTB MCA errors on some family 17h models
* Bionic update: upstream stable patchset 2019-07-15 (LP: #1836654)
- media: af9035: prevent buffer overflow on write
- batman-adv: Avoid probe ELP information leak
- batman-adv: Fix segfault when writing to throughput_override
- batman-adv: Fix segfault when writing to sysfs elp_interval
- batman-adv: Prevent duplicated gateway_node entry
- batman-adv: Prevent duplicated nc_node entry
- batman-adv: Prevent duplicated softif_vlan entry
- batman-adv: Prevent duplicated global TT entry
- batman-adv: Prevent duplicated tvlv handler
- batman-adv: fix backbone_gw refcount on queue_work() failure
- batman-adv: fix hardif_neigh refcount on queue_work() failure
- clocksource/drivers/ti-32k: Add CLOCK_SOURCE_SUSPEND_NONSTOP flag for non-
am43 SoCs
- scsi: ibmvscsis: Fix a stringop-overflow warning
- scsi: ibmvscsis: Ensure partition name is properly NUL terminated
- intel_th: pci: Add Ice Lake PCH support
- Input: atakbd - fix Atari keymap
- Input: atakbd - fix Atari CapsLock behaviour
- net: emac: fix fixed-link setup for the RTL8363SB switch
- ravb: do not write 1 to reserved bits
- PCI: dwc: Fix scheduling while atomic issues
- drm: mali-dp: Call drm_crtc_vblank_reset on device init
- scsi: ipr: System hung while dlpar adding primary ipr adapter back
- scsi: sd: don't crash the host on invalid commands
- net/mlx4: Use cpumask_available for eq->affinity_mask
- clocksource/drivers/fttmr010: Fix set_next_event handler
- powerpc/tm: Fix userspace r13 corruption
- powerpc/tm: Avoid possible userspace r1 corruption on reclaim
- iommu/amd: Return devid as alias for ACPI HID devices
- ARC: build: Get rid of toolchain check
- ARC: build: Don't set CROSS_COMPILE in arch's Makefile
- HID: quirks: fix support for Apple Magic Keyboards
- staging: ccree: check DMA pool buf !NULL before free
- net/smc: fix sizeof to int comparison
- qed: Fix populating the invalid stag value in multi function mode.
- RDMA/uverbs: Fix validity check for modify QP
- bpf: test_maps, only support ESTABLISHED socks
- RDMA/bnxt_re: Fix system crash during RDMA resource initialization
- RISC-V: include linux/ftrace.h in asm-prototypes.h
- powerpc/numa: Use associativity if VPHN hcall is successful
- x86/boot: Fix kexec booting failure in the SEV bit detection code
- xfrm: Validate address prefix lengths in the xfrm selector.
- xfrm6: call kfree_skb when skb is toobig
- xfrm: reset transport header back to network header after all input
transforms ahave been applied
- xfrm: reset crypto_done when iterating over multiple input xfrms
- mac80211: Always report TX status
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
- mac80211: fix pending queue hang due to TX_DROP
- cfg80211: Address some corner cases in scan result channel updating
- mac80211: TDLS: fix skb queue/priority assignment
- mac80211: fix TX status reporting for ieee80211s
- ARM: 8799/1: mm: fix pci_ioremap_io() offset check
- xfrm: validate template mode
- netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev
- arm64: hugetlb: Fix handling of young ptes
- ARM: dts: BCM63xx: Fix incorrect interrupt specifiers
- net: macb: Clean 64b dma addresses if they are not detected
- soc: fsl: qbman: qman: avoid allocating from non existing gen_pool
- soc: fsl: qe: Fix copy/paste bug in ucc_get_tdm_sync_shift()
- mac80211_hwsim: do not omit multicast announce of first added radio
- Bluetooth: SMP: fix crash in unpairing
- pxa168fb: prepare the clock
- qed: Avoid implicit enum conversion in qed_set_tunn_cls_info
- qed: Fix mask parameter in qed_vf_prep_tunn_req_tlv
- qed: Avoid implicit enum conversion in qed_roce_mode_to_flavor
- qed: Avoid constant logical operation warning in qed_vf_pf_acquire
- qed: Avoid implicit enum conversion in qed_iwarp_parse_rx_pkt
- asix: Check for supported Wake-on-LAN modes
- ax88179_178a: Check for supported Wake-on-LAN modes
- lan78xx: Check for supported Wake-on-LAN modes
- sr9800: Check for supported Wake-on-LAN modes
- r8152: Check for supported Wake-on-LAN Modes
- smsc75xx: Check for Wake-on-LAN modes
- smsc95xx: Check for Wake-on-LAN modes
- cfg80211: fix use-after-free in reg_process_hint()
- perf/core: Fix perf_pmu_unregister() locking
- perf/ring_buffer: Prevent concurent ring buffer access
- perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX
- perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events
- net: fec: fix rare tx timeout
- declance: Fix continuation with the adapter identification message
- locking/ww_mutex: Fix runtime warning in the WW mutex selftest
- be2net: don't flip hw_features when VXLANs are added/deleted
- net: cxgb3_main: fix a missing-check bug
- yam: fix a missing-check bug
- ocfs2: fix crash in ocfs2_duplicate_clusters_by_page()
- iwlwifi: mvm: check for short GI only for OFDM
- iwlwifi: dbg: allow wrt collection before ALIVE
- iwlwifi: fix the ALIVE notification layout
- usbip: vhci_hcd: update 'status' file header and format
- net/mlx5: Fix mlx5_get_vector_affinity function
- powerpc/pseries: Add empty update_numa_cpu_lookup_table() for NUMA=n
- dm integrity: fail early if required HMAC key is not available
- net: phy: realtek: Use the dummy stubs for MMD register access for rtl8211b
- net: phy: Add general dummy stubs for MMD register access
- scsi: qla2xxx: Avoid double completion of abort command
- kbuild: set no-integrated-as before incl. arch Makefile
- IB/mlx5: Avoid passing an invalid QP type to firmware
- l2tp: remove configurable payload offset
- cifs: Use ULL suffix for 64-bit constant
- KVM: x86: Update the exit_qualification access bits while walking an address
- sparc64: Fix regression in pmdp_invalidate().
- tpm: move the delay_msec increment after sleep in tpm_transmit()
- bpf: sockmap, map_release does not hold refcnt for pinned maps
- tpm: tpm_crb: relinquish locality on error path.
- IB/usnic: Update with bug fixes from core code
- mmc: dw_mmc-rockchip: correct property names in debug
- MIPS: Workaround GCC __builtin_unreachable reordering bug
- iio: buffer: fix the function signature to match implementation
- selftests/powerpc: Add ptrace hw breakpoint test
- scsi: ibmvfc: Avoid unnecessary port relogin
- scsi: sd: Remember that READ CAPACITY(16) succeeded
- btrfs: quota: Set rescan progress to (u64)-1 if we hit last leaf
- net: phy: phylink: Don't release NULL GPIO
- x86/paravirt: Fix some warning messages
- net: stmmac: mark PM functions as __maybe_unused
- kconfig: fix the rule of mainmenu_stmt symbol
- libertas: call into generic suspend code before turning off power
- compiler.h: Allow arch-specific asm/compiler.h
- ARM: dts: imx53-qsb: disable 1.2GHz OPP
- perf python: Use -Wno-redundant-decls to build with PYTHON=python3
- rxrpc: Don't check RXRPC_CALL_TX_LAST after calling rxrpc_rotate_tx_window()
- rxrpc: Only take the rwind and mtu values from latest ACK
- rxrpc: Fix connection-level abort handling
- selftests: rtnetlink.sh explicitly requires bash.
- fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters()
- mtd: spi-nor: Add support for is25wp series chips
- ARM: dts: r8a7790: Correct critical CPU temperature
- media: uvcvideo: Fix driver reference counting
- Revert "netfilter: ipv6: nf_defrag: drop skb dst before queueing"
- perf tools: Disable parallelism for 'make clean'
- drm/i915/gvt: fix memory leak of a cmd_entry struct on error exit path
- bridge: do not add port to router list when receives query with source
0.0.0.0
- net: bridge: remove ipv6 zero address check in mcast queries
- ipv6: mcast: fix a use-after-free in inet6_mc_check
- ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are
called
- llc: set SOCK_RCU_FREE in llc_sap_add_socket()
- net: fec: don't dump RX FIFO register when not available
- net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs
- net: sched: gred: pass the right attribute to gred_change_table_def()
- net: socket: fix a missing-check bug
- net: stmmac: Fix stmmac_mdio_reset() when building stmmac as modules
- net: udp: fix handling of CHECKSUM_COMPLETE packets
- r8169: fix NAPI handling under high load
- sctp: fix race on sctp_id2asoc
- udp6: fix encap return code for resubmitting
- virtio_net: avoid using netif_tx_disable() for serializing tx routine
- ethtool: fix a privilege escalation bug
- bonding: fix length of actor system
- ip6_tunnel: Fix encapsulation layout
- openvswitch: Fix push/pop ethernet validation
- net/mlx5: Take only bit 24-26 of wqe.pftype_wq for page fault type
- net: sched: Fix for duplicate class dump
- net: drop skb on failure in ip_check_defrag()
- net: fix pskb_trim_rcsum_slow() with odd trim offset
- net/mlx5e: fix csum adjustments caused by RXFCS
- rtnetlink: Disallow FDB configuration for non-Ethernet device
- net: ipmr: fix unresolved entry dumps
- net: bcmgenet: Poll internal PHY for GENETv5
- net/sched: cls_api: add missing validation of netlink attributes
- net/mlx5: Fix build break when CONFIG_SMP=n
- mac80211_hwsim: fix locking when iterating radios during ns exit
- rxrpc: Fix checks as to whether we should set up a new call
- rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket
- thunderbolt: Do not handle ICM events after domain is stopped
- thunderbolt: Initialize after IOMMUs
- RISCV: Fix end PFN for low memory
- drm/amd/display: Signal hw_done() after waiting for flip_done()
- powerpc/numa: Skip onlining a offline node in kdump path
- mm/gup_benchmark: fix unsigned comparison to zero in __gup_benchmark_ioctl
- perf report: Don't try to map ip to invalid map
- perf record: Use unmapped IP for inline callchain cursors
- rxrpc: Carry call state out of locked section in rxrpc_rotate_tx_window()
- gpio: Assign gpio_irq_chip::parents to non-stack pointer
- IB/mlx5: Unmap DMA addr from HCA before IOMMU
- rds: RDS (tcp) hangs on sendto() to unresponding address
- sparc64: Export __node_distance.
- sparc64: Make corrupted user stacks more debuggable.
- sparc64: Make proc_id signed.
- sparc64: Set %l4 properly on trap return after handling signals.
- sparc: Fix single-pcr perf event counter management.
- sparc: Fix syscall fallback bugs in VDSO.
- sparc: Throttle perf events properly.
- eeprom: at24: Add support for address-width property
- vfs: swap names of {do,vfs}_clone_file_range()
- bpf: fix partial copy of map_ptr when dst is scalar
- gpio: mxs: Get rid of external API call
- xfs: truncate transaction does not modify the inobt
- cachefiles: fix the race between cachefiles_bury_object() and rmdir(2)
- drm/edid: VSDB yCBCr420 Deep Color mode bit definitions
- drm: fb-helper: Reject all pixel format changing requests
- cdc-acm: do not reset notification buffer index upon urb unlinking
- cdc-acm: correct counting of UART states in serial state notification
- cdc-acm: fix race between reset and control messaging
- usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
- USB: fix the usbfs flag sanitization for control transfers
- Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15IGM
- sched/fair: Fix throttle_list starvation with low CFS quota
- x86/tsc: Force inlining of cyc2ns bits
- x86, hibernate: Fix nosave_regions setup for hibernation
- x86/percpu: Fix this_cpu_read()
- x86/time: Correct the attribute on jiffies' definition
- x86/fpu: Fix i486 + no387 boot crash by only saving FPU registers on context
switch if there is an FPU
- clk: sunxi-ng: sun4i: Set VCO and PLL bias current to lowest setting
- drm/sun4i: Fix an ulong overflow in the dotclock driver
- x86/swiotlb: Enable swiotlb for > 4GiG RAM on 32-bit kernels
* Colour banding in HP Pavilion 15-n233sl integrated display (LP: #1794387) //
Bionic update: upstream stable patchset 2019-07-15 (LP: #1836654)
- drm/edid: Add 6 bpc quirk for BOE panel in HP Pavilion 15-n233sl
* Bionic update: upstream stable patchset 2019-07-12 (LP: #1836426)
- drm/amd/pp: initialize result to before or'ing in data
- drm/amdgpu: add another ATPX quirk for TOPAZ
- tools/power turbostat: fix possible sprintf buffer overflow
- mac80211: Run TXQ teardown code before de-registering interfaces
- mac80211_hwsim: require at least one channel
- btrfs: btrfs_shrink_device should call commit transaction at the end
- scsi: csiostor: add a check for NULL pointer after kmalloc()
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
- gpio: adp5588: Fix sleep-in-atomic-context bug
- mac80211: mesh: fix HWMP sequence numbering to follow standard
- mac80211: avoid kernel panic when building AMSDU from non-linear SKB
- gpiolib: acpi: Switch to cansleep version of GPIO library call
- gpiolib-acpi: Register GpioInt ACPI event handlers from a late_initcall
- cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE
- mac80211: do not convert to A-MSDU if frag/subframe limited
- mac80211: always account for A-MSDU header changes
- tools/kvm_stat: fix handling of invalid paths in debugfs provider
- gpio: Fix crash due to registration race
- ARC: atomics: unbork atomic_fetch_##op()
- md/raid5-cache: disable reshape completely
- RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0
- i2c: uniphier: issue STOP only for last message or I2C_M_STOP
- i2c: uniphier-f: issue STOP only for last message or I2C_M_STOP
- net: cadence: Fix a sleep-in-atomic-context bug in macb_halt_tx()
- fs/cifs: don't translate SFM_SLASH (U+F026) to backslash
- mac80211: fix an off-by-one issue in A-MSDU max_subframe computation
- cfg80211: fix a type issue in ieee80211_chandef_to_operating_class()
- mac80211: fix a race between restart and CSA flows
- mac80211: Fix station bandwidth setting after channel switch
- mac80211: don't Tx a deauth frame if the AP forbade Tx
- mac80211: shorten the IBSS debug messages
- tools/vm/slabinfo.c: fix sign-compare warning
- tools/vm/page-types.c: fix "defined but not used" warning
- mm: madvise(MADV_DODUMP): allow hugetlbfs pages
- netfilter: xt_cluster: add dependency on conntrack module
- HID: add support for Apple Magic Keyboards
- usb: gadget: fotg210-udc: Fix memory leak of fotg210->ep[i]
- HID: hid-saitek: Add device ID for RAT 7 Contagion
- scsi: qedi: Add the CRC size within iSCSI NVM image
- perf evsel: Fix potential null pointer dereference in perf_evsel__new_idx()
- perf util: Fix bad memory access in trace info.
- perf probe powerpc: Ignore SyS symbols irrespective of endianness
- netfilter: nf_tables: release chain in flushing set
- Revert "iio: temperature: maxim_thermocouple: add MAX31856 part"
- RDMA/ucma: check fd type in ucma_migrate_id()
- HID: sensor-hub: Restore fixup for Lenovo ThinkPad Helix 2 sensor hub report
- USB: yurex: Check for truncation in yurex_read()
- nvmet-rdma: fix possible bogus dereference under heavy load
- net/mlx5: Consider PCI domain in search for next dev
- drm/nouveau/TBDdevinit: don't fail when PMU/PRE_OS is missing from VBIOS
- drm/nouveau/disp: fix DP disable race
- dm raid: fix rebuild of specific devices by updating superblock
- fs/cifs: suppress a string overflow warning
- perf/x86/intel: Add support/quirk for the MISPREDICT bit on Knights Landing
CPUs
- dm thin metadata: try to avoid ever aborting transactions
- arch/hexagon: fix kernel/dma.c build warning
- hexagon: modify ffs() and fls() to return int
- arm64: jump_label.h: use asm_volatile_goto macro instead of "asm goto"
- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk
- r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED
- s390/qeth: don't dump past end of unknown HW header
- cifs: read overflow in is_valid_oplock_break()
- xen/manage: don't complain about an empty value in control/sysrq node
- xen: avoid crash in disable_hotplug_cpu
- xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage
- ovl: fix access beyond unterminated strings
- ovl: fix memory leak on unlink of indexed file
- ovl: fix format of setxattr debug
- sysfs: Do not return POSIX ACL xattrs via listxattr
- smb2: fix missing files in root share directory listing
- iommu/amd: Clear memory encryption mask from physical address
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
- crypto: mxs-dcp - Fix wait logic on chan threads
- crypto: caam/jr - fix ablkcipher_edesc pointer arithmetic
- gpiolib: Free the last requested descriptor
- Drivers: hv: vmbus: Use get/put_cpu() in vmbus_connect()
- tools: hv: fcopy: set 'error' in case an unknown operation was requested
- ocfs2: fix locking for res->tracking and dlm->tracking_list
- ixgbe: check return value of napi_complete_done()
- dm thin metadata: fix __udivdi3 undefined on 32-bit
- Btrfs: fix unexpected failure of nocow buffered writes after snapshotting
when low on space
- scsi: aacraid: fix a signedness bug
- tipc: switch to rhashtable iterator
- net: mvpp2: initialize port of_node pointer
- tc-testing: add test-cases for numeric and invalid control action
- tools/kvm_stat: fix updates for dead guests
- ibmvnic: Include missing return code checks in reset function
- net/ibm/emac: wrong emac_calc_base call was used by typo
- ceph: avoid a use-after-free in ceph_destroy_options()
- afs: Fix cell specification to permit an empty address list
- netfilter: xt_checksum: ignore gso skbs
- HID: intel-ish-hid: Enable Sunrise Point-H ish driver
- iio: imu: st_lsm6dsx: take into account ts samples in wm configuration
- riscv: Do not overwrite initrd_start and initrd_end
- drm/nouveau: fix oops in client init failure path
- drm/nouveau/mmu: don't attempt to dereference vmm without valid instance
pointer
- drm/nouveau/disp/gm200-: enforce identity-mapped SOR assignment for LVDS/eDP
panels
- sched/topology: Set correct NUMA topology type
- drm/amdgpu: Fix SDMA hang in prt mode v2
- asm-generic: io: Fix ioport_map() for !CONFIG_GENERIC_IOMAP &&
CONFIG_INDIRECT_PIO
- x86/APM: Fix build warning when PROC_FS is not enabled
- new primitive: discard_new_inode()
- ovl: set I_CREATING on inode being created
- crypto: chelsio - Fix memory corruption in DMA Mapped buffers.
- perf/core: Add sanity check to deal with pinned event failure
- mm: migration: fix migration of huge PMD shared pages
- mm, thp: fix mlocking THP page with migration enabled
- mm/vmstat.c: skip NR_TLB_REMOTE_FLUSH* properly
- KVM: x86: fix L1TF's MMIO GFN calculation
- blk-mq: I/O and timer unplugs are inverted in blktrace
- clocksource/drivers/timer-atmel-pit: Properly handle error cases
- fbdev/omapfb: fix omapfb_memory_read infoleak
- drm/amdgpu: Fix vce work queue was not cancelled when suspend
- x86/vdso: Fix asm constraints on vDSO syscall fallbacks
- selftests/x86: Add clock_gettime() tests to test_vdso
- x86/vdso: Only enable vDSO retpolines when enabled and supported
- x86/vdso: Fix vDSO syscall fallback asm constraint regression
- mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys
- PM / core: Clear the direct_complete flag on errors
- dm cache metadata: ignore hints array being too small during resize
- dm cache: fix resize crash if user doesn't reload cache table
- xhci: Add missing CAS workaround for Intel Sunrise Point xHCI
- usb: xhci-mtk: resume USB3 roothub first
- USB: serial: simple: add Motorola Tetra MTP6550 id
- usb: cdc_acm: Do not leak URB buffers
- of: unittest: Disable interrupt node tests for old world MAC systems
- perf annotate: Use asprintf when formatting objdump command line
- perf tools: Fix python extension build for gcc 8
- ath10k: fix use-after-free in ath10k_wmi_cmd_send_nowait
- ath10k: fix kernel panic issue during pci probe
- nvme_fc: fix ctrl create failures racing with workq items
- powerpc/lib: fix book3s/32 boot failure due to code patching
- ARC: clone syscall to setp r25 as thread pointer
- perf utils: Move is_directory() to path.h
- f2fs: fix invalid memory access
- ucma: fix a use-after-free in ucma_resolve_ip()
- ubifs: Check for name being NULL while mounting
- rds: rds_ib_recv_alloc_cache() should call alloc_percpu_gfp() instead
- ath10k: fix scan crash due to incorrect length calculation
- pstore/ram: Fix failure-path memory leak in ramoops_init
- mac80211: allocate TXQs for active monitor interfaces
- drm: fix use-after-free read in drm_mode_create_lease_ioctl()
- USB: serial: option: improve Quectel EP06 detection
- USB: serial: option: add two-endpoints device-id flag
- tipc: call start and done ops directly in __tipc_nl_compat_dumpit()
- bnxt_en: Fix TX timeout during netpoll.
- bnxt_en: free hwrm resources, if driver probe fails.
- bonding: avoid possible dead-lock
- ip6_tunnel: be careful when accessing the inner header
- ip_tunnel: be careful when accessing the inner header
- ipv4: fix use-after-free in ip_cmsg_recv_dstaddr()
- ipv6: take rcu lock in rawv6_send_hdrinc()
- net: dsa: bcm_sf2: Call setup during switch resume
- net: hns: fix for unmapping problem when SMMU is on
- net: ipv4: update fnhe_pmtu when first hop's MTU changes
- net/ipv6: Display all addresses in output of /proc/net/if_inet6
- netlabel: check for IPV4MASK in addrinfo_get
- net: mvpp2: Extract the correct ethtype from the skb for tx csum offload
- net: mvpp2: fix a txq_done race condition
- net: sched: Add policy validation for tc attributes
- net: systemport: Fix wake-up interrupt race during resume
- net/usb: cancel pending work when unbinding smsc75xx
- qmi_wwan: Added support for Gemalto's Cinterion ALASxx WWAN interface
- rtnl: limit IFLA_NUM_TX_QUEUES and IFLA_NUM_RX_QUEUES to 4096
- sctp: update dst pmtu with the correct daddr
- team: Forbid enslaving team device to itself
- tipc: fix flow control accounting for implicit connect
- udp: Unbreak modules that rely on external __skb_recv_udp() availability
- net: stmmac: Fixup the tail addr setting in xmit path
- net/packet: fix packet drop as of virtio gso
- net: dsa: bcm_sf2: Fix unbind ordering
- net/mlx5e: Set vlan masks for all offloaded TC rules
- net: aquantia: memory corruption on jumbo frames
- net/mlx5: E-Switch, Fix out of bound access when setting vport rate
- bonding: pass link-local packets to bonding master also.
- bonding: fix warning message
- nfp: avoid soft lockups under control message storm
- bnxt_en: don't try to offload VLAN 'modify' action
- net-ethtool: ETHTOOL_GUFO did not and should not require CAP_NET_ADMIN
- tcp/dccp: fix lockdep issue when SYN is backlogged
- inet: make sure to grab rcu_read_lock before using ireq->ireq_opt
- ASoC: rt5514: Fix the issue of the delay volume applied again
- ASoC: wm8804: Add ACPI support
- ASoC: sigmadsp: safeload should not have lower byte limit
- selftests/efivarfs: add required kernel configs
- selftests: memory-hotplug: add required configs
- ASoC: rsnd: adg: care clock-frequency size
- ASoC: rsnd: don't fallback to PIO mode when -EPROBE_DEFER
- Bluetooth: hci_ldisc: Free rw_semaphore on close
- mfd: omap-usb-host: Fix dts probe of children
- scsi: iscsi: target: Don't use stack buffer for scatterlist
- scsi: qla2xxx: Fix an endian bug in fcpcmd_is_corrupted()
- sound: enable interrupt after dma buffer initialization
- sound: don't call skl_init_chip() to reset intel skl soc
- stmmac: fix valid numbers of unicast filter entries
- net: macb: disable scatter-gather for macb on sama5d3
- ARM: dts: at91: add new compatibility string for macb on sama5d3
- PCI: hv: support reporting serial number as slot information
- clk: x86: add "ether_clk" alias for Bay Trail / Cherry Trail
- clk: x86: Stop marking clocks as CLK_IS_CRITICAL
- x86/kvm/lapic: always disable MMIO interface in x2APIC mode
- drm/amdgpu: Fix SDMA HQD destroy error on gfx_v7
- mm/vmstat.c: fix outdated vmstat_text
- MIPS: VDSO: Always map near top of user memory
- mach64: detect the dot clock divider correctly on sparc
- percpu: stop leaking bitmap metadata blocks
- perf script python: Fix export-to-postgresql.py occasional failure
- perf script python: Fix export-to-sqlite.py sample columns
- s390/cio: Fix how vfio-ccw checks pinned pages
- dm cache: destroy migration_cache if cache target registration failed
- dm: fix report zone remapping to account for partition offset
- dm linear: eliminate linear_end_io call if CONFIG_DM_ZONED disabled
- dm linear: fix linear_end_io conditional definition
- cgroup: Fix dom_cgrp propagation when enabling threaded mode
- mmc: block: avoid multiblock reads for the last sector in SPI mode
- pinctrl: mcp23s08: fix irq and irqchip setup order
- arm64: perf: Reject stand-alone CHAIN events for PMUv3
- mm/thp: fix call to mmu_notifier in set_pmd_migration_entry() v2
- mm: Preserve _PAGE_DEVMAP across mprotect() calls
- i2c: i2c-scmi: fix for i2c_smbus_write_block_data
- xhci: Don't print a warning when setting link state for disabled ports
- mm: introduce NR_INDIRECTLY_RECLAIMABLE_BYTES
- mm: treat indirectly reclaimable memory as available in MemAvailable
- dcache: account external names as indirectly reclaimable memory
- mm: treat indirectly reclaimable memory as free in overcommit logic
- mm: don't show nr_indirectly_reclaimable in /proc/vmstat
- ARM: add more CPU part numbers for Cortex and Brahma B15 CPUs
- ARM: bugs: prepare processor bug infrastructure
- ARM: bugs: hook processor bug checking into SMP and suspend paths
- ARM: bugs: add support for per-processor bug checking
- [Config] updateconfigs for CPU_SPECTRE
- ARM: spectre: add Kconfig symbol for CPUs vulnerable to Spectre
- ARM: spectre-v2: harden branch predictor on context switches
- ARM: spectre-v2: add Cortex A8 and A15 validation of the IBE bit
- ARM: spectre-v2: harden user aborts in kernel space
- ARM: spectre-v2: add firmware based hardening
- ARM: spectre-v2: warn about incorrect context switching functions
- ARM: KVM: invalidate BTB on guest exit for Cortex-A12/A17
- ARM: KVM: invalidate icache on guest exit for Cortex-A15
- ARM: spectre-v2: KVM: invalidate icache on guest exit for Brahma B15
- ARM: KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling
- ARM: KVM: report support for SMCCC_ARCH_WORKAROUND_1
- ARM: spectre-v1: add speculation barrier (csdb) macros
- ARM: spectre-v1: add array_index_mask_nospec() implementation
- ARM: spectre-v1: fix syscall entry
- ARM: signal: copy registers using __copy_from_user()
- ARM: vfp: use __copy_from_user() when restoring VFP state
- ARM: oabi-compat: copy semops using __copy_from_user()
- ARM: use __inttype() in get_user()
- ARM: spectre-v1: use get_user() for __get_user()
- ARM: spectre-v1: mitigate user accesses
- perf tools: Fix snprint warnings for gcc 8
- net: sched: cls_u32: fix hnode refcounting
- net: qualcomm: rmnet: Skip processing loopback packets
- net: qualcomm: rmnet: Fix incorrect allocation flag in transmit
- tun: remove unused parameters
- tun: initialize napi_mutex unconditionally
- tun: napi flags belong to tfile
- net: dsa: b53: Keep CPU port as tagged in all VLANs
- rtnetlink: Fail dump if target netnsid is invalid
- net: ipv4: don't let PMTU updates increase route MTU
- ASoC: dapm: Fix NULL pointer deference on CODEC to CODEC DAIs
- selftests: android: move config up a level
- selftests: add headers_install to lib.mk
- Bluetooth: SMP: Fix trying to use non-existent local OOB data
- Bluetooth: Use correct tfm to generate OOB data
- net: ethernet: ti: add missing GENERIC_ALLOCATOR dependency
- afs: Fix afs_server struct leak
- afs: Fix clearance of reply
* Volume control not working Dell XPS 27 (7760) (LP: #1775068) // Bionic
update: upstream stable patchset 2019-07-12 (LP: #1836426)
- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell XPS 27 7760
* Bionic update: upstream stable patchset 2019-07-11 (LP: #1836287)
- perf tools: Fix undefined symbol scnprintf in libperf-jvmti.so
- gso_segment: Reset skb->mac_len after modifying network header
- ipv6: fix possible use-after-free in ip6_xmit()
- net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT
- net: hp100: fix always-true check for link up state
- pppoe: fix reception of frames with no mac header
- qmi_wwan: set DTR for modems in forced USB2 mode
- udp4: fix IP_CMSG_CHECKSUM for connected sockets
- neighbour: confirm neigh entries when ARP packet is received
- udp6: add missing checks on edumux packet processing
- net/sched: act_sample: fix NULL dereference in the data path
- tls: don't copy the key out of tls12_crypto_info_aes_gcm_128
- tls: zero the crypto information from tls_context before freeing
- tls: clear key material from kernel memory when do_tls_setsockopt_conf fails
- NFC: Fix possible memory corruption when handling SHDLC I-Frame commands
- NFC: Fix the number of pipes
- ASoC: cs4265: fix MMTLR Data switch control
- ASoC: rsnd: fixup not to call clk_get/set under non-atomic
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at error
path
- ALSA: bebob: use address returned by kmalloc() instead of kernel stack for
streaming DMA mapping
- ALSA: emu10k1: fix possible info leak to userspace on
SNDRV_EMU10K1_IOCTL_INFO
- ALSA: fireface: fix memory leak in ff400_switch_fetching_mode()
- ALSA: firewire-digi00x: fix memory leak of private data
- ALSA: firewire-tascam: fix memory leak of private data
- ALSA: fireworks: fix memory leak of response buffer at error path
- ALSA: oxfw: fix memory leak for model-dependent data at error path
- ALSA: oxfw: fix memory leak of discovered stream formats at error path
- ALSA: oxfw: fix memory leak of private data
- platform/x86: alienware-wmi: Correct a memory leak
- xen/netfront: don't bug in case of too many frags
- xen/x86/vpmu: Zero struct pt_regs before calling into sample handling code
- spi: fix IDR collision on systems with both fixed and dynamic SPI bus
numbers
- ring-buffer: Allow for rescheduling when removing pages
- mm: shmem.c: Correctly annotate new inodes for lockdep
- scsi: target: iscsi: Use bin2hex instead of a re-implementation
- ocfs2: fix ocfs2 read block panic
- drm/nouveau: Fix deadlocks in nouveau_connector_detect()
- drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload
- drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement
- drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect()
- drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early
- drm/vc4: Fix the "no scaling" case on multi-planar YUV formats
- drm: udl: Destroy framebuffer only if it was initialized
- drm/amdgpu: add new polaris pci id
- ext4: check to make sure the rename(2)'s destination is not freed
- ext4: avoid divide by zero fault when deleting corrupted inline directories
- ext4: avoid arithemetic overflow that can trigger a BUG
- ext4: recalucate superblock checksum after updating free blocks/inodes
- ext4: fix online resize's handling of a too-small final block group
- ext4: fix online resizing for bigalloc file systems with a 1k block size
- ext4: don't mark mmp buffer head dirty
- ext4: show test_dummy_encryption mount option in /proc/mounts
- sched/fair: Fix vruntime_normalized() for remote non-migration wakeup
- PCI: aardvark: Size bridges before resources allocation
- vmw_balloon: include asm/io.h
- iw_cxgb4: only allow 1 flush on user qps
- tick/nohz: Prevent bogus softirq pending warning
- spi: Fix double IDR allocation with DT aliases
- hv_netvsc: fix schedule in RCU context
- bnxt_en: Fix VF mac address regression.
- net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags
- mtd: rawnand: denali: fix a race condition when DMA is kicked
- platform/x86: dell-smbios-wmi: Correct a memory leak
- fork: report pid exhaustion correctly
- mm: disable deferred struct page for 32-bit arches
- libata: mask swap internal and hardware tag
- drm/i915/bdw: Increase IPS disable timeout to 100ms
- drm/nouveau: Reset MST branching unit before enabling
- drm/nouveau: Only write DP_MSTM_CTRL when needed
- drm/nouveau: Remove duplicate poll_enable() in pmops_runtime_suspend()
- ext4, dax: set ext4_dax_aops for dax files
- crypto: skcipher - Fix -Wstringop-truncation warnings
- iio: adc: ina2xx: avoid kthread_stop() with stale task_struct
- tsl2550: fix lux1_input error in low light
- vmci: type promotion bug in qp_host_get_user_memory()
- x86/numa_emulation: Fix emulated-to-physical node mapping
- staging: rts5208: fix missing error check on call to rtsx_write_register
- power: supply: axp288_charger: Fix initial constant_charge_current value
- misc: sram: enable clock before registering regions
- serial: sh-sci: Stop RX FIFO timer during port shutdown
- uwb: hwa-rc: fix memory leak at probe
- power: vexpress: fix corruption in notifier registration
- iommu/amd: make sure TLB to be flushed before IOVA freed
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009
- USB: serial: kobil_sct: fix modem-status error handling
- 6lowpan: iphc: reset mac_header after decompress to fix panic
- iommu/msm: Don't call iommu_device_{,un}link from atomic context
- s390/mm: correct allocate_pgste proc_handler callback
- power: remove possible deadlock when unregistering power_supply
- md-cluster: clear another node's suspend_area after the copy is finished
- RDMA/bnxt_re: Fix a couple off by one bugs
- RDMA/i40w: Hold read semaphore while looking after VMA
- IB/core: type promotion bug in rdma_rw_init_one_mr()
- media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt()
- IB/mlx4: Test port number before querying type.
- powerpc/kdump: Handle crashkernel memory reservation failure
- media: fsl-viu: fix error handling in viu_of_probe()
- media: staging/imx: fill vb2_v4l2_buffer field entry
- x86/tsc: Add missing header to tsc_msr.c
- ARM: hwmod: RTC: Don't assume lock/unlock will be called with irq enabled
- x86/entry/64: Add two more instruction suffixes
- ARM: dts: ls1021a: Add missing cooling device properties for CPUs
- scsi: target/iscsi: Make iscsit_ta_authentication() respect the output
buffer size
- scsi: klist: Make it safe to use klists in atomic context
- scsi: ibmvscsi: Improve strings handling
- scsi: target: Avoid that EXTENDED COPY commands trigger lock inversion
- usb: wusbcore: security: cast sizeof to int for comparison
- ath10k: sdio: use same endpoint id for all packets in a bundle
- ath10k: sdio: set skb len for all rx packets
- powerpc/powernv/ioda2: Reduce upper limit for DMA window size
- s390/sysinfo: add missing #ifdef CONFIG_PROC_FS
- alarmtimer: Prevent overflow for relative nanosleep
- s390/dasd: correct numa_node in dasd_alloc_queue
- s390/scm_blk: correct numa_node in scm_blk_dev_setup
- s390/extmem: fix gcc 8 stringop-overflow warning
- mtd: rawnand: atmel: add module param to avoid using dma
- iio: accel: adxl345: convert address field usage in iio_chan_spec
- posix-timers: Make forward callback return s64
- ALSA: snd-aoa: add of_node_put() in error path
- media: s3c-camif: ignore -ENOIOCTLCMD from v4l2_subdev_call for s_power
- media: soc_camera: ov772x: correct setting of banding filter
- media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial data
- staging: android: ashmem: Fix mmap size validation
- drivers/tty: add error handling for pcmcia_loop_config
- media: tm6000: add error handling for dvb_register_adapter
- net: phy: xgmiitorgmii: Check read_status results
- ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock
- net: phy: xgmiitorgmii: Check phy_driver ready before accessing
- drm/sun4i: Fix releasing node when enumerating enpoints
- ath10k: transmit queued frames after processing rx packets
- rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication()
- brcmsmac: fix wrap around in conversion from constant to s16
- ARM: mvebu: declare asm symbols as character arrays in pmsu.c
- arm: dts: mediatek: Add missing cooling device properties for CPUs
- HID: hid-ntrig: add error handling for sysfs_create_group
- MIPS: boot: fix build rule of vmlinux.its.S
- perf/x86/intel/lbr: Fix incomplete LBR call stack
- scsi: bnx2i: add error handling for ioremap_nocache
- iomap: complete partial direct I/O writes synchronously
- scsi: megaraid_sas: Update controller info during resume
- EDAC, i7core: Fix memleaks and use-after-free on probe and remove
- ASoC: dapm: Fix potential DAI widget pointer deref when linking DAIs
- module: exclude SHN_UNDEF symbols from kallsyms api
- gpio: Fix wrong rounding in gpio-menz127
- nfsd: fix corrupted reply to badly ordered compound
- EDAC: Fix memleak in module init error path
- fs/lock: skip lock owner pid translation in case we are in init_pid_ns
- Input: xen-kbdfront - fix multi-touch XenStore node's locations
- iio: 104-quad-8: Fix off-by-one error in register selection
- ARM: dts: dra7: fix DCAN node addresses
- x86/mm: Expand static page table for fixmap space
- tty: serial: lpuart: avoid leaking struct tty_struct
- serial: cpm_uart: return immediately from console poll
- intel_th: Fix device removal logic
- spi: tegra20-slink: explicitly enable/disable clock
- spi: sh-msiof: Fix invalid SPI use during system suspend
- spi: sh-msiof: Fix handling of write value for SISTR register
- spi: rspi: Fix invalid SPI use during system suspend
- spi: rspi: Fix interrupted DMA transfers
- regulator: fix crash caused by null driver data
- USB: fix error handling in usb_driver_claim_interface()
- USB: handle NULL config in usb_find_alt_setting()
- usb: musb: dsps: do not disable CPPI41 irq in driver teardown
- slub: make ->cpu_partial unsigned int
- USB: usbdevfs: sanitize flags more
- USB: usbdevfs: restore warning for nonsensical flags
- USB: remove LPM management from usb_driver_claim_interface()
- IB/srp: Avoid that sg_reset -d ${srp_device} triggers an infinite loop
- IB/hfi1: Fix SL array bounds check
- IB/hfi1: Invalid user input can result in crash
- IB/hfi1: Fix context recovery when PBC has an UnsupportedVL
- RDMA/uverbs: Atomically flush and mark closed the comp event queue
- ovl: hash non-dir by lower inode for fsnotify
- drm/i915: Remove vma from object on destroy, not close
- serial: imx: restore handshaking irq for imx1
- qed: Wait for ready indication before rereading the shmem
- qed: Wait for MCP halt and resume commands to take place
- qed: Prevent a possible deadlock during driver load and unload
- qed: Avoid sending mailbox commands when MFW is not responsive
- thermal: of-thermal: disable passive polling when thermal zone is disabled
- isofs: reject hardware sector size > 2048 bytes
- tls: possible hang when do_tcp_sendpages hits sndbuf is full case
- bpf: sockmap: write_space events need to be passed to TCP handler
- net: hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES
- e1000: check on netif_running() before calling e1000_up()
- e1000: ensure to free old tx/rx rings in set_ringparam()
- crypto: cavium/nitrox - fix for command corruption in queue full case with
backlog submissions.
- hwmon: (ina2xx) fix sysfs shunt resistor read access
- hwmon: (adt7475) Make adt7475_read_word() return errors
- Revert "ARM: dts: imx7d: Invert legacy PCI irq mapping"
- drm/amdgpu: Enable/disable gfx PG feature in rlc safe mode
- drm/amdgpu: Update power state at the end of smu hw_init.
- ata: ftide010: Add a quirk for SQ201
- nvme-fcloop: Fix dropped LS's to removed target port
- ARM: dts: omap4-droid4: Fix emmc errors seen on some devices
- arm/arm64: smccc-1.1: Make return values unsigned long
- arm/arm64: smccc-1.1: Handle function result as parameters
- i2c: i801: Allow ACPI AML access I/O ports not reserved for SMBus
- x86/pti: Fix section mismatch warning/error
- media: v4l: event: Prevent freeing event subscriptions while accessed
- drm/amd/display/dc/dce: Fix multiple potential integer overflows
- drm/amd/display: fix use of uninitialized memory
- RDMA/bnxt_re: Fix a bunch of off by one bugs in qplib_fp.c
- vhost_net: Avoid tx vring kicks during busyloop
- thermal: i.MX: Allow thermal probe to fail gracefully in case of bad
calibration.
- platform/x86: asus-wireless: Fix uninitialized symbol usage
- ACPI / button: increment wakeup count only when notified
- media: ov772x: add checks for register read errors
- media: ov772x: allow i2c controllers without I2C_FUNC_PROTOCOL_MANGLING
- drm/omap: gem: Fix mm_list locking
- ASoC: rsnd: SSI parent cares SWSP bit
- staging: pi433: fix race condition in pi433_ioctl
- perf tests: Fix indexing when invoking subtests
- gpio: tegra: Fix tegra_gpio_irq_set_type()
- block: fix deadline elevator drain for zoned block devices
- serial: mvebu-uart: Fix reporting of effective CSIZE to userspace
- intel_th: Fix resource handling for ACPI glue layer
- ext2, dax: set ext2_dax_aops for dax files
- IB/hfi1: Fix destroy_qp hang after a link down
- ARM: OMAP2+: Fix null hwmod for ti-sysc debug
- ARM: OMAP2+: Fix module address for modules using mpu_rt_idx
- bus: ti-sysc: Fix module register ioremap for larger offsets
- drm/amdgpu: fix preamble handling
- amdgpu: fix multi-process hang issue
- tcp_bbr: add bbr_check_probe_rtt_done() helper
- tcp_bbr: in restart from idle, see if we should exit PROBE_RTT
- net: hns3: fix page_offset overflow when CONFIG_ARM64_64K_PAGES
- ixgbe: fix driver behaviour after issuing VFLR
- powerpc/pseries: Fix unitialized timer reset on migration
* Kernel 4.15.0-50 or newer wont boot as Xen-DomU with PVH (LP: #1829378)
- SAUCE: ACPI / bus: Fix NULL pointer dereference in
acpi_quirk_matches_bios_ids()
* CVE-2019-10126
- mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()
* CVE-2019-3846
- mwifiex: Fix possible buffer overflows at parsing bss descriptor
* CVE-2019-12818
- net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails
* CVE-2019-12984
- nfc: Ensure presence of required attributes in the deactivate_target handler
* Bionic update: upstream stable patchset 2019-07-10 (LP: #1836117)
- i2c: xiic: Make the start and the byte count write atomic
- i2c: i801: fix DNV's SMBCTRL register offset
- scsi: lpfc: Correct MDS diag and nvmet configuration
- nbd: don't allow invalid blocksize settings
- block: bfq: swap puts in bfqg_and_blkg_put
- android: binder: fix the race mmap and alloc_new_buf_locked
- MIPS: VDSO: Match data page cache colouring when D$ aliases
- SMB3: Backup intent flag missing for directory opens with backupuid mounts
- smb3: check for and properly advertise directory lease support
- Btrfs: fix data corruption when deduplicating between different files
- KVM: s390: vsie: copy wrapping keys to right place
- KVM: VMX: Do not allow reexecute_instruction() when skipping MMIO instr
- ALSA: hda - Fix cancel_work_sync() stall from jackpoll work
- cpu/hotplug: Adjust misplaced smb() in cpuhp_thread_fun()
- cpu/hotplug: Prevent state corruption on error rollback
- x86/microcode: Make sure boot_cpu_data.microcode is up-to-date
- x86/microcode: Update the new microcode revision unconditionally
- crypto: aes-generic - fix aes-generic regression on powerpc
- tpm: separate cmd_ready/go_idle from runtime_pm
- ARC: [plat-axs*]: Enable SWAP
- misc: mic: SCIF Fix scif_get_new_port() error handling
- ethtool: Remove trailing semicolon for static inline
- i2c: aspeed: Add an explicit type casting for *get_clk_reg_val
- Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV
- gpio: tegra: Move driver registration to subsys_init level
- selftests/bpf: fix a typo in map in map test
- media: davinci: vpif_display: Mix memory leak on probe error path
- media: dw2102: Fix memleak on sequence of probes
- net: phy: Fix the register offsets in Broadcom iProc mdio mux driver
- blk-mq: fix updating tags depth
- scsi: target: fix __transport_register_session locking
- md/raid5: fix data corruption of replacements after originals dropped
- timers: Clear timer_base::must_forward_clk with timer_base::lock held
- media: camss: csid: Configure data type and decode format properly
- gpu: ipu-v3: default to id 0 on missing OF alias
- misc: ti-st: Fix memory leak in the error path of probe()
- uio: potential double frees if __uio_register_device() fails
- firmware: vpd: Fix section enabled flag on vpd_section_destroy
- Drivers: hv: vmbus: Cleanup synic memory free path
- tty: rocket: Fix possible buffer overwrite on register_PCI
- f2fs: fix to active page in lru list for read path
- f2fs: do not set free of current section
- f2fs: fix defined but not used build warnings
- perf tools: Allow overriding MAX_NR_CPUS at compile time
- NFSv4.0 fix client reference leak in callback
- perf c2c report: Fix crash for empty browser
- perf evlist: Fix error out while applying initial delay and LBR
- macintosh/via-pmu: Add missing mmio accessors
- ath9k: report tx status on EOSP
- ath9k_hw: fix channel maximum power level test
- ath10k: prevent active scans on potential unusable channels
- wlcore: Set rx_status boottime_ns field on rx
- MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET
- scsi: 3ware: fix return 0 on the error path of probe
- tools/testing/nvdimm: kaddr and pfn can be NULL to ->direct_access()
- ath10k: disable bundle mgmt tx completion event support
- Bluetooth: hidp: Fix handling of strncpy for hid->name information
- pinctrl: imx: off by one in imx_pinconf_group_dbg_show()
- gpio: ml-ioh: Fix buffer underwrite on probe error path
- pinctrl/amd: only handle irq if it is pending and unmasked
- net: mvneta: fix mtu change on port without link
- f2fs: try grabbing node page lock aggressively in sync scenario
- f2fs: fix to skip GC if type in SSA and SIT is inconsistent
- tpm_tis_spi: Pass the SPI IRQ down to the driver
- tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
- f2fs: fix to do sanity check with reserved blkaddr of inline inode
- MIPS: Octeon: add missing of_node_put()
- MIPS: generic: fix missing of_node_put()
- net: dcb: For wild-card lookups, use priority -1, not 0
- dm cache: only allow a single io_mode cache feature to be requested
- Input: atmel_mxt_ts - only use first T9 instance
- media: s5p-mfc: Fix buffer look up in s5p_mfc_handle_frame_{new, copy_time}
functions
- media: helene: fix xtal frequency setting at power on
- f2fs: fix to wait on page writeback before updating page
- f2fs: Fix uninitialized return in f2fs_ioc_shutdown()
- iommu/ipmmu-vmsa: Fix allocation in atomic context
- mfd: ti_am335x_tscadc: Fix struct clk memory leak
- f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize
- NFSv4.1: Fix a potential layoutget/layoutrecall deadlock
- MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON
- RDMA/cma: Do not ignore net namespace for unbound cm_id
- inet: frags: change inet_frags_init_net() return value
- inet: frags: add a pointer to struct netns_frags
- inet: frags: refactor ipfrag_init()
- inet: frags: refactor ipv6_frag_init()
- inet: frags: refactor lowpan_net_frag_init()
- ipv6: export ip6 fragments sysctl to unprivileged users
- rhashtable: add schedule points
- inet: frags: use rhashtables for reassembly units
- inet: frags: remove some helpers
- inet: frags: get rif of inet_frag_evicting()
- inet: frags: remove inet_frag_maybe_warn_overflow()
- inet: frags: break the 2GB limit for frags storage
- inet: frags: do not clone skb in ip_expire()
- ipv6: frags: rewrite ip6_expire_frag_queue()
- rhashtable: reorganize struct rhashtable layout
- inet: frags: reorganize struct netns_frags
- inet: frags: get rid of ipfrag_skb_cb/FRAG_CB
- inet: frags: fix ip6frag_low_thresh boundary
- ip: discard IPv4 datagrams with overlapping segments.
- net: modify skb_rbtree_purge to return the truesize of all purged skbs.
- ipv6: defrag: drop non-last frags smaller than min mtu
- net: pskb_trim_rcsum() and CHECKSUM_COMPLETE are friends
- mtd: ubi: wl: Fix error return code in ubi_wl_init()
- tun: fix use after free for ptr_ring
- tuntap: fix use after free during release
- autofs: fix autofs_sbi() does not check super block type
- KVM: PPC: Book3S HV: Use correct pagesize in kvm_unmap_radix()
- ARC: [plat-axs*/plat-hsdk]: Allow U-Boot to pass MAC-address to the kernel
- x86/apic/vector: Make error return value negative
- tc-testing: flush gact actions on test teardown
- pinctrl: berlin: fix 'pctrl->functions' allocation in
berlin_pinctrl_build_state
- powerpc/4xx: Fix error return path in ppc4xx_msi_probe()
- scsi: qla2xxx: Fix unintended Logout
- iwlwifi: pcie: don't access periphery registers when not available
- f2fs: Keep alloc_valid_block_count in sync
- f2fs: issue discard align to section in LFS mode
- device-dax: avoid hang on error before devm_memremap_pages()
- regulator: tps65217: Fix NULL pointer dereference on probe
- gpio: pxa: disable pinctrl calls for PXA3xx
- thermal_hwmon: Sanitize attribute name passed to hwmon
- f2fs: fix to do sanity check with extra_attr feature
- RDMA/hns: Add illegal hop_num judgement
- RDMA/hns: Update the data type of immediate data
- be2net: Fix memory leak in be_cmd_get_profile_config()
- net/mlx5: Fix use-after-free in self-healing flow
- net: qca_spi: Fix race condition in spi transfers
- rds: fix two RCU related problems
- net/mlx5: Check for error in mlx5_attach_interface
- net/mlx5: Fix debugfs cleanup in the device init/remove flow
- net/mlx5: E-Switch, Fix memory leak when creating switchdev mode FDB tables
- net/tls: Set count of SG entries if sk_alloc_sg returns -ENOSPC
- erspan: fix error handling for erspan tunnel
- erspan: return PACKET_REJECT when the appropriate tunnel is not found
- tcp: really ignore MSG_ZEROCOPY if no SO_ZEROCOPY
- usb: dwc3: change stream event enable bit back to 13
- iommu/io-pgtable-arm-v7s: Abort allocation when table address overflows the
PTE
- ALSA: msnd: Fix the default sample sizes
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE() macro
- xfrm: fix 'passing zero to ERR_PTR()' warning
- amd-xgbe: use dma_mapping_error to check map errors
- gfs2: Special-case rindex for gfs2_grow
- clk: imx6ul: fix missing of_node_put()
- clk: core: Potentially free connection id
- clk: clk-fixed-factor: Clear OF_POPULATED flag in case of failure
- kbuild: add .DELETE_ON_ERROR special target
- media: tw686x: Fix oops on buffer alloc failure
- dmaengine: pl330: fix irq race with terminate_all
- MIPS: ath79: fix system restart
- media: videobuf2-core: check for q->error in vb2_core_qbuf()
- IB/rxe: Drop QP0 silently
- block: allow max_discard_segments to be stacked
- IB/ipoib: Fix error return code in ipoib_dev_init()
- mtd/maps: fix solutionengine.c printk format warnings
- media: ov5645: Supported external clock is 24MHz
- perf test: Fix subtest number when showing results
- gfs2: Don't reject a supposedly full bitmap if we have blocks reserved
- perf tools: Synthesize GROUP_DESC feature in pipe mode
- fbdev: omapfb: off by one in omapfb_register_client()
- perf tools: Fix struct comm_str removal crash
- video: goldfishfb: fix memory leak on driver remove
- fbdev/via: fix defined but not used warning
- perf powerpc: Fix callchain ip filtering when return address is in a
register
- video: fbdev: pxafb: clear allocated memory for video modes
- fbdev: Distinguish between interlaced and progressive modes
- ARM: exynos: Clear global variable on init error path
- perf powerpc: Fix callchain ip filtering
- nvme-rdma: unquiesce queues when deleting the controller
- powerpc/powernv: opal_put_chars partial write fix
- staging: bcm2835-camera: fix timeout handling in wait_for_completion_timeout
- staging: bcm2835-camera: handle wait_for_completion_timeout return properly
- ASoC: rt5514: Fix the issue of the delay volume applied
- MIPS: jz4740: Bump zload address
- mac80211: restrict delayed tailroom needed decrement
- Smack: Fix handling of IPv4 traffic received by PF_INET6 sockets
- wan/fsl_ucc_hdlc: use IS_ERR_VALUE() to check return value of qe_muram_alloc
- reset: imx7: Fix always writing bits as 0
- nfp: avoid buffer leak when FW communication fails
- xen-netfront: fix queue name setting
- arm64: dts: qcom: db410c: Fix Bluetooth LED trigger
- ARM: dts: qcom: msm8974-hammerhead: increase load on l20 for sdhci
- s390/qeth: fix race in used-buffer accounting
- s390/qeth: reset layer2 attribute on layer switch
- platform/x86: toshiba_acpi: Fix defined but not used build warnings
- KVM: arm/arm64: Fix vgic init race
- drivers/base: stop new probing during shutdown
- i2c: aspeed: Fix initial values of master and slave state
- dmaengine: mv_xor_v2: kill the tasklets upon exit
- crypto: sharah - Unregister correct algorithms for SAHARA 3
- xen-netfront: fix warn message as irq device name has '/'
- RDMA/cma: Protect cma dev list with lock
- pstore: Fix incorrect persistent ram buffer mapping
- xen/netfront: fix waiting for xenbus state change
- IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler
- mmc: omap_hsmmc: fix wakeirq handling on removal
- ipmi: Fix I2C client removal in the SSIF driver
- Tools: hv: Fix a bug in the key delete code
- xhci: Fix use after free for URB cancellation on a reallocated endpoint
- usb: Don't die twice if PCI xhci host is not responding in resume
- mei: ignore not found client in the enumeration
- mei: bus: need to unlink client before freeing
- USB: Add quirk to support DJI CineSSD
- usb: uas: add support for more quirk flags
- usb: Avoid use-after-free by flushing endpoints early in usb_set_interface()
- usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame()
- USB: add quirk for WORLDE Controller KS49 or Prodipe MIDI 49C USB controller
- usb: gadget: udc: renesas_usb3: fix maxpacket size of ep0
- USB: net2280: Fix erroneous synchronization change
- USB: serial: io_ti: fix array underflow in completion handler
- usb: misc: uss720: Fix two sleep-in-atomic-context bugs
- USB: serial: ti_usb_3410_5052: fix array underflow in completion handler
- USB: yurex: Fix buffer over-read in yurex_write()
- Revert "cdc-acm: implement put_char() and flush_chars()"
- cifs: prevent integer overflow in nxt_dir_entry()
- CIFS: fix wrapping bugs in num_entries()
- xtensa: ISS: don't allocate memory in platform_setup
- perf/core: Force USER_DS when recording user stack data
- NFSv4.1 fix infinite loop on I/O.
- binfmt_elf: Respect error return from `regset->active'
- net/mlx5: Add missing SET_DRIVER_VERSION command translation
- arm64: dts: uniphier: Add missing cooling device properties for CPUs
- audit: fix use-after-free in audit_add_watch
- mtdchar: fix overflows in adjustment of `count`
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
- evm: Don't deadlock if a crypto algorithm is unavailable
- KVM: PPC: Book3S HV: Add of_node_put() in success path
- security: check for kstrdup() failure in lsm_append()
- MIPS: loongson64: cs5536: Fix PCI_OHCI_INT_REG reads
- configfs: fix registered group removal
- pinctrl: rza1: Fix selector use for groups and functions
- sched/core: Use smp_mb() in wake_woken_function()
- efi/esrt: Only call efi_mem_reserve() for boot services memory
- ARM: hisi: handle of_iomap and fix missing of_node_put
- ARM: hisi: fix error handling and missing of_node_put
- ARM: hisi: check of_iomap and fix missing of_node_put
- liquidio: fix hang when re-binding VF host drv after running DPDK VF driver
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
- tty: fix termios input-speed encoding when using BOTHER
- tty: fix termios input-speed encoding
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
- mmc: tegra: prevent HS200 on Tegra 3
- mmc: sdhci: do not try to use 3.3V signaling if not supported
- drm/nouveau: Fix runtime PM leak in drm_open()
- drm/nouveau/debugfs: Wake up GPU before doing any reclocking
- drm/nouveau: tegra: Detach from ARM DMA/IOMMU mapping
- parport: sunbpp: fix error return code
- sched/fair: Fix util_avg of new tasks for asymmetric systems
- coresight: Handle errors in finding input/output ports
- coresight: tpiu: Fix disabling timeouts
- coresight: ETM: Add support for Arm Cortex-A73 and Cortex-A35
- staging: bcm2835-audio: Don't leak workqueue if open fails
- gpio: pxa: Fix potential NULL dereference
- gpiolib: Mark gpio_suffixes array with __maybe_unused
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
- input: rohm_bu21023: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
- drm/amdkfd: Fix error codes in kfd_get_process
- rtc: bq4802: add error handling for devm_ioremap
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
- scsi: libfc: fixup 'sleeping function called from invalid context'
- drm/panel: type promotion bug in s6e8aa0_read_mtp_id()
- blk-mq: only attempt to merge bio if there is rq in sw queue
- blk-mq: avoid to synchronize rcu inside blk_cleanup_queue()
- pinctrl: msm: Fix msm_config_group_get() to be compliant
- pinctrl: qcom: spmi-gpio: Fix pmic_gpio_config_get() to be compliant
- clk: tegra: bpmp: Don't crash when a clock fails to register
- mei: bus: type promotion bug in mei_nfc_if_version()
- earlycon: Initialize port->uartclk based on clock-frequency property
- earlycon: Remove hardcoded port->uartclk initialization in of_setup_earlycon
- net/ipv6: prevent use after free in ip6_route_mpath_notify
- Partial revert "e1000e: Avoid receiver overrun interrupt bursts"
- e1000e: Fix queue interrupt re-raising in Other interrupt
- e1000e: Avoid missed interrupts following ICR read
- Revert "e1000e: Separate signaling for link check/link up"
- e1000e: Fix link check race condition
- e1000e: Fix check_for_link return value with autoneg off
- tipc: orphan sock in tipc_release()
- net/mlx5: Fix not releasing read lock when adding flow rules
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
- iwlwifi: cancel the injective function between hw pointers to tfd entry
index
- kbuild: do not update config when running install targets
- omapfb: rename omap2 module to omap2fb.ko
- [Config] Rename omapfb to omap2fb
- perf script: Show correct offsets for DWARF-based unwinding
- iommu/ipmmu-vmsa: IMUCTRn.TTSEL needs a special usage on R-Car Gen3
- ipmi: Move BT capabilities detection to the detect call
- ovl: fix oopses in ovl_fill_super() failure paths
- usb: xhci: fix interrupt transfer error happened on MTK platforms
- usb: mtu3: fix error of xhci port id when enable U3 dual role
- dm verity: fix crash on bufio buffer that was allocated with vmalloc
- cifs: integer overflow in in SMB2_ioctl()
- perf tools: Fix maps__find_symbol_by_name()
- NFSv4: Fix a tracepoint Oops in initiate_file_draining()
- of: add helper to lookup compatible child node
- mmc: meson-mx-sdio: fix OF child-node lookup
- bpf: fix rcu annotations in compute_effective_progs()
- spi: dw: fix possible race condition
- PM / devfreq: use put_device() instead of kfree()
- ASoC: hdmi-codec: fix routing
- drm/amd/display: support access ddc for mst branch
- rcutorture: Use monotonic timestamp for stall detection
- selftests: vDSO - fix to return KSFT_SKIP when test couldn't be run
- selftests/android: initialize heap_type to avoid compiling warning
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
- scsi: lpfc: Fix panic if driver unloaded when port is offline
- arm64: perf: Disable PMU while processing counter overflows
- staging: fsl-dpaa2/eth: Fix DMA mapping direction
- block/DAC960.c: fix defined but not used build warnings
- IB/mlx5: fix uaccess beyond "count" in debugfs read/write handlers
* Bionic update: upstream stable patchset 2019-07-09 (LP: #1835972)
- vti6: fix PMTU caching and reporting on xmit
- xfrm: fix missing dst_release() after policy blocking lbcast and multicast
- xfrm: free skb if nlsk pointer is NULL
- esp6: fix memleak on error path in esp6_input
- mac80211: add stations tied to AP_VLANs during hw reconfig
- ext4: clear mmp sequence number when remounting read-only
- nl80211: Add a missing break in parse_station_flags
- drm/bridge: adv7511: Reset registers on hotplug
- scsi: target: iscsi: cxgbit: fix max iso npdu calculation
- scsi: libiscsi: fix possible NULL pointer dereference in case of TMF
- drm/imx: imx-ldb: disable LDB on driver bind
- drm/imx: imx-ldb: check if channel is enabled before printing warning
- nbd: don't requeue the same request twice.
- nbd: handle unexpected replies better
- usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in
init_controller()
- usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in
r8a66597_queue()
- usb: gadget: f_uac2: fix error handling in afunc_bind (again)
- usb: gadget: u_audio: fix pcm/card naming in g_audio_setup()
- usb: gadget: u_audio: update hw_ptr in iso_complete after data copied
- usb: gadget: u_audio: remove caching of stream buffer parameters
- usb: gadget: u_audio: remove cached period bytes value
- usb: gadget: u_audio: protect stream runtime fields with stream spinlock
- usb/phy: fix PPC64 build errors in phy-fsl-usb.c
- tools: usb: ffs-test: Fix build on big endian systems
- usb: gadget: f_uac2: fix endianness of 'struct cntrl_*_lay3'
- netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy()
- bpf, ppc64: fix unexpected r0=0 exit path inside bpf_xadd
- netfilter: nf_tables: fix memory leaks on chain rename
- netfilter: nf_tables: don't allow to rename to already-pending name
- KVM: vmx: use local variable for current_vmptr when emulating VMPTRST
- tools/power turbostat: fix -S on UP systems
- net: caif: Add a missing rcu_read_unlock() in caif_flow_cb
- qed: Fix link flap issue due to mismatching EEE capabilities.
- qed: Fix possible race for the link state value.
- qed: Correct Multicast API to reflect existence of 256 approximate buckets.
- atl1c: reserve min skb headroom
- net: prevent ISA drivers from building on PPC32
- can: mpc5xxx_can: check of_iomap return before use
- can: m_can: Move accessing of message ram to after clocks are enabled
- i2c: davinci: Avoid zero value of CLKH
- perf/x86/amd/ibs: Don't access non-started event
- media: staging: omap4iss: Include asm/cacheflush.h after generic includes
- bnx2x: Fix invalid memory access in rss hash config path.
- net: axienet: Fix double deregister of mdio
- locking/rtmutex: Allow specifying a subclass for nested locking
- i2c/mux, locking/core: Annotate the nested rt_mutex usage
- sched/rt: Restore rt_runtime after disabling RT_RUNTIME_SHARE
- x86/boot: Fix if_changed build flip/flop bug
- selftests/ftrace: Add snapshot and tracing_on test case
- ipc/sem.c: prevent queue.status tearing in semop
- zswap: re-check zswap_is_full() after do zswap_shrink()
- tools/power turbostat: Read extended processor family from CPUID
- ARC: dma [non-IOC] setup SMP_CACHE_BYTES and cache_line_size
- bpf: use GFP_ATOMIC instead of GFP_KERNEL in bpf_parse_prog()
- nfp: flower: fix port metadata conversion bug
- enic: handle mtu change for vf properly
- ARC: [plat-eznps] Add missing struct nps_host_reg_aux_dpc
- arc: [plat-eznps] fix data type errors in platform headers
- arc: [plat-eznps] fix printk warning in arc/plat-eznps/mtm.c
- arc: fix build errors in arc/include/asm/delay.h
- arc: fix type warnings in arc/mm/cache.c
- sparc/time: Add missing __init to init_tick_ops()
- sparc: use asm-generic version of msi.h
- enic: do not call enic_change_mtu in enic_probe
- mm: delete historical BUG from zap_pmd_range()
- drivers: net: lmc: fix case value for target abort error
- memcg: remove memcg_cgroup::id from IDR on mem_cgroup_css_alloc() failure
- gpiolib-acpi: make sure we trigger edge events at least once on boot
- scsi: fcoe: fix use-after-free in fcoe_ctlr_els_send
- scsi: fcoe: drop frames in ELS LOGO error path
- scsi: vmw_pvscsi: Return DID_RESET for status SAM_STAT_COMMAND_TERMINATED
- mm/memory.c: check return value of ioremap_prot
- mei: don't update offset in write
- cifs: add missing debug entries for kconfig options
- cifs: check kmalloc before use
- smb3: enumerating snapshots was leaving part of the data off end
- smb3: Do not send SMB3 SET_INFO if nothing changed
- smb3: don't request leases in symlink creation and query
- smb3: fill in statfs fsid and correct namelen
- btrfs: use correct compare function of dirty_metadata_bytes
- btrfs: don't leak ret from do_chunk_alloc
- Btrfs: fix btrfs_write_inode vs delayed iput deadlock
- iommu/arm-smmu: Error out only if not enough context interrupts
- printk: Split the code for storing a message into the log buffer
- printk: Create helper function to queue deferred console handling
- printk/nmi: Prevent deadlock when accessing the main log buffer in NMI
- kprobes/arm64: Fix %p uses in error messages
- arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid()
- arm64: dts: rockchip: corrected uart1 clock-names for rk3328
- KVM: arm/arm64: Skip updating PMD entry if no change
- KVM: arm/arm64: Skip updating PTE entry if no change
- stop_machine: Reflow cpu_stop_queue_two_works()
- ext4: check for NUL characters in extended attribute's name
- ext4: sysfs: print ext4_super_block fields as little-endian
- ext4: reset error code in ext4_find_entry in fallback
- platform/x86: ideapad-laptop: Apply no_hw_rfkill to Y20-15IKBM, too
- x86/vdso: Fix vDSO build if a retpoline is emitted
- x86/process: Re-export start_thread()
- x86/kvm/vmx: Remove duplicate l1d flush definitions
- fuse: Add missed unlock_page() to fuse_readpages_fill()
- udl-kms: change down_interruptible to down
- udl-kms: handle allocation failure
- udl-kms: fix crash due to uninitialized memory
- udl-kms: avoid division
- b43legacy/leds: Ensure NUL-termination of LED name string
- b43/leds: Ensure NUL-termination of LED name string
- ASoC: dpcm: don't merge format from invalid codec dai
- ASoC: zte: Fix incorrect PCM format bit usages
- ASoC: sirf: Fix potential NULL pointer dereference
- pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show()
- x86/vdso: Fix lsl operand order
- x86/irqflags: Mark native_restore_fl extern inline
- x86/entry/64: Wipe KASAN stack shadow before rewind_stack_do_exit()
- s390/mm: fix addressing exception after suspend/resume
- s390/numa: move initial setup of node_to_cpumask_map
- kprobes/arm: Fix %p uses in error messages
- kprobes: Make list and blacklist root user read only
- MIPS: Correct the 64-bit DSP accumulator register size
- MIPS: Always use -march=<arch>, not -<arch> shortcuts
- MIPS: Change definition of cpu_relax() for Loongson-3
- MIPS: lib: Provide MIPS64r6 __multi3() for GCC < 7
- tpm: Return the actual size when receiving an unsupported command
- scsi: mpt3sas: Fix _transport_smp_handler() error path
- scsi: sysfs: Introduce sysfs_{un,}break_active_protection()
- scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock
- clk: rockchip: fix clk_i2sout parent selection bits on rk3399
- PM / clk: signedness bug in of_pm_clk_add_clks()
- power: generic-adc-battery: fix out-of-bounds write when copying channel
properties
- power: generic-adc-battery: check for duplicate properties copied from iio
channels
- watchdog: Mark watchdog touch functions as notrace
- gcc-plugins: Add include required by GCC release 8
- gcc-plugins: Use dynamic initializers
- Btrfs: fix send failure when root has deleted files still open
- Btrfs: send, fix incorrect file layout after hole punching beyond eof
- hwmon: (k10temp) 27C Offset needed for Threadripper2
- KVM: arm/arm64: Fix potential loss of ptimer interrupts
- KVM: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked
- perf kvm: Fix subcommands on s390
- ext4: use ext4_warning() for sb_getblk failure
- platform/x86: wmi: Do not mix pages and kmalloc
- KVM: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd
- lib/vsprintf: Do not handle %pO[^F] as %px
- soc: qcom: rmtfs-mem: fix memleak in probe error paths
- kprobes: Show blacklist addresses as same as kallsyms does
- kprobes: Replace %p with other pointer types
- MIPS: memset.S: Fix byte_fixup for MIPSr6
- mtd: rawnand: qcom: wait for desc completion in all BAM channels
- net: 6lowpan: fix reserved space for single frames
- net: mac802154: tx: expand tailroom if necessary
- 9p/net: Fix zero-copy path in the 9p virtio transport
- spi: davinci: fix a NULL pointer dereference
- spi: pxa2xx: Add support for Intel Ice Lake
- spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe
- spi: cadence: Change usleep_range() to udelay(), for atomic context
- mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS
- readahead: stricter check for bdi io_pages
- block: blk_init_allocated_queue() set q->fq as NULL in the fail case
- block: really disable runtime-pm for blk-mq
- drm/i915/userptr: reject zero user_size
- libertas: fix suspend and resume for SDIO connected cards
- media: Revert "[media] tvp5150: fix pad format frame height"
- mailbox: xgene-slimpro: Fix potential NULL pointer dereference
- Replace magic for trusting the secondary keyring with #define
- powerpc/fadump: handle crash memory ranges array index overflow
- powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
- PCI: Add wrappers for dev_printk()
- cxl: Fix wrong comparison in cxl_adapter_context_get()
- ib_srpt: Fix a use-after-free in srpt_close_ch()
- RDMA/rxe: Set wqe->status correctly if an unexpected response is received
- 9p: fix multiple NULL-pointer-dereferences
- fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
- 9p/virtio: fix off-by-one error in sg list bounds check
- net/9p/client.c: version pointer uninitialized
- net/9p/trans_fd.c: fix race-condition by flushing workqueue before the
kfree()
- dm integrity: change 'suspending' variable from bool to int
- dm thin: stop no_space_timeout worker when switching to write-mode
- dm cache metadata: save in-core policy_hint_size to on-disk superblock
- dm cache metadata: set dirty on all cache blocks after a crash
- dm crypt: don't decrease device limits
- uart: fix race between uart_put_char() and uart_shutdown()
- Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind()
- iio: sca3000: Fix missing return in switch
- iio: ad9523: Fix displayed phase
- iio: ad9523: Fix return value for ad952x_store()
- extcon: Release locking when sending the notification of connector state
- vmw_balloon: fix inflation of 64-bit GFNs
- vmw_balloon: do not use 2MB without batching
- vmw_balloon: VMCI_DOORBELL_SET does not check status
- vmw_balloon: fix VMCI use when balloon built into kernel
- rtc: omap: fix potential crash on power off
- tracing: Do not call start/stop() functions when tracing_on does not change
- tracing/blktrace: Fix to allow setting same value
- printk/tracing: Do not trace printk_nmi_enter()
- livepatch: Validate module/old func name length
- uprobes: Use synchronize_rcu() not synchronize_sched()
- mfd: hi655x: Fix regmap area declared size for hi655x
- ovl: fix wrong use of impure dir cache in ovl_iterate()
- drivers/block/zram/zram_drv.c: fix bug storing backing_dev
- cpufreq: governor: Avoid accessing invalid governor_data
- PM / sleep: wakeup: Fix build error caused by missing SRCU support
- KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages
- xtensa: limit offsets in __loop_cache_{all,page}
- xtensa: increase ranges in ___invalidate_{i,d}cache_all
- block, bfq: return nbytes and not zero from struct cftype .write() method
- pnfs/blocklayout: off by one in bl_map_stripe()
- NFSv4 client live hangs after live data migration recovery
- NFSv4: Fix locking in pnfs_generic_recover_commit_reqs
- NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()
- ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
- iommu/vt-d: Add definitions for PFSID
- iommu/vt-d: Fix dev iotlb pfsid use
- sys: don't hold uts_sem while accessing userspace memory
- userns: move user access out of the mutex
- ubifs: Fix memory leak in lprobs self-check
- ubifs: Check data node size before truncate
- ubifs: Fix synced_i_size calculation for xattr inodes
- pwm: tiehrpwm: Don't use emulation mode bits to control PWM output
- pwm: tiehrpwm: Fix disabling of output of PWMs
- fb: fix lost console when the user unplugs a USB adapter
- udlfb: set optimal write delay
- libnvdimm: fix ars_status output length calculation
- bcache: release dc->writeback_lock properly in bch_writeback_thread()
- perf auxtrace: Fix queue resize
- crypto: caam - fix DMA mapping direction for RSA forms 2 & 3
- crypto: caam/jr - fix descriptor DMA unmapping
- crypto: caam/qi - fix error path in xts setkey
- arm64: mm: always enable CONFIG_HOLES_IN_ZONE
- mmc: renesas_sdhi_internal_dmac: mask DMAC interrupts
- blkcg: Introduce blkg_root_lookup()
- powerpc64/ftrace: Include ftrace.h needed for enable/disable calls
- IB/mlx5: Fix leaking stack memory to userspace
- rtc: omap: fix resource leak in registration error path
- ACPICA: AML Parser: skip opcodes that open a scope upon parse failure
- ALSA: ac97: fix device initialization in the compat layer
- ALSA: ac97: fix check of pm_runtime_get_sync failure
- ALSA: ac97: fix unbalanced pm_runtime_enable
- nfsd: fix leaked file lock with nfs exported overlayfs
- ubifs: Fix directory size calculation for symlinks
- mm, dev_pagemap: Do not clear ->mapping on final put
- act_ife: fix a potential use-after-free
- ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT
state
- net: bcmgenet: use MAC link status for fixed phy
- net: macb: do not disable MDIO bus at open/close time
- qlge: Fix netdev features configuration.
- r8169: add support for NCube 8168 network card
- tcp: do not restart timewait timer on rst reception
- vti6: remove !skb->ignore_df check from vti6_xmit()
- net/sched: act_pedit: fix dump of extended layered op
- tipc: fix a missing rhashtable_walk_exit()
- nfp: wait for posted reconfigs when disabling the device
- sctp: hold transport before accessing its asoc in sctp_transport_get_next
- mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge
- vhost: correctly check the iova range when waking virtqueue
- hv_netvsc: ignore devices that are not PCI
- act_ife: move tcfa_lock down to where necessary
- act_ife: fix a potential deadlock
- net: sched: action_ife: take reference to meta module
- cifs: check if SMB2 PDU size has been padded and suppress the warning
- hfsplus: don't return 0 when fill_super() failed
- hfs: prevent crash on exit from failed search
- sunrpc: Don't use stack buffer with scatterlist
- fork: don't copy inconsistent signal handler state to child
- reiserfs: change j_timestamp type to time64_t
- hfsplus: fix NULL dereference in hfsplus_lookup()
- fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries
- fat: validate ->i_start before using
- scripts: modpost: check memory allocation results
- virtio: pci-legacy: Validate queue pfn
- x86/mce: Add notifier_block forward declaration
- IB/hfi1: Invalid NUMA node information can cause a divide by zero
- pwm: meson: Fix mux clock names
- mm/fadvise.c: fix signed overflow UBSAN complaint
- fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot()
- platform/x86: intel_punit_ipc: fix build errors
- netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
- s390/kdump: Fix memleak in nt_vmcoreinfo
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
- mfd: sm501: Set coherent_dma_mask when creating subdevices
- platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360
- netfilter: fix memory leaks on netlink_dump_start error
- tcp, ulp: add alias for all ulp modules
- RDMA/hns: Fix usage of bitmap allocation functions return values
- net: hns3: Fix for command format parsing error in
hclge_is_all_function_id_zero
- perf tools: Check for null when copying nsinfo.
- irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP
- net/9p/trans_fd.c: fix race by holding the lock
- net/9p: fix error path of p9_virtio_probe
- powerpc/uaccess: Enable get_user(u64, *p) on 32-bit
- powerpc: Fix size calculation using resource_size()
- perf probe powerpc: Fix trace event post-processing
- block: bvec_nr_vecs() returns value for wrong slab
- s390/dasd: fix hanging offline processing due to canceled worker
- s390/dasd: fix panic for failed online processing
- ACPI / scan: Initialize status to ACPI_STA_DEFAULT
- scsi: aic94xx: fix an error code in aic94xx_init()
- NFSv4: Fix error handling in nfs4_sp4_select_mode()
- Input: do not use WARN() in input_alloc_absinfo()
- xen/balloon: fix balloon initialization for PVH Dom0
- PCI: mvebu: Fix I/O space end address calculation
- dm kcopyd: avoid softlockup in run_complete_job
- staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice
- ASoC: rt5677: Fix initialization of rt5677_of_match.data
- iommu/omap: Fix cache flushes on L2 table entries
- selftests/powerpc: Kill child processes on SIGINT
- RDS: IB: fix 'passing zero to ERR_PTR()' warning
- cfq: Suppress compiler warnings about comparisons
- smb3: fix reset of bytes read and written stats
- SMB3: Number of requests sent should be displayed for SMB3 not just CIFS
- powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning
- powerpc/64s: Make rfi_flush_fallback a little more robust
- powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX.
- clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399
- KVM: vmx: track host_state.loaded using a loaded_vmcs pointer
- kvm: nVMX: Fix fault vector for VMX operation at CPL > 0
- btrfs: Exit gracefully when chunk map cannot be inserted to the tree
- btrfs: replace: Reset on-disk dev stats value after replace
- btrfs: relocation: Only remove reloc rb_trees if reloc control has been
initialized
- btrfs: Don't remove block group that still has pinned down bytes
- arm64: rockchip: Force CONFIG_PM on Rockchip systems
- ARM: rockchip: Force CONFIG_PM on Rockchip systems
- drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks"
- drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode
- drm/amd/pp/Polaris12: Fix a chunk of registers missed to program
- drm/amdgpu: update tmr mc address
- drm/amdgpu:add tmr mc address into amdgpu_firmware_info
- drm/amdgpu:add new firmware id for VCN
- drm/amdgpu:add VCN support in PSP driver
- drm/amdgpu:add VCN booting with firmware loaded by PSP
- debugobjects: Make stack check warning more informative
- mm: Fix devm_memremap_pages() collision handling
- HID: add quirk for another PIXART OEM mouse used by HP
- usb: dwc3: core: Fix ULPI PHYs and prevent phy_get/ulpi_init during
suspend/resume
- x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear
- x86/xen: don't write ptes directly in 32-bit PV guests
- drm/i915: Increase LSPCON timeout
- kbuild: make missing $DEPMOD a Warning instead of an Error
- kvm: x86: Set highest physical address bits in non-present/reserved SPTEs
- x86: kvm: avoid unused variable warning
- arm64: cpu_errata: include required headers
- ASoC: wm8994: Fix missing break in switch
- arm64: Fix mismatched cache line size detection
- arm64: Handle mismatched cache type
- tipc: fix the big/little endian issue in tipc_dest
- ip6_vti: fix a null pointer deference when destroy vti6 tunnel
- workqueue: skip lockdep wq dependency in cancel_work_sync()
- workqueue: re-add lockdep dependencies for flushing
- apparmor: fix an error code in __aa_create_ns()
- tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach
- netfilter: x_tables: do not fail xt_alloc_table_info too easilly
- ACPICA: ACPICA: add status check for acpi_hw_read before assigning return
value
- PCI: Match Root Port's MPS to endpoint's MPSS as necessary
- coccicheck: return proper error code on fail
- RISC-V: Use KBUILD_CFLAGS instead of KCFLAGS when building the vDSO
- blk-mq: count the hctx as active before allocating tag
- selinux: cleanup dentry and inodes on error in selinuxfs
- drm/amd/display: Read back max backlight value at boot
- btrfs: check-integrity: Fix NULL pointer dereference for degraded mount
- btrfs: lift uuid_mutex to callers of btrfs_open_devices
- btrfs: Fix a C compliance issue
- drm/i915: Nuke the LVDS lid notifier
- drm/edid: Quirk Vive Pro VR headset non-desktop.
- drm/amd/display: fix type of variable
- drm/amd/display: Don't share clk source between DP and HDMI
- drm/amd/display: update clk for various HDMI color depths
- drm/amd/display: Use requested HDMI aspect ratio
- drm/rockchip: lvds: add missing of_node_put
- drm/amd/display: Pass connector id when executing VBIOS CT
- drm/amd/display: Check if clock source in use before disabling
- drm/amdgpu: fix incorrect use of fcheck
- drm/amdgpu: fix incorrect use of drm_file->pid
- drm/i915: set DP Main Stream Attribute for color range on DDI platforms
- x86/tsc: Prevent result truncation on 32bit
* [Regression] Colour banding appears on Lenovo B50-80 integrated display
(LP: #1788308) // Bionic update: upstream stable patchset 2019-07-09
(LP: #1835972)
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80
* CVE-2019-12819
- mdio_bus: Fix use-after-free on device_register fails
* proc_thermal flooding dmesg (LP: #1824690)
- drivers: thermal: processor_thermal: Downgrade error message
* Bionic update: upstream stable patchset 2019-07-08 (LP: #1835845)
- bonding: avoid lockdep confusion in bond_get_stats()
- inet: frag: enforce memory limits earlier
- ipv4: frags: handle possible skb truesize change
- net: dsa: Do not suspend/resume closed slave_dev
- net: stmmac: Fix WoL for PCI-based setups
- rxrpc: Fix user call ID check in rxrpc_service_prealloc_one
- can: ems_usb: Fix memory leak on ems_usb_disconnect()
- virtio_balloon: fix another race between migration and ballooning
- x86/apic: Future-proof the TSC_DEADLINE quirk for SKX
- kvm: x86: vmx: fix vpid leak
- audit: fix potential null dereference 'context->module.name'
- userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
- RDMA/uverbs: Expand primary and alt AV port checks
- crypto: padlock-aes - Fix Nano workaround data corruption
- drm/vc4: Reset ->{x, y}_scaling[1] when dealing with uniplanar formats
- scsi: sg: fix minor memory leak in error path
- net/mlx5e: E-Switch, Initialize eswitch only if eswitch manager
- net/mlx5e: Set port trust mode to PCP as default
- x86/efi: Access EFI MMIO data as unencrypted when SEV is active
- drm/atomic: Check old_plane_state->crtc in drm_atomic_helper_async_check()
- drm/atomic: Initialize variables in drm_atomic_helper_async_check() to make
gcc happy
- scsi: qla2xxx: Fix unintialized List head crash
- scsi: qla2xxx: Fix NPIV deletion by calling wait_for_sess_deletion
- scsi: qla2xxx: Fix ISP recovery on unload
- scsi: qla2xxx: Return error when TMF returns
- genirq: Make force irq threading setup more robust
- nohz: Fix local_timer_softirq_pending()
- nohz: Fix missing tick reprogram when interrupting an inline softirq
- ring_buffer: tracing: Inherit the tracing setting to next ring buffer
- i2c: imx: Fix reinit_completion() use
- Btrfs: fix file data corruption after cloning a range and fsync
- nvme-pci: allocate device queues storage space at probe
- nvme-pci: Fix queue double allocations
- xfs: catch inode allocation state mismatch corruption
- xfs: validate cached inodes are free when allocated
- perf/x86/intel/uncore: Fix hardcoded index of Broadwell extra PCI devices
- parisc: Enable CONFIG_MLONGCALLS by default
- parisc: Define mb() and add memory barriers to assembler unlock sequences
- kasan: add no_sanitize attribute for clang builds
- Mark HI and TASKLET softirq synchronous
- xen/netfront: don't cache skb_shinfo()
- scsi: sr: Avoid that opening a CD-ROM hangs with runtime power management
enabled
- scsi: qla2xxx: Fix memory leak for allocating abort IOCB
- init: rename and re-order boot_cpu_state_init()
- root dentries need RCU-delayed freeing
- make sure that __dentry_kill() always invalidates d_seq, unhashed or not
- fix mntput/mntput race
- fix __legitimize_mnt()/mntput() race
- mtd: nand: qcom: Add a NULL check for devm_kasprintf()
- phy: phy-mtk-tphy: use auto instead of force to bypass utmi signals
- ARM: dts: imx6sx: fix irq for pcie bridge
- kprobes/x86: Fix %p uses in error messages
- x86/irqflags: Provide a declaration for native_save_fl
- x86/apic: Ignore secondary threads if nosmt=force
- x86/mm/kmmio: Make the tracer robust against L1TF
- tools headers: Synchronise x86 cpufeatures.h for L1TF additions
- x86/microcode: Allow late microcode loading with SMT disabled
- x86/smp: fix non-SMP broken build due to redefinition of
apic_id_is_primary_thread
- cpu/hotplug: Non-SMP machines do not make use of booted_once
- sched/deadline: Update rq_clock of later_rq when pushing a task
- zram: remove BD_CAP_SYNCHRONOUS_IO with writeback feature
- x86/l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled
- x86: i8259: Add missing include file
- kbuild: verify that $DEPMOD is installed
- crypto: x86/sha256-mb - fix digest copy in sha256_mb_mgr_get_comp_job_avx2()
- crypto: vmac - require a block cipher with 128-bit block size
- crypto: vmac - separate tfm and request context
- crypto: blkcipher - fix crash flushing dcache in error path
- crypto: ablkcipher - fix crash flushing dcache in error path
- crypto: skcipher - fix aligning block size in skcipher_copy_iv()
- crypto: skcipher - fix crash flushing dcache in error path
- x86/platform/UV: Mark memblock related init code and data correctly
- dccp: fix undefined behavior with 'cwnd' shift in ccid2_cwnd_restart()
- l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
- llc: use refcount_inc_not_zero() for llc_sap_find()
- vsock: split dwork to avoid reinitializations
- net_sched: Fix missing res info when create new tc_index filter
- vhost: reset metadata cache when initializing new IOTLB
- ip6_tunnel: use the right value for ipv4 min mtu check in ip6_tnl_xmit
- net: aquantia: Fix IFF_ALLMULTI flag functionality
- ALSA: hda - Sleep for 10ms after entering D3 on Conexant codecs
- ALSA: hda - Turn CX8200 into D3 as well upon reboot
- ALSA: vx222: Fix invalid endian conversions
- ALSA: virmidi: Fix too long output trigger loop
- ALSA: cs5535audio: Fix invalid endian conversion
- ALSA: hda: Correct Asrock B85M-ITX power_save blacklist entry
- ALSA: memalloc: Don't exceed over the requested size
- ALSA: vxpocket: Fix invalid endian conversions
- USB: serial: sierra: fix potential deadlock at close
- USB: serial: pl2303: add a new device id for ATEN
- ACPI / PM: save NVS memory for ASUS 1025C laptop
- tty: serial: 8250: Revert NXP SC16C2552 workaround
- serial: 8250_exar: Read INT0 from slave device, too
- serial: 8250_dw: always set baud rate in dw8250_set_termios
- serial: 8250_dw: Add ACPI support for uart on Broadcom SoC
- misc: sram: fix resource leaks in probe error path
- Bluetooth: avoid killing an already killed socket
- isdn: Disable IIOCDBGVAR
- cls_matchall: fix tcf_unbind_filter missing
- mlxsw: core_acl_flex_actions: Return error for conflicting actions
- ip_vti: fix a null pointer deferrence when create vti fallback tunnel
- net: ethernet: mvneta: Fix napi structure mixup on armada 3700
- net: mvneta: fix mvneta_config_rss on armada 3700
- EDAC: Add missing MEM_LRDDR4 entry in edac_mem_types[]
- pty: fix O_CLOEXEC for TIOCGPTPEER
- arm: dts: armada: Fix "#cooling-cells" property's name
- vfio: ccw: fix error return in vfio_ccw_sch_event
- perf tools: Fix error index for pmu event parser
- Input: synaptics-rmi4 - fix axis-swap behavior
- IB/mlx4: Fix an error handling path in 'mlx4_ib_rereg_user_mr()'
- drm/bridge/sii8620: fix loops in EDID fetch logic
- drm/bridge/sii8620: fix potential buffer overflow
- ARC: Explicitly add -mmedium-calls to CFLAGS
- hwmon: (nct6775) Fix loop limit
- soc: imx: gpcv2: correct PGC offset
- usb: dwc3: pci: add support for Intel IceLake
- usb: dwc2: gadget: Fix issue in dwc2_gadget_start_isoc()
- usb: dwc3: of-simple: fix use-after-free on remove
- ACPI / EC: Use ec_no_wakeup on Thinkpad X1 Carbon 6th
- netfilter: ipv6: nf_defrag: reduce struct net memory waste
- netfilter: nf_ct_helper: Fix possible panic after
nf_conntrack_helper_unregister
- selftests: pstore: return Kselftest Skip code for skipped tests
- selftests: static_keys: return Kselftest Skip code for skipped tests
- selftests: sysctl: return Kselftest Skip code for skipped tests
- selftests: zram: return Kselftest Skip code for skipped tests
- selftests: vm: return Kselftest Skip code for skipped tests
- selftests: sync: add config fragment for testing sync framework
- ARM: dts: NSP: Fix i2c controller interrupt type
- ARM: dts: NSP: Fix PCIe controllers interrupt types
- ARM: dts: BCM5301x: Fix i2c controller interrupt type
- ARM: dts: Cygnus: Fix I2C controller interrupt type
- ARM: dts: Cygnus: Fix PCIe controller interrupt type
- arm64: dts: specify 1.8V EMMC capabilities for bcm958742k
- arm64: dts: specify 1.8V EMMC capabilities for bcm958742t
- arm64: dts: ns2: Fix I2C controller interrupt type
- arm64: dts: ns2: Fix PCIe controller interrupt type
- arm64: dts: Stingray: Fix I2C controller interrupt type
- drivers/perf: xgene_pmu: Fix IOB SLOW PMU parser error
- drm: mali-dp: Enable Global SE interrupts mask for DP500
- drm/arm/malidp: Preserve LAYER_FORMAT contents when setting format
- IB/rxe: Fix missing completion for mem_reg work requests
- usb: dwc2: alloc dma aligned buffer for isoc split in
- usb: dwc2: fix isoc split in transfer with no data
- usb: gadget: composite: fix delayed_status race condition when set_interface
- usb: gadget: dwc2: fix memory leak in gadget_init()
- dwc2: gadget: Fix ISOC IN DDMA PID bitfield value calculation
- xen: add error handling for xenbus_printf
- pNFS: Always free the session slot on error in
nfs4_layoutget_handle_exception
- scsi: xen-scsifront: add error handling for xenbus_printf
- xen/scsiback: add error handling for xenbus_printf
- arm64: dma-mapping: clear buffers allocated with FORCE_CONTIGUOUS flag
- arm64: make secondary_start_kernel() notrace
- qed: Fix possible memory leak in Rx error path handling.
- qed: Add sanity check for SIMD fastpath handler.
- qed: Do not advertise DCBX_LLD_MANAGED capability.
- enic: initialize enic->rfs_h.lock in enic_probe
- net: hamradio: use eth_broadcast_addr
- net: propagate dev_get_valid_name return code
- net: stmmac: socfpga: add additional ocp reset line for Stratix10
- nvmet: reset keep alive timer in controller enable
- block: sed-opal: Fix a couple off by one bugs
- ARC: Enable machine_desc->init_per_cpu for !CONFIG_SMP
- nbd: Add the nbd NBD_DISCONNECT_ON_CLOSE config flag.
- net: davinci_emac: match the mdio device against its compatible if possible
- sctp: fix erroneous inc of snmp SctpFragUsrMsgs
- KVM: arm/arm64: Drop resource size check for GICV window
- drm/bridge/sii8620: fix display of packed pixel modes in MHL2
- locking/lockdep: Do not record IRQ state within lockdep code
- selftests: bpf: notification about privilege required to run test_kmod.sh
testing script
- mtd: dataflash: Use ULL suffix for 64-bit constants
- x86/microcode/intel: Fix memleak in save_microcode_patch()
- ipv6: mcast: fix unsolicited report interval after receiving querys
- Smack: Mark inode instant in smack_task_to_inode
- arm64: dts: msm8916: fix Coresight ETF graph connections
- batman-adv: Fix bat_ogm_iv best gw refcnt after netlink dump
- batman-adv: Fix bat_v best gw refcnt after netlink dump
- batman-adv: Avoid storing non-TT-sync flags on singular entries too
- batman-adv: Fix multicast TT issues with bogus ROAM flags
- cxgb4: when disabling dcb set txq dcb priority to 0
- iio: pressure: bmp280: fix relative humidity unit
- brcmfmac: stop watchdog before detach and free everything
- ARM: dts: am437x: make edt-ft5x06 a wakeup source
- ALSA: seq: Fix UBSAN warning at SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT ioctl
- usb: xhci: remove the code build warning
- usb: xhci: increase CRS timeout value
- NFC: pn533: Fix wrong GFP flag usage
- typec: tcpm: Fix a msecs vs jiffies bug
- kconfig: fix line numbers for if-entries in menu tree
- perf record: Support s390 random socket_id assignment
- perf test session topology: Fix test on s390
- perf report powerpc: Fix crash if callchain is empty
- perf tools: Fix a clang 7.0 compilation error
- perf bench: Fix numa report output code
- ARM: davinci: board-da850-evm: fix WP pin polarity for MMC/SD
- netfilter: nf_log: fix uninit read in nf_log_proc_dostring
- net/mlx5: E-Switch, Disallow vlan/spoofcheck setup if not being esw manager
- nfp: cast sizeof() to int when comparing with error code
- selftests/x86/sigreturn/64: Fix spurious failures on AMD CPUs
- selftests/x86/sigreturn: Do minor cleanups
- ARM: dts: da850: Fix interrups property for gpio
- ARM64: dts: meson-gxl: fix Mali GPU compatible string
- dmaengine: pl330: report BURST residue granularity
- dmaengine: k3dma: Off by one in k3_of_dma_simple_xlate()
- ath10k: update the phymode along with bandwidth change request
- md/raid10: fix that replacement cannot complete recovery after reassemble
- dev-dax: check_vma: ratelimit dev_info-s
- nl80211: relax ht operation checks for mesh
- nl80211: check nla_parse_nested() return values
- drm/exynos: gsc: Fix support for NV16/61, YUV420/YVU420 and YUV422 modes
- drm/exynos: decon5433: Fix per-plane global alpha for XRGB modes
- drm/exynos: decon5433: Fix WINCONx reset value
- drbd: Fix drbd_request_prepare() discard handling
- bpf, s390: fix potential memleak when later bpf_jit_prog fails
- PCI: xilinx: Add missing of_node_put()
- PCI: xilinx-nwl: Add missing of_node_put()
- PCI: faraday: Add missing of_node_put()
- bnx2x: Fix receiving tx-timeout in error or recovery state.
- fsl/fman: fix parser reporting bad checksum on short frames
- dpaa_eth: DPAA SGT needs to be 256B
- acpi/nfit: fix cmd_rc for acpi_nfit_ctl to always return a value
- openrisc: entry: Fix delay slot exception detection
- m68k: fix "bad page state" oops on ColdFire boot
- objtool: Support GCC 8 '-fnoreorder-functions'
- ipvlan: call dev_change_flags when ipvlan mode is reset
- drm/amdgpu: fix swapped emit_ib_size in vce3
- x86/mm/32: Initialize the CR4 shadow before __flush_tlb_all()
- HID: wacom: Correct touch maximum XY of 2nd-gen Intuos
- ARM: imx_v4_v5_defconfig: Select ULPI support
- bpf: hash map: decrement counter on error
- tracing: Use __printf markup to silence compiler
- kasan: fix shadow_size calculation error in kasan_module_alloc
- smsc75xx: Add workaround for gigabit link up hardware errata.
- drm/bridge/sii8620: Fix display of packed pixel modes
- samples/bpf: add missing <linux/if_vlan.h>
- samples/bpf: Check the result of system()
- samples/bpf: Check the error of write() and read()
- ieee802154: 6lowpan: set IFLA_LINK
- netfilter: x_tables: set module owner for icmp(6) matches
- ipv6: make ipv6_renew_options() interrupt/kernel safe
- net: qrtr: Broadcast messages only from control port
- sh_eth: fix invalid context bug while calling auto-negotiation by ethtool
- sh_eth: fix invalid context bug while changing link options by ethtool
- ravb: fix invalid context bug while calling auto-negotiation by ethtool
- ravb: fix invalid context bug while changing link options by ethtool
- ARM: pxa: irq: fix handling of ICMR registers in suspend/resume
- net/sched: act_tunnel_key: fix NULL dereference when 'goto chain' is used
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
- ieee802154: at86rf230: switch from BUG_ON() to WARN_ON() on problem
- ieee802154: at86rf230: use __func__ macro for debug messages
- ieee802154: fakelb: switch from BUG_ON() to WARN_ON() on problem
- gpu: host1x: Check whether size of unpin isn't 0
- drm/tegra: Fix comparison operator for buffer size
- drm/armada: fix colorkey mode property
- drm/armada: fix irq handling
- netfilter: nft_compat: explicitly reject ERROR and standard target
- netfilter: nf_conntrack: Fix possible possible crash on module loading.
- ARC: Improve cmpxchg syscall implementation
- bnxt_en: Fix inconsistent BNXT_FLAG_AGG_RINGS logic.
- bnxt_en: Always set output parameters in bnxt_get_max_rings().
- bnxt_en: Fix for system hang if request_irq fails
- scsi: qedf: Send the driver state to MFW
- scsi: qedi: Send driver state to MFW
- perf llvm-utils: Remove bashism from kernel include fetch script
- perf tools: Fix compilation errors on gcc8
- perf script python: Fix dict reference counting
- nfit: fix unchecked dereference in acpi_nfit_ctl
- RDMA/mlx5: Fix memory leak in mlx5_ib_create_srq() error path
- ARM: 8780/1: ftrace: Only set kernel memory back to read-only after boot
- ARM: DRA7/OMAP5: Enable ACTLR[0] (Enable invalidates of BTB) for secondary
cores
- ARM: dts: am3517.dtsi: Disable reference to OMAP3 OTG controller
- ixgbe: Be more careful when modifying MAC filters
- tools: build: Use HOSTLDFLAGS with fixdep
- kbuild: suppress warnings from 'getconf LFS_*'
- packet: reset network header if packet shorter than ll reserved space
- qlogic: check kstrtoul() for errors
- tcp: remove DELAYED ACK events in DCTCP
- pinctrl: ingenic: Fix inverted direction for < JZ4770
- pinctrl: nsp: off by ones in nsp_pinmux_enable()
- pinctrl: nsp: Fix potential NULL dereference
- drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply()
- net/ethernet/freescale/fman: fix cross-build error
- ibmvnic: Fix error recovery on login failure
- btrfs: scrub: Don't use inode page cache in scrub_handle_errored_block()
- octeon_mgmt: Fix MIX registers configuration on MTU setup
- net: usb: rtl8150: demote allmulti message to dev_dbg()
- PCI: OF: Fix I/O space page leak
- PCI: versatile: Fix I/O space page leak
- net: qca_spi: Avoid packet drop during initial sync
- net: qca_spi: Make sure the QCA7000 reset is triggered
- net: qca_spi: Fix log level if probe fails
- tcp: identify cryptic messages as TCP seq # bugs
- soc: imx: gpc: restrict register range for regmap access
- ACPI / EC: Use ec_no_wakeup on more Thinkpad X1 Carbon 6th systems
- ARM: dts: imx6: RDU2: fix irq type for mv88e6xxx switch
- nvme: fix handling of metadata_len for NVME_IOCTL_IO_CMD
- parisc: Remove ordered stores from syscall.S
- xfrm_user: prevent leaking 2 bytes of kernel memory
- netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
- packet: refine ring v3 block size test to hold one frame
- net/smc: no shutdown in state SMC_LISTEN
- parisc: Remove unnecessary barriers from spinlock.h
- PCI: hotplug: Don't leak pci_slot on registration failure
- PCI: Skip MPS logic for Virtual Functions (VFs)
- PCI: pciehp: Fix use-after-free on unplug
- PCI: pciehp: Fix unprotected list iteration in IRQ handler
- i2c: core: ACPI: Properly set status byte to 0 for multi-byte writes
- i2c: imx: Fix race condition in dma read
- reiserfs: fix broken xattr handling (heap corruption, bad retval)
- updateconfigs for v4.14.67
- IB/rxe: avoid double kfree skb
- RDMA/qedr: Fix NULL pointer dereference when running over iWARP without
RDMA-CM
- smb3: increase initial number of credits requested to allow write
- hwmon: (dell-smm) Disable fan support for Dell XPS13 9333
- ARM: dts: HR2: Fix interrupt types for i2c and PCIe
- drm/arm/malidp: Ensure that the crtcs are shutdown before removing any
encoder/connector
- drm/mali-dp: Rectify the width and height passed to rotmem_required()
- dmaengine: ti: omap-dma: Fix OMAP1510 incorrect residue_granularity
- nvme-rdma: fix possible double free condition when failing to create a
controller
- nvme-rdma: Fix command completion race at error recovery
- nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl
- clk: sunxi-ng: replace lib-y with obj-y
- batman-adv: Fix debugfs path for renamed hardif
- batman-adv: Fix debugfs path for renamed softif
- nfp: bpf: don't stop offload if replace failed
- perf tests: Add event parsing error handling to parse events test
- perf script: Fix crash because of missing evsel->priv
- perf tools: Fix crash caused by accessing feat_ops[HEADER_LAST_FEATURE]
- s390/qeth: consistently re-enable device features
- sched/fair: Fix bandwidth timer clock drift condition
- r8169: fix mac address change
- RISC-V: Don't include irq-riscv-intc.h
- RISC-V: Fix PTRACE_SETREGSET bug.
- net: qrtr: Reset the node and port ID of broadcast messages
- cxgb4: assume flash part size to be 4MB, if it can't be determined
- bpf: fix sk_skb programs without skb->dev assigned
- ipfrag: really prevent allocation on netns exit
- gpu: host1x: Skip IOMMU initialization if firewall is enabled
- ARC: [plat-hsdk]: Configure APB GPIO controller on ARC HSDK platform
- bnxt_en: Do not modify max IRQ count after RDMA driver requests/frees IRQs.
- scsi: hpsa: correct enclosure sas address
- perf tools: Use python-config --includes rather than --cflags
- sfp: ensure we clean up properly on bus registration failure
- amd/dc/dce100: On dce100, set clocks to 0 on suspend
- tools: build: Fixup host c flags
- kvm: nVMX: Restore exit qual for VM-entry failure due to MSR loading
- ibmvnic: Revise RX/TX queue error messages
- net/smc: reset recv timeout after clc handshake
- PCI: xgene: Fix I/O space page leak
- PCI: designware: Fix I/O space page leak
- PCI: aardvark: Fix I/O space page leak
- PCI: faraday: Fix I/O space page leak
- PCI: mediatek: Fix I/O space page leak
- PCI: v3-semi: Fix I/O space page leak
- platform/x86: dell-laptop: Fix backlight detection
- mm: use helper functions for allocating and freeing vm_area structs
- mm: make vm_area_dup() actually copy the old vma data
- mm: make vm_area_alloc() initialize core fields
- PCI / ACPI / PM: Resume all bridges on suspend-to-RAM
[ Ubuntu: 4.15.0-55.60 ]
* linux: 4.15.0-55.60 -proposed tracker (LP: #1834954)
* Request backport of ceph commits into bionic (LP: #1834235)
- ceph: use atomic_t for ceph_inode_info::i_shared_gen
- ceph: define argument structure for handle_cap_grant
- ceph: flush pending works before shutdown super
- ceph: send cap releases more aggressively
- ceph: single workqueue for inode related works
- ceph: avoid dereferencing invalid pointer during cached readdir
- ceph: quota: add initial infrastructure to support cephfs quotas
- ceph: quota: support for ceph.quota.max_files
- ceph: quota: don't allow cross-quota renames
- ceph: fix root quota realm check
- ceph: quota: support for ceph.quota.max_bytes
- ceph: quota: update MDS when max_bytes is approaching
- ceph: quota: add counter for snaprealms with quota
- ceph: avoid iput_final() while holding mutex or in dispatch thread
* QCA9377 isn't being recognized sometimes (LP: #1757218)
- SAUCE: USB: Disable USB2 LPM at shutdown
* hns: fix ICMP6 neighbor solicitation messages discard problem (LP: #1833140)
- net: hns: fix ICMP6 neighbor solicitation messages discard problem
- net: hns: fix unsigned comparison to less than zero
* Fix occasional boot time crash in hns driver (LP: #1833138)
- net: hns: Fix probabilistic memory overwrite when HNS driver initialized
* use-after-free in hns_nic_net_xmit_hw (LP: #1833136)
- net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw()
* hns: attempt to restart autoneg when disabled should report error
(LP: #1833147)
- net: hns: Restart autoneg need return failed when autoneg off
* systemd 237-3ubuntu10.14 ADT test failure on Bionic ppc64el (test-seccomp)
(LP: #1821625)
- powerpc: sys_pkey_alloc() and sys_pkey_free() system calls
- powerpc: sys_pkey_mprotect() system call
* [UBUNTU] pkey: Indicate old mkvp only if old and curr. mkvp are different
(LP: #1832625)
- pkey: Indicate old mkvp only if old and current mkvp are different
* [UBUNTU] kernel: Fix gcm-aes-s390 wrong scatter-gather list processing
(LP: #1832623)
- s390/crypto: fix gcm-aes-s390 selftest failures
* System crashes on hot adding a core with drmgr command (4.15.0-48-generic)
(LP: #1833716)
- powerpc/numa: improve control of topology updates
- powerpc/numa: document topology_updates_enabled, disable by default
* Kernel modules generated incorrectly when system is localized to a non-
English language (LP: #1828084)
- scripts: override locale from environment when running recordmcount.pl
* [UBUNTU] kernel: Fix wrong dispatching for control domain CPRBs
(LP: #1832624)
- s390/zcrypt: Fix wrong dispatching for control domain CPRBs
* CVE-2019-11815
- net: rds: force to destroy connection if t_sock is NULL in
rds_tcp_kill_sock().
* Sound device not detected after resume from hibernate (LP: #1826868)
- drm/i915: Force 2*96 MHz cdclk on glk/cnl when audio power is enabled
- drm/i915: Save the old CDCLK atomic state
- drm/i915: Remove redundant store of logical CDCLK state
- drm/i915: Skip modeset for cdclk changes if possible
* Handle overflow in proc_get_long of sysctl (LP: #1833935)
- sysctl: handle overflow in proc_get_long
* Dell XPS 13 (9370) defaults to s2idle sleep/suspend instead of deep, NVMe
drains lots of power under s2idle (LP: #1808957)
- Revert "UBUNTU: SAUCE: pci/nvme: prevent WDC PC SN720 NVMe from entering D3
and being disabled"
- Revert "UBUNTU: SAUCE: nvme: add quirk to not call disable function when
suspending"
- Revert "UBUNTU: SAUCE: pci: prevent Intel NVMe SSDPEKKF from entering D3"
- Revert "SAUCE: nvme: add quirk to not call disable function when suspending"
- Revert "SAUCE: pci: prevent sk hynix nvme from entering D3"
- PCI: PM: Avoid possible suspend-to-idle issue
- PCI: PM: Skip devices in D0 for suspend-to-idle
- nvme-pci: Sync queues on reset
- nvme: Export get and set features
- nvme-pci: Use host managed power state for suspend
* linux v4.15 ftbfs on a newer host kernel (e.g. hwe) (LP: #1823429)
- selinux: use kernel linux/socket.h for genheaders and mdp
* 32-bit x86 kernel 4.15.0-50 crash in vmalloc_sync_all (LP: #1830433)
- x86/mm/pat: Disable preemption around __flush_tlb_all()
- x86/mm: Drop usage of __flush_tlb_all() in kernel_physical_mapping_init()
- x86/mm: Disable ioremap free page handling on x86-PAE
- ioremap: Update pgtable free interfaces with addr
- x86/mm: Add TLB purge to free pmd/pte page interfaces
- x86/init: fix build with CONFIG_SWAP=n
- x86/mm: provide pmdp_establish() helper
- x86/mm: Use WRITE_ONCE() when setting PTEs
* hinic: fix oops due to race in set_rx_mode (LP: #1832048)
- hinic: fix a bug in set rx mode
* ubuntu 18.04 flickering screen with Radeon X1600 (LP: #1791312)
- drm/radeon: prefer lower reference dividers
* Login screen never appears on vmwgfx using bionic kernel 4.15 (LP: #1832138)
- drm/vmwgfx: use monotonic event timestamps
* [linux-azure] Block Layer Commits Requested in Azure Kernels (LP: #1834499)
- block: Clear kernel memory before copying to user
- block/bio: Do not zero user pages
* CONFIG_LOG_BUF_SHIFT set to 14 is too low on arm64 (LP: #1824864)
- [Config] CONFIG_LOG_BUF_SHIFT=18 on all 64bit arches
* Handle overflow for file-max (LP: #1834310)
- sysctl: handle overflow for file-max
- kernel/sysctl.c: fix out-of-bounds access when setting file-max
* [ALSA] [PATCH] Headset fixup for System76 Gazelle (gaze14) (LP: #1827555)
- ALSA: hda/realtek - Headset fixup for System76 Gazelle (gaze14)
- ALSA: hda/realtek - Corrected fixup for System76 Gazelle (gaze14)
* crashdump fails on HiSilicon D06 (LP: #1828868)
- iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in kdump kernel
- iommu/arm-smmu-v3: Don't disable SMMU in kdump kernel
* CVE-2019-11833
- ext4: zero out the unused memory region in the extent tree block
* zfs 0.7.9 fixes a bug (https://github.com/zfsonlinux/zfs/pull/7343) that
hangs the system completely (LP: #1772412)
- SAUCE: (noup) Update zfs to 0.7.5-1ubuntu16.6
* does not detect headphone when there is no other output devices
(LP: #1831065)
- ALSA: hda/realtek - Fixed hp_pin no value
- ALSA: hda/realtek - Use a common helper for hp pin reference
* kernel crash : net_sched race condition in tcindex_destroy() (LP: #1825942)
- net_sched: fix NULL pointer dereference when delete tcindex filter
- RCU, workqueue: Implement rcu_work
- net_sched: switch to rcu_work
- net_sched: fix a race condition in tcindex_destroy()
- net_sched: fix a memory leak in cls_tcindex
- net_sched: initialize net pointer inside tcf_exts_init()
- net_sched: fix two more memory leaks in cls_tcindex
* Support new ums-realtek device (LP: #1831840)
- USB: usb-storage: Add new ID to ums-realtek
* amd_iommu possible data corruption (LP: #1823037)
- iommu/amd: Reserve exclusion range in iova-domain
- iommu/amd: Set exclusion range correctly
* Add new sound card PCIID into the alsa driver (LP: #1832299)
- ALSA: hda: Add Icelake PCI ID
- ALSA: hda/intel: add CometLake PCI IDs
* sky2 ethernet card doesn't work after returning from suspend
(LP: #1807259) // sky2 ethernet card link not up after suspend
(LP: #1809843)
- sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79
* idle-page oopses when accessing page frames that are out of range
(LP: #1833410)
- mm/page_idle.c: fix oops because end_pfn is larger than max_pfn
* Add pointstick support on HP ZBook 17 G5 (LP: #1833387)
- Revert "HID: multitouch: Support ALPS PTP stick with pid 0x120A"
- SAUCE: HID: multitouch: Add pointstick support for ALPS Touchpad
* [SRU][B/B-OEM/B-OEM-OSP-1/C/D/E] Add trackpoint middle button support of 2
new thinpads (LP: #1833637)
- Input: elantech - enable middle button support on 2 ThinkPads
* CVE-2019-11085
- drm/i915/gvt: Fix mmap range check
- drm/i915: make mappable struct resource centric
- drm/i915/gvt: Fix aperture read/write emulation when enable x-no-mmap=on
* CVE-2019-11884
- Bluetooth: hidp: fix buffer overflow
* af_alg06 test from crypto test suite in LTP failed with kernel oops on B/C
(LP: #1829725)
- crypto: authenc - fix parsing key with misaligned rta_len
* CVE-2018-12126 // CVE-2018-12127 // CVE-2018-12130 // CVE-2019-11091
- SAUCE: Synchronize MDS mitigations with upstream
- Documentation: Correct the possible MDS sysfs values
- x86/speculation/mds: Fix documentation typo
* CVE-2019-11091
- x86/mds: Add MDSUM variant to the MDS documentation
* alignment test in powerpc from ubuntu_kernel_selftests failed on B/C Power9
(LP: #1813118)
- selftests/powerpc: Remove Power9 copy_unaligned test
* TRACE_syscall.ptrace_syscall_dropped in seccomp from ubuntu_kernel_selftests
failed on B/C PowerPC (LP: #1812796)
- selftests/seccomp: Enhance per-arch ptrace syscall skip tests
* Add powerpc/alignment_handler test for selftests (LP: #1828935)
- selftests/powerpc: Add alignment handler selftest
- selftests/powerpc: Fix to use ucontext_t instead of struct ucontext
* Cannot build kernel 4.15.0-48.51 due to an in-source-tree ZFS module.
(LP: #1828763)
- SAUCE: (noup) Update zfs to 0.7.5-1ubuntu16.5
* Eletrical noise occurred when external headset enter powersaving mode on a
DEll machine (LP: #1828798)
- ALSA: hda/realtek - Reduce click noise on Dell Precision 5820 headphone
- ALSA: hda/realtek - Fixup headphone noise via runtime suspend
* [18.04/18.10] File libperf-jvmti.so is missing in linux-tools-common deb on
Ubuntu (LP: #1761379)
- [Packaging] Support building libperf-jvmti.so
* TCP : race condition on socket ownership in tcp_close() (LP: #1830813)
- tcp: do not release socket ownership in tcp_close()
* bionic: netlink: potential shift overflow in netlink_bind() (LP: #1831103)
- netlink: Don't shift on 64 for ngroups
* Add support to Comet Lake LPSS (LP: #1830175)
- mfd: intel-lpss: Add Intel Comet Lake PCI IDs
* Reduce NAPI weight in hns driver from 256 to 64 (LP: #1830587)
- net: hns: Use NAPI_POLL_WEIGHT for hns driver
* x86: add support for AMD Rome (LP: #1819485)
- x86: irq_remapping: Move irq remapping mode enum
- iommu/amd: Add support for higher 64-bit IOMMU Control Register
- iommu/amd: Add support for IOMMU XT mode
- hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs
- hwmon/k10temp: Add support for AMD family 17h, model 30h CPUs
- x86/amd_nb: Add PCI device IDs for family 17h, model 30h
- x86/MCE/AMD: Fix the thresholding machinery initialization order
- x86/amd_nb: Add support for newer PCI topologies
* nx842 - CRB request time out (-110) when uninstall NX modules and initiate
NX request (LP: #1827755)
- crypto/nx: Initialize 842 high and normal RxFIFO control registers
* Require improved hypervisor detection patch in Ubuntu 18.04 (LP: #1829972)
- s390/early: improve machine detection
-- Kleber Sacilotto de Souza <email address hidden> Thu, 15 Aug 2019 21:37:13 +0200
-
linux-aws (4.15.0-1045.47) bionic; urgency=medium
* CVE-2019-1125
- x86/cpufeatures: Carve out CQM features retrieval
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word
- x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations
- x86/speculation: Enable Spectre v1 swapgs mitigations
- x86/entry/64: Use JMP instead of JMPQ
- x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS
* CVE-2018-12126 // CVE-2018-12127 // CVE-2018-12130 // CVE-2019-11091
- SAUCE: Synchronize MDS mitigations with upstream
* add support for Amazon Graviton PCIe controller (LP: #1834962)
- PCI: al: Add Amazon Annapurna Labs PCIe host controller driver
- SAUCE: [aws] irqchip/gic-v2m: invoke from gic-v3 initialization and add acpi
quirk flow
- SAUCE: [aws] arm64: acpi/pci: invoke _DSM whether to preserve firmware PCI
setup
* linux-aws builds modules which are not shipped (LP: #1836706)
- [Packaging] Start shipping modules-extra
-- Kleber Sacilotto de Souza <email address hidden> Fri, 02 Aug 2019 14:16:59 +0200
-
linux-aws (4.15.0-1044.46) bionic; urgency=medium
* linux-aws: 4.15.0-1044.46 -proposed tracker (LP: #1834930)
* hibernation support for linux-aws (LP: #1831940)
- UBUNTU SAUCE [aws]: block: xen-blkfront: consider new dom0 features on
restore
- UBUNTU SAUCE [aws]: ACPICA: Enable sleep button on ACPI legacy wake
- UBUNTU SAUCE [aws]: xen: restore pirqs on resume from hibernation.
- UBUNTU SAUCE [aws]: xen: Only restore the ACPI SCI interrupt in
xen_restore_pirqs.
- mm: rid swapoff of quadratic complexity
- sched/wait: Introduce wait_var_event()
- mm: swapoff: shmem_unuse() stop eviction without igrab()
- UBUNTU SAUCE [aws]: mm: aggressive swapoff
- netlink: Don't shift on 64 for ngroups
-- Kleber Sacilotto de Souza <email address hidden> Thu, 04 Jul 2019 14:47:13 +0200
-
linux-aws (4.15.0-1043.45) bionic; urgency=medium
* linux-aws: 4.15.0-1043.45 -proposed tracker (LP: #1833967)
[ Ubuntu: 4.15.0-54.58 ]
* linux: 4.15.0-54.58 -proposed tracker (LP: #1833987)
* Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard
manipulation (LP: #1831638) // CVE-2019-11478
- tcp: refine memory limit test in tcp_fragment()
* CVE-2019-11479
- SAUCE: tcp: add tcp_min_snd_mss sysctl
- SAUCE: tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
-- Kleber Sacilotto de Souza <email address hidden> Mon, 24 Jun 2019 15:19:58 +0200
-
linux-aws (4.15.0-1042.44) bionic; urgency=medium
* linux-aws: 4.15.0-1042.44 -proposed tracker (LP: #1832552)
[ Ubuntu: 4.15.0-53.57 ]
* linux: 4.15.0-53.57 -proposed tracker (LP: #1832578)
* CVE-2019-11479
- SAUCE: tcp: add tcp_min_snd_mss sysctl
- SAUCE: tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
* CVE-2019-11085
- drm/i915/gvt: Fix mmap range check
- drm/i915: make mappable struct resource centric
- drm/i915/gvt: Fix aperture read/write emulation when enable x-no-mmap=on
* CVE-2019-11884
- Bluetooth: hidp: fix buffer overflow
* af_alg06 test from crypto test suite in LTP failed with kernel oops on B/C
(LP: #1829725)
- crypto: authenc - fix parsing key with misaligned rta_len
* CVE-2018-12126 // CVE-2018-12127 // CVE-2018-12130 // CVE-2019-11091
- SAUCE: Synchronize MDS mitigations with upstream
- Documentation: Correct the possible MDS sysfs values
- x86/speculation/mds: Fix documentation typo
* CVE-2019-11091
- x86/mds: Add MDSUM variant to the MDS documentation
* alignment test in powerpc from ubuntu_kernel_selftests failed on B/C Power9
(LP: #1813118)
- selftests/powerpc: Remove Power9 copy_unaligned test
* TRACE_syscall.ptrace_syscall_dropped in seccomp from ubuntu_kernel_selftests
failed on B/C PowerPC (LP: #1812796)
- selftests/seccomp: Enhance per-arch ptrace syscall skip tests
* Add powerpc/alignment_handler test for selftests (LP: #1828935)
- selftests/powerpc: Add alignment handler selftest
- selftests/powerpc: Fix to use ucontext_t instead of struct ucontext
* Cannot build kernel 4.15.0-48.51 due to an in-source-tree ZFS module.
(LP: #1828763)
- SAUCE: (noup) Update zfs to 0.7.5-1ubuntu16.5
* Eletrical noise occurred when external headset enter powersaving mode on a
DEll machine (LP: #1828798)
- ALSA: hda/realtek - Reduce click noise on Dell Precision 5820 headphone
- ALSA: hda/realtek - Fixup headphone noise via runtime suspend
* [18.04/18.10] File libperf-jvmti.so is missing in linux-tools-common deb on
Ubuntu (LP: #1761379)
- [Packaging] Support building libperf-jvmti.so
* TCP : race condition on socket ownership in tcp_close() (LP: #1830813)
- tcp: do not release socket ownership in tcp_close()
* bionic: netlink: potential shift overflow in netlink_bind() (LP: #1831103)
- netlink: Don't shift on 64 for ngroups
* Add support to Comet Lake LPSS (LP: #1830175)
- mfd: intel-lpss: Add Intel Comet Lake PCI IDs
* Reduce NAPI weight in hns driver from 256 to 64 (LP: #1830587)
- net: hns: Use NAPI_POLL_WEIGHT for hns driver
* x86: add support for AMD Rome (LP: #1819485)
- x86: irq_remapping: Move irq remapping mode enum
- iommu/amd: Add support for higher 64-bit IOMMU Control Register
- iommu/amd: Add support for IOMMU XT mode
- hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs
- hwmon/k10temp: Add support for AMD family 17h, model 30h CPUs
- x86/amd_nb: Add PCI device IDs for family 17h, model 30h
- x86/MCE/AMD: Fix the thresholding machinery initialization order
- x86/amd_nb: Add support for newer PCI topologies
* nx842 - CRB request time out (-110) when uninstall NX modules and initiate
NX request (LP: #1827755)
- crypto/nx: Initialize 842 high and normal RxFIFO control registers
* Require improved hypervisor detection patch in Ubuntu 18.04 (LP: #1829972)
- s390/early: improve machine detection
-- Connor Kuehl <email address hidden> Tue, 18 Jun 2019 09:27:58 -0700
-
linux-aws (4.15.0-1041.43) bionic; urgency=medium
[ Ubuntu: 4.15.0-52.56 ]
* Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard
manipulation (LP: #1831638)
- SAUCE: tcp: tcp_fragment() should apply sane memory limits
* Remote denial of service (system crash) caused by integer overflow in TCP
SACK handling (LP: #1831637)
- SAUCE: tcp: limit payload size of sacked skbs
-- Thadeu Lima de Souza Cascardo <email address hidden> Thu, 06 Jun 2019 06:50:09 -0300
-
linux-aws (4.15.0-1040.42) bionic; urgency=medium
* linux-aws: 4.15.0-1040.42 -proposed tracker (LP: #1829194)
[ Ubuntu: 4.15.0-51.55 ]
* linux: 4.15.0-51.55 -proposed tracker (LP: #1829219)
* disable a.out support (LP: #1818552)
- [Config] Disable a.out support
* [UBUNTU] qdio: clear intparm during shutdown (LP: #1828394)
- s390/qdio: clear intparm during shutdown
* ftrace in ubuntu_kernel_selftests hang with Cosmic kernel (LP: #1826385)
- kprobes/x86: Fix instruction patching corruption when copying more than one
RIP-relative instruction
* touchpad not working on lenovo yoga 530 (LP: #1787775)
- Revert "UBUNTU: SAUCE: i2c:amd Depends on ACPI"
- Revert "UBUNTU: SAUCE: i2c:amd move out pointer in union i2c_event_base"
- Revert "UBUNTU: SAUCE: i2c:amd I2C Driver based on PCI Interface for
upcoming platform"
- i2c: add helpers to ease DMA handling
- i2c: add a message flag for DMA safe buffers
- i2c: add extra check to safe DMA buffer helper
- i2c: Add drivers for the AMD PCIe MP2 I2C controller
- [Config] Update config for AMD MP2 I2C driver
- [Config] Update I2C_AMD_MP2 annotations
* tm-unavailable in powerpc/tm failed on Bionic Power9 (LP: #1813129)
- selftests/powerpc: Check for pthread errors in tm-unavailable
- selftests/powerpc: Skip tm-unavailable if TM is not enabled
* cp_abort in powerpc/context_switch from ubunut_kernel_selftests failed on
Bionic P9 (LP: #1813134)
- selftests/powerpc: Remove redundant cp_abort test
* bionic/linux: completely remove snapdragon files from sources (LP: #1827880)
- [Packaging] remove snapdragon dead files
- [Config] update configs after snapdragon removal
* The noise keeps occurring when Headset is plugged in on a Dell machine
(LP: #1827972)
- ALSA: hda/realtek - Fixed Dell AIO speaker noise
* Geneve tunnels don't work when ipv6 is disabled (LP: #1794232)
- geneve: correctly handle ipv6.disable module parameter
* There are 4 HDMI/Displayport audio output listed in sound setting without
attach any HDMI/DP monitor (LP: #1827967)
- ALSA: hda/hdmi - Read the pin sense from register when repolling
- ALSA: hda/hdmi - Consider eld_valid when reporting jack event
* Headphone jack switch sense is inverted: plugging in headphones disables
headphone output (LP: #1824259)
- ASoC: rt5645: Headphone Jack sense inverts on the LattePanda board
* CTAUTO:DevOps:860.50:devops4fp1:Error occurred during LINUX Dmesg error
Checking for all LINUX clients for devops4p10 (LP: #1766201)
- SAUCE: integrity: downgrade error to warning
* Screen freeze after resume from S3 when HDMI monitor plugged on Dell
Precision 7740 (LP: #1825958)
- PCI: Restore resized BAR state on resume
* potential memory corruption on arm64 on dev release (LP: #1827437)
- driver core: Postpone DMA tear-down until after devres release
* powerpc/pmu/ebb test in ubuntu_kernel_selftest failed with "error while
loading shared libraries" on Bionic/Cosmic PowerPC (LP: #1812805)
- selftests/powerpc/pmu: Link ebb tests with -no-pie
* unnecessary request_queue freeze (LP: #1815733)
- block: avoid setting nr_requests to current value
- block: avoid setting none scheduler if it's already none
* Kprobe event string type argument failed in ftrace from
ubuntu_kernel_selftests on B/C i386 (LP: #1825780)
- selftests/ftrace: Fix kprobe string testcase to not probe notrace function
* hns: fix socket accounting (LP: #1826911)
- net: hns: fix skb->truesize underestimation
* False positive test result in run_netsocktests from net in
ubuntu_kernel_selftest (LP: #1825777)
- selftests/net: correct the return value for run_netsocktests
-- Connor Kuehl <email address hidden> Wed, 15 May 2019 14:10:27 -0700
-
linux-aws (4.15.0-1039.41) bionic; urgency=medium
[ Ubuntu: 4.15.0-50.54 ]
* CVE-2018-12126 // CVE-2018-12127 // CVE-2018-12130
- Documentation/l1tf: Fix small spelling typo
- x86/cpu: Sanitize FAM6_ATOM naming
- kvm: x86: Report STIBP on GET_SUPPORTED_CPUID
- locking/atomics, asm-generic: Move some macros from <linux/bitops.h> to a
new <linux/bits.h> file
- tools include: Adopt linux/bits.h
- x86/msr-index: Cleanup bit defines
- x86/speculation: Consolidate CPU whitelists
- x86/speculation/mds: Add basic bug infrastructure for MDS
- x86/speculation/mds: Add BUG_MSBDS_ONLY
- x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests
- x86/speculation/mds: Add mds_clear_cpu_buffers()
- x86/speculation/mds: Clear CPU buffers on exit to user
- x86/kvm/vmx: Add MDS protection when L1D Flush is not active
- x86/speculation/mds: Conditionally clear CPU buffers on idle entry
- x86/speculation/mds: Add mitigation control for MDS
- x86/speculation/mds: Add sysfs reporting for MDS
- x86/speculation/mds: Add mitigation mode VMWERV
- Documentation: Move L1TF to separate directory
- Documentation: Add MDS vulnerability documentation
- x86/speculation/mds: Add mds=full,nosmt cmdline option
- x86/speculation: Move arch_smt_update() call to after mitigation decisions
- x86/speculation/mds: Add SMT warning message
- x86/speculation/mds: Fix comment
- x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off
- x86/speculation/mds: Add 'mitigations=' support for MDS
* CVE-2017-5715 // CVE-2017-5753
- s390/speculation: Support 'mitigations=' cmdline option
* CVE-2017-5715 // CVE-2017-5753 // CVE-2017-5754 // CVE-2018-3639
- powerpc/speculation: Support 'mitigations=' cmdline option
* CVE-2017-5715 // CVE-2017-5754 // CVE-2018-3620 // CVE-2018-3639 //
CVE-2018-3646
- cpu/speculation: Add 'mitigations=' cmdline option
- x86/speculation: Support 'mitigations=' cmdline option
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
linux-aws (4.15.0-1038.40) bionic; urgency=medium
* linux-aws: 4.15.0-1038.40 -proposed tracker (LP: #1826338)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
[ Ubuntu: 4.15.0-49.53 ]
* linux: 4.15.0-49.53 -proposed tracker (LP: #1826358)
* Backport support for software count cache flush Spectre v2 mitigation. (CVE)
(required for POWER9 DD2.3) (LP: #1822870)
- powerpc/64s: Add support for ori barrier_nospec patching
- powerpc/64s: Patch barrier_nospec in modules
- powerpc/64s: Enable barrier_nospec based on firmware settings
- powerpc: Use barrier_nospec in copy_from_user()
- powerpc/64: Use barrier_nospec in syscall entry
- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
- powerpc/64: Disable the speculation barrier from the command line
- powerpc/64: Make stf barrier PPC_BOOK3S_64 specific.
- powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC
- powerpc/64: Call setup_barrier_nospec() from setup_arch()
- powerpc/64: Make meltdown reporting Book3S 64 specific
- powerpc/lib/code-patching: refactor patch_instruction()
- powerpc/lib/feature-fixups: use raw_patch_instruction()
- powerpc/asm: Add a patch_site macro & helpers for patching instructions
- powerpc/64s: Add new security feature flags for count cache flush
- powerpc/64s: Add support for software count cache flush
- powerpc/pseries: Query hypervisor for count cache flush settings
- powerpc/powernv: Query firmware for count cache flush settings
- powerpc/fsl: Add nospectre_v2 command line argument
- KVM: PPC: Book3S: Add count cache flush parameters to kvmppc_get_cpu_char()
- [Config] Add CONFIG_PPC_BARRIER_NOSPEC
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
* autopkgtests run too often, too much and don't skip enough (LP: #1823056)
- [Debian] Set +x on rebuild testcase.
- [Debian] Skip rebuild test, for regression-suite deps.
- [Debian] Make ubuntu-regression-suite skippable on unbootable kernels.
- [Debian] make rebuild use skippable error codes when skipping.
- [Debian] Only run regression-suite, if requested to.
* bionic: fork out linux-snapdragon into its own topic kernel (LP: #1820868)
- [Packaging] remove arm64 snapdragon from getabis
- [Config] config changes for snapdragon split
- packaging: arm64: disable building the snapdragon flavour
- [Packaging] arm64: Drop snapdragon from kernel-versions
* CVE-2017-5753
- KVM: arm/arm64: vgic: fix possible spectre-v1 in vgic_get_irq()
- media: dvb_ca_en50221: prevent using slot_info for Spectre attacs
- sysvipc/sem: mitigate semnum index against spectre v1
- libahci: Fix possible Spectre-v1 pmp indexing in ahci_led_store()
- s390/keyboard: sanitize array index in do_kdsk_ioctl
- arm64: fix possible spectre-v1 write in ptrace_hbp_set_event()
- KVM: arm/arm64: vgic: Fix possible spectre-v1 write in vgic_mmio_write_apr()
- pktcdvd: Fix possible Spectre-v1 for pkt_devs
- net: socket: fix potential spectre v1 gadget in socketcall
- net: socket: Fix potential spectre v1 gadget in sock_is_registered
- drm/amdgpu/pm: Fix potential Spectre v1
- netlink: Fix spectre v1 gadget in netlink_create()
- ext4: fix spectre gadget in ext4_mb_regular_allocator()
- drm/i915/kvmgt: Fix potential Spectre v1
- net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd()
- fs/quota: Fix spectre gadget in do_quotactl
- hwmon: (nct6775) Fix potential Spectre v1
- mac80211_hwsim: Fix possible Spectre-v1 for hwsim_world_regdom_custom
- switchtec: Fix Spectre v1 vulnerability
- misc: hmc6352: fix potential Spectre v1
- tty: vt_ioctl: fix potential Spectre v1
- nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT
- nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
- IB/ucm: Fix Spectre v1 vulnerability
- RDMA/ucma: Fix Spectre v1 vulnerability
- drm/bufs: Fix Spectre v1 vulnerability
- usb: gadget: storage: Fix Spectre v1 vulnerability
- ptp: fix Spectre v1 vulnerability
- HID: hiddev: fix potential Spectre v1
- vhost: Fix Spectre V1 vulnerability
- drivers/misc/sgi-gru: fix Spectre v1 vulnerability
- ipv4: Fix potential Spectre v1 vulnerability
- aio: fix spectre gadget in lookup_ioctx
- ALSA: emux: Fix potential Spectre v1 vulnerabilities
- ALSA: pcm: Fix potential Spectre v1 vulnerability
- ip6mr: Fix potential Spectre v1 vulnerability
- ALSA: rme9652: Fix potential Spectre v1 vulnerability
- ALSA: emu10k1: Fix potential Spectre v1 vulnerabilities
- KVM: arm/arm64: vgic: Fix off-by-one bug in vgic_get_irq()
- drm/ioctl: Fix Spectre v1 vulnerabilities
- char/mwave: fix potential Spectre v1 vulnerability
- applicom: Fix potential Spectre v1 vulnerabilities
- ipmi: msghandler: Fix potential Spectre v1 vulnerabilities
- powerpc/ptrace: Mitigate potential Spectre v1
- cfg80211: prevent speculation on cfg80211_classify8021d() return
- ALSA: rawmidi: Fix potential Spectre v1 vulnerability
- ALSA: seq: oss: Fix Spectre v1 vulnerability
* Bionic: Sync to Xenial (Spectre) (LP: #1822760)
- x86/speculation/l1tf: Suggest what to do on systems with too much RAM
- KVM: SVM: Add MSR-based feature support for serializing LFENCE
- KVM: VMX: fixes for vmentry_l1d_flush module parameter
- KVM: X86: Allow userspace to define the microcode version
- SAUCE: [Fix] x86/KVM/VMX: Add L1D flush logic
- SAUCE: [Fix] x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on
vmentry
* [SRU] [B/OEM] Fix ACPI bug that causes boot failure (LP: #1819921)
- SAUCE: ACPI / bus: Add some Lenovo laptops in list of acpi table term list
* Bionic update: upstream stable patchset for fuse 2019-04-12 (LP: #1824553)
- fuse: fix double request_end()
- fuse: fix unlocked access to processing queue
- fuse: umount should wait for all requests
- fuse: Fix oops at process_init_reply()
- fuse: Don't access pipe->buffers without pipe_lock()
- fuse: Fix use-after-free in fuse_dev_do_read()
- fuse: Fix use-after-free in fuse_dev_do_write()
- fuse: set FR_SENT while locked
- fuse: fix blocked_waitq wakeup
- fuse: fix leaked notify reply
- fuse: fix possibly missed wake-up after abort
- fuse: fix use-after-free in fuse_direct_IO()
- fuse: continue to send FUSE_RELEASEDIR when FUSE_OPEN returns ENOSYS
- fuse: handle zero sized retrieve correctly
- fuse: call pipe_buf_release() under pipe lock
- fuse: decrement NR_WRITEBACK_TEMP on the right page
* Backport support for software count cache flush Spectre v2 mitigation. (CVE)
(required for POWER9 DD2.3) (LP: #1822870) // Backport support for software
count cache flush Spectre v2 mitigation. (CVE) (required for POWER9 DD2.3)
(LP: #1822870)
- powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2
- powerpc/fsl: Fix spectre_v2 mitigations reporting
- powerpc: Avoid code patching freed init sections
* Backport support for software count cache flush Spectre v2 mitigation. (CVE)
(required for POWER9 DD2.3) (LP: #1822870) // Backport support for software
count cache flush Spectre v2 mitigation. (CVE) (required for POWER9 DD2.3)
(LP: #1822870) // Backport support for software count cache flush Spectre v2
mitigation. (CVE) (required for POWER9 DD2.3) (LP: #1822870)
- powerpc/security: Fix spectre_v2 reporting
* CVE-2019-3874
- sctp: use sk_wmem_queued to check for writable space
- sctp: implement memory accounting on tx path
- sctp: implement memory accounting on rx path
* NULL pointer dereference when using z3fold and zswap (LP: #1814874)
- z3fold: fix possible reclaim races
* Kprobe event argument syntax in ftrace from ubuntu_kernel_selftests failed
on B PowerPC (LP: #1812809)
- selftests/ftrace: Add ppc support for kprobe args tests
* The Realtek card reader does not enter PCIe 1.1/1.2 (LP: #1825487)
- misc: rtsx: make various functions static
- misc: rtsx: Enable OCP for rts522a rts524a rts525a rts5260
- SAUCE: misc: rtsx: Fixed rts5260 power saving parameter and sd glitch
* headset-mic doesn't work on two Dell laptops. (LP: #1825272)
- ALSA: hda/realtek - add two more pin configuration sets to quirk table
* CVE-2018-16884
- sunrpc: use SVC_NET() in svcauth_gss_* functions
- sunrpc: use-after-free in svc_process_common()
* sky2 ethernet card don't work after returning from suspension (LP: #1798921)
- sky2: Increase D3 delay again
* CVE-2019-9500
- brcmfmac: assure SSID length from firmware is limited
* CVE-2019-9503
- brcmfmac: add subtype check for event handling in data path
* CVE-2019-3882
- vfio/type1: Limit DMA mappings per container
* Intel I210 Ethernet card not working after hotplug [8086:1533]
(LP: #1818490)
- igb: Fix WARN_ONCE on runtime suspend
* bionic, xenial/hwe: misses "fuse: fix initial parallel dirops" patch
(LP: #1823972)
- fuse: fix initial parallel dirops
* amdgpu resume failure: failed to allocate wb slot (LP: #1825074)
- drm/amdgpu: fix&cleanups for wb_clear
* Pop noise when headset is plugged in or removed from GHS/Line-out jack
(LP: #1821290)
- ALSA: hda/realtek - Add unplug function into unplug state of Headset Mode
for ALC225
- ALSA: hda/realtek - Disable headset Mic VREF for headset mode of ALC225
- ALSA: hda/realtek - Add support headset mode for DELL WYSE AIO
- ALSA: hda/realtek - Add support headset mode for New DELL WYSE NB
* mac80211_hwsim unable to handle kernel NULL pointer dereference
at0000000000000000 (LP: #1825058)
- mac80211_hwsim: Timer should be initialized before device registered
* [regression][snd_hda_codec_realtek] repeating crackling noise after 19.04
upgrade (LP: #1821663)
- ALSA: hda: Add Intel NUC7i3BNB to the power_save blacklist
- ALSA: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist
- ALSA: hda - Add two more machines to the power_save_blacklist
* ubuntu_nbd_smoke_test failed on P9 with Bionic kernel (LP: #1822247)
- nbd: fix how we set bd_invalidated
* TSC clocksource not available in nested guests (LP: #1822821)
- kvmclock: fix TSC calibration for nested guests
* 4.15 kernel ip_vs --ops causes performance and hang problem (LP: #1819786)
- ipvs: fix refcount usage for conns in ops mode
* systemd cause kernel trace "BUG: unable to handle kernel paging request at
6db23a14" on Cosmic i386 (LP: #1813244) // systemd cause kernel trace "BUG:
unable to handle kernel paging request at 6db23a14" on Cosmic i386
(LP: #1813244)
- openvswitch: fix flow actions reallocation
-- Stefan Bader <email address hidden> Wed, 08 May 2019 12:29:08 +0200
-
linux-aws (4.15.0-1038.40) bionic; urgency=medium
* linux-aws: 4.15.0-1038.40 -proposed tracker (LP: #1826338)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
[ Ubuntu: 4.15.0-49.53 ]
* linux: 4.15.0-49.53 -proposed tracker (LP: #1826358)
* Backport support for software count cache flush Spectre v2 mitigation. (CVE)
(required for POWER9 DD2.3) (LP: #1822870)
- powerpc/64s: Add support for ori barrier_nospec patching
- powerpc/64s: Patch barrier_nospec in modules
- powerpc/64s: Enable barrier_nospec based on firmware settings
- powerpc: Use barrier_nospec in copy_from_user()
- powerpc/64: Use barrier_nospec in syscall entry
- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
- powerpc/64: Disable the speculation barrier from the command line
- powerpc/64: Make stf barrier PPC_BOOK3S_64 specific.
- powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC
- powerpc/64: Call setup_barrier_nospec() from setup_arch()
- powerpc/64: Make meltdown reporting Book3S 64 specific
- powerpc/lib/code-patching: refactor patch_instruction()
- powerpc/lib/feature-fixups: use raw_patch_instruction()
- powerpc/asm: Add a patch_site macro & helpers for patching instructions
- powerpc/64s: Add new security feature flags for count cache flush
- powerpc/64s: Add support for software count cache flush
- powerpc/pseries: Query hypervisor for count cache flush settings
- powerpc/powernv: Query firmware for count cache flush settings
- powerpc/fsl: Add nospectre_v2 command line argument
- KVM: PPC: Book3S: Add count cache flush parameters to kvmppc_get_cpu_char()
- [Config] Add CONFIG_PPC_BARRIER_NOSPEC
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
* autopkgtests run too often, too much and don't skip enough (LP: #1823056)
- [Debian] Set +x on rebuild testcase.
- [Debian] Skip rebuild test, for regression-suite deps.
- [Debian] Make ubuntu-regression-suite skippable on unbootable kernels.
- [Debian] make rebuild use skippable error codes when skipping.
- [Debian] Only run regression-suite, if requested to.
* bionic: fork out linux-snapdragon into its own topic kernel (LP: #1820868)
- [Packaging] remove arm64 snapdragon from getabis
- [Config] config changes for snapdragon split
- packaging: arm64: disable building the snapdragon flavour
- [Packaging] arm64: Drop snapdragon from kernel-versions
* CVE-2017-5753
- KVM: arm/arm64: vgic: fix possible spectre-v1 in vgic_get_irq()
- media: dvb_ca_en50221: prevent using slot_info for Spectre attacs
- sysvipc/sem: mitigate semnum index against spectre v1
- libahci: Fix possible Spectre-v1 pmp indexing in ahci_led_store()
- s390/keyboard: sanitize array index in do_kdsk_ioctl
- arm64: fix possible spectre-v1 write in ptrace_hbp_set_event()
- KVM: arm/arm64: vgic: Fix possible spectre-v1 write in vgic_mmio_write_apr()
- pktcdvd: Fix possible Spectre-v1 for pkt_devs
- net: socket: fix potential spectre v1 gadget in socketcall
- net: socket: Fix potential spectre v1 gadget in sock_is_registered
- drm/amdgpu/pm: Fix potential Spectre v1
- netlink: Fix spectre v1 gadget in netlink_create()
- ext4: fix spectre gadget in ext4_mb_regular_allocator()
- drm/i915/kvmgt: Fix potential Spectre v1
- net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd()
- fs/quota: Fix spectre gadget in do_quotactl
- hwmon: (nct6775) Fix potential Spectre v1
- mac80211_hwsim: Fix possible Spectre-v1 for hwsim_world_regdom_custom
- switchtec: Fix Spectre v1 vulnerability
- misc: hmc6352: fix potential Spectre v1
- tty: vt_ioctl: fix potential Spectre v1
- nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT
- nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
- IB/ucm: Fix Spectre v1 vulnerability
- RDMA/ucma: Fix Spectre v1 vulnerability
- drm/bufs: Fix Spectre v1 vulnerability
- usb: gadget: storage: Fix Spectre v1 vulnerability
- ptp: fix Spectre v1 vulnerability
- HID: hiddev: fix potential Spectre v1
- vhost: Fix Spectre V1 vulnerability
- drivers/misc/sgi-gru: fix Spectre v1 vulnerability
- ipv4: Fix potential Spectre v1 vulnerability
- aio: fix spectre gadget in lookup_ioctx
- ALSA: emux: Fix potential Spectre v1 vulnerabilities
- ALSA: pcm: Fix potential Spectre v1 vulnerability
- ip6mr: Fix potential Spectre v1 vulnerability
- ALSA: rme9652: Fix potential Spectre v1 vulnerability
- ALSA: emu10k1: Fix potential Spectre v1 vulnerabilities
- KVM: arm/arm64: vgic: Fix off-by-one bug in vgic_get_irq()
- drm/ioctl: Fix Spectre v1 vulnerabilities
- char/mwave: fix potential Spectre v1 vulnerability
- applicom: Fix potential Spectre v1 vulnerabilities
- ipmi: msghandler: Fix potential Spectre v1 vulnerabilities
- powerpc/ptrace: Mitigate potential Spectre v1
- cfg80211: prevent speculation on cfg80211_classify8021d() return
- ALSA: rawmidi: Fix potential Spectre v1 vulnerability
- ALSA: seq: oss: Fix Spectre v1 vulnerability
* Bionic: Sync to Xenial (Spectre) (LP: #1822760)
- x86/speculation/l1tf: Suggest what to do on systems with too much RAM
- KVM: SVM: Add MSR-based feature support for serializing LFENCE
- KVM: VMX: fixes for vmentry_l1d_flush module parameter
- KVM: X86: Allow userspace to define the microcode version
- SAUCE: [Fix] x86/KVM/VMX: Add L1D flush logic
- SAUCE: [Fix] x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on
vmentry
* [SRU] [B/OEM] Fix ACPI bug that causes boot failure (LP: #1819921)
- SAUCE: ACPI / bus: Add some Lenovo laptops in list of acpi table term list
* Bionic update: upstream stable patchset for fuse 2019-04-12 (LP: #1824553)
- fuse: fix double request_end()
- fuse: fix unlocked access to processing queue
- fuse: umount should wait for all requests
- fuse: Fix oops at process_init_reply()
- fuse: Don't access pipe->buffers without pipe_lock()
- fuse: Fix use-after-free in fuse_dev_do_read()
- fuse: Fix use-after-free in fuse_dev_do_write()
- fuse: set FR_SENT while locked
- fuse: fix blocked_waitq wakeup
- fuse: fix leaked notify reply
- fuse: fix possibly missed wake-up after abort
- fuse: fix use-after-free in fuse_direct_IO()
- fuse: continue to send FUSE_RELEASEDIR when FUSE_OPEN returns ENOSYS
- fuse: handle zero sized retrieve correctly
- fuse: call pipe_buf_release() under pipe lock
- fuse: decrement NR_WRITEBACK_TEMP on the right page
* Backport support for software count cache flush Spectre v2 mitigation. (CVE)
(required for POWER9 DD2.3) (LP: #1822870) // Backport support for software
count cache flush Spectre v2 mitigation. (CVE) (required for POWER9 DD2.3)
(LP: #1822870)
- powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2
- powerpc/fsl: Fix spectre_v2 mitigations reporting
- powerpc: Avoid code patching freed init sections
* Backport support for software count cache flush Spectre v2 mitigation. (CVE)
(required for POWER9 DD2.3) (LP: #1822870) // Backport support for software
count cache flush Spectre v2 mitigation. (CVE) (required for POWER9 DD2.3)
(LP: #1822870) // Backport support for software count cache flush Spectre v2
mitigation. (CVE) (required for POWER9 DD2.3) (LP: #1822870)
- powerpc/security: Fix spectre_v2 reporting
* CVE-2019-3874
- sctp: use sk_wmem_queued to check for writable space
- sctp: implement memory accounting on tx path
- sctp: implement memory accounting on rx path
* NULL pointer dereference when using z3fold and zswap (LP: #1814874)
- z3fold: fix possible reclaim races
* Kprobe event argument syntax in ftrace from ubuntu_kernel_selftests failed
on B PowerPC (LP: #1812809)
- selftests/ftrace: Add ppc support for kprobe args tests
* The Realtek card reader does not enter PCIe 1.1/1.2 (LP: #1825487)
- misc: rtsx: make various functions static
- misc: rtsx: Enable OCP for rts522a rts524a rts525a rts5260
- SAUCE: misc: rtsx: Fixed rts5260 power saving parameter and sd glitch
* headset-mic doesn't work on two Dell laptops. (LP: #1825272)
- ALSA: hda/realtek - add two more pin configuration sets to quirk table
* CVE-2018-16884
- sunrpc: use SVC_NET() in svcauth_gss_* functions
- sunrpc: use-after-free in svc_process_common()
* sky2 ethernet card don't work after returning from suspension (LP: #1798921)
- sky2: Increase D3 delay again
* CVE-2019-9500
- brcmfmac: assure SSID length from firmware is limited
* CVE-2019-9503
- brcmfmac: add subtype check for event handling in data path
* CVE-2019-3882
- vfio/type1: Limit DMA mappings per container
* Intel I210 Ethernet card not working after hotplug [8086:1533]
(LP: #1818490)
- igb: Fix WARN_ONCE on runtime suspend
* bionic, xenial/hwe: misses "fuse: fix initial parallel dirops" patch
(LP: #1823972)
- fuse: fix initial parallel dirops
* amdgpu resume failure: failed to allocate wb slot (LP: #1825074)
- drm/amdgpu: fix&cleanups for wb_clear
* Pop noise when headset is plugged in or removed from GHS/Line-out jack
(LP: #1821290)
- ALSA: hda/realtek - Add unplug function into unplug state of Headset Mode
for ALC225
- ALSA: hda/realtek - Disable headset Mic VREF for headset mode of ALC225
- ALSA: hda/realtek - Add support headset mode for DELL WYSE AIO
- ALSA: hda/realtek - Add support headset mode for New DELL WYSE NB
* mac80211_hwsim unable to handle kernel NULL pointer dereference
at0000000000000000 (LP: #1825058)
- mac80211_hwsim: Timer should be initialized before device registered
* [regression][snd_hda_codec_realtek] repeating crackling noise after 19.04
upgrade (LP: #1821663)
- ALSA: hda: Add Intel NUC7i3BNB to the power_save blacklist
- ALSA: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist
- ALSA: hda - Add two more machines to the power_save_blacklist
* ubuntu_nbd_smoke_test failed on P9 with Bionic kernel (LP: #1822247)
- nbd: fix how we set bd_invalidated
* TSC clocksource not available in nested guests (LP: #1822821)
- kvmclock: fix TSC calibration for nested guests
* 4.15 kernel ip_vs --ops causes performance and hang problem (LP: #1819786)
- ipvs: fix refcount usage for conns in ops mode
* systemd cause kernel trace "BUG: unable to handle kernel paging request at
6db23a14" on Cosmic i386 (LP: #1813244) // systemd cause kernel trace "BUG:
unable to handle kernel paging request at 6db23a14" on Cosmic i386
(LP: #1813244)
- openvswitch: fix flow actions reallocation
-- Khalid Elmously <email address hidden> Fri, 26 Apr 2019 03:01:29 -0400
-
linux-aws (4.15.0-1037.39) bionic; urgency=medium
* linux-aws: 4.15.0-1037.39 -proposed tracker (LP: #1824773)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
* Please ship the ib_uverbs driver module in the main modules package
(LP: #1822692)
- [config] AWS: ib_uverbs.ko, ib_umad.ko moved to linux-modules package
linux-aws (4.15.0-1036.38) bionic; urgency=medium
* linux-aws: 4.15.0-1036.38 -proposed tracker (LP: #1822805)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
[ Ubuntu: 4.15.0-48.51 ]
* linux: 4.15.0-48.51 -proposed tracker (LP: #1822820)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
- [Packaging] resync retpoline extraction
* 3b080b2564287be91605bfd1d5ee985696e61d3c in ubuntu_btrfs_kernel_fixes
triggers system hang on i386 (LP: #1812845)
- btrfs: raid56: properly unmap parity page in finish_parity_scrub()
* [P9][LTCTest][Opal][FW910] cpupower monitor shows multiple stop Idle_Stats
(LP: #1719545)
- cpupower : Fix header name to read idle state name
* [amdgpu] screen corruption when using touchpad (LP: #1818617)
- drm/amdgpu/gmc: steal the appropriate amount of vram for fw hand-over (v3)
- drm/amdgpu: Free VGA stolen memory as soon as possible.
* [SRU][B/C/OEM]IOMMU: add kernel dma protection (LP: #1820153)
- ACPICA: AML parser: attempt to continue loading table after error
- ACPI / property: Allow multiple property compatible _DSD entries
- PCI / ACPI: Identify untrusted PCI devices
- iommu/vt-d: Force IOMMU on for platform opt in hint
- iommu/vt-d: Do not enable ATS for untrusted devices
- thunderbolt: Export IOMMU based DMA protection support to userspace
- iommu/vt-d: Disable ATS support on untrusted devices
* Add basic support to NVLink2 passthrough (LP: #1819989)
- powerpc/powernv/npu: Do not try invalidating 32bit table when 64bit table is
enabled
- powerpc/powernv: call OPAL_QUIESCE before OPAL_SIGNAL_SYSTEM_RESET
- powerpc/powernv: Export opal_check_token symbol
- powerpc/powernv: Make possible for user to force a full ipl cec reboot
- powerpc/powernv/idoa: Remove unnecessary pcidev from pci_dn
- powerpc/powernv: Move npu struct from pnv_phb to pci_controller
- powerpc/powernv/npu: Move OPAL calls away from context manipulation
- powerpc/pseries/iommu: Use memory@ nodes in max RAM address calculation
- powerpc/pseries/npu: Enable platform support
- powerpc/pseries: Remove IOMMU API support for non-LPAR systems
- powerpc/powernv/npu: Check mmio_atsd array bounds when populating
- powerpc/powernv/npu: Fault user page into the hypervisor's pagetable
* Huawei Hi1822 NIC has poor performance (LP: #1820187)
- net-next: hinic: fix a problem in free_tx_poll()
- hinic: remove ndo_poll_controller
- net-next/hinic: add checksum offload and TSO support
- hinic: Fix l4_type parameter in hinic_task_set_tunnel_l4
- net-next/hinic:replace multiply and division operators
- net-next/hinic:add rx checksum offload for HiNIC
- net-next/hinic:fix a bug in set mac address
- net-next/hinic: fix a bug in rx data flow
- net: hinic: fix null pointer dereference on pointer hwdev
- hinic: optmize rx refill buffer mechanism
- net-next/hinic:add shutdown callback
- net-next/hinic: replace disable_irq_nosync/enable_irq
* [CONFIG] please enable highdpi font FONT_TER16x32 (LP: #1819881)
- Fonts: New Terminus large console font
- [Config]: enable highdpi Terminus 16x32 font support
* [19.04 FEAT] qeth: Enhanced link speed - kernel part (LP: #1814892)
- s390/qeth: report 25Gbit link speed
* CVE-2017-5754
- x86/nmi: Fix NMI uaccess race against CR3 switching
- x86/mm: Fix documentation of module mapping range with 4-level paging
- x86/pti: Enable global pages for shared areas
- x86/pti: Never implicitly clear _PAGE_GLOBAL for kernel image
- x86/pti: Leave kernel text global for !PCID
- x86/pti: Fix boot problems from Global-bit setting
- x86/pti: Fix boot warning from Global-bit setting
- x86/pti: Reduce amount of kernel text allowed to be Global
- x86/pti: Disallow global kernel text with RANDSTRUCT
- x86/entry/32: Add explicit 'l' instruction suffix
- x86/asm-offsets: Move TSS_sp0 and TSS_sp1 to asm-offsets.c
- x86/entry/32: Rename TSS_sysenter_sp0 to TSS_entry2task_stack
- x86/entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler
- x86/entry/32: Put ESPFIX code into a macro
- x86/entry/32: Unshare NMI return path
- x86/entry/32: Split off return-to-kernel path
- x86/entry/32: Enter the kernel via trampoline stack
- x86/entry/32: Leave the kernel via trampoline stack
- x86/entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI
- x86/entry/32: Handle Entry from Kernel-Mode on Entry-Stack
- x86/entry/32: Simplify debug entry point
- x86/entry/32: Add PTI cr3 switch to non-NMI entry/exit points
- x86/entry/32: Add PTI CR3 switches to NMI handler code
- x86/entry: Rename update_sp0 to update_task_stack
- x86/pgtable: Rename pti_set_user_pgd() to pti_set_user_pgtbl()
- x86/pgtable/pae: Unshare kernel PMDs when PTI is enabled
- x86/pgtable/32: Allocate 8k page-tables when PTI is enabled
- x86/pgtable: Move pgdp kernel/user conversion functions to pgtable.h
- x86/pgtable: Move pti_set_user_pgtbl() to pgtable.h
- x86/pgtable: Move two more functions from pgtable_64.h to pgtable.h
- x86/mm/pae: Populate valid user PGD entries
- x86/mm/pae: Populate the user page-table with user pgd's
- x86/mm/pti: Add an overflow check to pti_clone_pmds()
- x86/mm/pti: Define X86_CR3_PTI_PCID_USER_BIT on x86_32
- x86/mm/pti: Clone CPU_ENTRY_AREA on PMD level on x86_32
- x86/mm/pti: Make pti_clone_kernel_text() compile on 32 bit
- x86/mm/pti: Keep permissions when cloning kernel text in
pti_clone_kernel_text()
- x86/mm/pti: Introduce pti_finalize()
- x86/mm/pti: Clone entry-text again in pti_finalize()
- x86/mm/dump_pagetables: Define INIT_PGD
- x86/pgtable/pae: Use separate kernel PMDs for user page-table
- x86/ldt: Reserve address-space range on 32 bit for the LDT
- x86/ldt: Define LDT_END_ADDR
- x86/ldt: Split out sanity check in map_ldt_struct()
- x86/ldt: Enable LDT user-mapping for PAE
- x86/pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32
- [Config] Update PAGE_TABLE_ISOLATION annotations
- x86/mm/pti: Add Warning when booting on a PCID capable CPU
- x86/entry/32: Add debug code to check entry/exit CR3
- x86/pti: Check the return value of pti_user_pagetable_walk_p4d()
- x86/pti: Check the return value of pti_user_pagetable_walk_pmd()
- perf/core: Make sure the ring-buffer is mapped in all page-tables
- x86/entry/32: Check for VM86 mode in slow-path check
- x86/mm: Remove in_nmi() warning from vmalloc_fault()
- x86/kexec: Allocate 8k PGDs for PTI
- x86/mm/pti: Clear Global bit more aggressively
- mm: Allow non-direct-map arguments to free_reserved_area()
- x86/mm/init: Pass unconverted symbol addresses to free_init_pages()
- x86/mm/init: Add helper for freeing kernel image pages
- x86/mm/init: Remove freed kernel image areas from alias mapping
- x86/mm/pti: Fix 32 bit PCID check
- x86/mm/pti: Don't clear permissions in pti_clone_pmd()
- x86/mm/pti: Clone kernel-image on PTE level for 32 bit
- x86/relocs: Add __end_rodata_aligned to S_REL
- x86/mm/pti: Move user W+X check into pti_finalize()
- x86/efi: Load fixmap GDT in efi_call_phys_epilog()
- x86/efi: Load fixmap GDT in efi_call_phys_epilog() before setting %cr3
- x86/mm/doc: Clean up the x86-64 virtual memory layout descriptions
- x86/mm/doc: Enhance the x86-64 virtual memory layout descriptions
- x86/entry/32: Clear the CS high bits
- x86/mm: Move LDT remap out of KASLR region on 5-level paging
- x86/ldt: Unmap PTEs for the slot before freeing LDT pages
- x86/ldt: Remove unused variable in map_ldt_struct()
- x86/mm: Fix guard hole handling
- x86/dump_pagetables: Fix LDT remap address marker
* Avoid potential memory corruption on HiSilicon SoCs (LP: #1819546)
- iommu/arm-smmu-v3: Avoid memory corruption from Hisilicon MSI payloads
* Ubuntu18.04.01: [Power9] power8 Compat guest(RHEL7.6) crashes during guest
boot with > 256G of memory (kernel/kvm) (LP: #1818645)
- ]PATCH] KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function
* Fix for dual Intel NVMes (LP: #1821961)
- SAUCE: nvme: Merge two quirk entries into one for Intel 760p/Pro 7600p
* CVE-2017-5715
- tools headers: Synchronize prctl.h ABI header
- x86/spectre: Add missing family 6 check to microcode check
- x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation
- x86/speculation: Apply IBPB more strictly to avoid cross-process data leak
- x86/speculation: Propagate information about RSB filling mitigation to sysfs
- x86/speculation: Add RETPOLINE_AMD support to the inline asm CALL_NOSPEC
variant
- x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support
- x86/retpoline: Remove minimal retpoline support
- x86/speculation: Update the TIF_SSBD comment
- x86/speculation: Clean up spectre_v2_parse_cmdline()
- x86/speculation: Remove unnecessary ret variable in cpu_show_common()
- x86/speculation: Move STIPB/IBPB string conditionals out of
cpu_show_common()
- x86/speculation: Disable STIBP when enhanced IBRS is in use
- x86/speculation: Rename SSBD update functions
- x86/speculation: Reorganize speculation control MSRs update
- sched/smt: Make sched_smt_present track topology
- x86/Kconfig: Select SCHED_SMT if SMP enabled
- sched/smt: Expose sched_smt_present static key
- x86/speculation: Rework SMT state change
- x86/l1tf: Show actual SMT state
- x86/speculation: Reorder the spec_v2 code
- x86/speculation: Mark string arrays const correctly
- x86/speculataion: Mark command line parser data __initdata
- x86/speculation: Unify conditional spectre v2 print functions
- x86/speculation: Add command line control for indirect branch speculation
- x86/speculation: Prepare for per task indirect branch speculation control
- x86/process: Consolidate and simplify switch_to_xtra() code
- x86/speculation: Avoid __switch_to_xtra() calls
- x86/speculation: Prepare for conditional IBPB in switch_mm()
- ptrace: Remove unused ptrace_may_access_sched() and MODE_IBRS
- x86/speculation: Split out TIF update
- x86/speculation: Prevent stale SPEC_CTRL msr content
- x86/speculation: Prepare arch_smt_update() for PRCTL mode
- x86/speculation: Add prctl() control for indirect branch speculation
- x86/speculation: Enable prctl mode for spectre_v2_user
- x86/speculation: Add seccomp Spectre v2 user space protection mode
- x86/speculation: Provide IBPB always command line options
- kvm: svm: Ensure an IBPB on all affected CPUs when freeing a vmcb
- x86/speculation: Change misspelled STIPB to STIBP
- x86/speculation: Add support for STIBP always-on preferred mode
- x86, modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE
- s390: remove closung punctuation from spectre messages
- x86/speculation: Simplify the CPU bug detection logic
* CVE-2018-3639
- x86/bugs: Add AMD's variant of SSB_NO
- x86/bugs: Add AMD's SPEC_CTRL MSR usage
- x86/bugs: Switch the selection of mitigation from CPU vendor to CPU features
- x86/bugs: Update when to check for the LS_CFG SSBD mitigation
- x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR
- KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled
* [Ubuntu] vfio-ap: add subsystem to matrix device to avoid libudev failures
(LP: #1818854)
- s390: vfio_ap: link the vfio_ap devices to the vfio_ap bus subsystem
* Kernel regularly logs: Bluetooth: hci0: last event is not cmd complete
(0x0f) (LP: #1748565)
- Bluetooth: Fix unnecessary error message for HCI request completion
* HiSilicon HNS ethernet broken in 4.15.0-45 (LP: #1818294)
- net: hns: Fix WARNING when hns modules installed
* rtl8723be wifi does not work under linux-modules-extra-4.15.0-33-generic
(LP: #1788997)
- SAUCE: Revert "rtlwifi: cleanup 8723be ant_sel definition"
* Crash from :i915 module with 4.15.0-46-generic using multi-display
(LP: #1819486)
- SAUCE: Revert "drm/i915: Fix hotplug irq ack on i965/g4x"
* kernel linux-image-4.15.0-44 not booting on Hyperv Server 2008R2
(LP: #1814069)
- hv/netvsc: fix handling of fallback to single queue mode
- hv/netvsc: Fix NULL dereference at single queue mode fallback
* Lenovo ideapad 330-15ICH Wifi rfkill hard blocked (LP: #1811815)
- platform/x86: ideapad: Add ideapad 330-15ICH to no_hw_rfkill
* Qualcomm Atheros QCA9377 wireless does not work (LP: #1818204)
- platform/x86: ideapad-laptop: Add Ideapad 530S-14ARR to no_hw_rfkill list
* fscache: jobs might hang when fscache disk is full (LP: #1821395)
- fscache: fix race between enablement and dropping of object
* hns3: fix oops in hns3_clean_rx_ring() (LP: #1821064)
- net: hns3: add dma_rmb() for rx description
* Hard lockup in 2 CPUs due to deadlock in cpu_stoppers (LP: #1821259)
- stop_machine: Disable preemption after queueing stopper threads
- stop_machine: Atomically queue and wake stopper threads
* tcm_loop.ko: move from modules-extra into main modules package
(LP: #1817786)
- [Packaging] move tcm_loop.lo to main linux-modules package
* tcmu user space crash results in kernel module hang. (LP: #1819504)
- scsi: tcmu: delete unused __wait
- scsi: tcmu: track nl commands
- scsi: tcmu: simplify nl interface
- scsi: tcmu: add module wide block/reset_netlink support
* Intel XL710 - i40e driver does not work with kernel 4.15 (Ubuntu 18.04)
(LP: #1779756)
- i40e: Fix for Tx timeouts when interface is brought up if DCB is enabled
- i40e: prevent overlapping tx_timeout recover
* some codecs stop working after S3 (LP: #1820930)
- ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec
* i40e xps management broken when > 64 queues/cpus (LP: #1820948)
- i40e: Do not allow use more TC queue pairs than MSI-X vectors exist
- i40e: Fix the number of queues available to be mapped for use
* 4.15 s390x kernel BUG at /build/linux-
Gycr4Z/linux-4.15.0/drivers/block/virtio_blk.c:565! (LP: #1788432)
- virtio/s390: avoid race on vcdev->config
- virtio/s390: fix race in ccw_io_helper()
* [SRU][B/B-OEM/C/D] Fix AMD IOMMU NULL dereference (LP: #1820990)
- iommu/amd: Fix NULL dereference bug in match_hid_uid
* New Intel Wireless-AC 9260 [8086:2526] card not correctly probed in Ubuntu
system (LP: #1821271)
- iwlwifi: add new card for 9260 series
* Add support for MAC address pass through on RTL8153-BD (LP: #1821276)
- r8152: Add support for MAC address pass through on RTL8153-BD
- r8152: Fix an error on RTL8153-BD MAC Address Passthrough support
-- Khalid Elmously <email address hidden> Mon, 15 Apr 2019 20:42:57 -0400
-
linux-aws (4.15.0-1036.38) bionic; urgency=medium
* linux-aws: 4.15.0-1036.38 -proposed tracker (LP: #1822805)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
[ Ubuntu: 4.15.0-48.51 ]
* linux: 4.15.0-48.51 -proposed tracker (LP: #1822820)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
- [Packaging] resync retpoline extraction
* 3b080b2564287be91605bfd1d5ee985696e61d3c in ubuntu_btrfs_kernel_fixes
triggers system hang on i386 (LP: #1812845)
- btrfs: raid56: properly unmap parity page in finish_parity_scrub()
* [P9][LTCTest][Opal][FW910] cpupower monitor shows multiple stop Idle_Stats
(LP: #1719545)
- cpupower : Fix header name to read idle state name
* [amdgpu] screen corruption when using touchpad (LP: #1818617)
- drm/amdgpu/gmc: steal the appropriate amount of vram for fw hand-over (v3)
- drm/amdgpu: Free VGA stolen memory as soon as possible.
* [SRU][B/C/OEM]IOMMU: add kernel dma protection (LP: #1820153)
- ACPICA: AML parser: attempt to continue loading table after error
- ACPI / property: Allow multiple property compatible _DSD entries
- PCI / ACPI: Identify untrusted PCI devices
- iommu/vt-d: Force IOMMU on for platform opt in hint
- iommu/vt-d: Do not enable ATS for untrusted devices
- thunderbolt: Export IOMMU based DMA protection support to userspace
- iommu/vt-d: Disable ATS support on untrusted devices
* Add basic support to NVLink2 passthrough (LP: #1819989)
- powerpc/powernv/npu: Do not try invalidating 32bit table when 64bit table is
enabled
- powerpc/powernv: call OPAL_QUIESCE before OPAL_SIGNAL_SYSTEM_RESET
- powerpc/powernv: Export opal_check_token symbol
- powerpc/powernv: Make possible for user to force a full ipl cec reboot
- powerpc/powernv/idoa: Remove unnecessary pcidev from pci_dn
- powerpc/powernv: Move npu struct from pnv_phb to pci_controller
- powerpc/powernv/npu: Move OPAL calls away from context manipulation
- powerpc/pseries/iommu: Use memory@ nodes in max RAM address calculation
- powerpc/pseries/npu: Enable platform support
- powerpc/pseries: Remove IOMMU API support for non-LPAR systems
- powerpc/powernv/npu: Check mmio_atsd array bounds when populating
- powerpc/powernv/npu: Fault user page into the hypervisor's pagetable
* Huawei Hi1822 NIC has poor performance (LP: #1820187)
- net-next: hinic: fix a problem in free_tx_poll()
- hinic: remove ndo_poll_controller
- net-next/hinic: add checksum offload and TSO support
- hinic: Fix l4_type parameter in hinic_task_set_tunnel_l4
- net-next/hinic:replace multiply and division operators
- net-next/hinic:add rx checksum offload for HiNIC
- net-next/hinic:fix a bug in set mac address
- net-next/hinic: fix a bug in rx data flow
- net: hinic: fix null pointer dereference on pointer hwdev
- hinic: optmize rx refill buffer mechanism
- net-next/hinic:add shutdown callback
- net-next/hinic: replace disable_irq_nosync/enable_irq
* [CONFIG] please enable highdpi font FONT_TER16x32 (LP: #1819881)
- Fonts: New Terminus large console font
- [Config]: enable highdpi Terminus 16x32 font support
* [19.04 FEAT] qeth: Enhanced link speed - kernel part (LP: #1814892)
- s390/qeth: report 25Gbit link speed
* CVE-2017-5754
- x86/nmi: Fix NMI uaccess race against CR3 switching
- x86/mm: Fix documentation of module mapping range with 4-level paging
- x86/pti: Enable global pages for shared areas
- x86/pti: Never implicitly clear _PAGE_GLOBAL for kernel image
- x86/pti: Leave kernel text global for !PCID
- x86/pti: Fix boot problems from Global-bit setting
- x86/pti: Fix boot warning from Global-bit setting
- x86/pti: Reduce amount of kernel text allowed to be Global
- x86/pti: Disallow global kernel text with RANDSTRUCT
- x86/entry/32: Add explicit 'l' instruction suffix
- x86/asm-offsets: Move TSS_sp0 and TSS_sp1 to asm-offsets.c
- x86/entry/32: Rename TSS_sysenter_sp0 to TSS_entry2task_stack
- x86/entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler
- x86/entry/32: Put ESPFIX code into a macro
- x86/entry/32: Unshare NMI return path
- x86/entry/32: Split off return-to-kernel path
- x86/entry/32: Enter the kernel via trampoline stack
- x86/entry/32: Leave the kernel via trampoline stack
- x86/entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI
- x86/entry/32: Handle Entry from Kernel-Mode on Entry-Stack
- x86/entry/32: Simplify debug entry point
- x86/entry/32: Add PTI cr3 switch to non-NMI entry/exit points
- x86/entry/32: Add PTI CR3 switches to NMI handler code
- x86/entry: Rename update_sp0 to update_task_stack
- x86/pgtable: Rename pti_set_user_pgd() to pti_set_user_pgtbl()
- x86/pgtable/pae: Unshare kernel PMDs when PTI is enabled
- x86/pgtable/32: Allocate 8k page-tables when PTI is enabled
- x86/pgtable: Move pgdp kernel/user conversion functions to pgtable.h
- x86/pgtable: Move pti_set_user_pgtbl() to pgtable.h
- x86/pgtable: Move two more functions from pgtable_64.h to pgtable.h
- x86/mm/pae: Populate valid user PGD entries
- x86/mm/pae: Populate the user page-table with user pgd's
- x86/mm/pti: Add an overflow check to pti_clone_pmds()
- x86/mm/pti: Define X86_CR3_PTI_PCID_USER_BIT on x86_32
- x86/mm/pti: Clone CPU_ENTRY_AREA on PMD level on x86_32
- x86/mm/pti: Make pti_clone_kernel_text() compile on 32 bit
- x86/mm/pti: Keep permissions when cloning kernel text in
pti_clone_kernel_text()
- x86/mm/pti: Introduce pti_finalize()
- x86/mm/pti: Clone entry-text again in pti_finalize()
- x86/mm/dump_pagetables: Define INIT_PGD
- x86/pgtable/pae: Use separate kernel PMDs for user page-table
- x86/ldt: Reserve address-space range on 32 bit for the LDT
- x86/ldt: Define LDT_END_ADDR
- x86/ldt: Split out sanity check in map_ldt_struct()
- x86/ldt: Enable LDT user-mapping for PAE
- x86/pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32
- [Config] Update PAGE_TABLE_ISOLATION annotations
- x86/mm/pti: Add Warning when booting on a PCID capable CPU
- x86/entry/32: Add debug code to check entry/exit CR3
- x86/pti: Check the return value of pti_user_pagetable_walk_p4d()
- x86/pti: Check the return value of pti_user_pagetable_walk_pmd()
- perf/core: Make sure the ring-buffer is mapped in all page-tables
- x86/entry/32: Check for VM86 mode in slow-path check
- x86/mm: Remove in_nmi() warning from vmalloc_fault()
- x86/kexec: Allocate 8k PGDs for PTI
- x86/mm/pti: Clear Global bit more aggressively
- mm: Allow non-direct-map arguments to free_reserved_area()
- x86/mm/init: Pass unconverted symbol addresses to free_init_pages()
- x86/mm/init: Add helper for freeing kernel image pages
- x86/mm/init: Remove freed kernel image areas from alias mapping
- x86/mm/pti: Fix 32 bit PCID check
- x86/mm/pti: Don't clear permissions in pti_clone_pmd()
- x86/mm/pti: Clone kernel-image on PTE level for 32 bit
- x86/relocs: Add __end_rodata_aligned to S_REL
- x86/mm/pti: Move user W+X check into pti_finalize()
- x86/efi: Load fixmap GDT in efi_call_phys_epilog()
- x86/efi: Load fixmap GDT in efi_call_phys_epilog() before setting %cr3
- x86/mm/doc: Clean up the x86-64 virtual memory layout descriptions
- x86/mm/doc: Enhance the x86-64 virtual memory layout descriptions
- x86/entry/32: Clear the CS high bits
- x86/mm: Move LDT remap out of KASLR region on 5-level paging
- x86/ldt: Unmap PTEs for the slot before freeing LDT pages
- x86/ldt: Remove unused variable in map_ldt_struct()
- x86/mm: Fix guard hole handling
- x86/dump_pagetables: Fix LDT remap address marker
* Avoid potential memory corruption on HiSilicon SoCs (LP: #1819546)
- iommu/arm-smmu-v3: Avoid memory corruption from Hisilicon MSI payloads
* Ubuntu18.04.01: [Power9] power8 Compat guest(RHEL7.6) crashes during guest
boot with > 256G of memory (kernel/kvm) (LP: #1818645)
- ]PATCH] KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function
* Fix for dual Intel NVMes (LP: #1821961)
- SAUCE: nvme: Merge two quirk entries into one for Intel 760p/Pro 7600p
* CVE-2017-5715
- tools headers: Synchronize prctl.h ABI header
- x86/spectre: Add missing family 6 check to microcode check
- x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation
- x86/speculation: Apply IBPB more strictly to avoid cross-process data leak
- x86/speculation: Propagate information about RSB filling mitigation to sysfs
- x86/speculation: Add RETPOLINE_AMD support to the inline asm CALL_NOSPEC
variant
- x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support
- x86/retpoline: Remove minimal retpoline support
- x86/speculation: Update the TIF_SSBD comment
- x86/speculation: Clean up spectre_v2_parse_cmdline()
- x86/speculation: Remove unnecessary ret variable in cpu_show_common()
- x86/speculation: Move STIPB/IBPB string conditionals out of
cpu_show_common()
- x86/speculation: Disable STIBP when enhanced IBRS is in use
- x86/speculation: Rename SSBD update functions
- x86/speculation: Reorganize speculation control MSRs update
- sched/smt: Make sched_smt_present track topology
- x86/Kconfig: Select SCHED_SMT if SMP enabled
- sched/smt: Expose sched_smt_present static key
- x86/speculation: Rework SMT state change
- x86/l1tf: Show actual SMT state
- x86/speculation: Reorder the spec_v2 code
- x86/speculation: Mark string arrays const correctly
- x86/speculataion: Mark command line parser data __initdata
- x86/speculation: Unify conditional spectre v2 print functions
- x86/speculation: Add command line control for indirect branch speculation
- x86/speculation: Prepare for per task indirect branch speculation control
- x86/process: Consolidate and simplify switch_to_xtra() code
- x86/speculation: Avoid __switch_to_xtra() calls
- x86/speculation: Prepare for conditional IBPB in switch_mm()
- ptrace: Remove unused ptrace_may_access_sched() and MODE_IBRS
- x86/speculation: Split out TIF update
- x86/speculation: Prevent stale SPEC_CTRL msr content
- x86/speculation: Prepare arch_smt_update() for PRCTL mode
- x86/speculation: Add prctl() control for indirect branch speculation
- x86/speculation: Enable prctl mode for spectre_v2_user
- x86/speculation: Add seccomp Spectre v2 user space protection mode
- x86/speculation: Provide IBPB always command line options
- kvm: svm: Ensure an IBPB on all affected CPUs when freeing a vmcb
- x86/speculation: Change misspelled STIPB to STIBP
- x86/speculation: Add support for STIBP always-on preferred mode
- x86, modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE
- s390: remove closung punctuation from spectre messages
- x86/speculation: Simplify the CPU bug detection logic
* CVE-2018-3639
- x86/bugs: Add AMD's variant of SSB_NO
- x86/bugs: Add AMD's SPEC_CTRL MSR usage
- x86/bugs: Switch the selection of mitigation from CPU vendor to CPU features
- x86/bugs: Update when to check for the LS_CFG SSBD mitigation
- x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR
- KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled
* [Ubuntu] vfio-ap: add subsystem to matrix device to avoid libudev failures
(LP: #1818854)
- s390: vfio_ap: link the vfio_ap devices to the vfio_ap bus subsystem
* Kernel regularly logs: Bluetooth: hci0: last event is not cmd complete
(0x0f) (LP: #1748565)
- Bluetooth: Fix unnecessary error message for HCI request completion
* HiSilicon HNS ethernet broken in 4.15.0-45 (LP: #1818294)
- net: hns: Fix WARNING when hns modules installed
* rtl8723be wifi does not work under linux-modules-extra-4.15.0-33-generic
(LP: #1788997)
- SAUCE: Revert "rtlwifi: cleanup 8723be ant_sel definition"
* Crash from :i915 module with 4.15.0-46-generic using multi-display
(LP: #1819486)
- SAUCE: Revert "drm/i915: Fix hotplug irq ack on i965/g4x"
* kernel linux-image-4.15.0-44 not booting on Hyperv Server 2008R2
(LP: #1814069)
- hv/netvsc: fix handling of fallback to single queue mode
- hv/netvsc: Fix NULL dereference at single queue mode fallback
* Lenovo ideapad 330-15ICH Wifi rfkill hard blocked (LP: #1811815)
- platform/x86: ideapad: Add ideapad 330-15ICH to no_hw_rfkill
* Qualcomm Atheros QCA9377 wireless does not work (LP: #1818204)
- platform/x86: ideapad-laptop: Add Ideapad 530S-14ARR to no_hw_rfkill list
* fscache: jobs might hang when fscache disk is full (LP: #1821395)
- fscache: fix race between enablement and dropping of object
* hns3: fix oops in hns3_clean_rx_ring() (LP: #1821064)
- net: hns3: add dma_rmb() for rx description
* Hard lockup in 2 CPUs due to deadlock in cpu_stoppers (LP: #1821259)
- stop_machine: Disable preemption after queueing stopper threads
- stop_machine: Atomically queue and wake stopper threads
* tcm_loop.ko: move from modules-extra into main modules package
(LP: #1817786)
- [Packaging] move tcm_loop.lo to main linux-modules package
* tcmu user space crash results in kernel module hang. (LP: #1819504)
- scsi: tcmu: delete unused __wait
- scsi: tcmu: track nl commands
- scsi: tcmu: simplify nl interface
- scsi: tcmu: add module wide block/reset_netlink support
* Intel XL710 - i40e driver does not work with kernel 4.15 (Ubuntu 18.04)
(LP: #1779756)
- i40e: Fix for Tx timeouts when interface is brought up if DCB is enabled
- i40e: prevent overlapping tx_timeout recover
* some codecs stop working after S3 (LP: #1820930)
- ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec
* i40e xps management broken when > 64 queues/cpus (LP: #1820948)
- i40e: Do not allow use more TC queue pairs than MSI-X vectors exist
- i40e: Fix the number of queues available to be mapped for use
* 4.15 s390x kernel BUG at /build/linux-
Gycr4Z/linux-4.15.0/drivers/block/virtio_blk.c:565! (LP: #1788432)
- virtio/s390: avoid race on vcdev->config
- virtio/s390: fix race in ccw_io_helper()
* [SRU][B/B-OEM/C/D] Fix AMD IOMMU NULL dereference (LP: #1820990)
- iommu/amd: Fix NULL dereference bug in match_hid_uid
* New Intel Wireless-AC 9260 [8086:2526] card not correctly probed in Ubuntu
system (LP: #1821271)
- iwlwifi: add new card for 9260 series
* Add support for MAC address pass through on RTL8153-BD (LP: #1821276)
- r8152: Add support for MAC address pass through on RTL8153-BD
- r8152: Fix an error on RTL8153-BD MAC Address Passthrough support
-- Andrea Righi <email address hidden> Thu, 04 Apr 2019 16:37:03 +0200
-
linux-aws (4.15.0-1035.37) bionic; urgency=medium
* linux-aws: 4.15.0-1035.37 -proposed tracker (LP: #1819694)
[ Ubuntu: 4.15.0-47.50 ]
* linux: 4.15.0-47.50 -proposed tracker (LP: #1819716)
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
- [Packaging] update helper scripts
- [Packaging] resync retpoline extraction
* C++ demangling support missing from perf (LP: #1396654)
- [Packaging] fix a mistype
* arm-smmu-v3 arm-smmu-v3.3.auto: CMD_SYNC timeout (LP: #1818162)
- iommu/arm-smmu-v3: Fix unexpected CMD_SYNC timeout
* Crash in nvme_irq_check() when using threaded interrupts (LP: #1818747)
- nvme-pci: fix out of bounds access in nvme_cqe_pending
* CVE-2019-9213
- mm: enforce min addr even if capable() in expand_downwards()
* CVE-2019-3460
- Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt
* amdgpu with mst WARNING on blanking (LP: #1814308)
- drm/amd/display: Don't use dc_link in link_encoder
- drm/amd/display: Move wait for hpd ready out from edp power control.
- drm/amd/display: eDP sequence BL off first then DP blank.
- drm/amd/display: Fix unused variable compilation error
- drm/amd/display: Fix warning about misaligned code
- drm/amd/display: Fix MST dp_blank REG_WAIT timeout
* tun/tap: unable to manage carrier state from userland (LP: #1806392)
- tun: implement carrier change
* CVE-2019-8980
- exec: Fix mem leak in kernel_read_file
* raw_skew in timer from the ubuntu_kernel_selftests failed on Bionic
(LP: #1811194)
- selftest: timers: Tweak raw_skew to SKIP when ADJ_OFFSET/other clock
adjustments are in progress
* [Packaging] Allow overlay of config annotations (LP: #1752072)
- [Packaging] config-check: Add an include directive
* CVE-2019-7308
- bpf: move {prev_,}insn_idx into verifier env
- bpf: move tmp variable into ax register in interpreter
- bpf: enable access to ax register also from verifier rewrite
- bpf: restrict map value pointer arithmetic for unprivileged
- bpf: restrict stack pointer arithmetic for unprivileged
- bpf: restrict unknown scalars of mixed signed bounds for unprivileged
- bpf: fix check_map_access smin_value test when pointer contains offset
- bpf: prevent out of bounds speculation on pointer arithmetic
- bpf: fix sanitation of alu op with pointer / scalar type from different
paths
- bpf: add various test cases to selftests
* CVE-2017-5753
- bpf: properly enforce index mask to prevent out-of-bounds speculation
- bpf: fix inner map masking to prevent oob under speculation
* BPF: kernel pointer leak to unprivileged userspace (LP: #1815259)
- bpf/verifier: disallow pointer subtraction
* squashfs hardening (LP: #1816756)
- squashfs: more metadata hardening
- squashfs metadata 2: electric boogaloo
- squashfs: more metadata hardening
- Squashfs: Compute expected length from inode size rather than block length
* efi/arm/arm64: Allow SetVirtualAddressMap() to be omitted (LP: #1814982)
- efi/arm/arm64: Allow SetVirtualAddressMap() to be omitted
* Update ENA driver to version 2.0.3K (LP: #1816806)
- net: ena: update driver version from 2.0.2 to 2.0.3
- net: ena: fix race between link up and device initalization
- net: ena: fix crash during failed resume from hibernation
* ipset kernel error: 4.15.0-43-generic (LP: #1811394)
- netfilter: ipset: Fix wraparound in hash:*net* types
* Silent "Unknown key" message when pressing keyboard backlight hotkey
(LP: #1817063)
- platform/x86: dell-wmi: Ignore new keyboard backlight change event
* CVE-2018-18021
- arm64: KVM: Tighten guest core register access from userspace
- KVM: arm/arm64: Introduce vcpu_el1_is_32bit
- arm64: KVM: Sanitize PSTATE.M when being set from userspace
* CVE-2018-14678
- x86/entry/64: Remove %ebx handling from error_entry/exit
* CVE-2018-19824
- ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c
* CVE-2019-3459
- Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer
* Bionic update: upstream stable patchset 2019-02-08 (LP: #1815234)
- fork: unconditionally clear stack on fork
- spi: spi-s3c64xx: Fix system resume support
- Input: elan_i2c - add ACPI ID for lenovo ideapad 330
- Input: i8042 - add Lenovo LaVie Z to the i8042 reset list
- Input: elan_i2c - add another ACPI ID for Lenovo Ideapad 330-15AST
- kvm, mm: account shadow page tables to kmemcg
- delayacct: fix crash in delayacct_blkio_end() after delayacct init failure
- tracing: Fix double free of event_trigger_data
- tracing: Fix possible double free in event_enable_trigger_func()
- kthread, tracing: Don't expose half-written comm when creating kthreads
- tracing/kprobes: Fix trace_probe flags on enable_trace_kprobe() failure
- tracing: Quiet gcc warning about maybe unused link variable
- arm64: fix vmemmap BUILD_BUG_ON() triggering on !vmemmap setups
- mlxsw: spectrum_switchdev: Fix port_vlan refcounting
- kcov: ensure irq code sees a valid area
- xen/netfront: raise max number of slots in xennet_get_responses()
- skip LAYOUTRETURN if layout is invalid
- ALSA: emu10k1: add error handling for snd_ctl_add
- ALSA: fm801: add error handling for snd_ctl_add
- NFSv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY
- nfsd: fix potential use-after-free in nfsd4_decode_getdeviceinfo
- vfio: platform: Fix reset module leak in error path
- vfio/mdev: Check globally for duplicate devices
- vfio/type1: Fix task tracking for QEMU vCPU hotplug
- kernel/hung_task.c: show all hung tasks before panic
- mm: /proc/pid/pagemap: hide swap entries from unprivileged users
- mm: vmalloc: avoid racy handling of debugobjects in vunmap
- mm/slub.c: add __printf verification to slab_err()
- rtc: ensure rtc_set_alarm fails when alarms are not supported
- perf tools: Fix pmu events parsing rule
- netfilter: ipset: forbid family for hash:mac sets
- netfilter: ipset: List timing out entries with "timeout 1" instead of zero
- irqchip/ls-scfg-msi: Map MSIs in the iommu
- watchdog: da9063: Fix updating timeout value
- printk: drop in_nmi check from printk_safe_flush_on_panic()
- bpf, arm32: fix inconsistent naming about emit_a32_lsr_{r64,i64}
- ceph: fix alignment of rasize
- e1000e: Ignore TSYNCRXCTL when getting I219 clock attributes
- powerpc/lib: Adjust .balign inside string functions for PPC32
- powerpc/64s: Add barrier_nospec
- powerpc/eeh: Fix use-after-release of EEH driver
- hvc_opal: don't set tb_ticks_per_usec in udbg_init_opal_common()
- powerpc/64s: Fix compiler store ordering to SLB shadow area
- RDMA/mad: Convert BUG_ONs to error flows
- lightnvm: pblk: warn in case of corrupted write buffer
- netfilter: nf_tables: check msg_type before nft_trans_set(trans)
- pnfs: Don't release the sequence slot until we've processed layoutget on
open
- disable loading f2fs module on PAGE_SIZE > 4KB
- f2fs: fix error path of move_data_page
- f2fs: fix to don't trigger writeback during recovery
- f2fs: fix to wait page writeback during revoking atomic write
- f2fs: Fix deadlock in shutdown ioctl
- f2fs: fix to detect failure of dquot_initialize
- f2fs: fix race in between GC and atomic open
- block, bfq: remove wrong lock in bfq_requests_merged
- usbip: usbip_detach: Fix memory, udev context and udev leak
- usbip: dynamically allocate idev by nports found in sysfs
- perf/x86/intel/uncore: Correct fixed counter index check in generic code
- perf/x86/intel/uncore: Correct fixed counter index check for NHM
- selftests/intel_pstate: Improve test, minor fixes
- selftests: memfd: return Kselftest Skip code for skipped tests
- selftests: intel_pstate: return Kselftest Skip code for skipped tests
- PCI: Fix devm_pci_alloc_host_bridge() memory leak
- iwlwifi: pcie: fix race in Rx buffer allocator
- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
- ASoC: dpcm: fix BE dai not hw_free and shutdown
- mfd: cros_ec: Fail early if we cannot identify the EC
- mwifiex: handle race during mwifiex_usb_disconnect
- wlcore: sdio: check for valid platform device data before suspend
- media: tw686x: Fix incorrect vb2_mem_ops GFP flags
- media: videobuf2-core: don't call memop 'finish' when queueing
- Btrfs: don't return ino to ino cache if inode item removal fails
- Btrfs: don't BUG_ON() in btrfs_truncate_inode_items()
- btrfs: add barriers to btrfs_sync_log before log_commit_wait wakeups
- btrfs: qgroup: Finish rescan when hit the last leaf of extent tree
- x86/microcode: Make the late update update_lock a raw lock for RT
- PM / wakeup: Make s2idle_lock a RAW_SPINLOCK
- PCI: Prevent sysfs disable of device while driver is attached
- nvme-rdma: stop admin queue before freeing it
- nvme-pci: Fix AER reset handling
- ath: Add regulatory mapping for FCC3_ETSIC
- ath: Add regulatory mapping for ETSI8_WORLD
- ath: Add regulatory mapping for APL13_WORLD
- ath: Add regulatory mapping for APL2_FCCA
- ath: Add regulatory mapping for Uganda
- ath: Add regulatory mapping for Tanzania
- ath: Add regulatory mapping for Serbia
- ath: Add regulatory mapping for Bermuda
- ath: Add regulatory mapping for Bahamas
- powerpc/32: Add a missing include header
- powerpc/chrp/time: Make some functions static, add missing header include
- powerpc/powermac: Add missing prototype for note_bootable_part()
- powerpc/powermac: Mark variable x as unused
- powerpc: Add __printf verification to prom_printf
- spi: sh-msiof: Fix setting SIRMDR1.SYNCAC to match SITMDR1.SYNCAC
- powerpc/8xx: fix invalid register expression in head_8xx.S
- pinctrl: at91-pio4: add missing of_node_put
- bpf: powerpc64: pad function address loads with NOPs
- PCI: pciehp: Request control of native hotplug only if supported
- net: dsa: qca8k: Add support for QCA8334 switch
- mwifiex: correct histogram data with appropriate index
- ima: based on policy verify firmware signatures (pre-allocated buffer)
- drivers/perf: arm-ccn: don't log to dmesg in event_init
- spi: Add missing pm_runtime_put_noidle() after failed get
- fscrypt: use unbound workqueue for decryption
- scsi: ufs: ufshcd: fix possible unclocked register access
- scsi: ufs: fix exception event handling
- scsi: zfcp: assert that the ERP lock is held when tracing a recovery trigger
- drm/nouveau/fifo/gk104-: poll for runlist update completion
- Bluetooth: btusb: add ID for LiteOn 04ca:301a
- rtc: tps6586x: fix possible race condition
- rtc: vr41xx: fix possible race condition
- rtc: tps65910: fix possible race condition
- ALSA: emu10k1: Rate-limit error messages about page errors
- regulator: pfuze100: add .is_enable() for pfuze100_swb_regulator_ops
- md/raid1: add error handling of read error from FailFast device
- md: fix NULL dereference of mddev->pers in remove_and_add_spares()
- ixgbevf: fix MAC address changes through ixgbevf_set_mac()
- media: smiapp: fix timeout checking in smiapp_read_nvm
- net: ethernet: ti: cpsw-phy-sel: check bus_find_device() ret value
- ALSA: usb-audio: Apply rate limit to warning messages in URB complete
callback
- media: atomisp: ov2680: don't declare unused vars
- arm64: cmpwait: Clear event register before arming exclusive monitor
- HID: hid-plantronics: Re-resend Update to map button for PTT products
- arm64: dts: renesas: salvator-common: use audio-graph-card for Sound
- drm/radeon: fix mode_valid's return type
- drm/amdgpu: Remove VRAM from shared bo domains.
- powerpc/embedded6xx/hlwd-pic: Prevent interrupts from being handled by
Starlet
- HID: i2c-hid: check if device is there before really probing
- EDAC, altera: Fix ARM64 build warning
- ARM: dts: stih407-pinctrl: Fix complain about IRQ_TYPE_NONE usage
- ARM: dts: emev2: Add missing interrupt-affinity to PMU node
- ARM: dts: sh73a0: Add missing interrupt-affinity to PMU node
- nvmem: properly handle returned value nvmem_reg_read
- i40e: free the skb after clearing the bitlock
- tty: Fix data race in tty_insert_flip_string_fixed_flag
- dma-iommu: Fix compilation when !CONFIG_IOMMU_DMA
- net: phy: phylink: Release link GPIO
- media: rcar_jpu: Add missing clk_disable_unprepare() on error in jpu_open()
- libata: Fix command retry decision
- ACPI / LPSS: Only call pwm_add_table() for Bay Trail PWM if PMIC HRV is 2
- media: media-device: fix ioctl function types
- media: saa7164: Fix driver name in debug output
- mtd: rawnand: fsl_ifc: fix FSL NAND driver to read all ONFI parameter pages
- brcmfmac: Add support for bcm43364 wireless chipset
- s390/cpum_sf: Add data entry sizes to sampling trailer entry
- perf: fix invalid bit in diagnostic entry
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF only.
- scsi: 3w-9xxx: fix a missing-check bug
- scsi: 3w-xxxx: fix a missing-check bug
- scsi: megaraid: silence a static checker bug
- scsi: qedf: Set the UNLOADING flag when removing a vport
- staging: lustre: o2iblnd: fix race at kiblnd_connect_peer
- staging: lustre: o2iblnd: Fix FastReg map/unmap for MLX5
- thermal: exynos: fix setting rising_threshold for Exynos5433
- bpf: fix references to free_bpf_prog_info() in comments
- f2fs: avoid fsync() failure caused by EAGAIN in writepage()
- media: siano: get rid of __le32/__le16 cast warnings
- drm/atomic: Handling the case when setting old crtc for plane
- ALSA: hda/ca0132: fix build failure when a local macro is defined
- mmc: dw_mmc: update actual clock for mmc debugfs
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
- dt-bindings: pinctrl: meson: add support for the Meson8m2 SoC
- spi: meson-spicc: Fix error handling in meson_spicc_probe()
- dt-bindings: net: meson-dwmac: new compatible name for AXG SoC
- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
- stop_machine: Use raw spinlocks
- delayacct: Use raw_spinlocks
- memory: tegra: Do not handle spurious interrupts
- memory: tegra: Apply interrupts mask per SoC
- nvme: lightnvm: add granby support
- arm64: defconfig: Enable Rockchip io-domain driver
- igb: Fix queue selection on MAC filters on i210
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
- ipconfig: Correctly initialise ic_nameservers
- rsi: Fix 'invalid vdd' warning in mmc
- rsi: fix nommu_map_sg overflow kernel panic
- audit: allow not equal op for audit by executable
- staging: vchiq_core: Fix missing semaphore release in error case
- staging: lustre: llite: correct removexattr detection
- staging: lustre: ldlm: free resource when ldlm_lock_create() fails.
- serial: core: Make sure compiler barfs for 16-byte earlycon names
- soc: imx: gpcv2: Do not pass static memory as platform data
- microblaze: Fix simpleImage format generation
- usb: hub: Don't wait for connect state at resume for powered-off ports
- crypto: authencesn - don't leak pointers to authenc keys
- crypto: authenc - don't leak pointers to authenc keys
- media: omap3isp: fix unbalanced dma_iommu_mapping
- regulator: Don't return or expect -errno from of_map_mode()
- scsi: scsi_dh: replace too broad "TP9" string with the exact models
- scsi: megaraid_sas: Increase timeout by 1 sec for non-RAID fastpath IOs
- media: atomisp: compat32: fix __user annotations
- media: si470x: fix __be16 annotations
- ASoC: topology: Fix bclk and fsync inversion in set_link_hw_format()
- ASoC: topology: Add missing clock gating parameter when parsing hw_configs
- drm: Add DP PSR2 sink enable bit
- drm/atomic-helper: Drop plane->fb references only for
drm_atomic_helper_shutdown()
- drm/dp/mst: Fix off-by-one typo when dump payload table
- block: reset bi_iter.bi_done after splitting bio
- random: mix rdrand with entropy sent in from userspace
- squashfs: be more careful about metadata corruption
- ext4: fix inline data updates with checksums enabled
- ext4: fix check to prevent initializing reserved inodes
- PCI: xgene: Remove leftover pci_scan_child_bus() call
- RDMA/uverbs: Protect from attempts to create flows on unsupported QP
- net: dsa: qca8k: Force CPU port to its highest bandwidth
- net: dsa: qca8k: Enable RXMAC when bringing up a port
- net: dsa: qca8k: Add QCA8334 binding documentation
- net: dsa: qca8k: Allow overwriting CPU port setting
- ipv4: remove BUG_ON() from fib_compute_spec_dst
- net: fix amd-xgbe flow-control issue
- net: lan78xx: fix rx handling before first packet is send
- net: mdio-mux: bcm-iproc: fix wrong getter and setter pair
- NET: stmmac: align DMA stuff to largest cache line length
- tcp_bbr: fix bw probing to raise in-flight data for very small BDPs
- xen-netfront: wait xenbus state change when load module manually
- netlink: Do not subscribe to non-existent groups
- netlink: Don't shift with UB on nlk->ngroups
- tcp: do not force quickack when receiving out-of-order packets
- tcp: add max_quickacks param to tcp_incr_quickack and
tcp_enter_quickack_mode
- tcp: do not aggressively quick ack after ECN events
- tcp: refactor tcp_ecn_check_ce to remove sk type cast
- tcp: add one more quick ack after after ECN events
- mm: disallow mappings that conflict for devm_memremap_pages()
- drm/i915/glk: Add Quirk for GLK NUC HDMI port issues.
- mm: check for SIGKILL inside dup_mmap() loop
- rxrpc: Fix terminal retransmission connection ID to include the channel
- ceph: fix use-after-free in ceph_statfs()
- lightnvm: proper error handling for pblk_bio_add_pages
- f2fs: don't drop dentry pages after fs shutdown
- selftests: filesystems: return Kselftest Skip code for skipped tests
- selftests/filesystems: devpts_pts included wrong header
- iwlwifi: mvm: open BA session only when sta is authorized
- drm/amd/display: Do not program interrupt status on disabled crtc
- soc: qcom: smem: fix qcom_smem_set_global_partition()
- soc: qcom: smem: byte swap values properly
- pinctrl: msm: fix gpio-hog related boot issues
- net: mvpp2: Add missing VLAN tag detection
- drm/nouveau: remove fence wait code from deferred client work handler
- drm/nouveau/gem: lookup VMAs for buffers referenced by pushbuf ioctl
- clocksource: Move inline keyword to the beginning of function declarations
- media: staging: atomisp: Comment out several unused sensor resolutions
- IB: Fix RDMA_RXE and INFINIBAND_RDMAVT dependencies for DMA_VIRT_OPS
- rsi: Add null check for virtual interfaces in wowlan config
- ARM: dts: stih410: Fix complain about IRQ_TYPE_NONE usage
- ARM: dts: imx53: Fix LDB OF graph warning
- soc/tegra: pmc: Don't allocate struct tegra_powergate on stack
- mlxsw: spectrum_router: Return an error for non-default FIB rules
- i40e: Add advertising 10G LR mode
- i40e: avoid overflow in i40e_ptp_adjfreq()
- ath10k: fix kernel panic while reading tpc_stats
- ASoC: fsl_ssi: Use u32 variable type when using regmap_read()
- platform/x86: dell-smbios: Match on www.dell.com in OEM strings too
- staging: ks7010: fix error handling in ks7010_upload_firmware
- media: rc: mce_kbd decoder: low timeout values cause double keydowns
- ath10k: search all IEs for variant before falling back
- PCI/ASPM: Disable ASPM L1.2 Substate if we don't have LTR
- ARM: dts: imx6qdl-wandboard: Let the codec control MCLK pinctrl
- drm/amdgpu: Avoid reclaim while holding locks taken in MMU notifier
- nvmet-fc: fix target sgl list on large transfers
- i2c: rcar: handle RXDMA HW behaviour on Gen3
- gpio: uniphier: set legitimate irq trigger type in .to_irq hook
- tcp: ack immediately when a cwr packet arrives
- ACPICA: AML Parser: ignore control method status in module-level code
* Bionic update: upstream stable patchset 2019-02-05 (LP: #1814813)
- MIPS: ath79: fix register address in ath79_ddr_wb_flush()
- MIPS: Fix off-by-one in pci_resource_to_user()
- xen/PVH: Set up GS segment for stack canary
- drm/nouveau/drm/nouveau: Fix runtime PM leak in nv50_disp_atomic_commit()
- drm/nouveau: Set DRIVER_ATOMIC cap earlier to fix debugfs
- bonding: set default miimon value for non-arp modes if not set
- ip: hash fragments consistently
- ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull
- net/mlx4_core: Save the qpn from the input modifier in RST2INIT wrapper
- net: skb_segment() should not return NULL
- net/mlx5: Adjust clock overflow work period
- net/mlx5e: Don't allow aRFS for encapsulated packets
- net/mlx5e: Fix quota counting in aRFS expire flow
- net/ipv6: Fix linklocal to global address with VRF
- multicast: do not restore deleted record source filter mode to new one
- net: phy: consider PHY_IGNORE_INTERRUPT in phy_start_aneg_priv
- sock: fix sg page frag coalescing in sk_alloc_sg
- rtnetlink: add rtnl_link_state check in rtnl_configure_link
- vxlan: add new fdb alloc and create helpers
- vxlan: make netlink notify in vxlan_fdb_destroy optional
- vxlan: fix default fdb entry netlink notify ordering during netdev create
- tcp: fix dctcp delayed ACK schedule
- tcp: helpers to send special DCTCP ack
- tcp: do not cancel delay-AcK on DCTCP special ACK
- tcp: do not delay ACK in DCTCP upon CE status change
- staging: speakup: fix wraparound in uaccess length check
- usb: cdc_acm: Add quirk for Castles VEGA3000
- usb: core: handle hub C_PORT_OVER_CURRENT condition
- usb: dwc2: Fix DMA alignment to start at allocated boundary
- usb: gadget: f_fs: Only return delayed status when len is 0
- driver core: Partially revert "driver core: correct device's shutdown order"
- can: xilinx_can: fix RX loop if RXNEMP is asserted without RXOK
- can: xilinx_can: fix power management handling
- can: xilinx_can: fix recovery from error states not being propagated
- can: xilinx_can: fix device dropping off bus on RX overrun
- can: xilinx_can: keep only 1-2 frames in TX FIFO to fix TX accounting
- can: xilinx_can: fix incorrect clear of non-processed interrupts
- can: xilinx_can: fix RX overflow interrupt not being enabled
- can: peak_canfd: fix firmware < v3.3.0: limit allocation to 32-bit DMA addr
only
- can: m_can.c: fix setup of CCCR register: clear CCCR NISO bit before
checking can.ctrlmode
- turn off -Wattribute-alias
- net-next/hinic: fix a problem in hinic_xmit_frame()
- net/mlx5e: Refine ets validation function
- nfp: flower: ensure dead neighbour entries are not offloaded
- usb: gadget: Fix OS descriptors support
- ACPICA: AML Parser: ignore dispatcher error status during table load
* installer does not support iSCSI iBFT (LP: #1817321)
- d-i: add iscsi_ibft to scsi-modules
* CVE-2019-7222
- KVM: x86: work around leak of uninitialized stack contents (CVE-2019-7222)
* CVE-2019-7221
- KVM: nVMX: unconditionally cancel preemption timer in free_nested
(CVE-2019-7221)
* CVE-2019-6974
- kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974)
* Regular D-state processes impacting LXD containers (LP: #1817628)
- mm: do not stall register_shrinker()
* hns3 nic speed may not match optical port speed (LP: #1817969)
- net: hns3: Config NIC port speed same as that of optical module
* [Hyper-V] srcu: Lock srcu_data structure in srcu_gp_start() (LP: #1802021)
- srcu: Prohibit call_srcu() use under raw spinlocks
- srcu: Lock srcu_data structure in srcu_gp_start()
* libsas disks can have non-unique by-path names (LP: #1817784)
- scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached
* Bluetooth not working (Intel CyclonePeak) (LP: #1817518)
- Bluetooth: btusb: Add support for Intel bluetooth device 8087:0029
* CVE-2019-8912
- net: crypto set sk to NULL when af_alg_release.
- net: socket: set sock->sk to NULL after calling proto_ops::release()
* Trackpad is not recognized. (LP: #1817200)
- pinctrl: cannonlake: Fix gpio base for GPP-E
* [ALSA] [PATCH] System76 darp5 and oryp5 fixups (LP: #1815831)
- ALSA: hda/realtek - Headset microphone support for System76 darp5
- ALSA: hda/realtek - Headset microphone and internal speaker support for
System76 oryp5
* Constant noise in the headphone on Lenovo X1 machines (LP: #1817263)
- ALSA: hda/realtek: Disable PC beep in passthrough on alc285
* AC adapter status not detected on Asus ZenBook UX410UAK (LP: #1745032)
- Revert "ACPI / battery: Add quirk for Asus GL502VSK and UX305LA"
- ACPI / AC: Remove initializer for unused ident dmi_system_id
- ACPI / battery: Remove initializer for unused ident dmi_system_id
- ACPI / battery: Add handling for devices which wrongly report discharging
state
- ACPI / battery: Ignore AC state in handle_discharging on systems where it is
broken
* TPM intermittently fails after cold-boot (LP: #1762672)
- tpm: fix intermittent failure with self tests
* qlcnic: Firmware aborts/hangs in QLogic NIC (LP: #1815033)
- qlcnic: fix Tx descriptor corruption on 82xx devices
-- Khalid Elmously <email address hidden> Sun, 17 Mar 2019 23:39:09 -0400
-
linux-aws (4.15.0-1034.36) bionic; urgency=medium
* linux-aws: 4.15.0-1034.36 -proposed tracker (LP: #1818745)
* Update ENA driver to version 2.0.3K (LP: #1816806)
- net: ena: fix crash during failed resume from hibernation
- net: ena: fix race between link up and device initalization
- net: ena: update driver version from 2.0.2 to 2.0.3
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
- [Packaging] update helper scripts
- [Packaging] resync retpoline extraction
-- Kamal Mostafa <email address hidden> Tue, 05 Mar 2019 14:47:35 -0800
-
linux-aws (4.15.0-1033.35) bionic; urgency=medium
* linux-aws: 4.15.0-1033.35 -proposed tracker (LP: #1814731)
[ Ubuntu: 4.15.0-46.49 ]
* linux: 4.15.0-46.49 -proposed tracker (LP: #1814726)
* mprotect fails on ext4 with dax (LP: #1799237)
- x86/speculation/l1tf: Exempt zeroed PTEs from inversion
* kernel BUG at /build/linux-vxxS7y/linux-4.15.0/mm/slub.c:296! (LP: #1812086)
- iscsi target: fix session creation failure handling
- scsi: iscsi: target: Set conn->sess to NULL when iscsi_login_set_conn_values
fails
- scsi: iscsi: target: Fix conn_ops double free
* user_copy in user from ubuntu_kernel_selftests failed on KVM kernel
(LP: #1812198)
- selftests: user: return Kselftest Skip code for skipped tests
- selftests: kselftest: change KSFT_SKIP=4 instead of KSFT_PASS
- selftests: kselftest: Remove outdated comment
* RTL8822BE WiFi Disabled in Kernel 4.18.0-12 (LP: #1806472)
- SAUCE: staging: rtlwifi: allow RTLWIFI_DEBUG_ST to be disabled
- [Config] CONFIG_RTLWIFI_DEBUG_ST=n
- SAUCE: Add r8822be to signature inclusion list
* kernel oops in bcache module (LP: #1793901)
- SAUCE: bcache: never writeback a discard operation
* CVE-2018-18397
- userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails
- userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem
- userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas
- userfaultfd: shmem: add i_size checks
- userfaultfd: shmem: UFFDIO_COPY: set the page dirty if VM_WRITE is not set
* Ignore "incomplete report" from Elan touchpanels (LP: #1813733)
- HID: i2c-hid: Ignore input report if there's no data present on Elan
touchpanels
* Vsock connect fails with ENODEV for large CID (LP: #1813934)
- vhost/vsock: fix vhost vsock cid hashing inconsistent
* SRU: Fix thinkpad 11e 3rd boot hang (LP: #1804604)
- ACPI / LPSS: Force LPSS quirks on boot
* Bionic update: upstream stable patchset 2019-01-17 (LP: #1812229)
- scsi: sd_zbc: Fix variable type and bogus comment
- KVM/Eventfd: Avoid crash when assign and deassign specific eventfd in
parallel.
- x86/apm: Don't access __preempt_count with zeroed fs
- x86/events/intel/ds: Fix bts_interrupt_threshold alignment
- x86/MCE: Remove min interval polling limitation
- fat: fix memory allocation failure handling of match_strdup()
- ALSA: hda/realtek - Add Panasonic CF-SZ6 headset jack quirk
- ARCv2: [plat-hsdk]: Save accl reg pair by default
- ARC: Fix CONFIG_SWAP
- ARC: configs: Remove CONFIG_INITRAMFS_SOURCE from defconfigs
- ARC: mm: allow mprotect to make stack mappings executable
- mm: memcg: fix use after free in mem_cgroup_iter()
- mm/huge_memory.c: fix data loss when splitting a file pmd
- cpufreq: intel_pstate: Register when ACPI PCCH is present
- vfio/pci: Fix potential Spectre v1
- stop_machine: Disable preemption when waking two stopper threads
- drm/i915: Fix hotplug irq ack on i965/g4x
- drm/nouveau: Use drm_connector_list_iter_* for iterating connectors
- drm/nouveau: Avoid looping through fake MST connectors
- gen_stats: Fix netlink stats dumping in the presence of padding
- ipv4: Return EINVAL when ping_group_range sysctl doesn't map to user ns
- ipv6: fix useless rol32 call on hash
- ipv6: ila: select CONFIG_DST_CACHE
- lib/rhashtable: consider param->min_size when setting initial table size
- net: diag: Don't double-free TCP_NEW_SYN_RECV sockets in tcp_abort
- net: Don't copy pfmemalloc flag in __copy_skb_header()
- skbuff: Unconditionally copy pfmemalloc in __skb_clone()
- net/ipv4: Set oif in fib_compute_spec_dst
- net: phy: fix flag masking in __set_phy_supported
- ptp: fix missing break in switch
- qmi_wwan: add support for Quectel EG91
- tg3: Add higher cpu clock for 5762.
- hv_netvsc: Fix napi reschedule while receive completion is busy
- net/mlx4_en: Don't reuse RX page when XDP is set
- net: systemport: Fix CRC forwarding check for SYSTEMPORT Lite
- ipv6: make DAD fail with enhanced DAD when nonce length differs
- net: usb: asix: replace mii_nway_restart in resume path
- alpha: fix osf_wait4() breakage
- cxl_getfile(): fix double-iput() on alloc_file() failures
- powerpc/powernv: Fix save/restore of SPRG3 on entry/exit from stop (idle)
- xhci: Fix perceived dead host due to runtime suspend race with event handler
- KVM: irqfd: fix race between EPOLLHUP and irq_bypass_register_consumer
- x86/kvmclock: set pvti_cpu0_va after enabling kvmclock
- ALSA: hda/realtek - Yet another Clevo P950 quirk entry
- drm/amdgpu: Reserve VM root shared fence slot for command submission (v3)
- rhashtable: add restart routine in rhashtable_free_and_destroy()
- sch_fq_codel: zero q->flows_cnt when fq_codel_init fails
- sctp: introduce sctp_dst_mtu
- sctp: fix the issue that pathmtu may be set lower than MINSEGMENT
- net: aquantia: vlan unicast address list correct handling
- drm_mode_create_lease_ioctl(): fix open-coded filp_clone_open()
* Bionic update: upstream stable patchset 2019-01-15 (LP: #1811877)
- compiler-gcc.h: Add __attribute__((gnu_inline)) to all inline declarations
- x86/asm: Add _ASM_ARG* constants for argument registers to <asm/asm.h>
- x86/paravirt: Make native_save_fl() extern inline
- Btrfs: fix duplicate extents after fsync of file with prealloc extents
- cpufreq / CPPC: Set platform specific transition_delay_us
- PCI: exynos: Fix a potential init_clk_resources NULL pointer dereference
- alx: take rtnl before calling __alx_open from resume
- atm: Preserve value of skb->truesize when accounting to vcc
- atm: zatm: Fix potential Spectre v1
- ipv6: sr: fix passing wrong flags to crypto_alloc_shash()
- ipvlan: fix IFLA_MTU ignored on NEWLINK
- ixgbe: split XDP_TX tail and XDP_REDIRECT map flushing
- net: dccp: avoid crash in ccid3_hc_rx_send_feedback()
- net: dccp: switch rx_tstamp_last_feedback to monotonic clock
- net: fix use-after-free in GRO with ESP
- net: macb: Fix ptp time adjustment for large negative delta
- net/mlx5e: Avoid dealing with vport representors if not being e-switch
manager
- net/mlx5: E-Switch, Avoid setup attempt if not being e-switch manager
- net/mlx5: Fix command interface race in polling mode
- net/mlx5: Fix incorrect raw command length parsing
- net/mlx5: Fix required capability for manipulating MPFS
- net/mlx5: Fix wrong size allocation for QoS ETC TC regitster
- net: mvneta: fix the Rx desc DMA address in the Rx path
- net/packet: fix use-after-free
- net_sched: blackhole: tell upper qdisc about dropped packets
- net: sungem: fix rx checksum support
- net/tcp: Fix socket lookups with SO_BINDTODEVICE
- qede: Adverstise software timestamp caps when PHC is not available.
- qed: Fix setting of incorrect eswitch mode.
- qed: Fix use of incorrect size in memcpy call.
- qed: Limit msix vectors in kdump kernel to the minimum required count.
- r8152: napi hangup fix after disconnect
- stmmac: fix DMA channel hang in half-duplex mode
- strparser: Remove early eaten to fix full tcp receive buffer stall
- tcp: fix Fast Open key endianness
- tcp: prevent bogus FRTO undos with non-SACK flows
- vhost_net: validate sock before trying to put its fd
- VSOCK: fix loopback on big-endian systems
- net: cxgb3_main: fix potential Spectre v1
- rtlwifi: Fix kernel Oops "Fw download fail!!"
- rtlwifi: rtl8821ae: fix firmware is not ready to run
- net: lan78xx: Fix race in tx pending skb size calculation
- crypto: af_alg - Initialize sg_num_bytes in error code path
- mtd: rawnand: denali_dt: set clk_x_rate to 200 MHz unconditionally
- PCI: hv: Disable/enable IRQs rather than BH in hv_compose_msi_msg()
- netfilter: ebtables: reject non-bridge targets
- reiserfs: fix buffer overflow with long warning messages
- KEYS: DNS: fix parsing multiple options
- tls: Stricter error checking in zerocopy sendmsg path
- autofs: fix slab out of bounds read in getname_kernel()
- nsh: set mac len based on inner packet
- bdi: Fix another oops in wb_workfn()
- rds: avoid unenecessary cong_update in loop transport
- net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.
- string: drop __must_check from strscpy() and restore strscpy() usages in
cgroup
- nfsd: COPY and CLONE operations require the saved filehandle to be set
- net/sched: act_ife: fix recursive lock and idr leak
- net/sched: act_ife: preserve the action control in case of error
- hinic: reset irq affinity before freeing irq
- nfp: flower: fix mpls ether type detection
- net: macb: initialize bp->queues[0].bp for at91rm9200
- enic: do not overwrite error code
- virtio_net: fix memory leak in XDP_REDIRECT
- netfilter: ipv6: nf_defrag: drop skb dst before queueing
- ipvs: initialize tbl->entries after allocation
- ipvs: initialize tbl->entries in ip_vs_lblc_init_svc()
- bpf: enforce correct alignment for instructions
- bpf, arm32: fix to use bpf_jit_binary_lock_ro api
* Fix non-working pinctrl-intel (LP: #1811777)
- pinctrl: intel: Implement intel_gpio_get_direction callback
- pinctrl: intel: Do pin translation in other GPIO operations as well
* ip6_gre: fix tunnel list corruption for x-netns (LP: #1812875)
- ip6_gre: fix tunnel list corruption for x-netns
* Userspace break as a result of missing patch backport (LP: #1813873)
- tty: Don't hold ldisc lock in tty_reopen() if ldisc present
* kvm_stat : missing python dependency (LP: #1798776)
- tools/kvm_stat: fix python3 issues
- tools/kvm_stat: switch to python3
* [SRU] Fix Xorg crash with nomodeset when BIOS enable 64-bit fb addr
(LP: #1812797)
- vgaarb: Add support for 64-bit frame buffer address
- vgaarb: Keep adding VGA device in queue
* Fix non-working QCA Rome Bluetooth after S3 (LP: #1812812)
- USB: Add new USB LPM helpers
- USB: Consolidate LPM checks to avoid enabling LPM twice
* ptrace-tm-spd-gpr in powerpc/ptrace from ubuntu_kerenl_selftests failed on
Bionic P8 (LP: #1813127)
- selftests/powerpc: Fix ptrace tm failure
* [SRU] IO's are issued with incorrect Scatter Gather Buffer (LP: #1795453)
- scsi: megaraid_sas: Use 63-bit DMA addressing
* Consider enabling CONFIG_NETWORK_PHY_TIMESTAMPING (LP: #1785816)
- [Config] Enable timestamping in network PHY devices
* CVE-2018-19854
- crypto: user - fix leaking uninitialized memory to userspace
* x86/mm: Found insecure W+X mapping at address (ptrval)/0xc00a0000
(LP: #1813532)
- x86/mm: Do not warn about PCI BIOS W+X mappings
* CVE-2019-6133
- fork: record start_time late
* Fix not working Goodix touchpad (LP: #1811929)
- HID: i2c-hid: Disable runtime PM on Goodix touchpad
* bluetooth controller not detected with 4.15 kernel (LP: #1810797)
- SAUCE: btqcomsmd: introduce BT_QCOMSMD_HACK
- [Config] arm64: snapdragon: BT_QCOMSMD_HACK=y
* X1 Extreme: only one of the two SSDs is loaded (LP: #1811755)
- nvme-core: rework a NQN copying operation
- nvme: pad fake subsys NQN vid and ssvid with zeros
- nvme: introduce NVME_QUIRK_IGNORE_DEV_SUBNQN
* Crash on "ip link add foo type ipip" (LP: #1811803)
- SAUCE: fan: Fix NULL pointer dereference
[ Ubuntu: 4.15.0-45.48 ]
* linux: 4.15.0-45.48 -proposed tracker (LP: #1813779)
* External monitors does not work anymore 4.15.0-44 (LP: #1813663)
- SAUCE: Revert "drm/i915/dp: Send DPCD ON for MST before phy_up"
* kernel 4.15.0-44 cannot mount ext4 fs with meta_bg enabled (LP: #1813727)
- ext4: fix false negatives *and* false positives in ext4_check_descriptors()
-- Kleber Sacilotto de Souza <email address hidden> Wed, 06 Feb 2019 12:18:51 +0000
-
linux-aws (4.15.0-1032.34) bionic; urgency=medium
* linux-aws: 4.15.0-1032.34 -proposed tracker (LP: #1811422)
* Packaging resync (LP: #1786013)
- [Packaging] update update.conf
* Add Cavium ThunderX2 SoC UNCORE PMU driver (LP: #1811200)
- [Config] New config CONFIG_THUNDERX2_PMU=m
* SATA device is not going to DEVSLP (LP: #1781533)
- [Config] set CONFIG_SATA_MOBILE_LPM_POLICY=0
* Bionic update: upstream stable patchset 2019-01-04 (LP: #1810554)
- [config] x86 CRYPTO_SALSA20 deprecated
[ Ubuntu: 4.15.0-44.47 ]
* linux: 4.15.0-44.47 -proposed tracker (LP: #1811419)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CPU hard lockup with rigorous writes to NVMe drive (LP: #1810998)
- blk-wbt: pass in enum wbt_flags to get_rq_wait()
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait
- blk-wbt: move disable check into get_limit()
- blk-wbt: use wq_has_sleeper() for wq active check
- blk-wbt: fix has-sleeper queueing check
- blk-wbt: abstract out end IO completion handler
- blk-wbt: improve waking of tasks
* To reduce the Realtek USB cardreader power consumption (LP: #1811337)
- mmc: sdhci: Disable 1.8v modes (HS200/HS400/UHS) if controller can't support
1.8v
- mmc: core: Introduce MMC_CAP_SYNC_RUNTIME_PM
- mmc: rtsx_usb_sdmmc: Don't runtime resume the device while changing led
- mmc: rtsx_usb: Use MMC_CAP2_NO_SDIO
- mmc: rtsx_usb: Enable MMC_CAP_ERASE to allow erase/discard/trim requests
- mmc: rtsx_usb_sdmmc: Re-work runtime PM support
- mmc: rtsx_usb_sdmmc: Re-work card detection/removal support
- memstick: rtsx_usb_ms: Add missing pm_runtime_disable() in probe function
- misc: rtsx_usb: Use USB remote wakeup signaling for card insertion detection
- memstick: Prevent memstick host from getting runtime suspended during card
detection
- memstick: rtsx_usb_ms: Use ms_dev() helper
- memstick: rtsx_usb_ms: Support runtime power management
* Support non-strict iommu mode on arm64 (LP: #1806488)
- iommu/io-pgtable-arm: Fix race handling in split_blk_unmap()
- iommu/arm-smmu-v3: Implement flush_iotlb_all hook
- iommu/dma: Add support for non-strict mode
- iommu: Add "iommu.strict" command line option
- iommu/io-pgtable-arm: Add support for non-strict mode
- iommu/arm-smmu-v3: Add support for non-strict mode
- iommu/io-pgtable-arm-v7s: Add support for non-strict mode
- iommu/arm-smmu: Support non-strict mode
* ELAN900C:00 04F3:2844 touchscreen doesn't work (LP: #1811335)
- pinctrl: cannonlake: Fix community ordering for H variant
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
* Add Cavium ThunderX2 SoC UNCORE PMU driver (LP: #1811200)
- perf: Export perf_event_update_userpage
- Documentation: perf: Add documentation for ThunderX2 PMU uncore driver
- drivers/perf: Add Cavium ThunderX2 SoC UNCORE PMU driver
- [Config] New config CONFIG_THUNDERX2_PMU=m
* Update hisilicon SoC-specific drivers (LP: #1810457)
- SAUCE: Revert "net: hns3: Updates RX packet info fetch in case of multi BD"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: separate roce from nic when
resetting"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Use roce handle when calling roce
callback function"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Add calling roce callback
function when link status change"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: optimize the process of notifying
roce client"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Add pf reset for hip08 RoCE"
- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform dependency
- ethernet: hisilicon: hns: hns_dsaf_mac: Use generic eth_broadcast_addr
- scsi: hisi_sas: consolidate command check in hisi_sas_get_ata_protocol()
- scsi: hisi_sas: remove some unneeded structure members
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
- net: hns: Fix the process of adding broadcast addresses to tcam
- net: hns3: remove redundant variable 'protocol'
- scsi: hisi_sas: Drop hisi_sas_slot_abort()
- net: hns: Make many functions static
- net: hns: make hns_dsaf_roce_reset non static
- net: hisilicon: hns: Replace mdelay() with msleep()
- net: hns3: fix return value error while hclge_cmd_csq_clean failed
- net: hns: remove redundant variables 'max_frm' and 'tmp_mac_key'
- net: hns: Mark expected switch fall-through
- net: hns3: Mark expected switch fall-through
- net: hns3: Remove tx ring BD len register in hns3_enet
- net: hns: modify variable type in hns_nic_reuse_page
- net: hns: use eth_get_headlen interface instead of hns_nic_get_headlen
- net: hns3: modify variable type in hns3_nic_reuse_page
- net: hns3: Fix for vf vlan delete failed problem
- net: hns3: Fix for multicast failure
- net: hns3: Fix error of checking used vlan id
- net: hns3: Implement shutdown ops in hns3 pci driver
- net: hns3: Fix for loopback selftest failed problem
- net: hns3: Fix ping exited problem when doing lp selftest
- net: hns3: Preserve vlan 0 in hardware table
- net: hns3: Only update mac configuation when necessary
- net: hns3: Change the dst mac addr of loopback packet
- net: hns3: Remove redundant codes of query advertised flow control abilitiy
- net: hns3: Refine hns3_get_link_ksettings()
- net: hns: make function hns_gmac_wait_fifo_clean() static
- net: hns3: Add default irq affinity
- net: hns3: Add unlikely for buf_num check
- net: hns3: Remove tx budget to clean more TX descriptors in a napi
- net: hns3: Remove packet statistics of public
- net: hns3: Add support for hns3_nic_netdev_ops.ndo_do_ioctl
- net: hns3: Set STATE_DOWN bit of hdev state when stopping net
- net: hns3: Check hdev state when getting link status
- net: hns3: Fix for setting speed for phy failed problem
- net: hns3: Fix cmdq registers initialization issue for vf
- net: hns3: Clear client pointer when initialize client failed or unintialize
finished
- net: hns3: Fix client initialize state issue when roce client initialize
failed
- net: hns3: Fix parameter type for q_id in hclge_tm_q_to_qs_map_cfg()
- net: hns3: Fix ets validate issue
- net: hns3: Unify the type convert for desc.data
- net: hns3: Adjust prefix of tx/rx statistic names
- net: hns3: Fix tqp array traversal condition for vf
- net: hns3: Unify the prefix of vf functions
- net: hns3: Add handle for default case
- net: hns3: Add nic state check before calling netif_tx_wake_queue
- net: hns3: Add unlikely for dma_mapping_error check
- net: hns3: Remove print messages for error packet
- net: hns3: Add get_media_type ops support for VF
- net: hns3: Fix speed/duplex information loss problem when executing ethtool
ethx cmd of VF
- net: hns3: Remove redundant hclge_get_port_type()
- net: hns3: Add support for sctp checksum offload
- net: hns3: Set extra mac address of pause param for HW
- net: hns3: Rename loop mode
- net: hns3: Rename mac loopback to app loopback
- net: hns3: Add serdes parallel inner loopback support
- net: hns3: Fix for packet buffer setting bug
- net: hns3: Fix for netdev not up problem when setting mtu
- net: hns3: Change return type of hclge_tm_schd_info_update()
- net: hns3: Modify hns3_get_max_available_channels
- net: hns3: Fix loss of coal configuration while doing reset
- net: hns: remove ndo_poll_controller
- hns3: Fix the build.
- hns3: Another build fix.
- net: hns3: Add flow director initialization
- net: hns3: Add input key and action config support for flow director
- net: hns3: Add support for rule add/delete for flow director
- net: hns3: Add support for rule query of flow director
- net: hns3: Add reset handle for flow director
- net: hns3: Remove all flow director rules when unload hns3 driver
- net: hns3: Add support for enable/disable flow director
- net: hns3: Remove the default mask configuration for mac vlan table
- net: hns3: Clear mac vlan table entries when unload driver or function reset
- net: hns3: Optimize for unicast mac vlan table
- net: hns3: Drop depricated mta table support
- net: hns3: Add egress/ingress vlan filter for revision 0x21
- net: hns3: Fix for rx vlan id handle to support Rev 0x21 hardware
- net: hns3: Add new RSS hash algorithm support for PF
- net: hns3: Add RSS general configuration support for VF
- net: hns3: Add RSS tuples support for VF
- net: hns3: Add HW RSS hash information to RX skb
- net: hns3: Enable promisc mode when mac vlan table is full
- net: hns3: Resume promisc mode and vlan filter status after reset
- net: hns3: Resume promisc mode and vlan filter status after loopback test
- scsi: hisi_sas: Feed back linkrate(max/min) when re-attached
- scsi: hisi_sas: Move evaluation of hisi_hba in hisi_sas_task_prep()
- scsi: hisi_sas: Fix the race between IO completion and timeout for
SMP/internal IO
- scsi: hisi_sas: Free slot later in slot_complete_vx_hw()
- scsi: hisi_sas: unmask interrupts ent72 and ent74
- scsi: hisi_sas: Use block layer tag instead for IPTT
- scsi: hisi_sas: Update v3 hw AIP_LIMIT and CFG_AGING_TIME register values
- net: hns3: remove hns3_fill_desc_tso
- net: hns3: move DMA map into hns3_fill_desc
- net: hns3: add handling for big TX fragment
- net: hns3: rename hns_nic_dma_unmap
- net: hns3: fix for multiple unmapping DMA problem
- scsi: hisi_sas: Fix spin lock management in slot_index_alloc_quirk_v2_hw()
- scsi: hisi_sas: Fix NULL pointer dereference
- net: hns3: Add PCIe AER callback error_detected
- net: hns3: Add PCIe AER error recovery
- net: hns3: Add support to enable and disable hw errors
- net: hns3: Add enable and process common ecc errors
- net: hns3: Add enable and process hw errors from IGU, EGU and NCSI
- net: hns3: Add enable and process hw errors from PPP
- net: hns3: Add enable and process hw errors of TM scheduler
- net: hns3: Fix for warning uninitialized symbol hw_err_lst3
- net: hns3: fix spelling mistake "intrerrupt" -> "interrupt"
- net: hns3: add error handler for hns3_nic_init_vector_data()
- net: hns3: bugfix for buffer not free problem during resetting
- net: hns3: bugfix for reporting unknown vector0 interrupt repeatly problem
- net: hns3: bugfix for the initialization of command queue's spin lock
- net: hns3: remove unnecessary queue reset in the hns3_uninit_all_ring()
- net: hns3: bugfix for is_valid_csq_clean_head()
- net: hns3: bugfix for hclge_mdio_write and hclge_mdio_read
- net: hns3: fix incorrect return value/type of some functions
- net: hns3: bugfix for handling mailbox while the command queue reinitialized
- net: hns3: bugfix for rtnl_lock's range in the hclge_reset()
- net: hns3: bugfix for rtnl_lock's range in the hclgevf_reset()
- net: hns3: Fix for out-of-bounds access when setting pfc back pressure
- scsi: hisi_sas: Remove set but not used variable 'dq_list'
- net: hns3: bugfix for not checking return value
- net: hns: Incorrect offset address used for some registers.
- net: hns: All ports can not work when insmod hns ko after rmmod.
- net: hns: Some registers use wrong address according to the datasheet.
- net: hns: Fixed bug that netdev was opened twice
- net: hns: Clean rx fbd when ae stopped.
- net: hns: Free irq when exit from abnormal branch
- net: hns: Avoid net reset caused by pause frames storm
- net: hns: Fix ntuple-filters status error.
- net: hns: Add mac pcs config when enable|disable mac
- net: hns: Fix ping failed when use net bridge and send multicast
- net: hns3: use HNS3_NIC_STATE_INITED to indicate the initialization state of
enet
- net: hns3: add set_default_reset_request in the hnae3_ae_ops
- net: hns3: provide some interface & information for the client
- net: hns3: adjust the location of clearing the table when doing reset
- net: hns3: enable/disable ring in the enet while doing UP/DOWN
- net: hns3: use HNS3_NIC_STATE_RESETTING to indicate resetting
- net: hns3: ignore new coming low-level reset while doing high-level reset
- net: hns3: move some reset information from hnae3_handle into
hclge_dev/hclgevf_dev
- net: hns3: adjust the process of PF reset
- net: hns3: call roce's reset notify callback when resetting
- net: hns3: add error handler for hclge_reset()
- net: hns3: fix for cmd queue memory not freed problem during reset
- net: hns3: Remove set but not used variable 'reset_level'
- net: hns3: fix spelling mistake, "assertting" -> "asserting"
- net: hns3: add reset_hdev to reinit the hdev in VF's reset process
- net: hns3: adjust VF's reset process
- net: hns3: add reset handling for VF when doing PF reset
- net: hns3: add reset handling for VF when doing Core/Global/IMP reset
- net: hns3: stop handling command queue while resetting VF
- net: hns3: add error handler for hclgevf_reset()
- net: hns3: stop napi polling when HNS3_NIC_STATE_DOWN is set
- net: hns3: implement the IMP reset processing for PF
- net: hns3: add PCIe FLR support for PF
- net: hns3: do VF's pci re-initialization while PF doing FLR
- net: hns3: add PCIe FLR support for VF
- net: hns3: Enable HW GRO for Rev B(=0x21) HNS3 hardware
- net: hns3: Add handling of GRO Pkts not fully RX'ed in NAPI poll
- net: hns3: Add skb chain when num of RX buf exceeds MAX_SKB_FRAGS
- net: hns3: Adds GRO params to SKB for the stack
- scsi: hisi_sas: use dma_set_mask_and_coherent
- scsi: hisi_sas: Create separate host attributes per HBA
- scsi: hisi_sas: Add support for interrupt converge for v3 hw
- scsi: hisi_sas: Add support for interrupt coalescing for v3 hw
- scsi: hisi_sas: Relocate some codes to avoid an unused check
- scsi: hisi_sas: change the time of SAS SSP connection
- net: hns3: fix spelling mistake "failded" -> "failed"
- net: hns3: Support two vlan header when setting mtu
- net: hns3: Refactor mac mtu setting related functions
- net: hns3: Add vport alive state checking support
- net: hns3: Add mtu setting support for vf
- net: hns3: up/down netdev in hclge module when setting mtu
- net: hns3: add common validation in hclge_dcb
- net: hns3: Add debugfs framework registration
- net: hns3: Add "queue info" query function
- net: hns3: Add "FD flow table" info query function
- net: hns3: Add "tc config" info query function
- net: hns3: Add "tm config" info query function
- net: hns3: Add "qos pause" config info query function
- net: hns3: Add "qos prio map" info query function
- net: hns3: Add "qos buffer" config info query function
- net: hns3: Support "ethtool -d" for HNS3 VF driver
- net: hns3: Adds support to dump(using ethool-d) PCIe regs in HNS3 PF driver
- net: hns3: remove existing process error functions and reorder hw_blk table
- net: hns3: rename enable error interrupt functions
- net: hns3: re-enable error interrupts on hw reset
- net: hns3: deletes unnecessary settings of the descriptor data
- net: hns3: rename process_hw_error function
- net: hns3: add optimization in the hclge_hw_error_set_state
- net: hns3: add handling of hw ras errors using new set of commands
- net: hns3: deleted logging 1 bit errors
- net: hns3: add handling of hw errors reported through MSIX
- net: hns3: add handling of hw errors of MAC
- net: hns3: handle hw errors of PPP PF
- net: hns3: handle hw errors of PPU(RCB)
- net: hns3: handle hw errors of SSU
- net: hns3: add handling of RDMA RAS errors
- net: hns3: fix spelling mistake "offser" -> "offset"
- scsi: hisi_sas: Fix warnings detected by sparse
- scsi: hisi_sas: Relocate some code to reduce complexity
- scsi: hisi_sas: Make sg_tablesize consistent value
- hns3: prevent building without CONFIG_INET
- net: hns3: Add "bd info" query function
- net: hns3: Add "manager table" information query function
- net: hns3: Add "status register" information query function
- net: hns3: Add "dcb register" status information query function
- net: hns3: Add "queue map" information query function
- net: hns3: Add "tm map" status information query function
- net: hns3: fix error handling int the hns3_get_vector_ring_chain
- net: hns3: uninitialize pci in the hclgevf_uninit
- net: hns3: fix napi_disable not return problem
- net: hns3: update some variables while hclge_reset()/hclgevf_reset() done
- net: hns3: remove unnecessary configuration recapture while resetting
- net: hns3: fix incomplete uninitialization of IRQ in the
hns3_nic_uninit_vector_data()
- net: hns3: update coalesce param per second
- net: hns3: remove 1000M/half support of phy
- net: hns3: synchronize speed and duplex from phy when phy link up
- net: hns3: getting tx and dv buffer size through firmware
- net: hns3: aligning buffer size in SSU to 256 bytes
- net: hns3: fix a SSU buffer checking bug
- scsi: hisi_sas: Add support for DIF feature for v2 hw
- net: hns3: refine the handle for hns3_nic_net_open/stop()
- net: hns3: change default tc state to close
- net: hns3: fix a bug caused by udelay
- net: hns3: add max vector number check for pf
- net: hns3: reset tqp while doing DOWN operation
- net: hns3: fix vf id check issue when add flow director rule
- net: hns3: don't restore rules when flow director is disabled
- net: hns3: fix the descriptor index when get rss type
- net: hns3: remove redundant variable initialization
- net: hns3: call hns3_nic_net_open() while doing HNAE3_UP_CLIENT
* iptables connlimit allows more connections than the limit when using
multiple CPUs (LP: #1811094)
- SAUCE: netfilter: xt_connlimit: remove the 'addr' parameter in add_hlist()
- netfilter: nf_conncount: expose connection list interface
- netfilter: nf_conncount: Fix garbage collection with zones
- netfilter: nf_conncount: fix garbage collection confirm race
- netfilter: nf_conncount: don't skip eviction when age is negative
* CVE-2018-16882
- KVM: Fix UAF in nested posted interrupt processing
* Cannot initialize ATA disk if IDENTIFY command fails (LP: #1809046)
- scsi: libsas: check the ata device status by ata_dev_enabled()
* scsi: libsas: fix a race condition when smp task timeout (LP: #1808912)
- scsi: libsas: fix a race condition when smp task timeout
* CVE-2018-14625
- vhost/vsock: fix use-after-free in network stack callers
* Fix and issue that LG I2C touchscreen stops working after reboot
(LP: #1805085)
- HID: i2c-hid: Disable runtime PM for LG touchscreen
* powerpc/powernv/pci: Work around races in PCI bridge enabling (LP: #1805245)
- powerpc/powernv/pci: Work around races in PCI bridge enabling
* Drivers: hv: vmbus: Offload the handling of channels to two workqueues
(LP: #1807757)
- hv_netvsc: fix network namespace issues with VF support
- hv_netvsc: split sub-channel setup into async and sync
- Drivers: hv: vmbus: Fix the offer_in_progress in vmbus_process_offer()
- hv_netvsc: Fix a deadlock by getting rtnl lock earlier in netvsc_probe()
- vmbus: don't return values for uninitalized channels
- Drivers: hv: vmbus: check the creation_status in vmbus_establish_gpadl()
- Drivers: hv: vmbus: Offload the handling of channels to two workqueues
* Disable LPM for Raydium Touchscreens (LP: #1802248)
- USB: quirks: Add no-lpm quirk for Raydium touchscreens
* Power leakage at S5 with Qualcomm Atheros QCA9377 802.11ac Wireless Network
Adapter (LP: #1805607)
- SAUCE: ath10k: provide reset function for QCA9377 chip
* CVE-2018-17972
- proc: restrict kernel stack dumps to root
* CVE-2018-19407
- KVM: X86: Fix scan ioapic use-before-initialization
* CVE-2018-18281
- mremap: properly flush TLB before releasing the page
* Fix USB2 device wrongly detected as USB1 (LP: #1806534)
- xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc
* armhf guests fail to boot in EFI mode (LP: #1809488)
- efi/arm: Revert deferred unmap of early memmap mapping
* Bionic shows incorrect warning about number of pointers in TFD
(LP: #1801102)
- iwlwifi: pcie: don't warn if we use all the transmit pointers
* audio output has constant noise on a Dell machine (LP: #1810891)
- ALSA: hda/realtek - Fixed headphone issue for ALC700
* ldisc crash on reopened tty (LP: #1791758)
- tty: Drop tty->count on tty_reopen() failure
- tty: Hold tty_ldisc_lock() during tty_reopen()
- tty: Don't block on IO when ldisc change is pending
- tty: Simplify tty->count math in tty_reopen()
* SATA device is not going to DEVSLP (LP: #1781533)
- ahci: Allow setting a default LPM policy for mobile chipsets
- ata: libahci: Correct setting of DEVSLP register
- ata: libahci: Allow reconfigure of DEVSLP register
- ata: ahci: Support state with min power but Partial low power state
- ata: ahci: Enable DEVSLP by default on x86 with SLP_S0
- [Config] set CONFIG_SATA_MOBILE_LPM_POLICY=0
* Console got stuck using serial tty after logout (LP: #1808097)
- tty: do not set TTY_IO_ERROR flag if console port
* fanotify10 in ubuntu_ltp_syscalls failed (LP: #1802454)
- fsnotify: fix ignore mask logic in fsnotify()
* SRU: Fix kernel xhci hang when resume from S3 (LP: #1805344)
- usb: xhci: fix uninitialized completion when USB3 port got wrong status
- usb: xhci: fix timeout for transition from RExit to U0
* Add pointstick support for Cirque Touchpad (LP: #1805081)
- HID: multitouch: Add pointstick support for Cirque Touchpad
* Intel NVMe drives timeout when nvme format is attempted (LP: #1797587)
- nvme: Use admin command effects for admin commands
* lineout jack can't work on a Dell machine (LP: #1810892)
- ALSA: hda/realtek - Support Dell headset mode for New AIO platform
* Bionic update: upstream stable patchset 2019-01-04 (LP: #1810554)
- MIPS: Call dump_stack() from show_regs()
- MIPS: Use async IPIs for arch_trigger_cpumask_backtrace()
- MIPS: Fix ioremap() RAM check
- mmc: sdhci-esdhc-imx: allow 1.8V modes without 100/200MHz pinctrl states
- mmc: dw_mmc: fix card threshold control configuration
- ibmasm: don't write out of bounds in read handler
- staging: rtl8723bs: Prevent an underflow in rtw_check_beacon_data().
- staging: r8822be: Fix RTL8822be can't find any wireless AP
- ata: Fix ZBC_OUT command block check
- ata: Fix ZBC_OUT all bit handling
- vmw_balloon: fix inflation with batching
- ahci: Disable LPM on Lenovo 50 series laptops with a too old BIOS
- USB: serial: ch341: fix type promotion bug in ch341_control_in()
- USB: serial: cp210x: add another USB ID for Qivicon ZigBee stick
- USB: serial: keyspan_pda: fix modem-status error handling
- USB: serial: mos7840: fix status-register error handling
- usb: quirks: add delay quirks for Corsair Strafe
- xhci: xhci-mem: off by one in xhci_stream_id_to_ring()
- ALSA: hda - Handle pm failure during hotplug
- fs/proc/task_mmu.c: fix Locked field in /proc/pid/smaps*
- fs, elf: make sure to page align bss in load_elf_library
- mm: do not bug_on on incorrect length in __mm_populate()
- tracing: Reorder display of TGID to be after PID
- kbuild: delete INSTALL_FW_PATH from kbuild documentation
- arm64: neon: Fix function may_use_simd() return error status
- tools build: fix # escaping in .cmd files for future Make
- IB/hfi1: Fix incorrect mixing of ERR_PTR and NULL return values
- i2c: tegra: Fix NACK error handling
- iw_cxgb4: correctly enforce the max reg_mr depth
- xen: setup pv irq ops vector earlier
- nvme-pci: Remap CMB SQ entries on every controller reset
- crypto: x86/salsa20 - remove x86 salsa20 implementations
- uprobes/x86: Remove incorrect WARN_ON() in uprobe_init_insn()
- netfilter: nf_queue: augment nfqa_cfg_policy
- netfilter: x_tables: initialise match/target check parameter struct
- loop: add recursion validation to LOOP_CHANGE_FD
- PM / hibernate: Fix oops at snapshot_write()
- RDMA/ucm: Mark UCM interface as BROKEN
- loop: remember whether sysfs_create_group() was done
- f2fs: give message and set need_fsck given broken node id
- mm: do not drop unused pages when userfaultd is running
- bpf: reject passing modified ctx to helper functions
- mei: discard messages from not connected client during power down.
- mm: zero unavailable pages before memmap init
- xen: remove global bit from __default_kernel_pte_mask for pv guests
- f2fs: return error during fill_super
- f2fs: avoid bug_on on corrupted inode
- f2fs: sanity check on sit entry
- f2fs: sanity check for total valid node blocks
- ARM: dts: armada-38x: use the new thermal binding
- mm: don't do zero_resv_unavail if memmap is not allocated
* Blacklist Realtek Virtual IPMI device (LP: #1808353)
- ipmi:pci: Blacklist a Realtek "IPMI" device
* Ethernet[10ec:8136] doesn't work after S3 with kernel 4.15.0.43.64
(LP: #1809847)
- SAUCE: Revert "r8169: don't use MSI-X on RTL8106e"
- r8169: re-enable MSI-X on RTL8168g
* Killer 802.11ac 2x2 (1550 or 1550i) [8086:2526][1a56:1550] is not supported
(LP: #1809219)
- iwlwifi: add more card IDs for 9000 series
* Support new Realtek ethernet chips (LP: #1811055)
- r8169: Add support for new Realtek Ethernet
* PC SN720 NVMe WDC 256GB consumes more power in S2Idle than during long idle
(LP: #1805775)
- SAUCE: pci/nvme: prevent WDC PC SN720 NVMe from entering D3 and being
disabled
* Power consumption during s2idle is higher than long idle (Intel SSDPEKKF)
(LP: #1804588)
- SAUCE: pci: prevent Intel NVMe SSDPEKKF from entering D3
- SAUCE: nvme: add quirk to not call disable function when suspending
* mpt3sas - driver using the wrong register to update a queue index in FW
(LP: #1810781)
- scsi: mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5
controllers when HBA supports more than 16 MSI-x vectors.
* HP mobile workstations with hybrid graphics support, can not directly output
to external monitors by dGPU (LP: #1810702)
- ACPI / OSI: Add OEM _OSI string to enable dGPU direct output
* broken touchpad after i2c-i801 blacklist change (LP: #1802135)
- i2c: i801: Don't restore config registers on runtime PM
* Enable new Realtek card reader (LP: #1806335)
- USB: usb-storage: Add new IDs to ums-realtek
- SAUCE: (noup) USB: usb-storage: Make MMC support optional on ums-realtek
* The line-out on the Dell Dock station can't work (LP: #1806532)
- ALSA: usb-audio: Allow to override the longname string
- ALSA: usb-audio: Give proper vendor/product name for Dell WD15 Dock
- ALSA: usb-audio: Add vendor and product name for Dell WD19 Dock
* linux-buildinfo: pull out ABI information into its own package
(LP: #1806380)
- [Packaging] getabis -- handle all known package combinations
- [Packaging] getabis -- support parsing a simple version
* Fix Intel I210 doesn't work when ethernet cable gets plugged (LP: #1806818)
- igb: Fix an issue that PME is not enabled during runtime suspend
* Fix Terminus USB hub that may breaks connected USB devices after S3
(LP: #1806850)
- USB: Wait for extra delay time after USB_PORT_FEAT_RESET for quirky hub
* Add support for Dell DW5821e WWAN/GPS module (LP: #1807342)
- qmi_wwan: add support for the Dell Wireless 5821e module
- qmi_wwan: fix interface number for DW5821e production firmware
- USB: option: add support for DW5821e
* Add support for 0cf3:535b QCA_ROME device (LP: #1807333)
- Bluetooth: btusb: Add support for 0cf3:535b QCA_ROME device
* The mute led can't work anymore on the lenovo x1 carbon (LP: #1808465)
- ALSA: hda/realtek - Fix the mute LED regresion on Lenovo X1 Carbon
* click/pop noise in the headphone on several lenovo laptops (LP: #1805079) //
click/pop noise in the headphone on several lenovo laptops (LP: #1805079)
- ALSA: hda/realtek - fix the pop noise on headphone for lenovo laptops
* Touchpad stops working after reboot on Apollo Lake (LP: #1728244)
- HID: i2c-hid: disable runtime PM operations on hantick touchpad
* MAC address pass through on RTL8153-BND for docking station (LP: #1808729)
- r8152: Add support for MAC address pass through on RTL8153-BND
* [Ubuntu] kernel: zcrypt: reinit ap queue state machine (LP: #1805414)
- s390/zcrypt: reinit ap queue state machine during device probe
* [UBUNTU] qeth: fix length check in SNMP processing (LP: #1805802)
- s390/qeth: fix length check in SNMP processing
* ASPEED server console output extremely slow after upgrade to 18.04
(LP: #1808183)
- drm/ast: Remove existing framebuffers before loading driver
* Bionic update: upstream stable patchset 2018-12-13 (LP: #1808399)
- userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access
- mm: hugetlb: yield when prepping struct pages
- tracing: Fix missing return symbol in function_graph output
- scsi: target: Fix truncated PR-in ReadKeys response
- s390: Correct register corruption in critical section cleanup
- drbd: fix access after free
- vfio: Use get_user_pages_longterm correctly
- cifs: Fix use after free of a mid_q_entry
- cifs: Fix memory leak in smb2_set_ea()
- cifs: Fix infinite loop when using hard mount option
- drm: Use kvzalloc for allocating blob property memory
- drm/udl: fix display corruption of the last line
- jbd2: don't mark block as modified if the handle is out of credits
- ext4: add corruption check in ext4_xattr_set_entry()
- ext4: always verify the magic number in xattr blocks
- ext4: make sure bitmaps and the inode table don't overlap with bg
descriptors
- ext4: always check block group bounds in ext4_init_block_bitmap()
- ext4: only look at the bg_flags field if it is valid
- ext4: verify the depth of extent tree in ext4_find_extent()
- ext4: include the illegal physical block in the bad map ext4_error msg
- ext4: never move the system.data xattr out of the inode body
- ext4: avoid running out of journal credits when appending to an inline file
- ext4: add more inode number paranoia checks
- ext4: add more mount time checks of the superblock
- ext4: check superblock mapped prior to committing
- HID: i2c-hid: Fix "incomplete report" noise
- HID: hiddev: fix potential Spectre v1
- HID: debug: check length before copy_to_user()
- media: vb2: core: Finish buffers at the end of the stream
- f2fs: truncate preallocated blocks in error case
- Revert "dpaa_eth: fix error in dpaa_remove()"
- Kbuild: fix # escaping in .cmd files for future Make
- media: cx25840: Use subdev host data for PLL override
- fs: allow per-device dax status checking for filesystems
- dax: change bdev_dax_supported() to support boolean returns
- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
- dm: set QUEUE_FLAG_DAX accordingly in dm_table_set_restrictions()
- dm: prevent DAX mounts if not supported
- mtd: cfi_cmdset_0002: Change definition naming to retry write operation
- mtd: cfi_cmdset_0002: Change erase functions to retry for error
- mtd: cfi_cmdset_0002: Change erase functions to check chip good only
- netfilter: nf_log: don't hold nf_log_mutex during user access
- staging: comedi: quatech_daqp_cs: fix no-op loop daqp_ao_insn_write()
- sched, tracing: Fix trace_sched_pi_setprio() for deboosting
- PCI / ACPI / PM: Resume bridges w/o drivers on suspend-to-RAM
- drm/amdgpu: Make struct amdgpu_atif private to amdgpu_acpi.c
- scsi: aacraid: Fix PD performance regression over incorrect qd being set
- ARM: dts: imx51-zii-rdu1: fix touchscreen pinctrl
- drm/amdgpu: Add amdgpu_atpx_get_dhandle()
- drm/amdgpu: Dynamically probe for ATIF handle (v2)
- i2c: core: smbus: fix a potential missing-check bug
* Bionic update: upstream stable patchset 2018-12-12 (LP: #1808185)
- usb: cdc_acm: Add quirk for Uniden UBC125 scanner
- USB: serial: cp210x: add CESINEL device ids
- USB: serial: cp210x: add Silicon Labs IDs for Windows Update
- usb: dwc2: fix the incorrect bitmaps for the ports of multi_tt hub
- acpi: Add helper for deactivating memory region
- usb: typec: ucsi: acpi: Workaround for cache mode issue
- usb: typec: ucsi: Fix for incorrect status data issue
- xhci: Fix kernel oops in trace_xhci_free_virt_device
- n_tty: Fix stall at n_tty_receive_char_special().
- n_tty: Access echo_* variables carefully.
- staging: android: ion: Return an ERR_PTR in ion_map_kernel
- serial: 8250_pci: Remove stalled entries in blacklist
- serdev: fix memleak on module unload
- vt: prevent leaking uninitialized data to userspace via /dev/vcs*
- drm/amdgpu: Add APU support in vi_set_uvd_clocks
- drm/amdgpu: Add APU support in vi_set_vce_clocks
- drm/amdgpu: fix the missed vcn fw version report
- drm/qxl: Call qxl_bo_unref outside atomic context
- drm/atmel-hlcdc: check stride values in the first plane
- drm/amdgpu: Use kvmalloc_array for allocating VRAM manager nodes array
- drm/amdgpu: Refactor amdgpu_vram_mgr_bo_invisible_size helper
- drm/i915: Enable provoking vertex fix on Gen9 systems.
- netfilter: nf_tables: nft_compat: fix refcount leak on xt module
- netfilter: nft_compat: prepare for indirect info storage
- netfilter: nft_compat: fix handling of large matchinfo size
- netfilter: nf_tables: don't assume chain stats are set when jumplabel is set
- netfilter: nf_tables: bogus EBUSY in chain deletions
- netfilter: nft_meta: fix wrong value dereference in nft_meta_set_eval
- netfilter: nf_tables: disable preemption in nft_update_chain_stats()
- netfilter: nf_tables: increase nft_counters_enabled in
nft_chain_stats_replace()
- netfilter: nf_tables: fix memory leak on error exit return
- netfilter: nf_tables: add missing netlink attrs to policies
- netfilter: nf_tables: fix NULL-ptr in nf_tables_dump_obj()
- netfilter: don't set F_IFACE on ipv6 fib lookups
- netfilter: ip6t_rpfilter: provide input interface for route lookup
- netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain()
- ARM: dts: imx6q: Use correct SDMA script for SPI5 core
- xfrm6: avoid potential infinite loop in _decode_session6()
- afs: Fix directory permissions check
- netfilter: ebtables: handle string from userspace with care
- s390/dasd: use blk_mq_rq_from_pdu for per request data
- netfilter: nft_limit: fix packet ratelimiting
- ipvs: fix buffer overflow with sync daemon and service
- iwlwifi: pcie: compare with number of IRQs requested for, not number of CPUs
- atm: zatm: fix memcmp casting
- net: qmi_wwan: Add Netgear Aircard 779S
- perf test: "Session topology" dumps core on s390
- perf bpf: Fix NULL return handling in bpf__prepare_load()
- fs: clear writeback errors in inode_init_always
- sched/core: Fix rules for running on online && !active CPUs
- sched/core: Require cpu_active() in select_task_rq(), for user tasks
- platform/x86: asus-wmi: Fix NULL pointer dereference
- net/sonic: Use dma_mapping_error()
- net: dsa: b53: Add BCM5389 support
- usb: typec: tcpm: fix logbuffer index is wrong if _tcpm_log is re-entered
- iio: mma8452: Fix ignoring MMA8452_INT_DRDY
- drm/amdgpu: fix clear_all and replace handling in the VM (v2)
- drm/amd/display: Clear connector's edid pointer
- drm/i915/dp: Send DPCD ON for MST before phy_up
- drm/amdgpu: remove DC special casing for KB/ML
- drm/amdgpu: Don't default to DC support for Kaveri and older
- drm/amdgpu: GPU vs CPU page size fixes in amdgpu_vm_bo_split_mapping
- drm/amd/display: release spinlock before committing updates to stream
- drm/i915: Fix PIPESTAT irq ack on i965/g4x
- ARM64: dts: meson-gxl-s905x-p212: Add phy-supply for usb0
- x86/mm: Don't free P4D table when it is folded at runtime
* Bionic update: upstream stable patchset 2018-12-07 (LP: #1807469)
- x86/spectre_v1: Disable compiler optimizations over
array_index_mask_nospec()
- x86/mce: Improve error message when kernel cannot recover
- x86/mce: Check for alternate indication of machine check recovery on Skylake
- x86/mce: Fix incorrect "Machine check from unknown source" message
- x86/mce: Do not overwrite MCi_STATUS in mce_no_way_out()
- x86: Call fixup_exception() before notify_die() in math_error()
- m68k/mm: Adjust VM area to be unmapped by gap size for __iounmap()
- m68k/mac: Fix SWIM memory resource end address
- serial: sh-sci: Use spin_{try}lock_irqsave instead of open coding version
- signal/xtensa: Consistenly use SIGBUS in do_unaligned_user
- PM / Domains: Fix error path during attach in genpd
- PM / core: Fix supplier device runtime PM usage counter imbalance
- PM / OPP: Update voltage in case freq == old_freq
- usb: do not reset if a low-speed or full-speed device timed out
- 1wire: family module autoload fails because of upper/lower case mismatch.
- ASoC: dapm: delete dapm_kcontrol_data paths list before freeing it
- ASoC: cs35l35: Add use_single_rw to regmap config
- ASoC: cirrus: i2s: Fix LRCLK configuration
- ASoC: cirrus: i2s: Fix {TX|RX}LinCtrlData setup
- thermal: bcm2835: Stop using printk format %pCr
- clk: renesas: cpg-mssr: Stop using printk format %pCr
- lib/vsprintf: Remove atomic-unsafe support for %pCr
- ftrace/selftest: Have the reset_trigger code be a bit more careful
- mips: ftrace: fix static function graph tracing
- branch-check: fix long->int truncation when profiling branches
- ipmi:bt: Set the timeout before doing a capabilities check
- Bluetooth: hci_qca: Avoid missing rampatch failure with userspace fw loader
- printk: fix possible reuse of va_list variable
- fuse: fix congested state leak on aborted connections
- fuse: atomic_o_trunc should truncate pagecache
- fuse: don't keep dead fuse_conn at fuse_fill_super().
- fuse: fix control dir setup and teardown
- powerpc/mm/hash: Add missing isync prior to kernel stack SLB switch
- powerpc/ptrace: Fix setting 512B aligned breakpoints with
PTRACE_SET_DEBUGREG
- powerpc/ptrace: Fix enforcement of DAWR constraints
- powerpc/powernv/ioda2: Remove redundant free of TCE pages
- powerpc/powernv: copy/paste - Mask SO bit in CR
- powerpc/fadump: Unregister fadump on kexec down path.
- soc: rockchip: power-domain: Fix wrong value when power up pd with writemask
- ARM: 8764/1: kgdb: fix NUMREGBYTES so that gdb_regs[] is the correct size
- ARM: dts: Fix SPI node for Arria10
- ARM: dts: socfpga: Fix NAND controller node compatible
- ARM: dts: socfpga: Fix NAND controller clock supply
- ARM: dts: socfpga: Fix NAND controller node compatible for Arria10
- arm64: Fix syscall restarting around signal suppressed by tracer
- arm64: kpti: Use early_param for kpti= command-line option
- arm64: mm: Ensure writes to swapper are ordered wrt subsequent cache
maintenance
- ARM64: dts: meson: disable sd-uhs modes on the libretech-cc
- of: overlay: validate offset from property fixups
- of: unittest: for strings, account for trailing \0 in property length field
- of: platform: stop accessing invalid dev in of_platform_device_destroy
- tpm: fix use after free in tpm2_load_context()
- tpm: fix race condition in tpm_common_write()
- IB/qib: Fix DMA api warning with debug kernel
- IB/{hfi1, qib}: Add handling of kernel restart
- IB/mlx4: Mark user MR as writable if actual virtual memory is writable
- IB/core: Make testing MR flags for writability a static inline function
- IB/mlx5: Fetch soft WQE's on fatal error state
- IB/isert: Fix for lib/dma_debug check_sync warning
- IB/isert: fix T10-pi check mask setting
- IB/hfi1: Fix fault injection init/exit issues
- IB/hfi1: Reorder incorrect send context disable
- IB/hfi1: Optimize kthread pointer locking when queuing CQ entries
- IB/hfi1: Fix user context tail allocation for DMA_RTAIL
- RDMA/mlx4: Discard unknown SQP work requests
- xprtrdma: Return -ENOBUFS when no pages are available
- mtd: cfi_cmdset_0002: Change write buffer to check correct value
- mtd: cfi_cmdset_0002: Use right chip in do_ppb_xxlock()
- mtd: cfi_cmdset_0002: fix SEGV unlocking multiple chips
- mtd: cfi_cmdset_0002: Fix unlocking requests crossing a chip boudary
- mtd: cfi_cmdset_0002: Avoid walking all chips when unlocking.
- PCI: hv: Make sure the bus domain is really unique
- PCI: Add ACS quirk for Intel 7th & 8th Gen mobile
- PCI: pciehp: Clear Presence Detect and Data Link Layer Status Changed on
resume
- auxdisplay: fix broken menu
- pinctrl: samsung: Correct EINTG banks order
- pinctrl: devicetree: Fix pctldev pointer overwrite
- cpufreq: intel_pstate: Fix scaling max/min limits with Turbo 3.0
- MIPS: io: Add barrier after register read in inX()
- time: Make sure jiffies_to_msecs() preserves non-zero time periods
- irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node
- X.509: unpack RSA signatureValue field from BIT STRING
- Btrfs: fix return value on rename exchange failure
- iio: adc: ad7791: remove sample freq sysfs attributes
- iio: sca3000: Fix an error handling path in 'sca3000_probe()'
- mm: fix __gup_device_huge vs unmap
- scsi: qla2xxx: Fix setting lower transfer speed if GPSC fails
- scsi: qla2xxx: Mask off Scope bits in retry delay
- scsi: zfcp: fix missing SCSI trace for result of eh_host_reset_handler
- scsi: zfcp: fix missing SCSI trace for retry of abort / scsi_eh TMF
- scsi: zfcp: fix misleading REC trigger trace where erp_action setup failed
- scsi: zfcp: fix missing REC trigger trace on terminate_rport_io early return
- scsi: zfcp: fix missing REC trigger trace on terminate_rport_io for
ERP_FAILED
- scsi: zfcp: fix missing REC trigger trace for all objects in ERP_FAILED
- scsi: zfcp: fix missing REC trigger trace on enqueue without ERP thread
- linvdimm, pmem: Preserve read-only setting for pmem devices
- clk: at91: PLL recalc_rate() now using cached MUL and DIV values
- rtc: sun6i: Fix bit_idx value for clk_register_gate
- md: fix two problems with setting the "re-add" device state.
- rpmsg: smd: do not use mananged resources for endpoints and channels
- ubi: fastmap: Cancel work upon detach
- ubi: fastmap: Correctly handle interrupted erasures in EBA
- backlight: as3711_bl: Fix Device Tree node lookup
- backlight: max8925_bl: Fix Device Tree node lookup
- backlight: tps65217_bl: Fix Device Tree node lookup
- mfd: intel-lpss: Program REMAP register in PIO mode
- arm: dts: mt7623: fix invalid memory node being generated
- perf tools: Fix symbol and object code resolution for vdso32 and vdsox32
- perf intel-pt: Fix sync_switch INTEL_PT_SS_NOT_TRACING
- perf intel-pt: Fix decoding to accept CBR between FUP and corresponding TIP
- perf intel-pt: Fix MTC timing after overflow
- perf intel-pt: Fix "Unexpected indirect branch" error
- perf intel-pt: Fix packet decoding of CYC packets
- media: vsp1: Release buffers for each video node
- media: v4l2-compat-ioctl32: prevent go past max size
- media: dvb_frontend: fix locking issues at dvb_frontend_get_event()
- nfsd: restrict rd_maxcount to svc_max_payload in nfsd_encode_readdir
- NFSv4: Fix possible 1-byte stack overflow in
nfs_idmap_read_and_verify_message
- NFSv4: Revert commit 5f83d86cf531d ("NFSv4.x: Fix wraparound issues..")
- NFSv4: Fix a typo in nfs41_sequence_process
- ACPI / LPSS: Add missing prv_offset setting for byt/cht PWM devices
- Input: elan_i2c - add ELAN0618 (Lenovo v330 15IKB) ACPI ID
- pwm: lpss: platform: Save/restore the ctrl register over a suspend/resume
- rbd: flush rbd_dev->watch_dwork after watch is unregistered
- mm/ksm.c: ignore STABLE_FLAG of rmap_item->address in rmap_walk_ksm()
- mm: fix devmem_is_allowed() for sub-page System RAM intersections
- xen: Remove unnecessary BUG_ON from __unbind_from_irq()
- udf: Detect incorrect directory size
- Input: xpad - fix GPD Win 2 controller name
- Input: elan_i2c_smbus - fix more potential stack buffer overflows
- ALSA: timer: Fix UBSAN warning at SNDRV_TIMER_IOCTL_NEXT_DEVICE ioctl
- ALSA: hda/realtek - Fix pop noise on Lenovo P50 & co
- ALSA: hda/realtek - Add a quirk for FSC ESPRIMO U9210
- slub: fix failure when we delete and create a slab cache
- block: Fix transfer when chunk sectors exceeds max
- block: Fix cloning of requests with a special payload
- x86/efi: Fix efi_call_phys_epilog() with CONFIG_X86_5LEVEL=y
- dm zoned: avoid triggering reclaim from inside dmz_map()
- dm thin: handle running out of data space vs concurrent discard
- x86/platform/UV: Use new set memory block size function
- x86/platform/UV: Add kernel parameter to set memory block size
- platform/chrome: cros_ec_lpc: Register the driver if ACPI entry is missing.
- platform/chrome: cros_ec_lpc: do not try DMI match when ACPI device found
- hwmon: (k10temp) Add support for Stoney Ridge and Bristol Ridge CPUs
- spi-nor: intel-spi: Remove unused preopcodes field
- mtd: spi-nor: intel-spi: Fix atomic sequence handling
- PCI / PM: Do not clear state_saved for devices that remain suspended
- ASoC: mediatek: preallocate pages use platform device
- libnvdimm, pmem: Do not flush power-fail protected CPU caches
- powerpc/64s: Set assembler machine type to POWER4
- powerpc/e500mc: Set assembler machine type to e500mc
- hwrng: core - Always drop the RNG in hwrng_unregister()
- softirq: Reorder trace_softirqs_on to prevent lockdep splat
- ARM64: dts: meson-gx: fix ATF reserved memory region
- mtd: rawnand: fix return value check for bad block status
- mtd: rawnand: mxc: set spare area size register explicitly
- PCI: Account for all bridges on bus when distributing bus numbers
- pinctrl: armada-37xx: Fix spurious irq management
- MIPS: pb44: Fix i2c-gpio GPIO descriptor table
- locking/rwsem: Fix up_read_non_owner() warning with DEBUG_RWSEMS
- scsi: scsi_debug: Fix memory leak on module unload
- scsi: qla2xxx: Spinlock recursion in qla_target
- libnvdimm, pmem: Unconditionally deep flush on *sync
- f2fs: don't use GFP_ZERO for page caches
- mfd: twl-core: Fix clock initialization
- remoteproc: Prevent incorrect rproc state on xfer mem ownership failure
- media: rc: mce_kbd decoder: fix stuck keys
- Input: silead - add Chuwi Hi8 support
- Input: silead - add MSSL0002 ACPI HID
- ALSA: hda - Force to link down at runtime suspend on ATI/AMD HDMI
- i2c: gpio: initialize SCL to HIGH again
- kasan: depend on CONFIG_SLUB_DEBUG
- dm: ensure bio submission follows a depth-first tree walk
- dm: rename 'bio' member of dm_io structure to 'orig_bio'
- dm: use bio_split() when splitting out the already processed bio
- x86/e820: put !E820_TYPE_RAM regions into memblock.reserved
* Support AverMedia DVD EZMaker 7 USB video capture dongle (LP: #1620762) //
Bionic update: upstream stable patchset 2018-12-07 (LP: #1807469)
- media: cx231xx: Add support for AverMedia DVD EZMaker 7
-- Kleber Sacilotto de Souza <email address hidden> Thu, 17 Jan 2019 14:25:32 +0000
-
linux-aws (4.15.0-1031.33) bionic; urgency=medium
* linux-aws: 4.15.0-1031.33 -proposed tracker (LP: #1806664)
* xen hibernation support for linux-aws (bionic) (LP: #1804533)
- SAUCE [aws] x86/xen: Introduce new function to map HYPERVISOR_shared_info on
Resume
- SAUCE [aws] x86/xen: add system core suspend and resume callbacks
- SAUCE [aws] xen-netfront: add callbacks for PM suspend and hibernation
support
- SAUCE [aws] xen-time-introduce-xen_-save-restore-_steal_clock
- SAUCE [aws] x86/xen: save and restore steal clock
- SAUCE [aws] xen/events: add xen_shutdown_pirqs helper function
- SAUCE [aws] x86/xen: close event channels for PIRQs in system core suspend
callback
- SAUCE [aws] PM / hibernate: update the resume offset on
SNAPSHOT_SET_SWAP_AREA
[ Ubuntu: 4.15.0-43.46 ]
* linux: 4.15.0-43.46 -proposed tracker (LP: #1806659)
* System randomly hangs during suspend when mei_wdt is loaded (LP: #1803942)
- SAUCE: base/dd: limit release function changes to vfio driver only
* Workaround CSS timeout on AMD SNPS 3.0 xHC (LP: #1806838)
- xhci: Allow more than 32 quirks
- xhci: workaround CSS timeout on AMD SNPS 3.0 xHC
* linux-buildinfo: pull out ABI information into its own package
(LP: #1806380)
- [Packaging] limit preparation to linux-libc-dev in headers
- [Packaging] commonise debhelper invocation
- [Packaging] ABI -- accumulate abi information at the end of the build
- [Packaging] buildinfo -- add basic build information
- [Packaging] buildinfo -- add firmware information to the flavour ABI
- [Packaging] buildinfo -- add compiler information to the flavour ABI
- [Packaging] buildinfo -- add buildinfo support to getabis
- [Config] buildinfo -- add retpoline version markers
* linux packages should own /usr/lib/linux/triggers (LP: #1770256)
- [Packaging] own /usr/lib/linux/triggers
* CVE-2018-12896
- posix-timers: Sanitize overrun handling
* CVE-2018-16276
- USB: yurex: fix out-of-bounds uaccess in read handler
* CVE-2018-10902
- ALSA: rawmidi: Change resized buffers atomically
* CVE-2018-18710
- cdrom: fix improper type cast, which can leat to information leak.
* CVE-2018-18690
- xfs: don't fail when converting shortform attr to long form during
ATTR_REPLACE
* CVE-2018-14734
- infiniband: fix a possible use-after-free bug
* CVE-2018-18445
- bpf: 32-bit RSH verification must truncate input before the ALU op
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
-- Khalid Elmously <email address hidden> Thu, 06 Dec 2018 21:51:22 +0000
-
linux-aws (4.15.0-1029.30) bionic; urgency=medium
* Miscellaneous Ubuntu changes
- [Config] linux-aws: enable arm64 build
linux-aws (4.15.0-1028.29) bionic; urgency=medium
* linux-aws: 4.15.0-1028.29 -proposed tracker (LP: #1802558)
* Improve AWS hibernation performance (LP: #1803613)
- SAUCE: [aws] PM / hibernate: Speed up hibernation by batching requests
* Restore request-based mode to xen-blkfront for AWS kernels (LP: #1801305)
- SAUCE: xen/manage: keep track of the on-going suspend mode
- SAUCE: xen/manage: introduce helper function to know the on-going suspend
mode
- SAUCE: xenbus: add freeze/thaw/restore callbacks support
- SAUCE: xen-blkfront: add callbacks for PM suspend and hibernation
- SAUCE: xen-blkfront: resurrect request-based mode
- SAUCE: xen-blkfront: Fixed blkfront_restore to remove a call to negotiate_mq
[ Ubuntu: 4.15.0-42.45 ]
* linux: 4.15.0-42.45 -proposed tracker (LP: #1803592)
* [FEAT] Guest-dedicated Crypto Adapters (LP: #1787405)
- KVM: s390: reset crypto attributes for all vcpus
- KVM: s390: vsie: simulate VCPU SIE entry/exit
- KVM: s390: introduce and use KVM_REQ_VSIE_RESTART
- KVM: s390: refactor crypto initialization
- s390: vfio-ap: base implementation of VFIO AP device driver
- s390: vfio-ap: register matrix device with VFIO mdev framework
- s390: vfio-ap: sysfs interfaces to configure adapters
- s390: vfio-ap: sysfs interfaces to configure domains
- s390: vfio-ap: sysfs interfaces to configure control domains
- s390: vfio-ap: sysfs interface to view matrix mdev matrix
- KVM: s390: interface to clear CRYCB masks
- s390: vfio-ap: implement mediated device open callback
- s390: vfio-ap: implement VFIO_DEVICE_GET_INFO ioctl
- s390: vfio-ap: zeroize the AP queues
- s390: vfio-ap: implement VFIO_DEVICE_RESET ioctl
- KVM: s390: Clear Crypto Control Block when using vSIE
- KVM: s390: vsie: Do the CRYCB validation first
- KVM: s390: vsie: Make use of CRYCB FORMAT2 clear
- KVM: s390: vsie: Allow CRYCB FORMAT-2
- KVM: s390: vsie: allow CRYCB FORMAT-1
- KVM: s390: vsie: allow CRYCB FORMAT-0
- KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-1
- KVM: s390: vsie: allow guest FORMAT-1 CRYCB on host FORMAT-2
- KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-2
- KVM: s390: device attrs to enable/disable AP interpretation
- KVM: s390: CPU model support for AP virtualization
- s390: doc: detailed specifications for AP virtualization
- KVM: s390: fix locking for crypto setting error path
- KVM: s390: Tracing APCB changes
- s390: vfio-ap: setup APCB mask using KVM dedicated function
- s390/zcrypt: Add ZAPQ inline function.
- s390/zcrypt: Review inline assembler constraints.
- s390/zcrypt: Integrate ap_asm.h into include/asm/ap.h.
- s390/zcrypt: fix ap_instructions_available() returncodes
- s390/zcrypt: remove VLA usage from the AP bus
- s390/zcrypt: Remove deprecated ioctls.
- s390/zcrypt: Remove deprecated zcrypt proc interface.
- s390/zcrypt: Support up to 256 crypto adapters.
- [Config:] Enable CONFIG_S390_AP_IOMMU and set CONFIG_VFIO_AP to module.
* Bypass of mount visibility through userns + mount propagation (LP: #1789161)
- mount: Retest MNT_LOCKED in do_umount
- mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts
* CVE-2018-18955: nested user namespaces with more than five extents
incorrectly grant privileges over inode (LP: #1801924) // CVE-2018-18955
- userns: also map extents in the reverse map to kernel IDs
* kdump fail due to an IRQ storm (LP: #1797990)
- SAUCE: x86/PCI: Export find_cap() to be used in early PCI code
- SAUCE: x86/quirks: Add parameter to clear MSIs early on boot
- SAUCE: x86/quirks: Scan all busses for early PCI quirks
[ Ubuntu: 4.15.0-40.43 ]
* linux: 4.15.0-40.43 -proposed tracker (LP: #1802554)
* crash in ENA driver on removing an interface (LP: #1802341)
- SAUCE: net: ena: fix crash during ena_remove()
* Ubuntu 18.04.1 - [s390x] Kernel panic while stressing network bonding
(LP: #1797367)
- s390/qeth: don't keep track of MAC address's cast type
- s390/qeth: consolidate qeth MAC address helpers
- s390/qeth: avoid using is_multicast_ether_addr_64bits on (u8 *)[6]
- s390/qeth: remove outdated portname debug msg
- s390/qeth: reduce hard-coded access to ccw channels
- s390/qeth: sanitize strings in debug messages
* [18.04 FEAT] zcrypt DD: introduce APQN tags to support deterministic driver
binding (LP: #1799184)
- s390/zcrypt: code beautify
- s390/zcrypt: AP bus support for alternate driver(s)
- s390/zcrypt: hex string mask improvements for apmask and aqmask.
- s390/zcrypt: remove unused functions and declarations
- s390/zcrypt: Show load of cards and queues in sysfs
* [GLK/CLX] Enhanced IBRS (LP: #1786139)
- x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation
- x86/speculation: Support Enhanced IBRS on future CPUs
* Allow signed kernels to be kexec'ed under lockdown (LP: #1798441)
- Fix kexec forbidding kernels signed with keys in the secondary keyring to
boot
* Overlayfs in user namespace leaks directory content of inaccessible
directories (LP: #1793458) // CVE-2018-6559
- SAUCE: overlayfs: ensure mounter privileges when reading directories
* Update ENA driver to version 2.0.1K (LP: #1798182)
- net: ena: remove ndo_poll_controller
- net: ena: fix warning in rmmod caused by double iounmap
- net: ena: fix rare bug when failed restart/resume is followed by driver
removal
- net: ena: fix NULL dereference due to untimely napi initialization
- net: ena: fix auto casting to boolean
- net: ena: minor performance improvement
- net: ena: complete host info to match latest ENA spec
- net: ena: introduce Low Latency Queues data structures according to ENA spec
- net: ena: add functions for handling Low Latency Queues in ena_com
- net: ena: add functions for handling Low Latency Queues in ena_netdev
- net: ena: use CSUM_CHECKED device indication to report skb's checksum status
- net: ena: explicit casting and initialization, and clearer error handling
- net: ena: limit refill Rx threshold to 256 to avoid latency issues
- net: ena: change rx copybreak default to reduce kernel memory pressure
- net: ena: remove redundant parameter in ena_com_admin_init()
- net: ena: update driver version to 2.0.1
- net: ena: fix indentations in ena_defs for better readability
- net: ena: Fix Kconfig dependency on X86
- net: ena: enable Low Latency Queues
- net: ena: fix compilation error in xtensa architecture
* Bionic update: upstream stable patchset 2018-10-29 (LP: #1800537)
- bonding: re-evaluate force_primary when the primary slave name changes
- cdc_ncm: avoid padding beyond end of skb
- ipv6: allow PMTU exceptions to local routes
- net: dsa: add error handling for pskb_trim_rcsum
- net/sched: act_simple: fix parsing of TCA_DEF_DATA
- tcp: verify the checksum of the first data segment in a new connection
- udp: fix rx queue len reported by diag and proc interface
- net: in virtio_net_hdr only add VLAN_HLEN to csum_start if payload holds
vlan
- tls: fix use-after-free in tls_push_record
- ext4: fix hole length detection in ext4_ind_map_blocks()
- ext4: update mtime in ext4_punch_hole even if no blocks are released
- ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget()
- ext4: fix fencepost error in check for inode count overflow during resize
- driver core: Don't ignore class_dir_create_and_add() failure.
- Btrfs: fix clone vs chattr NODATASUM race
- Btrfs: fix memory and mount leak in btrfs_ioctl_rm_dev_v2()
- btrfs: return error value if create_io_em failed in cow_file_range
- btrfs: scrub: Don't use inode pages for device replace
- ALSA: hda/conexant - Add fixup for HP Z2 G4 workstation
- ALSA: hda - Handle kzalloc() failure in snd_hda_attach_pcm_stream()
- ALSA: hda: add dock and led support for HP EliteBook 830 G5
- ALSA: hda: add dock and led support for HP ProBook 640 G4
- x86/MCE: Fix stack out-of-bounds write in mce-inject.c: Flags_read()
- smb3: fix various xid leaks
- CIFS: 511c54a2f69195b28afb9dd119f03787b1625bb4 adds a check for session
expiry
- cifs: For SMB2 security informaion query, check for minimum sized security
descriptor instead of sizeof FileAllInformation class
- nbd: fix nbd device deletion
- nbd: update size when connected
- nbd: use bd_set_size when updating disk size
- blk-mq: reinit q->tag_set_list entry only after grace period
- bdi: Move cgroup bdi_writeback to a dedicated low concurrency workqueue
- cpufreq: Fix new policy initialization during limits updates via sysfs
- cpufreq: governors: Fix long idle detection logic in load calculation
- libata: zpodd: small read overflow in eject_tray()
- libata: Drop SanDisk SD7UB3Q*G1001 NOLPM quirk
- w1: mxc_w1: Enable clock before calling clk_get_rate() on it
- x86/intel_rdt: Enable CMT and MBM on new Skylake stepping
- iwlwifi: fw: harden page loading code
- orangefs: set i_size on new symlink
- orangefs: report attributes_mask and attributes for statx
- HID: intel_ish-hid: ipc: register more pm callbacks to support hibernation
- HID: wacom: Correct logical maximum Y for 2nd-gen Intuos Pro large
- mm, page_alloc: do not break __GFP_THISNODE by zonelist reset
- net: phy: dp83822: use BMCR_ANENABLE instead of BMSR_ANEGCAPABLE for DP83620
- cpufreq: ti-cpufreq: Fix an incorrect error return value
- x86/vector: Fix the args of vector_alloc tracepoint
- x86/apic/vector: Prevent hlist corruption and leaks
- x86/apic: Provide apic_ack_irq()
- x86/ioapic: Use apic_ack_irq()
- x86/platform/uv: Use apic_ack_irq()
- irq_remapping: Use apic_ack_irq()
- genirq/generic_pending: Do not lose pending affinity update
- genirq/affinity: Defer affinity setting if irq chip is busy
- genirq/migration: Avoid out of line call if pending is not set
* [bionic]mlx5: reading SW stats through ifstat cause kernel crash
(LP: #1799049)
- net/mlx5e: Don't attempt to dereference the ppriv struct if not being
eswitch manager
* [Bionic][Cosmic] ipmi: Fix timer race with module unload (LP: #1799281)
- ipmi: Fix timer race with module unload
* [Bionic] ipmi: Remove ACPI SPMI probing from the SSIF (I2C) driver
(LP: #1799276)
- ipmi: Remove ACPI SPMI probing from the SSIF (I2C) driver
* execveat03 in ubuntu_ltp_syscalls failed on X/B (LP: #1786729)
- cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()
* [Bionic][Cosmic] Fix to ipmi to support vendor specific messages greater
than 255 bytes (LP: #1799794)
- ipmi:ssif: Add support for multi-part transmit messages > 2 parts
* libvirtd is unable to configure bridge devices inside of LXD containers
(LP: #1784501)
- kernfs: allow creating kernfs objects with arbitrary uid/gid
- sysfs, kobject: allow creating kobject belonging to arbitrary users
- kobject: kset_create_and_add() - fetch ownership info from parent
- driver core: set up ownership of class devices in sysfs
- net-sysfs: require net admin in the init ns for setting tx_maxrate
- net-sysfs: make sure objects belong to container's owner
- net: create reusable function for getting ownership info of sysfs inodes
- bridge: make sure objects belong to container's owner
- sysfs: Fix regression when adding a file to an existing group
* [Ubuntu] kvm: fix deadlock when killed by oom (LP: #1800849)
- s390/kvm: fix deadlock when killed by oom
* [Ubuntu] net/af_iucv: fix skb leaks for HiperTransport (LP: #1800639)
- net/af_iucv: drop inbound packets with invalid flags
- net/af_iucv: fix skb handling on HiperTransport xmit error
* Power consumption during s2idle is higher than long idle(sk hynix)
(LP: #1801875)
- SAUCE: pci: prevent sk hynix nvme from entering D3
- SAUCE: nvme: add quirk to not call disable function when suspending
* Enable keyboard wakeup for S2Idle laptops (LP: #1798552)
- Input: i8042 - enable keyboard wakeups by default when s2idle is used
* NULL pointer dereference at 0000000000000020 when access
dst_orig->ops->family in function xfrm_lookup_with_ifid() (LP: #1801878)
- xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry.
* [Ubuntu] qdio: reset old sbal_state flags (LP: #1801686)
- s390/qdio: reset old sbal_state flags
* hns3: map tx ring to tc (LP: #1802023)
- net: hns3: Set tx ring' tc info when netdev is up
* [Ubuntu] qeth: Fix potential array overrun in cmd/rc lookup (LP: #1800641)
- s390: qeth_core_mpc: Use ARRAY_SIZE instead of reimplementing its function
- s390: qeth: Fix potential array overrun in cmd/rc lookup
* Vulkan applications cause permanent memory leak with Intel GPU
(LP: #1798165)
- drm/syncobj: Don't leak fences when WAIT_FOR_SUBMIT is set
* Mounting SOFS SMB shares fails (LP: #1792580)
- cifs: connect to servername instead of IP for IPC$ share
* Packaging resync (LP: #1786013)
- [Package] add support for specifying the primary makefile
-- Kamal Mostafa <email address hidden> Mon, 19 Nov 2018 12:36:09 -0800
-
linux-aws (4.15.0-1028.29) bionic; urgency=medium
* linux-aws: 4.15.0-1028.29 -proposed tracker (LP: #1802558)
* Improve AWS hibernation performance (LP: #1803613)
- SAUCE: [aws] PM / hibernate: Speed up hibernation by batching requests
* Restore request-based mode to xen-blkfront for AWS kernels (LP: #1801305)
- SAUCE: xen/manage: keep track of the on-going suspend mode
- SAUCE: xen/manage: introduce helper function to know the on-going suspend
mode
- SAUCE: xenbus: add freeze/thaw/restore callbacks support
- SAUCE: xen-blkfront: add callbacks for PM suspend and hibernation
- SAUCE: xen-blkfront: resurrect request-based mode
- SAUCE: xen-blkfront: Fixed blkfront_restore to remove a call to negotiate_mq
[ Ubuntu: 4.15.0-42.45 ]
* linux: 4.15.0-42.45 -proposed tracker (LP: #1803592)
* [FEAT] Guest-dedicated Crypto Adapters (LP: #1787405)
- KVM: s390: reset crypto attributes for all vcpus
- KVM: s390: vsie: simulate VCPU SIE entry/exit
- KVM: s390: introduce and use KVM_REQ_VSIE_RESTART
- KVM: s390: refactor crypto initialization
- s390: vfio-ap: base implementation of VFIO AP device driver
- s390: vfio-ap: register matrix device with VFIO mdev framework
- s390: vfio-ap: sysfs interfaces to configure adapters
- s390: vfio-ap: sysfs interfaces to configure domains
- s390: vfio-ap: sysfs interfaces to configure control domains
- s390: vfio-ap: sysfs interface to view matrix mdev matrix
- KVM: s390: interface to clear CRYCB masks
- s390: vfio-ap: implement mediated device open callback
- s390: vfio-ap: implement VFIO_DEVICE_GET_INFO ioctl
- s390: vfio-ap: zeroize the AP queues
- s390: vfio-ap: implement VFIO_DEVICE_RESET ioctl
- KVM: s390: Clear Crypto Control Block when using vSIE
- KVM: s390: vsie: Do the CRYCB validation first
- KVM: s390: vsie: Make use of CRYCB FORMAT2 clear
- KVM: s390: vsie: Allow CRYCB FORMAT-2
- KVM: s390: vsie: allow CRYCB FORMAT-1
- KVM: s390: vsie: allow CRYCB FORMAT-0
- KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-1
- KVM: s390: vsie: allow guest FORMAT-1 CRYCB on host FORMAT-2
- KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-2
- KVM: s390: device attrs to enable/disable AP interpretation
- KVM: s390: CPU model support for AP virtualization
- s390: doc: detailed specifications for AP virtualization
- KVM: s390: fix locking for crypto setting error path
- KVM: s390: Tracing APCB changes
- s390: vfio-ap: setup APCB mask using KVM dedicated function
- s390/zcrypt: Add ZAPQ inline function.
- s390/zcrypt: Review inline assembler constraints.
- s390/zcrypt: Integrate ap_asm.h into include/asm/ap.h.
- s390/zcrypt: fix ap_instructions_available() returncodes
- s390/zcrypt: remove VLA usage from the AP bus
- s390/zcrypt: Remove deprecated ioctls.
- s390/zcrypt: Remove deprecated zcrypt proc interface.
- s390/zcrypt: Support up to 256 crypto adapters.
- [Config:] Enable CONFIG_S390_AP_IOMMU and set CONFIG_VFIO_AP to module.
* Bypass of mount visibility through userns + mount propagation (LP: #1789161)
- mount: Retest MNT_LOCKED in do_umount
- mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts
* CVE-2018-18955: nested user namespaces with more than five extents
incorrectly grant privileges over inode (LP: #1801924) // CVE-2018-18955
- userns: also map extents in the reverse map to kernel IDs
* kdump fail due to an IRQ storm (LP: #1797990)
- SAUCE: x86/PCI: Export find_cap() to be used in early PCI code
- SAUCE: x86/quirks: Add parameter to clear MSIs early on boot
- SAUCE: x86/quirks: Scan all busses for early PCI quirks
[ Ubuntu: 4.15.0-40.43 ]
* linux: 4.15.0-40.43 -proposed tracker (LP: #1802554)
* crash in ENA driver on removing an interface (LP: #1802341)
- SAUCE: net: ena: fix crash during ena_remove()
* Ubuntu 18.04.1 - [s390x] Kernel panic while stressing network bonding
(LP: #1797367)
- s390/qeth: don't keep track of MAC address's cast type
- s390/qeth: consolidate qeth MAC address helpers
- s390/qeth: avoid using is_multicast_ether_addr_64bits on (u8 *)[6]
- s390/qeth: remove outdated portname debug msg
- s390/qeth: reduce hard-coded access to ccw channels
- s390/qeth: sanitize strings in debug messages
* [18.04 FEAT] zcrypt DD: introduce APQN tags to support deterministic driver
binding (LP: #1799184)
- s390/zcrypt: code beautify
- s390/zcrypt: AP bus support for alternate driver(s)
- s390/zcrypt: hex string mask improvements for apmask and aqmask.
- s390/zcrypt: remove unused functions and declarations
- s390/zcrypt: Show load of cards and queues in sysfs
* [GLK/CLX] Enhanced IBRS (LP: #1786139)
- x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation
- x86/speculation: Support Enhanced IBRS on future CPUs
* Allow signed kernels to be kexec'ed under lockdown (LP: #1798441)
- Fix kexec forbidding kernels signed with keys in the secondary keyring to
boot
* Overlayfs in user namespace leaks directory content of inaccessible
directories (LP: #1793458) // CVE-2018-6559
- SAUCE: overlayfs: ensure mounter privileges when reading directories
* Update ENA driver to version 2.0.1K (LP: #1798182)
- net: ena: remove ndo_poll_controller
- net: ena: fix warning in rmmod caused by double iounmap
- net: ena: fix rare bug when failed restart/resume is followed by driver
removal
- net: ena: fix NULL dereference due to untimely napi initialization
- net: ena: fix auto casting to boolean
- net: ena: minor performance improvement
- net: ena: complete host info to match latest ENA spec
- net: ena: introduce Low Latency Queues data structures according to ENA spec
- net: ena: add functions for handling Low Latency Queues in ena_com
- net: ena: add functions for handling Low Latency Queues in ena_netdev
- net: ena: use CSUM_CHECKED device indication to report skb's checksum status
- net: ena: explicit casting and initialization, and clearer error handling
- net: ena: limit refill Rx threshold to 256 to avoid latency issues
- net: ena: change rx copybreak default to reduce kernel memory pressure
- net: ena: remove redundant parameter in ena_com_admin_init()
- net: ena: update driver version to 2.0.1
- net: ena: fix indentations in ena_defs for better readability
- net: ena: Fix Kconfig dependency on X86
- net: ena: enable Low Latency Queues
- net: ena: fix compilation error in xtensa architecture
* Bionic update: upstream stable patchset 2018-10-29 (LP: #1800537)
- bonding: re-evaluate force_primary when the primary slave name changes
- cdc_ncm: avoid padding beyond end of skb
- ipv6: allow PMTU exceptions to local routes
- net: dsa: add error handling for pskb_trim_rcsum
- net/sched: act_simple: fix parsing of TCA_DEF_DATA
- tcp: verify the checksum of the first data segment in a new connection
- udp: fix rx queue len reported by diag and proc interface
- net: in virtio_net_hdr only add VLAN_HLEN to csum_start if payload holds
vlan
- tls: fix use-after-free in tls_push_record
- ext4: fix hole length detection in ext4_ind_map_blocks()
- ext4: update mtime in ext4_punch_hole even if no blocks are released
- ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget()
- ext4: fix fencepost error in check for inode count overflow during resize
- driver core: Don't ignore class_dir_create_and_add() failure.
- Btrfs: fix clone vs chattr NODATASUM race
- Btrfs: fix memory and mount leak in btrfs_ioctl_rm_dev_v2()
- btrfs: return error value if create_io_em failed in cow_file_range
- btrfs: scrub: Don't use inode pages for device replace
- ALSA: hda/conexant - Add fixup for HP Z2 G4 workstation
- ALSA: hda - Handle kzalloc() failure in snd_hda_attach_pcm_stream()
- ALSA: hda: add dock and led support for HP EliteBook 830 G5
- ALSA: hda: add dock and led support for HP ProBook 640 G4
- x86/MCE: Fix stack out-of-bounds write in mce-inject.c: Flags_read()
- smb3: fix various xid leaks
- CIFS: 511c54a2f69195b28afb9dd119f03787b1625bb4 adds a check for session
expiry
- cifs: For SMB2 security informaion query, check for minimum sized security
descriptor instead of sizeof FileAllInformation class
- nbd: fix nbd device deletion
- nbd: update size when connected
- nbd: use bd_set_size when updating disk size
- blk-mq: reinit q->tag_set_list entry only after grace period
- bdi: Move cgroup bdi_writeback to a dedicated low concurrency workqueue
- cpufreq: Fix new policy initialization during limits updates via sysfs
- cpufreq: governors: Fix long idle detection logic in load calculation
- libata: zpodd: small read overflow in eject_tray()
- libata: Drop SanDisk SD7UB3Q*G1001 NOLPM quirk
- w1: mxc_w1: Enable clock before calling clk_get_rate() on it
- x86/intel_rdt: Enable CMT and MBM on new Skylake stepping
- iwlwifi: fw: harden page loading code
- orangefs: set i_size on new symlink
- orangefs: report attributes_mask and attributes for statx
- HID: intel_ish-hid: ipc: register more pm callbacks to support hibernation
- HID: wacom: Correct logical maximum Y for 2nd-gen Intuos Pro large
- mm, page_alloc: do not break __GFP_THISNODE by zonelist reset
- net: phy: dp83822: use BMCR_ANENABLE instead of BMSR_ANEGCAPABLE for DP83620
- cpufreq: ti-cpufreq: Fix an incorrect error return value
- x86/vector: Fix the args of vector_alloc tracepoint
- x86/apic/vector: Prevent hlist corruption and leaks
- x86/apic: Provide apic_ack_irq()
- x86/ioapic: Use apic_ack_irq()
- x86/platform/uv: Use apic_ack_irq()
- irq_remapping: Use apic_ack_irq()
- genirq/generic_pending: Do not lose pending affinity update
- genirq/affinity: Defer affinity setting if irq chip is busy
- genirq/migration: Avoid out of line call if pending is not set
* [bionic]mlx5: reading SW stats through ifstat cause kernel crash
(LP: #1799049)
- net/mlx5e: Don't attempt to dereference the ppriv struct if not being
eswitch manager
* [Bionic][Cosmic] ipmi: Fix timer race with module unload (LP: #1799281)
- ipmi: Fix timer race with module unload
* [Bionic] ipmi: Remove ACPI SPMI probing from the SSIF (I2C) driver
(LP: #1799276)
- ipmi: Remove ACPI SPMI probing from the SSIF (I2C) driver
* execveat03 in ubuntu_ltp_syscalls failed on X/B (LP: #1786729)
- cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()
* [Bionic][Cosmic] Fix to ipmi to support vendor specific messages greater
than 255 bytes (LP: #1799794)
- ipmi:ssif: Add support for multi-part transmit messages > 2 parts
* libvirtd is unable to configure bridge devices inside of LXD containers
(LP: #1784501)
- kernfs: allow creating kernfs objects with arbitrary uid/gid
- sysfs, kobject: allow creating kobject belonging to arbitrary users
- kobject: kset_create_and_add() - fetch ownership info from parent
- driver core: set up ownership of class devices in sysfs
- net-sysfs: require net admin in the init ns for setting tx_maxrate
- net-sysfs: make sure objects belong to container's owner
- net: create reusable function for getting ownership info of sysfs inodes
- bridge: make sure objects belong to container's owner
- sysfs: Fix regression when adding a file to an existing group
* [Ubuntu] kvm: fix deadlock when killed by oom (LP: #1800849)
- s390/kvm: fix deadlock when killed by oom
* [Ubuntu] net/af_iucv: fix skb leaks for HiperTransport (LP: #1800639)
- net/af_iucv: drop inbound packets with invalid flags
- net/af_iucv: fix skb handling on HiperTransport xmit error
* Power consumption during s2idle is higher than long idle(sk hynix)
(LP: #1801875)
- SAUCE: pci: prevent sk hynix nvme from entering D3
- SAUCE: nvme: add quirk to not call disable function when suspending
* Enable keyboard wakeup for S2Idle laptops (LP: #1798552)
- Input: i8042 - enable keyboard wakeups by default when s2idle is used
* NULL pointer dereference at 0000000000000020 when access
dst_orig->ops->family in function xfrm_lookup_with_ifid() (LP: #1801878)
- xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry.
* [Ubuntu] qdio: reset old sbal_state flags (LP: #1801686)
- s390/qdio: reset old sbal_state flags
* hns3: map tx ring to tc (LP: #1802023)
- net: hns3: Set tx ring' tc info when netdev is up
* [Ubuntu] qeth: Fix potential array overrun in cmd/rc lookup (LP: #1800641)
- s390: qeth_core_mpc: Use ARRAY_SIZE instead of reimplementing its function
- s390: qeth: Fix potential array overrun in cmd/rc lookup
* Vulkan applications cause permanent memory leak with Intel GPU
(LP: #1798165)
- drm/syncobj: Don't leak fences when WAIT_FOR_SUBMIT is set
* Mounting SOFS SMB shares fails (LP: #1792580)
- cifs: connect to servername instead of IP for IPC$ share
* Packaging resync (LP: #1786013)
- [Package] add support for specifying the primary makefile
-- Khalid Elmously <email address hidden> Sun, 18 Nov 2018 23:35:41 -0500
-
linux-aws (4.15.0-1027.27) bionic; urgency=medium
* linux-aws: 4.15.0-1027.27 -proposed tracker (LP: #1801116)
* Update ENA driver to version 2.0.1K (LP: #1798182)
- net: ena: remove ndo_poll_controller
- net: ena: fix warning in rmmod caused by double iounmap
- net: ena: fix rare bug when failed restart/resume is followed by driver
removal
- net: ena: fix NULL dereference due to untimely napi initialization
- net: ena: fix auto casting to boolean
- net: ena: minor performance improvement
- net: ena: complete host info to match latest ENA spec
- net: ena: introduce Low Latency Queues data structures according to ENA spec
- net: ena: add functions for handling Low Latency Queues in ena_com
- net: ena: add functions for handling Low Latency Queues in ena_netdev
- net: ena: use CSUM_CHECKED device indication to report skb's checksum status
- net: ena: explicit casting and initialization, and clearer error handling
- net: ena: limit refill Rx threshold to 256 to avoid latency issues
- net: ena: change rx copybreak default to reduce kernel memory pressure
- net: ena: remove redundant parameter in ena_com_admin_init()
- net: ena: update driver version to 2.0.1
- net: ena: fix indentations in ena_defs for better readability
- net: ena: Fix Kconfig dependency on X86
- net: ena: enable Low Latency Queues
- net: ena: fix compilation error in xtensa architecture
linux-aws (4.15.0-1026.26) bionic; urgency=medium
* linux-aws: 4.15.0-1026.26 -proposed tracker (LP: #1799414)
* Linux: insufficient shootdown for paging-structure caches (LP: #1798897)
- [Config] CONFIG_HAVE_RCU_TABLE_INVALIDATE=y
[ Ubuntu: 4.15.0-39.42 ]
* linux: 4.15.0-39.42 -proposed tracker (LP: #1799411)
* Linux: insufficient shootdown for paging-structure caches (LP: #1798897)
- mm: move tlb_table_flush to tlb_flush_mmu_free
- mm/tlb: Remove tlb_remove_table() non-concurrent condition
- mm/tlb, x86/mm: Support invalidating TLB caches for RCU_TABLE_FREE
- [Config] CONFIG_HAVE_RCU_TABLE_INVALIDATE=y
* Ubuntu18.04: GPU total memory is reduced (LP: #1792102)
- Revert "powerpc/powernv: Increase memory block size to 1GB on radix"
* arm64: snapdragon: reduce boot noise (LP: #1797154)
- [Config] arm64: snapdragon: DRM_MSM=m
- [Config] arm64: snapdragon: SND*=m
- [Config] arm64: snapdragon: disable ARM_SDE_INTERFACE
- [Config] arm64: snapdragon: disable DRM_I2C_ADV7511_CEC
- [Config] arm64: snapdragon: disable VIDEO_ADV7511, VIDEO_COBALT
* [Bionic] CPPC bug fixes (LP: #1796949)
- ACPI / CPPC: Update all pr_(debug/err) messages to log the susbspace id
- cpufreq: CPPC: Don't set transition_latency
- ACPI / CPPC: Fix invalid PCC channel status errors
* regression in 'ip --family bridge neigh' since linux v4.12 (LP: #1796748)
- rtnetlink: fix rtnl_fdb_dump() for ndmsg header
* screen displays abnormally on the lenovo M715 with the AMD GPU (Radeon Vega
8 Mobile, rev ca, 1002:15dd) (LP: #1796786)
- drm/amd/display: Fix takover from VGA mode
- drm/amd/display: early return if not in vga mode in disable_vga
- drm/amd/display: Refine disable VGA
* arm64: snapdragon: WARNING: CPU: 0 PID: 1 arch/arm64/kernel/setup.c:271
reserve_memblock_reserved_regions (LP: #1797139)
- SAUCE: arm64: Fix /proc/iomem for reserved but not memory regions
* The front MIC can't work on the Lenovo M715 (LP: #1797292)
- ALSA: hda/realtek - Fix the problem of the front MIC on the Lenovo M715
* Keyboard backlight sysfs sometimes is missing on Dell laptops (LP: #1797304)
- platform/x86: dell-smbios: Correct some style warnings
- platform/x86: dell-smbios: Rename dell-smbios source to dell-smbios-base
- platform/x86: dell-smbios: Link all dell-smbios-* modules together
- [Config] CONFIG_DELL_SMBIOS_SMM=y, CONFIG_DELL_SMBIOS_WMI=y
* rpi3b+: ethernet not working (LP: #1797406)
- lan78xx: Don't reset the interface on open
* 87cdf3148b11 was never backported to 4.15 (LP: #1795653)
- xfrm: Verify MAC header exists before overwriting eth_hdr(skb)->h_proto
* [Ubuntu18.04][Power9][DD2.2]package installation segfaults inside debian
chroot env in P9 KVM guest with HTM enabled (kvm) (LP: #1792501)
- KVM: PPC: Book3S HV: Fix guest r11 corruption with POWER9 TM workarounds
* Provide mode where all vCPUs on a core must be the same VM (LP: #1792957)
- KVM: PPC: Book3S HV: Provide mode where all vCPUs on a core must be the same
VM
* fscache: bad refcounting in fscache_op_complete leads to OOPS (LP: #1797314)
- SAUCE: fscache: Fix race in decrementing refcount of op->npages
* CVE-2018-9363
- Bluetooth: hidp: buffer overflow in hidp_process_report
* CVE-2017-13168
- scsi: sg: mitigate read/write abuse
* [Bionic] ACPI / PPTT: use ACPI ID whenever ACPI_PPTT_ACPI_PROCESSOR_ID_VALID
is set (LP: #1797200)
- ACPI / PPTT: use ACPI ID whenever ACPI_PPTT_ACPI_PROCESSOR_ID_VALID is set
* [Bionic] arm64: topology: Avoid checking numa mask for scheduler MC
selection (LP: #1797202)
- arm64: topology: Avoid checking numa mask for scheduler MC selection
* crypto/vmx - Backport of Fix sleep-in-atomic bugs patch for 18.04
(LP: #1790832)
- crypto: vmx - Fix sleep-in-atomic bugs
* hns3: autoneg settings get lost on down/up (LP: #1797654)
- net: hns3: Fix for information of phydev lost problem when down/up
* not able to unwind the stack from within __kernel_clock_gettime in the Linux
vDSO (LP: #1797963)
- powerpc/vdso: Correct call frame information
* Signal 7 error when running GPFS tracing in cluster (LP: #1792195)
- powerpc/mm/books3s: Add new pte bit to mark pte temporarily invalid.
- powerpc/mm/radix: Only need the Nest MMU workaround for R -> RW transition
* Support Edge Gateway's WIFI LED (LP: #1798330)
- SAUCE: mwifiex: Switch WiFi LED state according to the device status
* Support Edge Gateway's Bluetooth LED (LP: #1798332)
- SAUCE: Bluetooth: Support for LED on Edge Gateways
* USB cardreader (0bda:0328) make the system can't enter s3 or hang
(LP: #1798328)
- usb: Don't disable Latency tolerance Messaging (LTM) before port reset
* CVE-2018-15471
- xen-netback: fix input validation in xenvif_set_hash_mapping()
* CVE-2018-16658
- cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status
* [Bionic] Update ThunderX2 implementation defined pmu core events
(LP: #1796904)
- perf vendor events arm64: Update ThunderX2 implementation defined pmu core
events
* the machine of lenovo M715 with the AMD GPU (Radeon Vega 8 Mobile, rev ca,
1002:15dd) often hangs randomly (LP: #1796789)
- drm/amd: Add missing fields in atom_integrated_system_info_v1_11
* [18.04] GLK hang after a while (LP: #1760545)
- drm/i915/glk: Add MODULE_FIRMWARE for Geminilake
* Fix usbcore.quirks when used at boot (LP: #1795784)
- usb: core: safely deal with the dynamic quirk lists
-- Khalid Elmously <email address hidden> Thu, 01 Nov 2018 23:21:09 +0000
-
linux-aws (4.15.0-1026.26) bionic; urgency=medium
* linux-aws: 4.15.0-1026.26 -proposed tracker (LP: #1799414)
* Linux: insufficient shootdown for paging-structure caches (LP: #1798897)
- [Config] CONFIG_HAVE_RCU_TABLE_INVALIDATE=y
[ Ubuntu: 4.15.0-39.42 ]
* linux: 4.15.0-39.42 -proposed tracker (LP: #1799411)
* Linux: insufficient shootdown for paging-structure caches (LP: #1798897)
- mm: move tlb_table_flush to tlb_flush_mmu_free
- mm/tlb: Remove tlb_remove_table() non-concurrent condition
- mm/tlb, x86/mm: Support invalidating TLB caches for RCU_TABLE_FREE
- [Config] CONFIG_HAVE_RCU_TABLE_INVALIDATE=y
* Ubuntu18.04: GPU total memory is reduced (LP: #1792102)
- Revert "powerpc/powernv: Increase memory block size to 1GB on radix"
* arm64: snapdragon: reduce boot noise (LP: #1797154)
- [Config] arm64: snapdragon: DRM_MSM=m
- [Config] arm64: snapdragon: SND*=m
- [Config] arm64: snapdragon: disable ARM_SDE_INTERFACE
- [Config] arm64: snapdragon: disable DRM_I2C_ADV7511_CEC
- [Config] arm64: snapdragon: disable VIDEO_ADV7511, VIDEO_COBALT
* [Bionic] CPPC bug fixes (LP: #1796949)
- ACPI / CPPC: Update all pr_(debug/err) messages to log the susbspace id
- cpufreq: CPPC: Don't set transition_latency
- ACPI / CPPC: Fix invalid PCC channel status errors
* regression in 'ip --family bridge neigh' since linux v4.12 (LP: #1796748)
- rtnetlink: fix rtnl_fdb_dump() for ndmsg header
* screen displays abnormally on the lenovo M715 with the AMD GPU (Radeon Vega
8 Mobile, rev ca, 1002:15dd) (LP: #1796786)
- drm/amd/display: Fix takover from VGA mode
- drm/amd/display: early return if not in vga mode in disable_vga
- drm/amd/display: Refine disable VGA
* arm64: snapdragon: WARNING: CPU: 0 PID: 1 arch/arm64/kernel/setup.c:271
reserve_memblock_reserved_regions (LP: #1797139)
- SAUCE: arm64: Fix /proc/iomem for reserved but not memory regions
* The front MIC can't work on the Lenovo M715 (LP: #1797292)
- ALSA: hda/realtek - Fix the problem of the front MIC on the Lenovo M715
* Keyboard backlight sysfs sometimes is missing on Dell laptops (LP: #1797304)
- platform/x86: dell-smbios: Correct some style warnings
- platform/x86: dell-smbios: Rename dell-smbios source to dell-smbios-base
- platform/x86: dell-smbios: Link all dell-smbios-* modules together
- [Config] CONFIG_DELL_SMBIOS_SMM=y, CONFIG_DELL_SMBIOS_WMI=y
* rpi3b+: ethernet not working (LP: #1797406)
- lan78xx: Don't reset the interface on open
* 87cdf3148b11 was never backported to 4.15 (LP: #1795653)
- xfrm: Verify MAC header exists before overwriting eth_hdr(skb)->h_proto
* [Ubuntu18.04][Power9][DD2.2]package installation segfaults inside debian
chroot env in P9 KVM guest with HTM enabled (kvm) (LP: #1792501)
- KVM: PPC: Book3S HV: Fix guest r11 corruption with POWER9 TM workarounds
* Provide mode where all vCPUs on a core must be the same VM (LP: #1792957)
- KVM: PPC: Book3S HV: Provide mode where all vCPUs on a core must be the same
VM
* fscache: bad refcounting in fscache_op_complete leads to OOPS (LP: #1797314)
- SAUCE: fscache: Fix race in decrementing refcount of op->npages
* CVE-2018-9363
- Bluetooth: hidp: buffer overflow in hidp_process_report
* CVE-2017-13168
- scsi: sg: mitigate read/write abuse
* [Bionic] ACPI / PPTT: use ACPI ID whenever ACPI_PPTT_ACPI_PROCESSOR_ID_VALID
is set (LP: #1797200)
- ACPI / PPTT: use ACPI ID whenever ACPI_PPTT_ACPI_PROCESSOR_ID_VALID is set
* [Bionic] arm64: topology: Avoid checking numa mask for scheduler MC
selection (LP: #1797202)
- arm64: topology: Avoid checking numa mask for scheduler MC selection
* crypto/vmx - Backport of Fix sleep-in-atomic bugs patch for 18.04
(LP: #1790832)
- crypto: vmx - Fix sleep-in-atomic bugs
* hns3: autoneg settings get lost on down/up (LP: #1797654)
- net: hns3: Fix for information of phydev lost problem when down/up
* not able to unwind the stack from within __kernel_clock_gettime in the Linux
vDSO (LP: #1797963)
- powerpc/vdso: Correct call frame information
* Signal 7 error when running GPFS tracing in cluster (LP: #1792195)
- powerpc/mm/books3s: Add new pte bit to mark pte temporarily invalid.
- powerpc/mm/radix: Only need the Nest MMU workaround for R -> RW transition
* Support Edge Gateway's WIFI LED (LP: #1798330)
- SAUCE: mwifiex: Switch WiFi LED state according to the device status
* Support Edge Gateway's Bluetooth LED (LP: #1798332)
- SAUCE: Bluetooth: Support for LED on Edge Gateways
* USB cardreader (0bda:0328) make the system can't enter s3 or hang
(LP: #1798328)
- usb: Don't disable Latency tolerance Messaging (LTM) before port reset
* CVE-2018-15471
- xen-netback: fix input validation in xenvif_set_hash_mapping()
* CVE-2018-16658
- cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status
* [Bionic] Update ThunderX2 implementation defined pmu core events
(LP: #1796904)
- perf vendor events arm64: Update ThunderX2 implementation defined pmu core
events
* the machine of lenovo M715 with the AMD GPU (Radeon Vega 8 Mobile, rev ca,
1002:15dd) often hangs randomly (LP: #1796789)
- drm/amd: Add missing fields in atom_integrated_system_info_v1_11
* [18.04] GLK hang after a while (LP: #1760545)
- drm/i915/glk: Add MODULE_FIRMWARE for Geminilake
* Fix usbcore.quirks when used at boot (LP: #1795784)
- usb: core: safely deal with the dynamic quirk lists
-- Kleber Sacilotto de Souza <email address hidden> Wed, 24 Oct 2018 12:53:36 +0000
-
linux-aws (4.15.0-1025.25) bionic; urgency=medium
* linux-aws: 4.15.0-1025.25 -proposed tracker (LP: #1797066)
[ Ubuntu: 4.15.0-38.41 ]
* linux: 4.15.0-38.41 -proposed tracker (LP: #1797061)
* Silent data corruption in Linux kernel 4.15 (LP: #1796542)
- block: add a lower-level bio_add_page interface
- block: bio_iov_iter_get_pages: fix size of last iovec
- blkdev: __blkdev_direct_IO_simple: fix leak in error case
- block: bio_iov_iter_get_pages: pin more pages for multi-segment IOs
linux-aws (4.15.0-1024.24) bionic; urgency=medium
* linux-aws: 4.15.0-1024.24 -proposed tracker (LP: #1795567)
* Dell new AIO requires a new uart backlight driver (LP: #1727235)
- [Config] Unset CONFIG_DELL_UART_BACKLIGHT
* kyber-iosched module missing from linux-modules package (LP: #1794175)
- [config] AWS: kyber-iosched.ko moved to linux-modules package
[ Ubuntu: 4.15.0-37.40 ]
* linux: 4.15.0-37.40 -proposed tracker (LP: #1795564)
* hns3: enable ethtool rx-vlan-filter on supported hw (LP: #1793394)
- net: hns3: Add vlan filter setting by ethtool command -K
* hns3: Modifying channel parameters will reset ring parameters back to
defaults (LP: #1793404)
- net: hns3: Fix desc num set to default when setting channel
* hisi_sas: Add SATA FIX check for v3 hw (LP: #1794151)
- scsi: hisi_sas: Add SATA FIS check for v3 hw
* Fix potential corruption using SAS controller on HiSilicon arm64 boards
(LP: #1794156)
- scsi: hisi_sas: add memory barrier in task delivery function
* hisi_sas: Reduce unnecessary spin lock contention (LP: #1794165)
- scsi: hisi_sas: Tidy hisi_sas_task_prep()
* Add functional level reset support for the SAS controller on HiSilicon D06
systems (LP: #1794166)
- scsi: hisi_sas: tidy host controller reset function a bit
- scsi: hisi_sas: relocate some common code for v3 hw
- scsi: hisi_sas: Implement handlers of PCIe FLR for v3 hw
* HiSilicon SAS controller doesn't recover from PHY STP link timeout
(LP: #1794172)
- scsi: hisi_sas: tidy channel interrupt handler for v3 hw
- scsi: hisi_sas: Fix the failure of recovering PHY from STP link timeout
* getxattr: always handle namespaced attributes (LP: #1789746)
- getxattr: use correct xattr length
* Fix unusable NVIDIA GPU after S3 (LP: #1793338)
- PCI: Reprogram bridge prefetch registers on resume
* Fails to boot under Xen PV: BUG: unable to handle kernel paging request at
edc21fd9 (LP: #1789118)
- x86/EISA: Don't probe EISA bus for Xen PV guests
* qeth: use vzalloc for QUERY OAT buffer (LP: #1793086)
- s390/qeth: use vzalloc for QUERY OAT buffer
* SRU: Enable middle button of touchpad on ThinkPad P72 (LP: #1793463)
- Input: elantech - enable middle button of touchpad on ThinkPad P72
* Dell new AIO requires a new uart backlight driver (LP: #1727235)
- SAUCE: platform/x86: dell-uart-backlight: new backlight driver for DELL AIO
- updateconfigs for Dell UART backlight driver
* [Ubuntu] s390/crypto: Fix return code checking in cbc_paes_crypt.
(LP: #1794294)
- s390/crypto: Fix return code checking in cbc_paes_crypt()
* hns3: Retrieve RoCE MSI-X config from firmware (LP: #1793221)
- net: hns3: Fix MSIX allocation issue for VF
- net: hns3: Refine the MSIX allocation for PF
* net: hns: Avoid hang when link is changed while handling packets
(LP: #1792209)
- net: hns: add the code for cleaning pkt in chip
- net: hns: add netif_carrier_off before change speed and duplex
* Page leaking in cachefiles_read_backing_file while vmscan is active
(LP: #1793430)
- SAUCE: cachefiles: Page leaking in cachefiles_read_backing_file while vmscan
is active
* some nvidia p1000 graphic cards hang during the boot (LP: #1791569)
- drm/nouveau/gr/gf100-: virtualise tpc_mask + apply fixes from traces
* Error reported when creating ZFS pool with "-t" option, despite successful
pool creation (LP: #1769937)
- SAUCE: (noup) Update zfs to 0.7.5-1ubuntu16.4
* Fix I2C touchpanels' interrupt storms after system suspend (LP: #1792309)
- HID: i2c-hid: Fix flooded incomplete report after S3 on Rayd touchscreen
- HID: i2c-hid: Don't reset device upon system resume
* ipmmu is always registered (LP: #1783746)
- iommu/ipmmu-vmsa: Don't register as BUS IOMMU if machine doesn't have IPMMU-
VMSA
* Bionic update: upstream stable patchset 2018-09-27 (LP: #1794889)
- clocksource/drivers/imx-tpm: Correct some registers operation flow
- Input: synaptics-rmi4 - fix an unchecked out of memory error path
- KVM: X86: fix incorrect reference of trace_kvm_pi_irte_update
- x86: Add check for APIC access address for vmentry of L2 guests
- MIPS: io: Prevent compiler reordering writeX()
- nfp: ignore signals when communicating with management FW
- perf report: Fix switching to another perf.data file
- fsnotify: fix ignore mask logic in send_to_group()
- MIPS: io: Add barrier after register read in readX()
- s390/smsgiucv: disable SMSG on module unload
- isofs: fix potential memory leak in mount option parsing
- MIPS: dts: Boston: Fix PCI bus dtc warnings:
- spi: sh-msiof: Fix bit field overflow writes to TSCR/RSCR
- doc: Add vendor prefix for Kieback & Peter GmbH
- dt-bindings: pinctrl: sunxi: Fix reference to driver
- dt-bindings: serial: sh-sci: Add support for r8a77965 (H)SCIF
- dt-bindings: dmaengine: rcar-dmac: document R8A77965 support
- clk: honor CLK_MUX_ROUND_CLOSEST in generic clk mux
- ASoC: rt5514: Add the missing register in the readable table
- eCryptfs: don't pass up plaintext names when using filename encryption
- soc: bcm: raspberrypi-power: Fix use of __packed
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
- PCI: kirin: Fix reset gpio name
- ASoC: topology: Fix bugs of freeing soc topology
- xen: xenbus_dev_frontend: Really return response string
- ASoC: topology: Check widget kcontrols before deref.
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
- blkcg: don't hold blkcg lock when deactivating policy
- tipc: fix infinite loop when dumping link monitor summary
- scsi: iscsi: respond to netlink with unicast when appropriate
- scsi: megaraid_sas: Do not log an error if FW successfully initializes.
- scsi: target: fix crash with iscsi target and dvd
- netfilter: nf_tables: NAT chain and extensions require NF_TABLES
- netfilter: nf_tables: fix out-of-bounds in nft_chain_commit_update
- ASoC: msm8916-wcd-analog: use threaded context for mbhc events
- drm/msm: Fix possible null dereference on failure of get_pages()
- drm/msm/dsi: use correct enum in dsi_get_cmd_fmt
- drm/msm: don't deref error pointer in the msm_fbdev_create error path
- blkcg: init root blkcg_gq under lock
- vfs: Undo an overly zealous MS_RDONLY -> SB_RDONLY conversion
- parisc: time: Convert read_persistent_clock() to read_persistent_clock64()
- scsi: storvsc: Set up correct queue depth values for IDE devices
- scsi: isci: Fix infinite loop in while loop
- mm, pagemap: fix swap offset value for PMD migration entry
- proc: revalidate kernel thread inodes to root:root
- kexec_file: do not add extra alignment to efi memmap
- mm: memcg: add __GFP_NOWARN in __memcg_schedule_kmem_cache_create()
- usb: typec: ucsi: fix tracepoint related build error
- ACPI / PM: Blacklist Low Power S0 Idle _DSM for ThinkPad X1 Tablet(2016)
- dt-bindings: meson-uart: DT fix s/clocks-names/clock-names/
- net: phy: marvell: clear wol event before setting it
- ARM: dts: da850: fix W=1 warnings with pinmux node
- ACPI / watchdog: Prefer iTCO_wdt on Lenovo Z50-70
- drm/amdkfd: fix clock counter retrieval for node without GPU
- thermal: int3403_thermal: Fix NULL pointer deref on module load / probe
- net: ethtool: Add missing kernel doc for FEC parameters
- arm64: ptrace: remove addr_limit manipulation
- HID: lenovo: Add support for IBM/Lenovo Scrollpoint mice
- HID: wacom: Release device resource data obtained by devres_alloc()
- selftests: ftrace: Add a testcase for multiple actions on trigger
- rds: ib: Fix missing call to rds_ib_dev_put in rds_ib_setup_qp
- perf/x86/intel: Don't enable freeze-on-smi for PerfMon V1
- remoteproc: qcom: Fix potential device node leaks
- rpmsg: added MODULE_ALIAS for rpmsg_char
- HID: intel-ish-hid: use put_device() instead of kfree()
- blk-mq: fix sysfs inflight counter
- arm64: fix possible spectre-v1 in ptrace_hbp_get_event()
- KVM: arm/arm64: vgic: fix possible spectre-v1 in vgic_mmio_read_apr()
- libahci: Allow drivers to override stop_engine
- ata: ahci: mvebu: override ahci_stop_engine for mvebu AHCI
- x86/cpu/intel: Add missing TLB cpuid values
- bpf: fix uninitialized variable in bpf tools
- i2c: sprd: Prevent i2c accesses after suspend is called
- i2c: sprd: Fix the i2c count issue
- tipc: fix bug in function tipc_nl_node_dump_monitor
- nvme: depend on INFINIBAND_ADDR_TRANS
- nvmet-rdma: depend on INFINIBAND_ADDR_TRANS
- ib_srpt: depend on INFINIBAND_ADDR_TRANS
- ib_srp: depend on INFINIBAND_ADDR_TRANS
- IB: make INFINIBAND_ADDR_TRANS configurable
- IB/uverbs: Fix validating mandatory attributes
- RDMA/cma: Fix use after destroy access to net namespace for IPoIB
- RDMA/iwpm: fix memory leak on map_info
- IB/rxe: add RXE_START_MASK for rxe_opcode IB_OPCODE_RC_SEND_ONLY_INV
- IB/rxe: avoid double kfree_skb
- <linux/stringhash.h>: fix end_name_hash() for 64bit long
- IB/core: Make ib_mad_client_id atomic
- ARM: davinci: board-da830-evm: fix GPIO lookup for MMC/SD
- ARM: davinci: board-da850-evm: fix GPIO lookup for MMC/SD
- ARM: davinci: board-omapl138-hawk: fix GPIO numbers for MMC/SD lookup
- ARM: davinci: board-dm355-evm: fix broken networking
- dt-bindings: panel: lvds: Fix path to display timing bindings
- ARM: OMAP2+: powerdomain: use raw_smp_processor_id() for trace
- ARM: dts: logicpd-som-lv: Fix WL127x Startup Issues
- ARM: dts: logicpd-som-lv: Fix Audio Mute
- Input: atmel_mxt_ts - fix the firmware update
- hexagon: add memset_io() helper
- hexagon: export csum_partial_copy_nocheck
- scsi: vmw-pvscsi: return DID_BUS_BUSY for adapter-initated aborts
- bpf, x64: fix memleak when not converging after image
- parisc: drivers.c: Fix section mismatches
- stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock
- kthread, sched/wait: Fix kthread_parkme() wait-loop
- arm64: tegra: Make BCM89610 PHY interrupt as active low
- iommu/vt-d: fix shift-out-of-bounds in bug checking
- nvme: fix potential memory leak in option parsing
- nvme: Set integrity flag for user passthrough commands
- ARM: OMAP1: ams-delta: fix deferred_fiq handler
- smc: fix sendpage() call
- IB/hfi1 Use correct type for num_user_context
- IB/hfi1: Fix memory leak in exception path in get_irq_affinity()
- RDMA/cma: Do not query GID during QP state transition to RTR
- spi: bcm2835aux: ensure interrupts are enabled for shared handler
- sched/core: Introduce set_special_state()
- sh: fix build failure for J2 cpu with SMP disabled
- tee: check shm references are consistent in offset/size
- mac80211: Adjust SAE authentication timeout
- drm/omap: silence unititialized variable warning
- drm/omap: fix uninitialized ret variable
- drm/omap: fix possible NULL ref issue in tiler_reserve_2d
- drm/omap: check return value from soc_device_match
- drm/omap: handle alloc failures in omap_connector
- driver core: add __printf verification to __ata_ehi_pushv_desc
- ARM: dts: cygnus: fix irq type for arm global timer
- mac80211: use timeout from the AddBA response instead of the request
- net: aquantia: driver should correctly declare vlan_features bits
- can: dev: increase bus-off message severity
- arm64: Add MIDR encoding for NVIDIA CPUs
- cifs: smb2ops: Fix listxattr() when there are no EAs
- agp: uninorth: make two functions static
- tipc: eliminate KMSAN uninit-value in strcmp complaint
- qed: Fix l2 initializations over iWARP personality
- qede: Fix gfp flags sent to rdma event node allocation
- rxrpc: Fix error reception on AF_INET6 sockets
- rxrpc: Fix the min security level for kernel calls
- KVM: Extend MAX_IRQ_ROUTES to 4096 for all archs
- x86: Delay skip of emulated hypercall instruction
- ixgbe: return error on unsupported SFP module when resetting
- net sched actions: fix invalid pointer dereferencing if skbedit flags
missing
- proc/kcore: don't bounds check against address 0
- ocfs2: take inode cluster lock before moving reflinked inode from orphan dir
- kprobes/x86: Prohibit probing on exception masking instructions
- uprobes/x86: Prohibit probing on MOV SS instruction
- objtool, kprobes/x86: Sync the latest <asm/insn.h> header with
tools/objtool/arch/x86/include/asm/insn.h
- x86/pkeys/selftests: Adjust the self-test to fresh distros that export the
pkeys ABI
- x86/mpx/selftests: Adjust the self-test to fresh distros that export the MPX
ABI
- x86/selftests: Add mov_to_ss test
- x86/pkeys/selftests: Give better unexpected fault error messages
- x86/pkeys/selftests: Stop using assert()
- x86/pkeys/selftests: Remove dead debugging code, fix dprint_in_signal
- x86/pkeys/selftests: Allow faults on unknown keys
- x86/pkeys/selftests: Factor out "instruction page"
- x86/pkeys/selftests: Add PROT_EXEC test
- x86/pkeys/selftests: Fix pkey exhaustion test off-by-one
- x86/pkeys/selftests: Fix pointer math
- x86/pkeys/selftests: Save off 'prot' for allocations
- x86/pkeys/selftests: Add a test for pkey 0
- mtd: Fix comparison in map_word_andequal()
- afs: Fix the non-encryption of calls
- usb: musb: fix remote wakeup racing with suspend
- ARM: keystone: fix platform_domain_notifier array overrun
- i2c: pmcmsp: return message count on master_xfer success
- i2c: pmcmsp: fix error return from master_xfer
- i2c: viperboard: return message count on master_xfer success
- ARM: davinci: dm646x: fix timer interrupt generation
- ARM: davinci: board-dm646x-evm: pass correct I2C adapter id for VPIF
- ARM: davinci: board-dm646x-evm: set VPIF capture card name
- clk: imx6ull: use OSC clock during AXI rate change
- locking/rwsem: Add a new RWSEM_ANONYMOUSLY_OWNED flag
- locking/percpu-rwsem: Annotate rwsem ownership transfer by setting
RWSEM_OWNER_UNKNOWN
- drm/dumb-buffers: Integer overflow in drm_mode_create_ioctl()
- sched/debug: Move the print_rt_rq() and print_dl_rq() declarations to
kernel/sched/sched.h
- sched/deadline: Make the grub_reclaim() function static
- parisc: Move setup_profiling_timer() out of init section
- efi/libstub/arm64: Handle randomized TEXT_OFFSET
- ARM: 8753/1: decompressor: add a missing parameter to the addruart macro
- ARM: 8758/1: decompressor: restore r1 and r2 just before jumping to the
kernel
- ARM: kexec: fix kdump register saving on panic()
- Revert "Btrfs: fix scrub to repair raid6 corruption"
- Btrfs: fix scrub to repair raid6 corruption
- Btrfs: make raid6 rebuild retry more
- tcp: do not overshoot window_clamp in tcp_rcv_space_adjust()
- ibmvnic: Do not notify peers on parameter change resets
- dt-bindings: net: ravb: Add support for r8a77965 SoC
- X86/KVM: Properly update 'tsc_offset' to represent the running guest
- kvm: x86: move MSR_IA32_TSC handling to x86.c
- ARM: dts: Fix cm2 and prm sizes for omap4
- powerpc/64s: Default l1d_size to 64K in RFI fallback flush
- KVM: arm/arm64: vgic: Kick new VCPU on interrupt migration
- arm64: kasan: avoid pfn_to_nid() before page array is initialized
- ARM64: dts: meson-gxl: add USB host support
- ARM64: dts: meson-gxm: add GXM specific USB host configuration
- ARM64: dts: meson-gxl-s905x-p212: enable the USB controller
- ARM64: dts: meson-gx-p23x-q20x: enable the USB controller
- ARM64: dts: meson-gxl-s905x-libretech-cc: enable the USB controller
- ARM64: dts: meson-gxl-nexbox-a95x: enable the USB controller
- ARM64: dts: meson-gxm-khadas-vim2: enable the USB controller
- arm64: dts: correct SATA addresses for Stingray
- afs: Fix server record deletion
- proc: fix /proc/loadavg regression
- s390/qeth: fix request-side race during cmd IO timeout
- ACPI / scan: Initialize watchdog before PNP
- CIFS: set *resp_buf_type to NO_BUFFER on error
- arm64: dts: uniphier: fix input delay value for legacy mode of eMMC
- igb: Fix the transmission mode of queue 0 for Qav mode
- RISC-V: build vdso-dummy.o with -no-pie
- arm64: only advance singlestep for user instruction traps
- perf pmu: Fix core PMU alias list for X86 platform
- bpf, x64: fix JIT emission for dead code
- powerpc/kvm/booke: Fix altivec related build break
- reset: uniphier: fix USB clock line for LD20
- nfp: don't depend on eth_tbl being available
- net: mvpp2: Fix clk error path in mvpp2_probe
- kvm: apic: Flush TLB after APIC mode/address change if VPIDs are in use
- IB/uverbs: Fix validating mandatory attributes
- RDMA/hns: Intercept illegal RDMA operation when use inline data
- pinctrl: cherryview: Associate IRQ descriptors to irqdomain
- kthread, sched/wait: Fix kthread_parkme() completion issue
- iommu/vt-d: Fix usage of force parameter in intel_ir_reconfigure_irte()
- nvme/multipath: Disable runtime writable enabling parameter
- ARM: dts: correct missing "compatible" entry for ti81xx SoCs
- usb: typec: tps6598x: handle block reads separately with plain-I2C adapters
- IB/mlx4: Fix integer overflow when calculating optimal MTT size
- bpf: add map_alloc_check callback
- bpf: fix possible spectre-v1 in find_and_alloc_map()
- drm/exynos/mixer: fix synchronization check in interlaced mode
- drm/exynos: mixer: avoid Oops in vp_video_buffer()
- bpf: use array_index_nospec in find_prog_type
- gcc-plugins: fix build condition of SANCOV plugin
- drm/vc4: Fix oops dereferencing DPI's connector since panel_bridge.
- nvme: fix use-after-free in nvme_free_ns_head
- powerpc/pseries: Fix CONFIG_NUMA=n build
- HID: i2c-hid: Add RESEND_REPORT_DESCR quirk for Toshiba Click Mini L9W-B
- cifs: Allocate validate negotiation request through kmalloc
- drm/amdgpu: Switch to interruptable wait to recover from ring hang.
- rxrpc: Fix missing start of call timeout
- ARM: dts: imx51-zii-rdu1: fix touchscreen bindings
- sh: switch to NO_BOOTMEM
- lib/find_bit_benchmark.c: avoid soft lockup in test_find_first_bit()
- x86/pkeys/selftests: Avoid printf-in-signal deadlocks
- afs: Fix address list parsing
- afs: Fix refcounting in callback registration
- afs: Fix server rotation's handling of fileserver probe failure
- afs: Fix VNOVOL handling in address rotation
- afs: Fix the handling of CB.InitCallBackState3 to find the server by UUID
- afs: Fix afs_find_server search loop
- KVM: X86: Lower the default timer frequency limit to 200us
- platform/x86: DELL_WMI use depends on instead of select for DELL_SMBIOS
- ARM: replace unnecessary perl with sed and the shell $(( )) operator
* Improvements to the kernel source package preparation (LP: #1793461)
- [Packaging] startnewrelease: add support for backport kernels
* Kernel 4.15.0-35.38 fails to build with CONFIG_XFS_ONLINE_SCRUB enabled
(LP: #1792393)
- SAUCE: xfs: fix build error with CONFIG_XFS_ONLINE_SCRUB enabled
* update ENA driver to latest mainline version (LP: #1792044)
- net: ena: add detection and recovery mechanism for handling missed/misrouted
MSI-X
- net: ena: increase ena driver version to 1.5.0
- net: ena: Eliminate duplicate barriers on weakly-ordered archs
- SAUCE: ena: devm_kzalloc() -> devm_kcalloc()
- net: ena: Fix use of uninitialized DMA address bits field
- net: ena: fix surprise unplug NULL dereference kernel crash
- net: ena: fix driver when PAGE_SIZE == 64kB
- net: ena: fix device destruction to gracefully free resources
- net: ena: fix potential double ena_destroy_device()
- net: ena: fix missing lock during device destruction
- net: ena: fix missing calls to READ_ONCE
- net: ena: fix incorrect usage of memory barriers
-- Kleber Sacilotto de Souza <email address hidden> Wed, 10 Oct 2018 13:28:48 +0000
-
linux-aws (4.15.0-1024.24) bionic; urgency=medium
* linux-aws: 4.15.0-1024.24 -proposed tracker (LP: #1795567)
* Dell new AIO requires a new uart backlight driver (LP: #1727235)
- [Config] Unset CONFIG_DELL_UART_BACKLIGHT
* kyber-iosched module missing from linux-modules package (LP: #1794175)
- [config] AWS: kyber-iosched.ko moved to linux-modules package
[ Ubuntu: 4.15.0-37.40 ]
* linux: 4.15.0-37.40 -proposed tracker (LP: #1795564)
* hns3: enable ethtool rx-vlan-filter on supported hw (LP: #1793394)
- net: hns3: Add vlan filter setting by ethtool command -K
* hns3: Modifying channel parameters will reset ring parameters back to
defaults (LP: #1793404)
- net: hns3: Fix desc num set to default when setting channel
* hisi_sas: Add SATA FIX check for v3 hw (LP: #1794151)
- scsi: hisi_sas: Add SATA FIS check for v3 hw
* Fix potential corruption using SAS controller on HiSilicon arm64 boards
(LP: #1794156)
- scsi: hisi_sas: add memory barrier in task delivery function
* hisi_sas: Reduce unnecessary spin lock contention (LP: #1794165)
- scsi: hisi_sas: Tidy hisi_sas_task_prep()
* Add functional level reset support for the SAS controller on HiSilicon D06
systems (LP: #1794166)
- scsi: hisi_sas: tidy host controller reset function a bit
- scsi: hisi_sas: relocate some common code for v3 hw
- scsi: hisi_sas: Implement handlers of PCIe FLR for v3 hw
* HiSilicon SAS controller doesn't recover from PHY STP link timeout
(LP: #1794172)
- scsi: hisi_sas: tidy channel interrupt handler for v3 hw
- scsi: hisi_sas: Fix the failure of recovering PHY from STP link timeout
* getxattr: always handle namespaced attributes (LP: #1789746)
- getxattr: use correct xattr length
* Fix unusable NVIDIA GPU after S3 (LP: #1793338)
- PCI: Reprogram bridge prefetch registers on resume
* Fails to boot under Xen PV: BUG: unable to handle kernel paging request at
edc21fd9 (LP: #1789118)
- x86/EISA: Don't probe EISA bus for Xen PV guests
* qeth: use vzalloc for QUERY OAT buffer (LP: #1793086)
- s390/qeth: use vzalloc for QUERY OAT buffer
* SRU: Enable middle button of touchpad on ThinkPad P72 (LP: #1793463)
- Input: elantech - enable middle button of touchpad on ThinkPad P72
* Dell new AIO requires a new uart backlight driver (LP: #1727235)
- SAUCE: platform/x86: dell-uart-backlight: new backlight driver for DELL AIO
- updateconfigs for Dell UART backlight driver
* [Ubuntu] s390/crypto: Fix return code checking in cbc_paes_crypt.
(LP: #1794294)
- s390/crypto: Fix return code checking in cbc_paes_crypt()
* hns3: Retrieve RoCE MSI-X config from firmware (LP: #1793221)
- net: hns3: Fix MSIX allocation issue for VF
- net: hns3: Refine the MSIX allocation for PF
* net: hns: Avoid hang when link is changed while handling packets
(LP: #1792209)
- net: hns: add the code for cleaning pkt in chip
- net: hns: add netif_carrier_off before change speed and duplex
* Page leaking in cachefiles_read_backing_file while vmscan is active
(LP: #1793430)
- SAUCE: cachefiles: Page leaking in cachefiles_read_backing_file while vmscan
is active
* some nvidia p1000 graphic cards hang during the boot (LP: #1791569)
- drm/nouveau/gr/gf100-: virtualise tpc_mask + apply fixes from traces
* Error reported when creating ZFS pool with "-t" option, despite successful
pool creation (LP: #1769937)
- SAUCE: (noup) Update zfs to 0.7.5-1ubuntu16.4
* Fix I2C touchpanels' interrupt storms after system suspend (LP: #1792309)
- HID: i2c-hid: Fix flooded incomplete report after S3 on Rayd touchscreen
- HID: i2c-hid: Don't reset device upon system resume
* ipmmu is always registered (LP: #1783746)
- iommu/ipmmu-vmsa: Don't register as BUS IOMMU if machine doesn't have IPMMU-
VMSA
* Bionic update: upstream stable patchset 2018-09-27 (LP: #1794889)
- clocksource/drivers/imx-tpm: Correct some registers operation flow
- Input: synaptics-rmi4 - fix an unchecked out of memory error path
- KVM: X86: fix incorrect reference of trace_kvm_pi_irte_update
- x86: Add check for APIC access address for vmentry of L2 guests
- MIPS: io: Prevent compiler reordering writeX()
- nfp: ignore signals when communicating with management FW
- perf report: Fix switching to another perf.data file
- fsnotify: fix ignore mask logic in send_to_group()
- MIPS: io: Add barrier after register read in readX()
- s390/smsgiucv: disable SMSG on module unload
- isofs: fix potential memory leak in mount option parsing
- MIPS: dts: Boston: Fix PCI bus dtc warnings:
- spi: sh-msiof: Fix bit field overflow writes to TSCR/RSCR
- doc: Add vendor prefix for Kieback & Peter GmbH
- dt-bindings: pinctrl: sunxi: Fix reference to driver
- dt-bindings: serial: sh-sci: Add support for r8a77965 (H)SCIF
- dt-bindings: dmaengine: rcar-dmac: document R8A77965 support
- clk: honor CLK_MUX_ROUND_CLOSEST in generic clk mux
- ASoC: rt5514: Add the missing register in the readable table
- eCryptfs: don't pass up plaintext names when using filename encryption
- soc: bcm: raspberrypi-power: Fix use of __packed
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
- PCI: kirin: Fix reset gpio name
- ASoC: topology: Fix bugs of freeing soc topology
- xen: xenbus_dev_frontend: Really return response string
- ASoC: topology: Check widget kcontrols before deref.
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
- blkcg: don't hold blkcg lock when deactivating policy
- tipc: fix infinite loop when dumping link monitor summary
- scsi: iscsi: respond to netlink with unicast when appropriate
- scsi: megaraid_sas: Do not log an error if FW successfully initializes.
- scsi: target: fix crash with iscsi target and dvd
- netfilter: nf_tables: NAT chain and extensions require NF_TABLES
- netfilter: nf_tables: fix out-of-bounds in nft_chain_commit_update
- ASoC: msm8916-wcd-analog: use threaded context for mbhc events
- drm/msm: Fix possible null dereference on failure of get_pages()
- drm/msm/dsi: use correct enum in dsi_get_cmd_fmt
- drm/msm: don't deref error pointer in the msm_fbdev_create error path
- blkcg: init root blkcg_gq under lock
- vfs: Undo an overly zealous MS_RDONLY -> SB_RDONLY conversion
- parisc: time: Convert read_persistent_clock() to read_persistent_clock64()
- scsi: storvsc: Set up correct queue depth values for IDE devices
- scsi: isci: Fix infinite loop in while loop
- mm, pagemap: fix swap offset value for PMD migration entry
- proc: revalidate kernel thread inodes to root:root
- kexec_file: do not add extra alignment to efi memmap
- mm: memcg: add __GFP_NOWARN in __memcg_schedule_kmem_cache_create()
- usb: typec: ucsi: fix tracepoint related build error
- ACPI / PM: Blacklist Low Power S0 Idle _DSM for ThinkPad X1 Tablet(2016)
- dt-bindings: meson-uart: DT fix s/clocks-names/clock-names/
- net: phy: marvell: clear wol event before setting it
- ARM: dts: da850: fix W=1 warnings with pinmux node
- ACPI / watchdog: Prefer iTCO_wdt on Lenovo Z50-70
- drm/amdkfd: fix clock counter retrieval for node without GPU
- thermal: int3403_thermal: Fix NULL pointer deref on module load / probe
- net: ethtool: Add missing kernel doc for FEC parameters
- arm64: ptrace: remove addr_limit manipulation
- HID: lenovo: Add support for IBM/Lenovo Scrollpoint mice
- HID: wacom: Release device resource data obtained by devres_alloc()
- selftests: ftrace: Add a testcase for multiple actions on trigger
- rds: ib: Fix missing call to rds_ib_dev_put in rds_ib_setup_qp
- perf/x86/intel: Don't enable freeze-on-smi for PerfMon V1
- remoteproc: qcom: Fix potential device node leaks
- rpmsg: added MODULE_ALIAS for rpmsg_char
- HID: intel-ish-hid: use put_device() instead of kfree()
- blk-mq: fix sysfs inflight counter
- arm64: fix possible spectre-v1 in ptrace_hbp_get_event()
- KVM: arm/arm64: vgic: fix possible spectre-v1 in vgic_mmio_read_apr()
- libahci: Allow drivers to override stop_engine
- ata: ahci: mvebu: override ahci_stop_engine for mvebu AHCI
- x86/cpu/intel: Add missing TLB cpuid values
- bpf: fix uninitialized variable in bpf tools
- i2c: sprd: Prevent i2c accesses after suspend is called
- i2c: sprd: Fix the i2c count issue
- tipc: fix bug in function tipc_nl_node_dump_monitor
- nvme: depend on INFINIBAND_ADDR_TRANS
- nvmet-rdma: depend on INFINIBAND_ADDR_TRANS
- ib_srpt: depend on INFINIBAND_ADDR_TRANS
- ib_srp: depend on INFINIBAND_ADDR_TRANS
- IB: make INFINIBAND_ADDR_TRANS configurable
- IB/uverbs: Fix validating mandatory attributes
- RDMA/cma: Fix use after destroy access to net namespace for IPoIB
- RDMA/iwpm: fix memory leak on map_info
- IB/rxe: add RXE_START_MASK for rxe_opcode IB_OPCODE_RC_SEND_ONLY_INV
- IB/rxe: avoid double kfree_skb
- <linux/stringhash.h>: fix end_name_hash() for 64bit long
- IB/core: Make ib_mad_client_id atomic
- ARM: davinci: board-da830-evm: fix GPIO lookup for MMC/SD
- ARM: davinci: board-da850-evm: fix GPIO lookup for MMC/SD
- ARM: davinci: board-omapl138-hawk: fix GPIO numbers for MMC/SD lookup
- ARM: davinci: board-dm355-evm: fix broken networking
- dt-bindings: panel: lvds: Fix path to display timing bindings
- ARM: OMAP2+: powerdomain: use raw_smp_processor_id() for trace
- ARM: dts: logicpd-som-lv: Fix WL127x Startup Issues
- ARM: dts: logicpd-som-lv: Fix Audio Mute
- Input: atmel_mxt_ts - fix the firmware update
- hexagon: add memset_io() helper
- hexagon: export csum_partial_copy_nocheck
- scsi: vmw-pvscsi: return DID_BUS_BUSY for adapter-initated aborts
- bpf, x64: fix memleak when not converging after image
- parisc: drivers.c: Fix section mismatches
- stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock
- kthread, sched/wait: Fix kthread_parkme() wait-loop
- arm64: tegra: Make BCM89610 PHY interrupt as active low
- iommu/vt-d: fix shift-out-of-bounds in bug checking
- nvme: fix potential memory leak in option parsing
- nvme: Set integrity flag for user passthrough commands
- ARM: OMAP1: ams-delta: fix deferred_fiq handler
- smc: fix sendpage() call
- IB/hfi1 Use correct type for num_user_context
- IB/hfi1: Fix memory leak in exception path in get_irq_affinity()
- RDMA/cma: Do not query GID during QP state transition to RTR
- spi: bcm2835aux: ensure interrupts are enabled for shared handler
- sched/core: Introduce set_special_state()
- sh: fix build failure for J2 cpu with SMP disabled
- tee: check shm references are consistent in offset/size
- mac80211: Adjust SAE authentication timeout
- drm/omap: silence unititialized variable warning
- drm/omap: fix uninitialized ret variable
- drm/omap: fix possible NULL ref issue in tiler_reserve_2d
- drm/omap: check return value from soc_device_match
- drm/omap: handle alloc failures in omap_connector
- driver core: add __printf verification to __ata_ehi_pushv_desc
- ARM: dts: cygnus: fix irq type for arm global timer
- mac80211: use timeout from the AddBA response instead of the request
- net: aquantia: driver should correctly declare vlan_features bits
- can: dev: increase bus-off message severity
- arm64: Add MIDR encoding for NVIDIA CPUs
- cifs: smb2ops: Fix listxattr() when there are no EAs
- agp: uninorth: make two functions static
- tipc: eliminate KMSAN uninit-value in strcmp complaint
- qed: Fix l2 initializations over iWARP personality
- qede: Fix gfp flags sent to rdma event node allocation
- rxrpc: Fix error reception on AF_INET6 sockets
- rxrpc: Fix the min security level for kernel calls
- KVM: Extend MAX_IRQ_ROUTES to 4096 for all archs
- x86: Delay skip of emulated hypercall instruction
- ixgbe: return error on unsupported SFP module when resetting
- net sched actions: fix invalid pointer dereferencing if skbedit flags
missing
- proc/kcore: don't bounds check against address 0
- ocfs2: take inode cluster lock before moving reflinked inode from orphan dir
- kprobes/x86: Prohibit probing on exception masking instructions
- uprobes/x86: Prohibit probing on MOV SS instruction
- objtool, kprobes/x86: Sync the latest <asm/insn.h> header with
tools/objtool/arch/x86/include/asm/insn.h
- x86/pkeys/selftests: Adjust the self-test to fresh distros that export the
pkeys ABI
- x86/mpx/selftests: Adjust the self-test to fresh distros that export the MPX
ABI
- x86/selftests: Add mov_to_ss test
- x86/pkeys/selftests: Give better unexpected fault error messages
- x86/pkeys/selftests: Stop using assert()
- x86/pkeys/selftests: Remove dead debugging code, fix dprint_in_signal
- x86/pkeys/selftests: Allow faults on unknown keys
- x86/pkeys/selftests: Factor out "instruction page"
- x86/pkeys/selftests: Add PROT_EXEC test
- x86/pkeys/selftests: Fix pkey exhaustion test off-by-one
- x86/pkeys/selftests: Fix pointer math
- x86/pkeys/selftests: Save off 'prot' for allocations
- x86/pkeys/selftests: Add a test for pkey 0
- mtd: Fix comparison in map_word_andequal()
- afs: Fix the non-encryption of calls
- usb: musb: fix remote wakeup racing with suspend
- ARM: keystone: fix platform_domain_notifier array overrun
- i2c: pmcmsp: return message count on master_xfer success
- i2c: pmcmsp: fix error return from master_xfer
- i2c: viperboard: return message count on master_xfer success
- ARM: davinci: dm646x: fix timer interrupt generation
- ARM: davinci: board-dm646x-evm: pass correct I2C adapter id for VPIF
- ARM: davinci: board-dm646x-evm: set VPIF capture card name
- clk: imx6ull: use OSC clock during AXI rate change
- locking/rwsem: Add a new RWSEM_ANONYMOUSLY_OWNED flag
- locking/percpu-rwsem: Annotate rwsem ownership transfer by setting
RWSEM_OWNER_UNKNOWN
- drm/dumb-buffers: Integer overflow in drm_mode_create_ioctl()
- sched/debug: Move the print_rt_rq() and print_dl_rq() declarations to
kernel/sched/sched.h
- sched/deadline: Make the grub_reclaim() function static
- parisc: Move setup_profiling_timer() out of init section
- efi/libstub/arm64: Handle randomized TEXT_OFFSET
- ARM: 8753/1: decompressor: add a missing parameter to the addruart macro
- ARM: 8758/1: decompressor: restore r1 and r2 just before jumping to the
kernel
- ARM: kexec: fix kdump register saving on panic()
- Revert "Btrfs: fix scrub to repair raid6 corruption"
- Btrfs: fix scrub to repair raid6 corruption
- Btrfs: make raid6 rebuild retry more
- tcp: do not overshoot window_clamp in tcp_rcv_space_adjust()
- ibmvnic: Do not notify peers on parameter change resets
- dt-bindings: net: ravb: Add support for r8a77965 SoC
- X86/KVM: Properly update 'tsc_offset' to represent the running guest
- kvm: x86: move MSR_IA32_TSC handling to x86.c
- ARM: dts: Fix cm2 and prm sizes for omap4
- powerpc/64s: Default l1d_size to 64K in RFI fallback flush
- KVM: arm/arm64: vgic: Kick new VCPU on interrupt migration
- arm64: kasan: avoid pfn_to_nid() before page array is initialized
- ARM64: dts: meson-gxl: add USB host support
- ARM64: dts: meson-gxm: add GXM specific USB host configuration
- ARM64: dts: meson-gxl-s905x-p212: enable the USB controller
- ARM64: dts: meson-gx-p23x-q20x: enable the USB controller
- ARM64: dts: meson-gxl-s905x-libretech-cc: enable the USB controller
- ARM64: dts: meson-gxl-nexbox-a95x: enable the USB controller
- ARM64: dts: meson-gxm-khadas-vim2: enable the USB controller
- arm64: dts: correct SATA addresses for Stingray
- afs: Fix server record deletion
- proc: fix /proc/loadavg regression
- s390/qeth: fix request-side race during cmd IO timeout
- ACPI / scan: Initialize watchdog before PNP
- CIFS: set *resp_buf_type to NO_BUFFER on error
- arm64: dts: uniphier: fix input delay value for legacy mode of eMMC
- igb: Fix the transmission mode of queue 0 for Qav mode
- RISC-V: build vdso-dummy.o with -no-pie
- arm64: only advance singlestep for user instruction traps
- perf pmu: Fix core PMU alias list for X86 platform
- bpf, x64: fix JIT emission for dead code
- powerpc/kvm/booke: Fix altivec related build break
- reset: uniphier: fix USB clock line for LD20
- nfp: don't depend on eth_tbl being available
- net: mvpp2: Fix clk error path in mvpp2_probe
- kvm: apic: Flush TLB after APIC mode/address change if VPIDs are in use
- IB/uverbs: Fix validating mandatory attributes
- RDMA/hns: Intercept illegal RDMA operation when use inline data
- pinctrl: cherryview: Associate IRQ descriptors to irqdomain
- kthread, sched/wait: Fix kthread_parkme() completion issue
- iommu/vt-d: Fix usage of force parameter in intel_ir_reconfigure_irte()
- nvme/multipath: Disable runtime writable enabling parameter
- ARM: dts: correct missing "compatible" entry for ti81xx SoCs
- usb: typec: tps6598x: handle block reads separately with plain-I2C adapters
- IB/mlx4: Fix integer overflow when calculating optimal MTT size
- bpf: add map_alloc_check callback
- bpf: fix possible spectre-v1 in find_and_alloc_map()
- drm/exynos/mixer: fix synchronization check in interlaced mode
- drm/exynos: mixer: avoid Oops in vp_video_buffer()
- bpf: use array_index_nospec in find_prog_type
- gcc-plugins: fix build condition of SANCOV plugin
- drm/vc4: Fix oops dereferencing DPI's connector since panel_bridge.
- nvme: fix use-after-free in nvme_free_ns_head
- powerpc/pseries: Fix CONFIG_NUMA=n build
- HID: i2c-hid: Add RESEND_REPORT_DESCR quirk for Toshiba Click Mini L9W-B
- cifs: Allocate validate negotiation request through kmalloc
- drm/amdgpu: Switch to interruptable wait to recover from ring hang.
- rxrpc: Fix missing start of call timeout
- ARM: dts: imx51-zii-rdu1: fix touchscreen bindings
- sh: switch to NO_BOOTMEM
- lib/find_bit_benchmark.c: avoid soft lockup in test_find_first_bit()
- x86/pkeys/selftests: Avoid printf-in-signal deadlocks
- afs: Fix address list parsing
- afs: Fix refcounting in callback registration
- afs: Fix server rotation's handling of fileserver probe failure
- afs: Fix VNOVOL handling in address rotation
- afs: Fix the handling of CB.InitCallBackState3 to find the server by UUID
- afs: Fix afs_find_server search loop
- KVM: X86: Lower the default timer frequency limit to 200us
- platform/x86: DELL_WMI use depends on instead of select for DELL_SMBIOS
- ARM: replace unnecessary perl with sed and the shell $(( )) operator
* Improvements to the kernel source package preparation (LP: #1793461)
- [Packaging] startnewrelease: add support for backport kernels
* Kernel 4.15.0-35.38 fails to build with CONFIG_XFS_ONLINE_SCRUB enabled
(LP: #1792393)
- SAUCE: xfs: fix build error with CONFIG_XFS_ONLINE_SCRUB enabled
* update ENA driver to latest mainline version (LP: #1792044)
- net: ena: add detection and recovery mechanism for handling missed/misrouted
MSI-X
- net: ena: increase ena driver version to 1.5.0
- net: ena: Eliminate duplicate barriers on weakly-ordered archs
- SAUCE: ena: devm_kzalloc() -> devm_kcalloc()
- net: ena: Fix use of uninitialized DMA address bits field
- net: ena: fix surprise unplug NULL dereference kernel crash
- net: ena: fix driver when PAGE_SIZE == 64kB
- net: ena: fix device destruction to gracefully free resources
- net: ena: fix potential double ena_destroy_device()
- net: ena: fix missing lock during device destruction
- net: ena: fix missing calls to READ_ONCE
- net: ena: fix incorrect usage of memory barriers
-- Stefan Bader <email address hidden> Tue, 02 Oct 2018 18:12:01 +0200
-
linux-aws (4.15.0-1023.23) bionic; urgency=medium
[ Ubuntu: 4.15.0-36.39 ]
* CVE-2018-14633
- iscsi target: Use hex2bin instead of a re-implementation
* CVE-2018-17182
- mm: get rid of vmacache_flush_all() entirely
linux-aws (4.15.0-1022.22) bionic; urgency=medium
* linux-aws: 4.15.0-1022.22 -proposed tracker (LP: #1791725)
* [Regression] kernel crashdump fails on arm64 (LP: #1786878)
- [Config] CONFIG_ARCH_SUPPORTS_ACPI=y
[ Ubuntu: 4.15.0-35.38 ]
* linux: 4.15.0-35.38 -proposed tracker (LP: #1791719)
* device hotplug of vfio devices can lead to deadlock in vfio_pci_release
(LP: #1792099)
- SAUCE: vfio -- release device lock before userspace requests
* L1TF mitigation not effective in some CPU and RAM combinations
(LP: #1788563)
- x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit
- x86/speculation/l1tf: Fix off-by-one error when warning that system has too
much RAM
- x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+
* CVE-2018-15594
- x86/paravirt: Fix spectre-v2 mitigations for paravirt guests
* CVE-2017-5715 (Spectre v2 s390x)
- KVM: s390: implement CPU model only facilities
- s390: detect etoken facility
- KVM: s390: add etoken support for guests
- s390/lib: use expoline for all bcr instructions
- s390: fix br_r1_trampoline for machines without exrl
- SAUCE: s390: use expoline thunks for all branches generated by the BPF JIT
* Ubuntu18.04.1: cpuidle: powernv: Fix promotion from snooze if next state
disabled (performance) (LP: #1790602)
- cpuidle: powernv: Fix promotion from snooze if next state disabled
* Watchdog CPU:19 Hard LOCKUP when kernel crash was triggered (LP: #1790636)
- powerpc: hard disable irqs in smp_send_stop loop
- powerpc: Fix deadlock with multiple calls to smp_send_stop
- powerpc: smp_send_stop do not offline stopped CPUs
- powerpc/powernv: Fix opal_event_shutdown() called with interrupts disabled
* Security fix: check if IOMMU page is contained in the pinned physical page
(LP: #1785675)
- vfio/spapr: Use IOMMU pageshift rather than pagesize
- KVM: PPC: Check if IOMMU page is contained in the pinned physical page
* Missing Intel GPU pci-id's (LP: #1789924)
- drm/i915/kbl: Add KBL GT2 sku
- drm/i915/whl: Introducing Whiskey Lake platform
- drm/i915/aml: Introducing Amber Lake platform
- drm/i915/cfl: Add a new CFL PCI ID.
* CVE-2018-15572
- x86/speculation: Protect against userspace-userspace spectreRSB
* Support Power Management for Thunderbolt Controller (LP: #1789358)
- thunderbolt: Handle NULL boot ACL entries properly
- thunderbolt: Notify userspace when boot_acl is changed
- thunderbolt: Use 64-bit DMA mask if supported by the platform
- thunderbolt: Do not unnecessarily call ICM get route
- thunderbolt: No need to take tb->lock in domain suspend/complete
- thunderbolt: Use correct ICM commands in system suspend
- thunderbolt: Add support for runtime PM
* random oopses on s390 systems using NVMe devices (LP: #1790480)
- s390/pci: fix out of bounds access during irq setup
* [Bionic] Spectre v4 mitigation (Speculative Store Bypass Disable) support
for arm64 using SMC firmware call to set a hardware chicken bit
(LP: #1787993) // CVE-2018-3639 (arm64)
- arm64: alternatives: Add dynamic patching feature
- KVM: arm/arm64: Do not use kern_hyp_va() with kvm_vgic_global_state
- KVM: arm64: Avoid storing the vcpu pointer on the stack
- arm/arm64: smccc: Add SMCCC-specific return codes
- arm64: Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1
- arm64: Add per-cpu infrastructure to call ARCH_WORKAROUND_2
- arm64: Add ARCH_WORKAROUND_2 probing
- arm64: Add 'ssbd' command-line option
- arm64: ssbd: Add global mitigation state accessor
- arm64: ssbd: Skip apply_ssbd if not using dynamic mitigation
- arm64: ssbd: Restore mitigation status on CPU resume
- arm64: ssbd: Introduce thread flag to control userspace mitigation
- arm64: ssbd: Add prctl interface for per-thread mitigation
- arm64: KVM: Add HYP per-cpu accessors
- arm64: KVM: Add ARCH_WORKAROUND_2 support for guests
- arm64: KVM: Handle guest's ARCH_WORKAROUND_2 requests
- arm64: KVM: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID
- [Config] ARM64_SSBD=y
* Reconcile hns3 SAUCE patches with upstream (LP: #1787477)
- Revert "UBUNTU: SAUCE: net: hns3: Optimize PF CMDQ interrupt switching
process"
- Revert "UBUNTU: SAUCE: net: hns3: Fix for VF mailbox receiving unknown
message"
- Revert "UBUNTU: SAUCE: net: hns3: Fix for VF mailbox cannot receiving PF
response"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix comments for
hclge_get_ring_chain_from_mbx"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for using wrong mask and
shift in hclge_get_ring_chain_from_mbx"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for reset_level default
assignment probelm"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove unnecessary ring
configuration operation while resetting"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix return value error in
hns3_reset_notify_down_enet"
- Revert "UBUNTU: SAUCE: net: hns3: Fix for phy link issue when using marvell
phy driver"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: separate roce from nic when
resetting"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: correct reset event status
register"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: prevent to request reset
frequently"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: reset net device with rtnl_lock"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: modify the order of initializeing
command queue register"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: prevent sending command during
global or core reset"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove the warning when clear
reset cause"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix get_vector ops in
hclgevf_main module"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix warning bug when doing lp
selftest"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Add configure for mac minimal
frame size"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for mailbox message truncated
problem"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for l4 checksum offload bug"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for waterline not setting
correctly"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for mac pause not disable in
pfc mode"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix tc setup when netdev is first
up"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Add SPDX tags to hns3 driver"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove unused struct member and
definition"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix mislead parameter name"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: modify inconsistent bit mask
macros"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: use decimal for bit offset
macros"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix unreasonable code comments"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove extra space and brackets"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: standardize the handle of return
value"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove some redundant
assignments"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix unused function warning in VF
driver"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: modify hnae_ to hnae3_"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: use dma_zalloc_coherent instead
of kzalloc/dma_map_single"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: give default option while
dependency HNS3 set"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove some unused members of
some structures"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove a redundant
hclge_cmd_csq_done"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: using modulo for cyclic counters
in hclge_cmd_send"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: simplify hclge_cmd_csq_clean"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove some redundant
assignments"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove useless code in
hclge_cmd_send"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove unused
hclge_ring_to_dma_dir"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: use lower_32_bits and
upper_32_bits"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove back in struct hclge_hw"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: add unlikely for error check"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove the Redundant put_vector
in hns3_client_uninit"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: print the ret value in error
information"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: extraction an interface for state
state init|uninit"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove unused head file in
hnae3.c"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: add l4_type check for both ipv4
and ipv6"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: add vector status check before
free vector"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: rename the interface for
init_client_instance and uninit_client_instance"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove hclge_get_vector_index
from hclge_bind_ring_with_vector"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: RX BD information valid only in
last BD except VLD bit and buffer size"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: add support for serdes loopback
selftest"
- net: hns3: Updates RX packet info fetch in case of multi BD
- net: hns3: remove unused hclgevf_cfg_func_mta_filter
- net: hns3: Fix for VF mailbox cannot receiving PF response
- net: hns3: Fix for VF mailbox receiving unknown message
- net: hns3: Optimize PF CMDQ interrupt switching process
- net: hns3: remove hclge_get_vector_index from hclge_bind_ring_with_vector
- net: hns3: rename the interface for init_client_instance and
uninit_client_instance
- net: hns3: add vector status check before free vector
- net: hns3: add l4_type check for both ipv4 and ipv6
- net: hns3: add unlikely for error check
- net: hns3: remove unused head file in hnae3.c
- net: hns3: extraction an interface for state init|uninit
- net: hns3: print the ret value in error information
- net: hns3: remove the Redundant put_vector in hns3_client_uninit
- net: hns3: remove back in struct hclge_hw
- net: hns3: use lower_32_bits and upper_32_bits
- net: hns3: remove unused hclge_ring_to_dma_dir
- net: hns3: remove useless code in hclge_cmd_send
- net: hns3: remove some redundant assignments
- net: hns3: simplify hclge_cmd_csq_clean
- net: hns3: remove a redundant hclge_cmd_csq_done
- net: hns3: remove some unused members of some structures
- net: hns3: give default option while dependency HNS3 set
- net: hns3: use dma_zalloc_coherent instead of kzalloc/dma_map_single
- net: hns3: modify hnae_ to hnae3_
- net: hns3: Fix tc setup when netdev is first up
- net: hns3: Fix for mac pause not disable in pfc mode
- net: hns3: Fix for waterline not setting correctly
- net: hns3: Fix for l4 checksum offload bug
- net: hns3: Fix for mailbox message truncated problem
- net: hns3: Add configure for mac minimal frame size
- net: hns3: Fix warning bug when doing lp selftest
- net: hns3: Fix get_vector ops in hclgevf_main module
- net: hns3: Remove the warning when clear reset cause
- net: hns3: Prevent sending command during global or core reset
- net: hns3: Modify the order of initializing command queue register
- net: hns3: Reset net device with rtnl_lock
- net: hns3: Prevent to request reset frequently
- net: hns3: Correct reset event status register
- net: hns3: Fix return value error in hns3_reset_notify_down_enet
- net: hns3: remove unnecessary ring configuration operation while resetting
- net: hns3: Fix for reset_level default assignment probelm
- net: hns3: Fix for using wrong mask and shift in
hclge_get_ring_chain_from_mbx
- net: hns3: Fix comments for hclge_get_ring_chain_from_mbx
- net: hns3: Remove some redundant assignments
- net: hns3: Standardize the handle of return value
- net: hns3: Remove extra space and brackets
- net: hns3: Correct unreasonable code comments
- net: hns3: Use decimal for bit offset macros
- net: hns3: Modify inconsistent bit mask macros
- net: hns3: Fix misleading parameter name
- net: hns3: Remove unused struct member and definition
- net: hns3: Add SPDX tags to HNS3 PF driver
- net: hns3: Add support for serdes loopback selftest
- net: hns3: Fix for phy link issue when using marvell phy driver
- SAUCE: {topost} net: hns3: separate roce from nic when resetting
* CVE-2018-6555
- SAUCE: irda: Only insert new objects into the global database via setsockopt
* CVE-2018-6554
- SAUCE: irda: Fix memory leak caused by repeated binds of irda socket
* Bionic update: upstream stable patchset 2018-08-31 (LP: #1790188)
- netfilter: nf_tables: fix NULL pointer dereference on
nft_ct_helper_obj_dump()
- blkdev_report_zones_ioctl(): Use vmalloc() to allocate large buffers
- af_key: Always verify length of provided sadb_key
- gpio: No NULL owner
- KVM: X86: Fix reserved bits check for MOV to CR3
- KVM: x86: introduce linear_{read,write}_system
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
kvm_write_guest_virt_system
- staging: android: ion: Switch to pr_warn_once in ion_buffer_destroy
- NFC: pn533: don't send USB data off of the stack
- usbip: vhci_sysfs: fix potential Spectre v1
- usb-storage: Add support for FL_ALWAYS_SYNC flag in the UAS driver
- usb-storage: Add compatibility quirk flags for G-Technologies G-Drive
- Input: xpad - add GPD Win 2 Controller USB IDs
- phy: qcom-qusb2: Fix crash if nvmem cell not specified
- usb: gadget: function: printer: avoid wrong list handling in printer_write()
- usb: gadget: udc: renesas_usb3: disable the controller's irqs for
reconnecting
- serial: sh-sci: Stop using printk format %pCr
- tty/serial: atmel: use port->name as name in request_irq()
- serial: samsung: fix maxburst parameter for DMA transactions
- serial: 8250: omap: Fix idling of clocks for unused uarts
- vmw_balloon: fixing double free when batching mode is off
- tty: pl011: Avoid spuriously stuck-off interrupts
- kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access
- Input: goodix - add new ACPI id for GPD Win 2 touch screen
- crypto: caam - strip input zeros from RSA input buffer
- crypto: caam - fix DMA mapping dir for generated IV
- crypto: caam - fix IV DMA mapping and updating
- crypto: caam/qi - fix IV DMA mapping and updating
- crypto: caam - fix size of RSA prime factor q
- crypto: vmx - Remove overly verbose printk from AES init routines
- crypto: vmx - Remove overly verbose printk from AES XTS init
- crypto: omap-sham - fix memleak
- usb: typec: wcove: Remove dependency on HW FSM
- usb: gadget: udc: renesas_usb3: fix double phy_put()
- usb: gadget: udc: renesas_usb3: should remove debugfs
- usb: gadget: udc: renesas_usb3: should call pm_runtime_enable() before add
udc
- usb: gadget: udc: renesas_usb3: should call devm_phy_get() before add udc
- usb: gadget: udc: renesas_usb3: should fail if devm_phy_get() returns error
* Bionic update: upstream stable patchset 2018-08-29 (LP: #1789666)
- scsi: sd_zbc: Avoid that resetting a zone fails sporadically
- mmap: introduce sane default mmap limits
- mmap: relax file size limit for regular files
- btrfs: define SUPER_FLAG_METADUMP_V2
- kconfig: Avoid format overflow warning from GCC 8.1
- be2net: Fix error detection logic for BE3
- bnx2x: use the right constant
- dccp: don't free ccid2_hc_tx_sock struct in dccp_disconnect()
- enic: set DMA mask to 47 bit
- ip6mr: only set ip6mr_table from setsockopt when ip6mr_new_table succeeds
- ip6_tunnel: remove magic mtu value 0xFFF8
- ipmr: properly check rhltable_init() return value
- ipv4: remove warning in ip_recv_error
- ipv6: omit traffic class when calculating flow hash
- isdn: eicon: fix a missing-check bug
- kcm: Fix use-after-free caused by clonned sockets
- netdev-FAQ: clarify DaveM's position for stable backports
- net: ipv4: add missing RTA_TABLE to rtm_ipv4_policy
- net: metrics: add proper netlink validation
- net/packet: refine check for priv area size
- net: phy: broadcom: Fix bcm_write_exp()
- net: usb: cdc_mbim: add flag FLAG_SEND_ZLP
- packet: fix reserve calculation
- qed: Fix mask for physical address in ILT entry
- sctp: not allow transport timeout value less than HZ/5 for hb_timer
- team: use netdev_features_t instead of u32
- vhost: synchronize IOTLB message with dev cleanup
- vrf: check the original netdevice for generating redirect
- ipv6: sr: fix memory OOB access in seg6_do_srh_encap/inline
- net: phy: broadcom: Fix auxiliary control register reads
- net-sysfs: Fix memory leak in XPS configuration
- virtio-net: correctly transmit XDP buff after linearizing
- net/mlx4: Fix irq-unsafe spinlock usage
- tun: Fix NULL pointer dereference in XDP redirect
- virtio-net: correctly check num_buf during err path
- net/mlx5e: When RXFCS is set, add FCS data into checksum calculation
- virtio-net: fix leaking page for gso packet during mergeable XDP
- rtnetlink: validate attributes in do_setlink()
- cls_flower: Fix incorrect idr release when failing to modify rule
- PCI: hv: Do not wait forever on a device that has disappeared
- drm: set FMODE_UNSIGNED_OFFSET for drm files
- l2tp: fix refcount leakage on PPPoL2TP sockets
- mlxsw: spectrum: Forbid creation of VLAN 1 over port/LAG
- net: ethernet: ti: cpdma: correct error handling for chan create
- net: ethernet: davinci_emac: fix error handling in probe()
- net: dsa: b53: Fix for brcm tag issue in Cygnus SoC
- net : sched: cls_api: deal with egdev path only if needed
* Bionic update: upstream stable patchset 2018-08-24 (LP: #1788897)
- fix io_destroy()/aio_complete() race
- mm: fix the NULL mapping case in __isolate_lru_page()
- objtool: Support GCC 8's cold subfunctions
- objtool: Support GCC 8 switch tables
- objtool: Detect RIP-relative switch table references
- objtool: Detect RIP-relative switch table references, part 2
- objtool: Fix "noreturn" detection for recursive sibling calls
- xfs: convert XFS_AGFL_SIZE to a helper function
- xfs: detect agfl count corruption and reset agfl
- Input: synaptics - Lenovo Carbon X1 Gen5 (2017) devices should use RMI
- Input: synaptics - add Lenovo 80 series ids to SMBus
- Input: elan_i2c_smbus - fix corrupted stack
- tracing: Fix crash when freeing instances with event triggers
- tracing: Make the snapshot trigger work with instances
- selinux: KASAN: slab-out-of-bounds in xattr_getsecurity
- cfg80211: further limit wiphy names to 64 bytes
- drm/amd/powerplay: Fix enum mismatch
- rtlwifi: rtl8192cu: Remove variable self-assignment in rf.c
- platform/chrome: cros_ec_lpc: remove redundant pointer request
- kbuild: clang: disable unused variable warnings only when constant
- tcp: avoid integer overflows in tcp_rcv_space_adjust()
- iio: ad7793: implement IIO_CHAN_INFO_SAMP_FREQ
- iio:buffer: make length types match kfifo types
- iio:kfifo_buf: check for uint overflow
- iio: adc: select buffer for at91-sama5d2_adc
- MIPS: lantiq: gphy: Drop reboot/remove reset asserts
- MIPS: ptrace: Fix PTRACE_PEEKUSR requests for 64-bit FGRs
- MIPS: prctl: Disallow FRE without FR with PR_SET_FP_MODE requests
- scsi: scsi_transport_srp: Fix shost to rport translation
- stm class: Use vmalloc for the master map
- hwtracing: stm: fix build error on some arches
- IB/core: Fix error code for invalid GID entry
- mm/huge_memory.c: __split_huge_page() use atomic ClearPageDirty()
- Revert "rt2800: use TXOP_BACKOFF for probe frames"
- intel_th: Use correct device when freeing buffers
- drm/psr: Fix missed entry in PSR setup time table.
- drm/i915/lvds: Move acpi lid notification registration to registration phase
- drm/i915: Disable LVDS on Radiant P845
- drm/vmwgfx: Use kasprintf
- drm/vmwgfx: Fix host logging / guestinfo reading error paths
- nvme: fix extended data LBA supported setting
- iio: hid-sensor-trigger: Fix sometimes not powering up the sensor after
resume
- x86/MCE/AMD: Define a function to get SMCA bank type
- x86/mce/AMD: Pass the bank number to smca_get_bank_type()
- x86/mce/AMD, EDAC/mce_amd: Enumerate Reserved SMCA bank type
- x86/mce/AMD: Carve out SMCA get_block_address() code
- x86/MCE/AMD: Cache SMCA MISC block addresses
* errors when scanning partition table of corrupted AIX disk (LP: #1787281)
- partitions/aix: fix usage of uninitialized lv_info and lvname structures
- partitions/aix: append null character to print data from disk
* tlbie master timeout checkstop (using NVidia/GPU) (LP: #1789772)
- powerpc/mm/hugetlb: Update huge_ptep_set_access_flags to call
__ptep_set_access_flags directly
- powerpc/mm/radix: Move function from radix.h to pgtable-radix.c
- powerpc/mm: Change function prototype
- powerpc/mm/radix: Change pte relax sequence to handle nest MMU hang
* performance drop with ATS enabled (LP: #1788097)
- powerpc/powernv: Fix concurrency issue with npu->mmio_atsd_usage
* [Regression] kernel crashdump fails on arm64 (LP: #1786878)
- arm64: export memblock_reserve()d regions via /proc/iomem
- drivers: acpi: add dependency of EFI for arm64
- efi/arm: preserve early mapping of UEFI memory map longer for BGRT
- efi/arm: map UEFI memory map even w/o runtime services enabled
- arm64: acpi: fix alignment fault in accessing ACPI
- [Config] CONFIG_ARCH_SUPPORTS_ACPI=y
- arm64: fix ACPI dependencies
- ACPI: fix menuconfig presentation of ACPI submenu
* TB 16 issue on Dell Lattitude 7490 with large amount of data (LP: #1785780)
- r8152: disable RX aggregation on new Dell TB16 dock
* dell_wmi: Unknown key codes (LP: #1762385)
- platform/x86: dell-wmi: Ignore new rfkill and fn-lock events
* Enable AMD PCIe MP2 for AMDI0011 (LP: #1773940)
- SAUCE: i2c:amd I2C Driver based on PCI Interface for upcoming platform
- SAUCE: i2c:amd move out pointer in union i2c_event_base
- SAUCE: i2c:amd Depends on ACPI
- [Config] i2c: CONFIG_I2C_AMD_MP2=y on x86
* r8169 no internet after suspending (LP: #1779817)
- r8169: restore previous behavior to accept BIOS WoL settings
- r8169: don't use MSI-X on RTL8168g
- r8169: don't use MSI-X on RTL8106e
* Fix Intel Cannon Lake LPSS I2C input clock (LP: #1789790)
- mfd: intel-lpss: Fix Intel Cannon Lake LPSS I2C input clock
* Microphone cannot be detected with front panel audio combo jack on HP Z8-G4
machine (LP: #1789145)
- ALSA: hda/realtek - Fix HP Headset Mic can't record
* Tango platform uses __initcall without further checks (LP: #1787945)
- [Config] disable ARCH_TANGO
* [18.10 FEAT] Add kernel config option "CONFIG_SCLP_OFB" (LP: #1787898)
- [Config] CONFIG_SCLP_OFB=y for s390x
-- Kleber Sacilotto de Souza <email address hidden> Mon, 24 Sep 2018 16:23:48 +0200
-
linux-aws (4.15.0-1022.22) bionic; urgency=medium
* linux-aws: 4.15.0-1022.22 -proposed tracker (LP: #1791725)
* [Regression] kernel crashdump fails on arm64 (LP: #1786878)
- [Config] CONFIG_ARCH_SUPPORTS_ACPI=y
[ Ubuntu: 4.15.0-35.38 ]
* linux: 4.15.0-35.38 -proposed tracker (LP: #1791719)
* device hotplug of vfio devices can lead to deadlock in vfio_pci_release
(LP: #1792099)
- SAUCE: vfio -- release device lock before userspace requests
* L1TF mitigation not effective in some CPU and RAM combinations
(LP: #1788563)
- x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit
- x86/speculation/l1tf: Fix off-by-one error when warning that system has too
much RAM
- x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+
* CVE-2018-15594
- x86/paravirt: Fix spectre-v2 mitigations for paravirt guests
* CVE-2017-5715 (Spectre v2 s390x)
- KVM: s390: implement CPU model only facilities
- s390: detect etoken facility
- KVM: s390: add etoken support for guests
- s390/lib: use expoline for all bcr instructions
- s390: fix br_r1_trampoline for machines without exrl
- SAUCE: s390: use expoline thunks for all branches generated by the BPF JIT
* Ubuntu18.04.1: cpuidle: powernv: Fix promotion from snooze if next state
disabled (performance) (LP: #1790602)
- cpuidle: powernv: Fix promotion from snooze if next state disabled
* Watchdog CPU:19 Hard LOCKUP when kernel crash was triggered (LP: #1790636)
- powerpc: hard disable irqs in smp_send_stop loop
- powerpc: Fix deadlock with multiple calls to smp_send_stop
- powerpc: smp_send_stop do not offline stopped CPUs
- powerpc/powernv: Fix opal_event_shutdown() called with interrupts disabled
* Security fix: check if IOMMU page is contained in the pinned physical page
(LP: #1785675)
- vfio/spapr: Use IOMMU pageshift rather than pagesize
- KVM: PPC: Check if IOMMU page is contained in the pinned physical page
* Missing Intel GPU pci-id's (LP: #1789924)
- drm/i915/kbl: Add KBL GT2 sku
- drm/i915/whl: Introducing Whiskey Lake platform
- drm/i915/aml: Introducing Amber Lake platform
- drm/i915/cfl: Add a new CFL PCI ID.
* CVE-2018-15572
- x86/speculation: Protect against userspace-userspace spectreRSB
* Support Power Management for Thunderbolt Controller (LP: #1789358)
- thunderbolt: Handle NULL boot ACL entries properly
- thunderbolt: Notify userspace when boot_acl is changed
- thunderbolt: Use 64-bit DMA mask if supported by the platform
- thunderbolt: Do not unnecessarily call ICM get route
- thunderbolt: No need to take tb->lock in domain suspend/complete
- thunderbolt: Use correct ICM commands in system suspend
- thunderbolt: Add support for runtime PM
* random oopses on s390 systems using NVMe devices (LP: #1790480)
- s390/pci: fix out of bounds access during irq setup
* [Bionic] Spectre v4 mitigation (Speculative Store Bypass Disable) support
for arm64 using SMC firmware call to set a hardware chicken bit
(LP: #1787993) // CVE-2018-3639 (arm64)
- arm64: alternatives: Add dynamic patching feature
- KVM: arm/arm64: Do not use kern_hyp_va() with kvm_vgic_global_state
- KVM: arm64: Avoid storing the vcpu pointer on the stack
- arm/arm64: smccc: Add SMCCC-specific return codes
- arm64: Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1
- arm64: Add per-cpu infrastructure to call ARCH_WORKAROUND_2
- arm64: Add ARCH_WORKAROUND_2 probing
- arm64: Add 'ssbd' command-line option
- arm64: ssbd: Add global mitigation state accessor
- arm64: ssbd: Skip apply_ssbd if not using dynamic mitigation
- arm64: ssbd: Restore mitigation status on CPU resume
- arm64: ssbd: Introduce thread flag to control userspace mitigation
- arm64: ssbd: Add prctl interface for per-thread mitigation
- arm64: KVM: Add HYP per-cpu accessors
- arm64: KVM: Add ARCH_WORKAROUND_2 support for guests
- arm64: KVM: Handle guest's ARCH_WORKAROUND_2 requests
- arm64: KVM: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID
- [Config] ARM64_SSBD=y
* Reconcile hns3 SAUCE patches with upstream (LP: #1787477)
- Revert "UBUNTU: SAUCE: net: hns3: Optimize PF CMDQ interrupt switching
process"
- Revert "UBUNTU: SAUCE: net: hns3: Fix for VF mailbox receiving unknown
message"
- Revert "UBUNTU: SAUCE: net: hns3: Fix for VF mailbox cannot receiving PF
response"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix comments for
hclge_get_ring_chain_from_mbx"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for using wrong mask and
shift in hclge_get_ring_chain_from_mbx"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for reset_level default
assignment probelm"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove unnecessary ring
configuration operation while resetting"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix return value error in
hns3_reset_notify_down_enet"
- Revert "UBUNTU: SAUCE: net: hns3: Fix for phy link issue when using marvell
phy driver"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: separate roce from nic when
resetting"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: correct reset event status
register"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: prevent to request reset
frequently"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: reset net device with rtnl_lock"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: modify the order of initializeing
command queue register"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: prevent sending command during
global or core reset"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove the warning when clear
reset cause"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix get_vector ops in
hclgevf_main module"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix warning bug when doing lp
selftest"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Add configure for mac minimal
frame size"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for mailbox message truncated
problem"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for l4 checksum offload bug"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for waterline not setting
correctly"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for mac pause not disable in
pfc mode"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix tc setup when netdev is first
up"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Add SPDX tags to hns3 driver"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove unused struct member and
definition"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix mislead parameter name"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: modify inconsistent bit mask
macros"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: use decimal for bit offset
macros"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix unreasonable code comments"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove extra space and brackets"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: standardize the handle of return
value"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove some redundant
assignments"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: fix unused function warning in VF
driver"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: modify hnae_ to hnae3_"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: use dma_zalloc_coherent instead
of kzalloc/dma_map_single"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: give default option while
dependency HNS3 set"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove some unused members of
some structures"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove a redundant
hclge_cmd_csq_done"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: using modulo for cyclic counters
in hclge_cmd_send"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: simplify hclge_cmd_csq_clean"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove some redundant
assignments"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove useless code in
hclge_cmd_send"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove unused
hclge_ring_to_dma_dir"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: use lower_32_bits and
upper_32_bits"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove back in struct hclge_hw"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: add unlikely for error check"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove the Redundant put_vector
in hns3_client_uninit"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: print the ret value in error
information"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: extraction an interface for state
state init|uninit"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove unused head file in
hnae3.c"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: add l4_type check for both ipv4
and ipv6"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: add vector status check before
free vector"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: rename the interface for
init_client_instance and uninit_client_instance"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: remove hclge_get_vector_index
from hclge_bind_ring_with_vector"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: RX BD information valid only in
last BD except VLD bit and buffer size"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: add support for serdes loopback
selftest"
- net: hns3: Updates RX packet info fetch in case of multi BD
- net: hns3: remove unused hclgevf_cfg_func_mta_filter
- net: hns3: Fix for VF mailbox cannot receiving PF response
- net: hns3: Fix for VF mailbox receiving unknown message
- net: hns3: Optimize PF CMDQ interrupt switching process
- net: hns3: remove hclge_get_vector_index from hclge_bind_ring_with_vector
- net: hns3: rename the interface for init_client_instance and
uninit_client_instance
- net: hns3: add vector status check before free vector
- net: hns3: add l4_type check for both ipv4 and ipv6
- net: hns3: add unlikely for error check
- net: hns3: remove unused head file in hnae3.c
- net: hns3: extraction an interface for state init|uninit
- net: hns3: print the ret value in error information
- net: hns3: remove the Redundant put_vector in hns3_client_uninit
- net: hns3: remove back in struct hclge_hw
- net: hns3: use lower_32_bits and upper_32_bits
- net: hns3: remove unused hclge_ring_to_dma_dir
- net: hns3: remove useless code in hclge_cmd_send
- net: hns3: remove some redundant assignments
- net: hns3: simplify hclge_cmd_csq_clean
- net: hns3: remove a redundant hclge_cmd_csq_done
- net: hns3: remove some unused members of some structures
- net: hns3: give default option while dependency HNS3 set
- net: hns3: use dma_zalloc_coherent instead of kzalloc/dma_map_single
- net: hns3: modify hnae_ to hnae3_
- net: hns3: Fix tc setup when netdev is first up
- net: hns3: Fix for mac pause not disable in pfc mode
- net: hns3: Fix for waterline not setting correctly
- net: hns3: Fix for l4 checksum offload bug
- net: hns3: Fix for mailbox message truncated problem
- net: hns3: Add configure for mac minimal frame size
- net: hns3: Fix warning bug when doing lp selftest
- net: hns3: Fix get_vector ops in hclgevf_main module
- net: hns3: Remove the warning when clear reset cause
- net: hns3: Prevent sending command during global or core reset
- net: hns3: Modify the order of initializing command queue register
- net: hns3: Reset net device with rtnl_lock
- net: hns3: Prevent to request reset frequently
- net: hns3: Correct reset event status register
- net: hns3: Fix return value error in hns3_reset_notify_down_enet
- net: hns3: remove unnecessary ring configuration operation while resetting
- net: hns3: Fix for reset_level default assignment probelm
- net: hns3: Fix for using wrong mask and shift in
hclge_get_ring_chain_from_mbx
- net: hns3: Fix comments for hclge_get_ring_chain_from_mbx
- net: hns3: Remove some redundant assignments
- net: hns3: Standardize the handle of return value
- net: hns3: Remove extra space and brackets
- net: hns3: Correct unreasonable code comments
- net: hns3: Use decimal for bit offset macros
- net: hns3: Modify inconsistent bit mask macros
- net: hns3: Fix misleading parameter name
- net: hns3: Remove unused struct member and definition
- net: hns3: Add SPDX tags to HNS3 PF driver
- net: hns3: Add support for serdes loopback selftest
- net: hns3: Fix for phy link issue when using marvell phy driver
- SAUCE: {topost} net: hns3: separate roce from nic when resetting
* CVE-2018-6555
- SAUCE: irda: Only insert new objects into the global database via setsockopt
* CVE-2018-6554
- SAUCE: irda: Fix memory leak caused by repeated binds of irda socket
* Bionic update: upstream stable patchset 2018-08-31 (LP: #1790188)
- netfilter: nf_tables: fix NULL pointer dereference on
nft_ct_helper_obj_dump()
- blkdev_report_zones_ioctl(): Use vmalloc() to allocate large buffers
- af_key: Always verify length of provided sadb_key
- gpio: No NULL owner
- KVM: X86: Fix reserved bits check for MOV to CR3
- KVM: x86: introduce linear_{read,write}_system
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
kvm_write_guest_virt_system
- staging: android: ion: Switch to pr_warn_once in ion_buffer_destroy
- NFC: pn533: don't send USB data off of the stack
- usbip: vhci_sysfs: fix potential Spectre v1
- usb-storage: Add support for FL_ALWAYS_SYNC flag in the UAS driver
- usb-storage: Add compatibility quirk flags for G-Technologies G-Drive
- Input: xpad - add GPD Win 2 Controller USB IDs
- phy: qcom-qusb2: Fix crash if nvmem cell not specified
- usb: gadget: function: printer: avoid wrong list handling in printer_write()
- usb: gadget: udc: renesas_usb3: disable the controller's irqs for
reconnecting
- serial: sh-sci: Stop using printk format %pCr
- tty/serial: atmel: use port->name as name in request_irq()
- serial: samsung: fix maxburst parameter for DMA transactions
- serial: 8250: omap: Fix idling of clocks for unused uarts
- vmw_balloon: fixing double free when batching mode is off
- tty: pl011: Avoid spuriously stuck-off interrupts
- kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access
- Input: goodix - add new ACPI id for GPD Win 2 touch screen
- crypto: caam - strip input zeros from RSA input buffer
- crypto: caam - fix DMA mapping dir for generated IV
- crypto: caam - fix IV DMA mapping and updating
- crypto: caam/qi - fix IV DMA mapping and updating
- crypto: caam - fix size of RSA prime factor q
- crypto: vmx - Remove overly verbose printk from AES init routines
- crypto: vmx - Remove overly verbose printk from AES XTS init
- crypto: omap-sham - fix memleak
- usb: typec: wcove: Remove dependency on HW FSM
- usb: gadget: udc: renesas_usb3: fix double phy_put()
- usb: gadget: udc: renesas_usb3: should remove debugfs
- usb: gadget: udc: renesas_usb3: should call pm_runtime_enable() before add
udc
- usb: gadget: udc: renesas_usb3: should call devm_phy_get() before add udc
- usb: gadget: udc: renesas_usb3: should fail if devm_phy_get() returns error
* Bionic update: upstream stable patchset 2018-08-29 (LP: #1789666)
- scsi: sd_zbc: Avoid that resetting a zone fails sporadically
- mmap: introduce sane default mmap limits
- mmap: relax file size limit for regular files
- btrfs: define SUPER_FLAG_METADUMP_V2
- kconfig: Avoid format overflow warning from GCC 8.1
- be2net: Fix error detection logic for BE3
- bnx2x: use the right constant
- dccp: don't free ccid2_hc_tx_sock struct in dccp_disconnect()
- enic: set DMA mask to 47 bit
- ip6mr: only set ip6mr_table from setsockopt when ip6mr_new_table succeeds
- ip6_tunnel: remove magic mtu value 0xFFF8
- ipmr: properly check rhltable_init() return value
- ipv4: remove warning in ip_recv_error
- ipv6: omit traffic class when calculating flow hash
- isdn: eicon: fix a missing-check bug
- kcm: Fix use-after-free caused by clonned sockets
- netdev-FAQ: clarify DaveM's position for stable backports
- net: ipv4: add missing RTA_TABLE to rtm_ipv4_policy
- net: metrics: add proper netlink validation
- net/packet: refine check for priv area size
- net: phy: broadcom: Fix bcm_write_exp()
- net: usb: cdc_mbim: add flag FLAG_SEND_ZLP
- packet: fix reserve calculation
- qed: Fix mask for physical address in ILT entry
- sctp: not allow transport timeout value less than HZ/5 for hb_timer
- team: use netdev_features_t instead of u32
- vhost: synchronize IOTLB message with dev cleanup
- vrf: check the original netdevice for generating redirect
- ipv6: sr: fix memory OOB access in seg6_do_srh_encap/inline
- net: phy: broadcom: Fix auxiliary control register reads
- net-sysfs: Fix memory leak in XPS configuration
- virtio-net: correctly transmit XDP buff after linearizing
- net/mlx4: Fix irq-unsafe spinlock usage
- tun: Fix NULL pointer dereference in XDP redirect
- virtio-net: correctly check num_buf during err path
- net/mlx5e: When RXFCS is set, add FCS data into checksum calculation
- virtio-net: fix leaking page for gso packet during mergeable XDP
- rtnetlink: validate attributes in do_setlink()
- cls_flower: Fix incorrect idr release when failing to modify rule
- PCI: hv: Do not wait forever on a device that has disappeared
- drm: set FMODE_UNSIGNED_OFFSET for drm files
- l2tp: fix refcount leakage on PPPoL2TP sockets
- mlxsw: spectrum: Forbid creation of VLAN 1 over port/LAG
- net: ethernet: ti: cpdma: correct error handling for chan create
- net: ethernet: davinci_emac: fix error handling in probe()
- net: dsa: b53: Fix for brcm tag issue in Cygnus SoC
- net : sched: cls_api: deal with egdev path only if needed
* Bionic update: upstream stable patchset 2018-08-24 (LP: #1788897)
- fix io_destroy()/aio_complete() race
- mm: fix the NULL mapping case in __isolate_lru_page()
- objtool: Support GCC 8's cold subfunctions
- objtool: Support GCC 8 switch tables
- objtool: Detect RIP-relative switch table references
- objtool: Detect RIP-relative switch table references, part 2
- objtool: Fix "noreturn" detection for recursive sibling calls
- xfs: convert XFS_AGFL_SIZE to a helper function
- xfs: detect agfl count corruption and reset agfl
- Input: synaptics - Lenovo Carbon X1 Gen5 (2017) devices should use RMI
- Input: synaptics - add Lenovo 80 series ids to SMBus
- Input: elan_i2c_smbus - fix corrupted stack
- tracing: Fix crash when freeing instances with event triggers
- tracing: Make the snapshot trigger work with instances
- selinux: KASAN: slab-out-of-bounds in xattr_getsecurity
- cfg80211: further limit wiphy names to 64 bytes
- drm/amd/powerplay: Fix enum mismatch
- rtlwifi: rtl8192cu: Remove variable self-assignment in rf.c
- platform/chrome: cros_ec_lpc: remove redundant pointer request
- kbuild: clang: disable unused variable warnings only when constant
- tcp: avoid integer overflows in tcp_rcv_space_adjust()
- iio: ad7793: implement IIO_CHAN_INFO_SAMP_FREQ
- iio:buffer: make length types match kfifo types
- iio:kfifo_buf: check for uint overflow
- iio: adc: select buffer for at91-sama5d2_adc
- MIPS: lantiq: gphy: Drop reboot/remove reset asserts
- MIPS: ptrace: Fix PTRACE_PEEKUSR requests for 64-bit FGRs
- MIPS: prctl: Disallow FRE without FR with PR_SET_FP_MODE requests
- scsi: scsi_transport_srp: Fix shost to rport translation
- stm class: Use vmalloc for the master map
- hwtracing: stm: fix build error on some arches
- IB/core: Fix error code for invalid GID entry
- mm/huge_memory.c: __split_huge_page() use atomic ClearPageDirty()
- Revert "rt2800: use TXOP_BACKOFF for probe frames"
- intel_th: Use correct device when freeing buffers
- drm/psr: Fix missed entry in PSR setup time table.
- drm/i915/lvds: Move acpi lid notification registration to registration phase
- drm/i915: Disable LVDS on Radiant P845
- drm/vmwgfx: Use kasprintf
- drm/vmwgfx: Fix host logging / guestinfo reading error paths
- nvme: fix extended data LBA supported setting
- iio: hid-sensor-trigger: Fix sometimes not powering up the sensor after
resume
- x86/MCE/AMD: Define a function to get SMCA bank type
- x86/mce/AMD: Pass the bank number to smca_get_bank_type()
- x86/mce/AMD, EDAC/mce_amd: Enumerate Reserved SMCA bank type
- x86/mce/AMD: Carve out SMCA get_block_address() code
- x86/MCE/AMD: Cache SMCA MISC block addresses
* errors when scanning partition table of corrupted AIX disk (LP: #1787281)
- partitions/aix: fix usage of uninitialized lv_info and lvname structures
- partitions/aix: append null character to print data from disk
* tlbie master timeout checkstop (using NVidia/GPU) (LP: #1789772)
- powerpc/mm/hugetlb: Update huge_ptep_set_access_flags to call
__ptep_set_access_flags directly
- powerpc/mm/radix: Move function from radix.h to pgtable-radix.c
- powerpc/mm: Change function prototype
- powerpc/mm/radix: Change pte relax sequence to handle nest MMU hang
* performance drop with ATS enabled (LP: #1788097)
- powerpc/powernv: Fix concurrency issue with npu->mmio_atsd_usage
* [Regression] kernel crashdump fails on arm64 (LP: #1786878)
- arm64: export memblock_reserve()d regions via /proc/iomem
- drivers: acpi: add dependency of EFI for arm64
- efi/arm: preserve early mapping of UEFI memory map longer for BGRT
- efi/arm: map UEFI memory map even w/o runtime services enabled
- arm64: acpi: fix alignment fault in accessing ACPI
- [Config] CONFIG_ARCH_SUPPORTS_ACPI=y
- arm64: fix ACPI dependencies
- ACPI: fix menuconfig presentation of ACPI submenu
* TB 16 issue on Dell Lattitude 7490 with large amount of data (LP: #1785780)
- r8152: disable RX aggregation on new Dell TB16 dock
* dell_wmi: Unknown key codes (LP: #1762385)
- platform/x86: dell-wmi: Ignore new rfkill and fn-lock events
* Enable AMD PCIe MP2 for AMDI0011 (LP: #1773940)
- SAUCE: i2c:amd I2C Driver based on PCI Interface for upcoming platform
- SAUCE: i2c:amd move out pointer in union i2c_event_base
- SAUCE: i2c:amd Depends on ACPI
- [Config] i2c: CONFIG_I2C_AMD_MP2=y on x86
* r8169 no internet after suspending (LP: #1779817)
- r8169: restore previous behavior to accept BIOS WoL settings
- r8169: don't use MSI-X on RTL8168g
- r8169: don't use MSI-X on RTL8106e
* Fix Intel Cannon Lake LPSS I2C input clock (LP: #1789790)
- mfd: intel-lpss: Fix Intel Cannon Lake LPSS I2C input clock
* Microphone cannot be detected with front panel audio combo jack on HP Z8-G4
machine (LP: #1789145)
- ALSA: hda/realtek - Fix HP Headset Mic can't record
* Tango platform uses __initcall without further checks (LP: #1787945)
- [Config] disable ARCH_TANGO
* [18.10 FEAT] Add kernel config option "CONFIG_SCLP_OFB" (LP: #1787898)
- [Config] CONFIG_SCLP_OFB=y for s390x
-- Khalid Elmously <email address hidden> Thu, 13 Sep 2018 16:19:43 -0400
-
linux-aws (4.15.0-1021.21) bionic; urgency=medium
* linux-aws: 4.15.0-1021.21 -proposed tracker (LP: #1788750)
[ Ubuntu: 4.15.0-34.37 ]
* linux: 4.15.0-34.37 -proposed tracker (LP: #1788744)
* Bionic update: upstream stable patchset 2018-08-09 (LP: #1786352)
- MIPS: c-r4k: Fix data corruption related to cache coherence
- MIPS: ptrace: Expose FIR register through FP regset
- MIPS: Fix ptrace(2) PTRACE_PEEKUSR and PTRACE_POKEUSR accesses to o32 FGRs
- KVM: Fix spelling mistake: "cop_unsuable" -> "cop_unusable"
- affs_lookup(): close a race with affs_remove_link()
- fs: don't scan the inode cache before SB_BORN is set
- aio: fix io_destroy(2) vs. lookup_ioctx() race
- ALSA: timer: Fix pause event notification
- do d_instantiate/unlock_new_inode combinations safely
- mmc: sdhci-iproc: remove hard coded mmc cap 1.8v
- mmc: sdhci-iproc: fix 32bit writes for TRANSFER_MODE register
- mmc: sdhci-iproc: add SDHCI_QUIRK2_HOST_OFF_CARD_ON for cygnus
- libata: Blacklist some Sandisk SSDs for NCQ
- libata: blacklist Micron 500IT SSD with MU01 firmware
- xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent
- drm/vmwgfx: Fix 32-bit VMW_PORT_HB_[IN|OUT] macros
- arm64: lse: Add early clobbers to some input/output asm operands
- powerpc/64s: Clear PCR on boot
- IB/hfi1: Use after free race condition in send context error path
- IB/umem: Use the correct mm during ib_umem_release
- idr: fix invalid ptr dereference on item delete
- Revert "ipc/shm: Fix shmat mmap nil-page protection"
- ipc/shm: fix shmat() nil address after round-down when remapping
- mm/kasan: don't vfree() nonexistent vm_area
- kasan: free allocated shadow memory on MEM_CANCEL_ONLINE
- kasan: fix memory hotplug during boot
- kernel/sys.c: fix potential Spectre v1 issue
- KVM: s390: vsie: fix < 8k check for the itdba
- KVM: x86: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed
- kvm: x86: IA32_ARCH_CAPABILITIES is always supported
- powerpc/64s: Improve RFI L1-D cache flush fallback
- powerpc/pseries: Restore default security feature flags on setup
- powerpc/64s: Fix section mismatch warnings from setup_rfi_flush()
- MIPS: generic: Fix machine compatible matching
- mac80211: mesh: fix wrong mesh TTL offset calculation
- ARC: Fix malformed ARC_EMUL_UNALIGNED default
- ptr_ring: prevent integer overflow when calculating size
- arm64: dts: rockchip: fix rock64 gmac2io stability issues
- arm64: dts: rockchip: correct ep-gpios for rk3399-sapphire
- libata: Fix compile warning with ATA_DEBUG enabled
- selftests: sync: missing CFLAGS while compiling
- selftest/vDSO: fix O=
- selftests: pstore: Adding config fragment CONFIG_PSTORE_RAM=m
- selftests: memfd: add config fragment for fuse
- ARM: OMAP2+: timer: fix a kmemleak caused in omap_get_timer_dt
- ARM: OMAP3: Fix prm wake interrupt for resume
- ARM: OMAP2+: Fix sar_base inititalization for HS omaps
- ARM: OMAP1: clock: Fix debugfs_create_*() usage
- tls: retrun the correct IV in getsockopt
- xhci: workaround for AMD Promontory disabled ports wakeup
- IB/uverbs: Fix method merging in uverbs_ioctl_merge
- IB/uverbs: Fix possible oops with duplicate ioctl attributes
- IB/uverbs: Fix unbalanced unlock on error path for rdma_explicit_destroy
- arm64: dts: rockchip: Fix DWMMC clocks
- ARM: dts: rockchip: Fix DWMMC clocks
- iwlwifi: mvm: fix security bug in PN checking
- iwlwifi: mvm: fix IBSS for devices that support station type API
- iwlwifi: mvm: always init rs with 20mhz bandwidth rates
- NFC: llcp: Limit size of SDP URI
- rxrpc: Work around usercopy check
- MD: Free bioset when md_run fails
- md: fix md_write_start() deadlock w/o metadata devices
- s390/dasd: fix handling of internal requests
- xfrm: do not call rcu_read_unlock when afinfo is NULL in xfrm_get_tos
- mac80211: round IEEE80211_TX_STATUS_HEADROOM up to multiple of 4
- mac80211: fix a possible leak of station stats
- mac80211: fix calling sleeping function in atomic context
- cfg80211: clear wep keys after disconnection
- mac80211: Do not disconnect on invalid operating class
- mac80211: Fix sending ADDBA response for an ongoing session
- gpu: ipu-v3: pre: fix device node leak in ipu_pre_lookup_by_phandle
- gpu: ipu-v3: prg: fix device node leak in ipu_prg_lookup_by_phandle
- md raid10: fix NULL deference in handle_write_completed()
- drm/exynos: g2d: use monotonic timestamps
- drm/exynos: fix comparison to bitshift when dealing with a mask
- drm/meson: fix vsync buffer update
- arm64: perf: correct PMUVer probing
- RDMA/bnxt_re: Unpin SQ and RQ memory if QP create fails
- RDMA/bnxt_re: Fix system crash during load/unload
- net/mlx5e: Return error if prio is specified when offloading eswitch vlan
push
- locking/xchg/alpha: Add unconditional memory barrier to cmpxchg()
- md: raid5: avoid string overflow warning
- virtio_net: fix XDP code path in receive_small()
- kernel/relay.c: limit kmalloc size to KMALLOC_MAX_SIZE
- bug.h: work around GCC PR82365 in BUG()
- selftests/memfd: add run_fuse_test.sh to TEST_FILES
- seccomp: add a selftest for get_metadata
- soc: imx: gpc: de-register power domains only if initialized
- powerpc/bpf/jit: Fix 32-bit JIT for seccomp_data access
- s390/cio: fix ccw_device_start_timeout API
- s390/cio: fix return code after missing interrupt
- s390/cio: clear timer when terminating driver I/O
- selftests/bpf/test_maps: exit child process without error in ENOMEM case
- PKCS#7: fix direct verification of SignerInfo signature
- arm64: dts: cavium: fix PCI bus dtc warnings
- nfs: system crashes after NFS4ERR_MOVED recovery
- ARM: OMAP: Fix dmtimer init for omap1
- smsc75xx: fix smsc75xx_set_features()
- regulatory: add NUL to request alpha2
- integrity/security: fix digsig.c build error with header file
- x86/intel_rdt: Fix incorrect returned value when creating rdgroup sub-
directory in resctrl file system
- locking/xchg/alpha: Fix xchg() and cmpxchg() memory ordering bugs
- x86/topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across
CPU hotplug operations
- mac80211: drop frames with unexpected DS bits from fast-rx to slow path
- arm64: fix unwind_frame() for filtered out fn for function graph tracing
- macvlan: fix use-after-free in macvlan_common_newlink()
- KVM: nVMX: Don't halt vcpu when L1 is injecting events to L2
- kvm: fix warning for CONFIG_HAVE_KVM_EVENTFD builds
- ARM: dts: imx6dl: Include correct dtsi file for Engicam i.CoreM6
DualLite/Solo RQS
- fs: dcache: Avoid livelock between d_alloc_parallel and __d_add
- fs: dcache: Use READ_ONCE when accessing i_dir_seq
- md: fix a potential deadlock of raid5/raid10 reshape
- md/raid1: fix NULL pointer dereference
- batman-adv: fix packet checksum in receive path
- batman-adv: invalidate checksum on fragment reassembly
- netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct
refcount
- netfilter: ipt_CLUSTERIP: put config instead of freeing it
- netfilter: ebtables: convert BUG_ONs to WARN_ONs
- batman-adv: Ignore invalid batadv_iv_gw during netlink send
- batman-adv: Ignore invalid batadv_v_gw during netlink send
- batman-adv: Fix netlink dumping of BLA claims
- batman-adv: Fix netlink dumping of BLA backbones
- nvme-pci: Fix nvme queue cleanup if IRQ setup fails
- clocksource/drivers/fsl_ftm_timer: Fix error return checking
- libceph, ceph: avoid memory leak when specifying same option several times
- ceph: fix dentry leak when failing to init debugfs
- xen/pvcalls: fix null pointer dereference on map->sock
- ARM: orion5x: Revert commit 4904dbda41c8.
- qrtr: add MODULE_ALIAS macro to smd
- selftests/futex: Fix line continuation in Makefile
- r8152: fix tx packets accounting
- virtio-gpu: fix ioctl and expose the fixed status to userspace.
- dmaengine: rcar-dmac: fix max_chunk_size for R-Car Gen3
- bcache: fix kcrashes with fio in RAID5 backend dev
- ip_gre: fix IFLA_MTU ignored on NEWLINK
- ip6_tunnel: fix IFLA_MTU ignored on NEWLINK
- sit: fix IFLA_MTU ignored on NEWLINK
- nbd: fix return value in error handling path
- ARM: dts: NSP: Fix amount of RAM on BCM958625HR
- ARM: dts: bcm283x: Fix unit address of local_intc
- powerpc/boot: Fix random libfdt related build errors
- clocksource/drivers/mips-gic-timer: Use correct shift count to extract data
- gianfar: Fix Rx byte accounting for ndev stats
- net/tcp/illinois: replace broken algorithm reference link
- nvmet: fix PSDT field check in command format
- net/smc: use link_id of server in confirm link reply
- mlxsw: core: Fix flex keys scratchpad offset conflict
- mlxsw: spectrum: Treat IPv6 unregistered multicast as broadcast
- spectrum: Reference count VLAN entries
- ARC: mcip: halt GFRC counter when ARC cores halt
- ARC: mcip: update MCIP debug mask when the new cpu came online
- ARC: setup cpu possible mask according to possible-cpus dts property
- ipvs: remove IPS_NAT_MASK check to fix passive FTP
- IB/mlx: Set slid to zero in Ethernet completion struct
- RDMA/bnxt_re: Unconditionly fence non wire memory operations
- RDMA/bnxt_re: Fix incorrect DB offset calculation
- RDMA/bnxt_re: Fix the ib_reg failure cleanup
- xen/pirq: fix error path cleanup when binding MSIs
- drm/amd/amdgpu: Correct VRAM width for APUs with GMC9
- xfrm: Fix ESN sequence number handling for IPsec GSO packets.
- arm64: dts: rockchip: Fix rk3399-gru-* s2r (pinctrl hogs, wifi reset)
- drm/sun4i: Fix dclk_set_phase
- btrfs: use kvzalloc to allocate btrfs_fs_info
- Btrfs: send, fix issuing write op when processing hole in no data mode
- Btrfs: fix log replay failure after linking special file and fsync
- ceph: fix potential memory leak in init_caches()
- block: display the correct diskname for bio
- selftests/powerpc: Skip the subpage_prot tests if the syscall is unavailable
- net: ethtool: don't ignore return from driver get_fecparam method
- iwlwifi: mvm: fix TX of CCMP 256
- iwlwifi: mvm: Fix channel switch for count 0 and 1
- iwlwifi: mvm: fix assert 0x2B00 on older FWs
- iwlwifi: avoid collecting firmware dump if not loaded
- iwlwifi: mvm: Direct multicast frames to the correct station
- iwlwifi: mvm: Correctly set the tid for mcast queue
- rds: Incorrect reference counting in TCP socket creation
- watchdog: f71808e_wdt: Fix magic close handling
- batman-adv: Fix multicast packet loss with a single WANT_ALL_IPV4/6 flag
- hv_netvsc: use napi_schedule_irqoff
- hv_netvsc: filter multicast/broadcast
- hv_netvsc: propagate rx filters to VF
- ARM: dts: rockchip: Add missing #sound-dai-cells on rk3288
- e1000e: Fix check_for_link return value with autoneg off
- e1000e: allocate ring descriptors with dma_zalloc_coherent
- ia64/err-inject: Use get_user_pages_fast()
- RDMA/qedr: Fix kernel panic when running fio over NFSoRDMA
- RDMA/qedr: Fix iWARP write and send with immediate
- IB/mlx4: Fix corruption of RoCEv2 IPv4 GIDs
- IB/mlx4: Include GID type when deleting GIDs from HW table under RoCE
- IB/mlx5: Fix an error code in __mlx5_ib_modify_qp()
- fbdev: Fixing arbitrary kernel leak in case FBIOGETCMAP_SPARC in
sbusfb_ioctl_helper().
- fsl/fman: avoid sleeping in atomic context while adding an address
- qed: Free RoCE ILT Memory on rmmod qedr
- net: qcom/emac: Use proper free methods during TX
- net: smsc911x: Fix unload crash when link is up
- IB/core: Fix possible crash to access NULL netdev
- cxgb4: do not set needs_free_netdev for mgmt dev's
- xen-blkfront: move negotiate_mq to cover all cases of new VBDs
- xen: xenbus: use put_device() instead of kfree()
- hv_netvsc: fix filter flags
- hv_netvsc: fix locking for rx_mode
- hv_netvsc: fix locking during VF setup
- ARM: davinci: fix the GPIO lookup for omapl138-hawk
- arm64: Relax ARM_SMCCC_ARCH_WORKAROUND_1 discovery
- selftests/vm/run_vmtests: adjust hugetlb size according to nr_cpus
- lib/test_kmod.c: fix limit check on number of test devices created
- dmaengine: mv_xor_v2: Fix clock resource by adding a register clock
- netfilter: ebtables: fix erroneous reject of last rule
- can: m_can: change comparison to bitshift when dealing with a mask
- can: m_can: select pinctrl state in each suspend/resume function
- bnxt_en: Check valid VNIC ID in bnxt_hwrm_vnic_set_tpa().
- workqueue: use put_device() instead of kfree()
- ipv4: lock mtu in fnhe when received PMTU < net.ipv4.route.min_pmtu
- sunvnet: does not support GSO for sctp
- KVM: arm/arm64: vgic: Add missing irq_lock to vgic_mmio_read_pending
- gpu: ipu-v3: prg: avoid possible array underflow
- drm/imx: move arming of the vblank event to atomic_flush
- drm/nouveau/bl: fix backlight regression
- xfrm: fix rcu_read_unlock usage in xfrm_local_error
- iwlwifi: mvm: set the correct tid when we flush the MCAST sta
- iwlwifi: mvm: Correctly set IGTK for AP
- iwlwifi: mvm: fix error checking for multi/broadcast sta
- net: Fix vlan untag for bridge and vlan_dev with reorder_hdr off
- vlan: Fix out of order vlan headers with reorder header off
- batman-adv: fix header size check in batadv_dbg_arp()
- batman-adv: Fix skbuff rcsum on packet reroute
- vti4: Don't count header length twice on tunnel setup
- ip_tunnel: Clamp MTU to bounds on new link
- vti6: Fix dev->max_mtu setting
- iwlwifi: mvm: Increase session protection time after CS
- iwlwifi: mvm: clear tx queue id when unreserving aggregation queue
- iwlwifi: mvm: make sure internal station has a valid id
- iwlwifi: mvm: fix array out of bounds reference
- drm/tegra: Shutdown on driver unbind
- perf/cgroup: Fix child event counting bug
- brcmfmac: Fix check for ISO3166 code
- kbuild: make scripts/adjust_autoksyms.sh robust against timestamp races
- RDMA/ucma: Correct option size check using optlen
- RDMA/qedr: fix QP's ack timeout configuration
- RDMA/qedr: Fix rc initialization on CNQ allocation failure
- RDMA/qedr: Fix QP state initialization race
- net/sched: fix idr leak on the error path of tcf_bpf_init()
- net/sched: fix idr leak in the error path of tcf_simp_init()
- net/sched: fix idr leak in the error path of tcf_act_police_init()
- net/sched: fix idr leak in the error path of tcp_pedit_init()
- net/sched: fix idr leak in the error path of __tcf_ipt_init()
- net/sched: fix idr leak in the error path of tcf_skbmod_init()
- net: dsa: Fix functional dsa-loop dependency on FIXED_PHY
- drm/ast: Fixed 1280x800 Display Issue
- mm/mempolicy.c: avoid use uninitialized preferred_node
- mm, thp: do not cause memcg oom for thp
- xfrm: Fix transport mode skb control buffer usage.
- selftests: ftrace: Add probe event argument syntax testcase
- selftests: ftrace: Add a testcase for string type with kprobe_event
- selftests: ftrace: Add a testcase for probepoint
- drm/amdkfd: Fix scratch memory with HWS enabled
- batman-adv: fix multicast-via-unicast transmission with AP isolation
- batman-adv: fix packet loss for broadcasted DHCP packets to a server
- ARM: 8748/1: mm: Define vdso_start, vdso_end as array
- lan78xx: Set ASD in MAC_CR when EEE is enabled.
- net: qmi_wwan: add BroadMobi BM806U 2020:2033
- bonding: fix the err path for dev hwaddr sync in bond_enslave
- net: dsa: mt7530: fix module autoloading for OF platform drivers
- net/mlx5: Make eswitch support to depend on switchdev
- perf/x86/intel: Fix linear IP of PEBS real_ip on Haswell and later CPUs
- x86/alternatives: Fixup alternative_call_2
- llc: properly handle dev_queue_xmit() return value
- builddeb: Fix header package regarding dtc source links
- qede: Fix barrier usage after tx doorbell write.
- mm, slab: memcg_link the SLAB's kmem_cache
- mm/page_owner: fix recursion bug after changing skip entries
- mm/kmemleak.c: wait for scan completion before disabling free
- hv_netvsc: enable multicast if necessary
- qede: Do not drop rx-checksum invalidated packets.
- net: Fix untag for vlan packets without ethernet header
- vlan: Fix vlan insertion for packets without ethernet header
- net: mvneta: fix enable of all initialized RXQs
- sh: fix debug trap failure to process signals before return to user
- firmware: dmi_scan: Fix UUID length safety check
- nvme: don't send keep-alives to the discovery controller
- Btrfs: clean up resources during umount after trans is aborted
- Btrfs: fix loss of prealloc extents past i_size after fsync log replay
- x86/pgtable: Don't set huge PUD/PMD on non-leaf entries
- fs/proc/proc_sysctl.c: fix potential page fault while unregistering sysctl
table
- swap: divide-by-zero when zero length swap file on ssd
- z3fold: fix memory leak
- sr: get/drop reference to device in revalidate and check_events
- Force log to disk before reading the AGF during a fstrim
- cpufreq: CPPC: Initialize shared perf capabilities of CPUs
- powerpc/fscr: Enable interrupts earlier before calling get_user()
- perf tools: Fix perf builds with clang support
- perf clang: Add support for recent clang versions
- dp83640: Ensure against premature access to PHY registers after reset
- ibmvnic: Zero used TX descriptor counter on reset
- mm/ksm: fix interaction with THP
- mm: fix races between address_space dereference and free in page_evicatable
- mm: thp: fix potential clearing to referenced flag in
page_idle_clear_pte_refs_one()
- Btrfs: bail out on error during replay_dir_deletes
- Btrfs: fix NULL pointer dereference in log_dir_items
- btrfs: Fix possible softlock on single core machines
- IB/rxe: Fix for oops in rxe_register_device on ppc64le arch
- ocfs2/dlm: don't handle migrate lockres if already in shutdown
- powerpc/64s/idle: Fix restore of AMOR on POWER9 after deep sleep
- sched/rt: Fix rq->clock_update_flags < RQCF_ACT_SKIP warning
- x86/mm: Fix bogus warning during EFI bootup, use boot_cpu_has() instead of
this_cpu_has() in build_cr3_noflush()
- KVM: VMX: raise internal error for exception during invalid protected mode
state
- lan78xx: Connect phy early
- sparc64: Make atomic_xchg() an inline function rather than a macro.
- net: bgmac: Fix endian access in bgmac_dma_tx_ring_free()
- net: bgmac: Correctly annotate register space
- btrfs: tests/qgroup: Fix wrong tree backref level
- Btrfs: fix copy_items() return value when logging an inode
- btrfs: fix lockdep splat in btrfs_alloc_subvolume_writers
- btrfs: qgroup: Fix root item corruption when multiple same source snapshots
are created with quota enabled
- rxrpc: Fix Tx ring annotation after initial Tx failure
- rxrpc: Don't treat call aborts as conn aborts
- xen/acpi: off by one in read_acpi_id()
- drivers: macintosh: rack-meter: really fix bogus memsets
- ACPI: acpi_pad: Fix memory leak in power saving threads
- powerpc/mpic: Check if cpu_possible() in mpic_physmask()
- ieee802154: ca8210: fix uninitialised data read
- ath10k: advertize beacon_int_min_gcd
- iommu/amd: Take into account that alloc_dev_data() may return NULL
- intel_th: Use correct method of finding hub
- m68k: set dma and coherent masks for platform FEC ethernets
- iwlwifi: mvm: check if mac80211_queue is valid in iwl_mvm_disable_txq
- parisc/pci: Switch LBA PCI bus from Hard Fail to Soft Fail mode
- hwmon: (nct6775) Fix writing pwmX_mode
- powerpc/perf: Prevent kernel address leak to userspace via BHRB buffer
- powerpc/perf: Fix kernel address leak via sampling registers
- rsi: fix kernel panic observed on 64bit machine
- tools/thermal: tmon: fix for segfault
- selftests: Print the test we're running to /dev/kmsg
- net/mlx5: Protect from command bit overflow
- watchdog: davinci_wdt: fix error handling in davinci_wdt_probe()
- ath10k: Fix kernel panic while using worker (ath10k_sta_rc_update_wk)
- nvme-pci: disable APST for Samsung NVMe SSD 960 EVO + ASUS PRIME Z370-A
- ath9k: fix crash in spectral scan
- cxgb4: Setup FW queues before registering netdev
- ima: Fix Kconfig to select TPM 2.0 CRB interface
- ima: Fallback to the builtin hash algorithm
- watchdog: aspeed: Allow configuring for alternate boot
- arm: dts: socfpga: fix GIC PPI warning
- ext4: don't complain about incorrect features when probing
- drm/vmwgfx: Unpin the screen object backup buffer when not used
- iommu/mediatek: Fix protect memory setting
- cpufreq: cppc_cpufreq: Fix cppc_cpufreq_init() failure path
- IB/mlx5: Set the default active rate and width to QDR and 4X
- zorro: Set up z->dev.dma_mask for the DMA API
- bcache: quit dc->writeback_thread when BCACHE_DEV_DETACHING is set
- remoteproc: imx_rproc: Fix an error handling path in 'imx_rproc_probe()'
- dt-bindings: add device tree binding for Allwinner H6 main CCU
- ACPICA: Events: add a return on failure from acpi_hw_register_read
- ACPICA: Fix memory leak on unusual memory leak
- ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c
- cxgb4: Fix queue free path of ULD drivers
- i2c: mv64xxx: Apply errata delay only in standard mode
- KVM: lapic: stop advertising DIRECTED_EOI when in-kernel IOAPIC is in use
- perf top: Fix top.call-graph config option reading
- perf stat: Fix core dump when flag T is used
- IB/core: Honor port_num while resolving GID for IB link layer
- drm/amdkfd: add missing include of mm.h
- coresight: Use %px to print pcsr instead of %p
- regulator: gpio: Fix some error handling paths in 'gpio_regulator_probe()'
- spi: bcm-qspi: fIX some error handling paths
- net/smc: pay attention to MAX_ORDER for CQ entries
- MIPS: ath79: Fix AR724X_PLL_REG_PCIE_CONFIG offset
- watchdog: dw: RMW the control register
- watchdog: aspeed: Fix translation of reset mode to ctrl register
- drm/meson: Fix some error handling paths in 'meson_drv_bind_master()'
- drm/meson: Fix an un-handled error path in 'meson_drv_bind_master()'
- powerpc: Add missing prototype for arch_irq_work_raise()
- f2fs: fix to set KEEP_SIZE bit in f2fs_zero_range
- f2fs: fix to clear CP_TRIMMED_FLAG
- f2fs: fix to check extent cache in f2fs_drop_extent_tree
- perf/core: Fix installing cgroup events on CPU
- max17042: propagate of_node to power supply device
- perf/core: Fix perf_output_read_group()
- drm/panel: simple: Fix the bus format for the Ontat panel
- hwmon: (pmbus/max8688) Accept negative page register values
- hwmon: (pmbus/adm1275) Accept negative page register values
- perf/x86/intel: Properly save/restore the PMU state in the NMI handler
- cdrom: do not call check_disk_change() inside cdrom_open()
- efi/arm*: Only register page tables when they exist
- perf/x86/intel: Fix large period handling on Broadwell CPUs
- perf/x86/intel: Fix event update for auto-reload
- arm64: dts: qcom: Fix SPI5 config on MSM8996
- soc: qcom: wcnss_ctrl: Fix increment in NV upload
- gfs2: Fix fallocate chunk size
- x86/devicetree: Initialize device tree before using it
- x86/devicetree: Fix device IRQ settings in DT
- phy: rockchip-emmc: retry calpad busy trimming
- ALSA: vmaster: Propagate slave error
- phy: qcom-qmp: Fix phy pipe clock gating
- drm/bridge: sii902x: Retry status read after DDI I2C
- tools: hv: fix compiler warnings about major/target_fname
- block: null_blk: fix 'Invalid parameters' when loading module
- dmaengine: pl330: fix a race condition in case of threaded irqs
- dmaengine: rcar-dmac: Check the done lists in rcar_dmac_chan_get_residue()
- enic: enable rq before updating rq descriptors
- watchdog: asm9260_wdt: fix error handling in asm9260_wdt_probe()
- hwrng: stm32 - add reset during probe
- pinctrl: devicetree: Fix dt_to_map_one_config handling of hogs
- pinctrl: artpec6: dt: add missing pin group uart5nocts
- vfio-ccw: fence off transport mode
- dmaengine: qcom: bam_dma: get num-channels and num-ees from dt
- drm: omapdrm: dss: Move initialization code from component bind to probe
- ARM: dts: dra71-evm: Correct evm_sd regulator max voltage
- drm/amdgpu: disable GFX ring and disable PQ wptr in hw_fini
- drm/amdgpu: adjust timeout for ib_ring_tests(v2)
- net: stmmac: ensure that the device has released ownership before reading
data
- net: stmmac: ensure that the MSS desc is the last desc to set the own bit
- cpufreq: Reorder cpufreq_online() error code path
- dpaa_eth: fix SG mapping
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9220
- udf: Provide saner default for invalid uid / gid
- ixgbe: prevent ptp_rx_hang from running when in FILTER_ALL mode
- sh_eth: fix TSU init on SH7734/R8A7740
- power: supply: ltc2941-battery-gauge: Fix temperature units
- ARM: dts: bcm283x: Fix probing of bcm2835-i2s
- ARM: dts: bcm283x: Fix pin function of JTAG pins
- PCMCIA / PM: Avoid noirq suspend aborts during suspend-to-idle
- audit: return on memory error to avoid null pointer dereference
- net: stmmac: call correct function in stmmac_mac_config_rx_queues_routing()
- rcu: Call touch_nmi_watchdog() while printing stall warnings
- pinctrl: sh-pfc: r8a7796: Fix MOD_SEL register pin assignment for SSI pins
group
- dpaa_eth: fix pause capability advertisement logic
- MIPS: Octeon: Fix logging messages with spurious periods after newlines
- drm/rockchip: Respect page offset for PRIME mmap calls
- x86/apic: Set up through-local-APIC mode on the boot CPU if 'noapic'
specified
- perf test: Fix test case inet_pton to accept inlines.
- perf report: Fix wrong jump arrow
- perf tests: Use arch__compare_symbol_names to compare symbols
- perf report: Fix memory corruption in --branch-history mode --branch-history
- perf tests: Fix dwarf unwind for stripped binaries
- selftests/net: fixes psock_fanout eBPF test case
- netlabel: If PF_INET6, check sk_buff ip header version
- drm: rcar-du: lvds: Fix LVDS startup on R-Car Gen3
- drm: rcar-du: lvds: Fix LVDS startup on R-Car Gen2
- ARM: dts: at91: tse850: use the correct compatible for the eeprom
- regmap: Correct comparison in regmap_cached
- i40e: Add delay after EMP reset for firmware to recover
- ARM: dts: imx7d: cl-som-imx7: fix pinctrl_enet
- ARM: dts: porter: Fix HDMI output routing
- regulator: of: Add a missing 'of_node_put()' in an error handling path of
'of_regulator_match()'
- pinctrl: mcp23s08: spi: Fix regmap debugfs entries
- kdb: make "mdr" command repeat
- drm/vmwgfx: Set dmabuf_size when vmw_dmabuf_init is successful
- perf tools: Add trace/beauty/generated/ into .gitignore
- tools: sync up .h files with the repective arch and uapi .h files
- MIPS: xilfpga: Stop generating useless dtb.o
- MIPS: xilfpga: Actually include FDT in fitImage
- MIPS: Fix build with DEBUG_ZBOOT and MACH_JZ4770
- fix breakage caused by d_find_alias() semantics change
- Btrfs: fix error handling in btrfs_truncate()
- mmc: block: propagate correct returned value in mmc_rpmb_ioctl
- arm64: export tishift functions to modules
- bcma: fix buffer size caused crash in bcma_core_mips_print_irq()
- PM / core: Fix direct_complete handling for devices with no callbacks
- ARM: dts: sun4i: Fix incorrect clocks for displays
- bnxt_en: Ignore src port field in decap filter nodes
- kasan, slub: fix handling of kasan_slab_free hook
- riscv/spinlock: Strengthen implementations with fences
- platform/x86: dell-smbios: Fix memory leaks in build_tokens_sysfs()
- rxrpc: Fix resend event time calculation
- i40e: hold the RTNL lock while changing interrupt schemes
- hv_netvsc: Fix the return status in RX path
- firmware: fix checking for return values for fw_add_devm_name()
- bcache: set writeback_rate_update_seconds in range [1, 60] seconds
- bcache: fix cached_dev->count usage for bch_cache_set_error()
- bcache: stop dc->writeback_rate_update properly
- ibmvnic: Fix reset return from closed state
- powerpc/vas: Fix cleanup when VAS is not configured
- f2fs: flush cp pack except cp pack 2 page at first
- drm/amdgpu: Clean sdma wptr register when only enable wptr polling
- powerpc/mm/slice: Remove intermediate bitmap copy
- powerpc/mm/slice: create header files dedicated to slices
- powerpc/mm/slice: Enhance for supporting PPC32
- powerpc/mm/slice: Fix hugepage allocation at hint address on 8xx
- ibmvnic: Allocate statistics buffers during probe
- dt-bindings: display: msm/dsi: Fix the PHY regulator supply props
- drm/amd/display: Set vsc pack revision when DPCD revision is >= 1.2
- soc: renesas: r8a77970-sysc: fix power area parents
- drm/vblank: Data type fixes for 64-bit vblank sequences.
- selftests: Add FIB onlink tests
- soc: amlogic: meson-gx-pwrc-vpu: fix error on shutdown when domain is
powered off
* arm-smmu-v3 arm-smmu-v3.1.auto: failed to allocate MSIs (LP: #1785282)
- ACPICA: iasl: Add SMMUv3 device ID mapping index support
- ACPI/IORT: Remove temporary iort_get_id_mapping_index() ACPICA guard
* Driver iwlwifi for Intel Wireless-AC 9560 is slow and unreliable in kernel
4.15.0-20-generic (LP: #1772467)
- scsi: hpsa: disable device during shutdown
* [Bionic] i2c: xlp9xx: Add SMBAlert support (LP: #1786981)
- i2c: xlp9xx: Add support for SMBAlert
* qeth: don't clobber buffer on async TX completion (LP: #1786057)
- s390/qeth: don't clobber buffer on async TX completion
* Linux 4.15.0-23 crashes during the boot process with a "Unable to handle
kernel NULL pointer dereference" message (LP: #1777338)
- x86/xen: Add call of speculative_store_bypass_ht_init() to PV paths
* ThinkPad systems have no HDMI sound when using the nvidia GPU (LP: #1787058)
- ACPI / OSI: Add OEM _OSI string to enable NVidia HDMI audio
* [Bionic] i2c: xlp9xx: Fix case where SSIF read transaction completes early
(LP: #1787240)
- i2c: xlp9xx: Fix case where SSIF read transaction completes early
* [Bionic] integrate upstream fix for Cavium zram driver (LP: #1787469)
- Revert "UBUNTU: SAUCE: crypto: thunderx_zip: Fix fallout from
CONFIG_VMAP_STACK"
- crypto: cavium - Fix fallout from CONFIG_VMAP_STACK
- crypto: cavium - Limit result reading attempts
- crypto: cavium - Prevent division by zero
- crypto: cavium - Fix statistics pending request value
- crypto: cavium - Fix smp_processor_id() warnings
* Bugfix for handling of shadow doorbell buffer (LP: #1788222)
- nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event
* nvme devices namespace assigned to the wrong controller (LP: #1789227)
- nvme/multipath: Fix multipath disabled naming collisions
* linux-cloud-tools-common: Ensure hv-kvp-daemon.service starts before
walinuxagent.service (LP: #1739107)
- [Debian] hyper-v -- Ensure that hv-kvp-daemon.service starts before
walinuxagent.service
* hinic interfaces aren't getting predictable names (LP: #1783138)
- hinic: Link the logical network device to the pci device in sysfs
* Suspend fails in Ubuntu and Kubuntu 18.04 but works fine in Ubuntu and
Kubuntu 17.10 (and on Kubuntu 18.04 using kernel 4.14.47) (LP: #1774950)
- ACPI / LPSS: Avoid PM quirks on suspend and resume from S3
- ACPI / LPSS: Avoid PM quirks on suspend and resume from hibernation
* [Bionic] Bluetooth: Support RTL8723D and RTL8821C Devices (LP: #1784835)
- Bluetooth: btrtl: Add RTL8723D and RTL8821C devices
* CacheFiles: Error: Overlong wait for old active object to go away.
(LP: #1776254)
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE flag
- cachefiles: Wait rather than BUG'ing on "Unexpected object collision"
* fscache cookie refcount updated incorrectly during fscache object allocation
(LP: #1776277) // fscache cookie refcount updated incorrectly during fscache
object allocation (LP: #1776277)
- fscache: Fix reference overput in fscache_attach_object() error handling
* FS-Cache: Assertion failed: FS-Cache: 6 == 5 is false (LP: #1774336)
- Revert "UBUNTU: SAUCE: CacheFiles: fix a read_waiter/read_copier race"
- fscache: Allow cancelled operations to be enqueued
- cachefiles: Fix refcounting bug in backing-file read monitoring
* SMB3: Fix regression in server reconnect detection (LP: #1786110)
- smb3: on reconnect set PreviousSessionId field
* CVE-2018-1118
- vhost: fix info leak due to uninitialized memory
-- Khalid Elmously <email address hidden> Mon, 27 Aug 2018 11:33:23 -0400
-
linux-aws (4.15.0-1020.20) bionic; urgency=medium
* linux-aws: 4.15.0-1020.20 -proposed tracker (LP: #1787154)
[ Ubuntu: 4.15.0-33.36 ]
* linux: 4.15.0-33.36 -proposed tracker (LP: #1787149)
* RTNL assertion failure on ipvlan (LP: #1776927)
- ipvlan: drop ipv6 dependency
- ipvlan: use per device spinlock to protect addrs list updates
- SAUCE: fix warning from "ipvlan: drop ipv6 dependency"
* ubuntu_bpf_jit test failed on Bionic s390x systems (LP: #1753941)
- test_bpf: flag tests that cannot be jited on s390
* HDMI/DP audio can't work on the laptop of Dell Latitude 5495 (LP: #1782689)
- drm/nouveau: fix nouveau_dsm_get_client_id()'s return type
- drm/radeon: fix radeon_atpx_get_client_id()'s return type
- drm/amdgpu: fix amdgpu_atpx_get_client_id()'s return type
- platform/x86: apple-gmux: fix gmux_get_client_id()'s return type
- ALSA: hda: use PCI_BASE_CLASS_DISPLAY to replace PCI_CLASS_DISPLAY_VGA
- vga_switcheroo: set audio client id according to bound GPU id
* locking sockets broken due to missing AppArmor socket mediation patches
(LP: #1780227)
- UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix sockets
* Update2 for ocxl driver (LP: #1781436)
- ocxl: Fix page fault handler in case of fault on dying process
* netns: unable to follow an interface that moves to another netns
(LP: #1774225)
- net: core: Expose number of link up/down transitions
- dev: always advertise the new nsid when the netns iface changes
- dev: advertise the new ifindex when the netns iface changes
* [Bionic] Disk IO hangs when using BFQ as io scheduler (LP: #1780066)
- block, bfq: fix occurrences of request finish method's old name
- block, bfq: remove batches of confusing ifdefs
- block, bfq: add requeue-request hook
* HP ProBook 455 G5 needs mute-led-gpio fixup (LP: #1781763)
- ALSA: hda: add mute led support for HP ProBook 455 G5
* [Bionic] bug fixes to improve stability of the ThunderX2 i2c driver
(LP: #1781476)
- i2c: xlp9xx: Fix issue seen when updating receive length
- i2c: xlp9xx: Make sure the transfer size is not more than
I2C_SMBUS_BLOCK_SIZE
* x86/kvm: fix LAPIC timer drift when guest uses periodic mode (LP: #1778486)
- x86/kvm: fix LAPIC timer drift when guest uses periodic mode
* Please include ax88179_178a and r8152 modules in d-i udeb (LP: #1771823)
- [Config:] d-i: Add ax88179_178a and r8152 to nic-modules
* Nvidia fails after switching its mode (LP: #1778658)
- PCI: Restore config space on runtime resume despite being unbound
* Kernel error "task zfs:pid blocked for more than 120 seconds" (LP: #1781364)
- SAUCE: (noup) zfs to 0.7.5-1ubuntu16.3
* CVE-2018-12232
- PATCH 1/1] socket: close race condition between sock_close() and
sockfs_setattr()
* CVE-2018-10323
- xfs: set format back to extents if xfs_bmap_extents_to_btree
* change front mic location for more lenovo m7/8/9xx machines (LP: #1781316)
- ALSA: hda/realtek - Fix the problem of two front mics on more machines
- ALSA: hda/realtek - two more lenovo models need fixup of MIC_LOCATION
* Cephfs + fscache: unable to handle kernel NULL pointer dereference at
0000000000000000 IP: jbd2__journal_start+0x22/0x1f0 (LP: #1783246)
- ceph: track read contexts in ceph_file_info
* Touchpad of ThinkPad P52 failed to work with message "lost sync at byte"
(LP: #1779802)
- Input: elantech - fix V4 report decoding for module with middle key
- Input: elantech - enable middle button of touchpads on ThinkPad P52
* xhci_hcd 0000:00:14.0: Root hub is not suspended (LP: #1779823)
- usb: xhci: dbc: Fix lockdep warning
- usb: xhci: dbc: Don't decrement runtime PM counter if DBC is not started
* CVE-2018-13406
- video: uvesafb: Fix integer overflow in allocation
* CVE-2018-10840
- ext4: correctly handle a zero-length xattr with a non-zero e_value_offs
* CVE-2018-11412
- ext4: do not allow external inodes for inline data
* CVE-2018-10881
- ext4: clear i_data in ext4_inode_info when removing inline data
* CVE-2018-12233
- jfs: Fix inconsistency between memory allocation and ea_buf->max_size
* CVE-2018-12904
- kvm: nVMX: Enforce cpl=0 for VMX instructions
* Error parsing PCC subspaces from PCCT (LP: #1528684)
- mailbox: PCC: erroneous error message when parsing ACPI PCCT
* CVE-2018-13094
- xfs: don't call xfs_da_shrink_inode with NULL bp
* other users' coredumps can be read via setgid directory and killpriv bypass
(LP: #1779923) // CVE-2018-13405
- Fix up non-directory creation in SGID directories
* Invoking obsolete 'firmware_install' target breaks snap build (LP: #1782166)
- snapcraft.yaml: stop invoking the obsolete (and non-existing)
'firmware_install' target
* snapcraft.yaml: missing ubuntu-retpoline-extract-one script breaks the build
(LP: #1782116)
- snapcraft.yaml: copy retpoline-extract-one to scripts before build
* Allow Raven Ridge's audio controller to be runtime suspended (LP: #1782540)
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
* CVE-2018-11506
- sr: pass down correctly sized SCSI sense buffer
* Bionic update: upstream stable patchset 2018-07-24 (LP: #1783418)
- net: Fix a bug in removing queues from XPS map
- net/mlx4_core: Fix error handling in mlx4_init_port_info.
- net/sched: fix refcnt leak in the error path of tcf_vlan_init()
- net: sched: red: avoid hashing NULL child
- net/smc: check for missing nlattrs in SMC_PNETID messages
- net: test tailroom before appending to linear skb
- packet: in packet_snd start writing at link layer allocation
- sock_diag: fix use-after-free read in __sk_free
- tcp: purge write queue in tcp_connect_init()
- vmxnet3: set the DMA mask before the first DMA map operation
- vmxnet3: use DMA memory barriers where required
- hv_netvsc: empty current transmit aggregation if flow blocked
- hv_netvsc: Use the num_online_cpus() for channel limit
- hv_netvsc: avoid retry on send during shutdown
- hv_netvsc: only wake transmit queue if link is up
- hv_netvsc: fix error unwind handling if vmbus_open fails
- hv_netvsc: cancel subchannel setup before halting device
- hv_netvsc: fix race in napi poll when rescheduling
- hv_netvsc: defer queue selection to VF
- hv_netvsc: disable NAPI before channel close
- hv_netvsc: use RCU to fix concurrent rx and queue changes
- hv_netvsc: change GPAD teardown order on older versions
- hv_netvsc: common detach logic
- hv_netvsc: Use Windows version instead of NVSP version on GPAD teardown
- hv_netvsc: Split netvsc_revoke_buf() and netvsc_teardown_gpadl()
- hv_netvsc: Ensure correct teardown message sequence order
- hv_netvsc: Fix a network regression after ifdown/ifup
- sparc: vio: use put_device() instead of kfree()
- ext2: fix a block leak
- s390: add assembler macros for CPU alternatives
- s390: move expoline assembler macros to a header
- s390/crc32-vx: use expoline for indirect branches
- s390/lib: use expoline for indirect branches
- s390/ftrace: use expoline for indirect branches
- s390/kernel: use expoline for indirect branches
- s390: move spectre sysfs attribute code
- s390: extend expoline to BC instructions
- s390: use expoline thunks in the BPF JIT
- scsi: sg: allocate with __GFP_ZERO in sg_build_indirect()
- scsi: zfcp: fix infinite iteration on ERP ready list
- loop: don't call into filesystem while holding lo_ctl_mutex
- loop: fix LOOP_GET_STATUS lock imbalance
- cfg80211: limit wiphy names to 128 bytes
- hfsplus: stop workqueue when fill_super() failed
- x86/kexec: Avoid double free_page() upon do_kexec_load() failure
- usb: gadget: f_uac2: fix bFirstInterface in composite gadget
- usb: dwc3: Undo PHY init if soft reset fails
- usb: dwc3: omap: don't miss events during suspend/resume
- usb: gadget: core: Fix use-after-free of usb_request
- usb: gadget: fsl_udc_core: fix ep valid checks
- usb: dwc2: Fix dwc2_hsotg_core_init_disconnected()
- usb: cdc_acm: prevent race at write to acm while system resumes
- net: usbnet: fix potential deadlock on 32bit hosts
- ARM: dts: imx7d-sdb: Fix regulator-usb-otg2-vbus node name
- usb: host: xhci-plat: revert "usb: host: xhci-plat: enable clk in resume
timing"
- USB: OHCI: Fix NULL dereference in HCDs using HCD_LOCAL_MEM
- net/usb/qmi_wwan.c: Add USB id for lt4120 modem
- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
- Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB
- ALSA: usb-audio: Add native DSD support for Luxman DA-06
- usb: dwc3: Add SoftReset PHY synchonization delay
- usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields
- usb: dwc3: Makefile: fix link error on randconfig
- xhci: zero usb device slot_id member when disabling and freeing a xhci slot
- usb: dwc2: Fix interval type issue
- usb: dwc2: hcd: Fix host channel halt flow
- usb: dwc2: host: Fix transaction errors in host mode
- usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS
- usb: gadget: ffs: Execute copy_to_user() with USER_DS set
- usbip: Correct maximum value of CONFIG_USBIP_VHCI_HC_PORTS
- usb: gadget: udc: change comparison to bitshift when dealing with a mask
- usb: gadget: composite: fix incorrect handling of OS desc requests
- media: lgdt3306a: Fix module count mismatch on usb unplug
- media: em28xx: USB bulk packet size fix
- Bluetooth: btusb: Add device ID for RTL8822BE
- xhci: Show what USB release number the xHC supports from protocol capablity
- staging: bcm2835-audio: Release resources on module_exit()
- staging: lustre: fix bug in osc_enter_cache_try
- staging: fsl-dpaa2/eth: Fix incorrect casts
- staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr
- staging: ks7010: Use constants from ieee80211_eid instead of literal ints.
- staging: lustre: lmv: correctly iput lmo_root
- crypto: inside-secure - wait for the request to complete if in the backlog
- crypto: atmel-aes - fix the keys zeroing on errors
- crypto: ccp - don't disable interrupts while setting up debugfs
- crypto: inside-secure - do not process request if no command was issued
- crypto: inside-secure - fix the cache_len computation
- crypto: inside-secure - fix the extra cache computation
- crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss
- crypto: inside-secure - fix the invalidation step during cra_exit
- scsi: mpt3sas: fix an out of bound write
- scsi: ufs: Enable quirk to ignore sending WRITE_SAME command
- scsi: bnx2fc: Fix check in SCSI completion handler for timed out request
- scsi: sym53c8xx_2: iterator underflow in sym_getsync()
- scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo()
- scsi: qla2xxx: Avoid triggering undefined behavior in
qla2x00_mbx_completion()
- scsi: storvsc: Increase cmd_per_lun for higher speed devices
- scsi: qedi: Fix truncation of CHAP name and secret
- scsi: aacraid: fix shutdown crash when init fails
- scsi: qla4xxx: skip error recovery in case of register disconnect.
- scsi: qedi: Fix kernel crash during port toggle
- scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM
- scsi: sd: Keep disk read-only when re-reading partition
- scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled
- scsi: aacraid: Insure command thread is not recursively stopped
- scsi: core: Make SCSI Status CONDITION MET equivalent to GOOD
- scsi: mvsas: fix wrong endianness of sgpio api
- ASoC: hdmi-codec: Fix module unloading caused kernel crash
- ASoC: rockchip: rk3288-hdmi-analog: Select needed codecs
- ASoC: samsung: odroid: Fix 32000 sample rate handling
- ASoC: topology: create TLV data for dapm widgets
- ASoC: samsung: i2s: Ensure the RCLK rate is properly determined
- clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228
- clk: Don't show the incorrect clock phase
- clk: hisilicon: mark wdt_mux_p[] as const
- clk: tegra: Fix pll_u rate configuration
- clk: rockchip: Prevent calculating mmc phase if clock rate is zero
- clk: samsung: s3c2410: Fix PLL rates
- clk: samsung: exynos7: Fix PLL rates
- clk: samsung: exynos5260: Fix PLL rates
- clk: samsung: exynos5433: Fix PLL rates
- clk: samsung: exynos5250: Fix PLL rates
- clk: samsung: exynos3250: Fix PLL rates
- media: dmxdev: fix error code for invalid ioctls
- media: Don't let tvp5150_get_vbi() go out of vbi_ram_default array
- media: ov5645: add missing of_node_put() in error path
- media: cx23885: Override 888 ImpactVCBe crystal frequency
- media: cx23885: Set subdev host data to clk_freq pointer
- media: s3c-camif: fix out-of-bounds array access
- media: lgdt3306a: Fix a double kfree on i2c device remove
- media: em28xx: Add Hauppauge SoloHD/DualHD bulk models
- media: v4l: vsp1: Fix display stalls when requesting too many inputs
- media: i2c: adv748x: fix HDMI field heights
- media: vb2: Fix videobuf2 to map correct area
- media: vivid: fix incorrect capabilities for radio
- media: cx25821: prevent out-of-bounds read on array card
- serial: xuartps: Fix out-of-bounds access through DT alias
- serial: sh-sci: Fix out-of-bounds access through DT alias
- serial: samsung: Fix out-of-bounds access through serial port index
- serial: mxs-auart: Fix out-of-bounds access through serial port index
- serial: imx: Fix out-of-bounds access through serial port index
- serial: fsl_lpuart: Fix out-of-bounds access through DT alias
- serial: arc_uart: Fix out-of-bounds access through DT alias
- serial: 8250: Don't service RX FIFO if interrupts are disabled
- serial: altera: ensure port->regshift is honored consistently
- rtc: snvs: Fix usage of snvs_rtc_enable
- rtc: hctosys: Ensure system time doesn't overflow time_t
- rtc: rk808: fix possible race condition
- rtc: m41t80: fix race conditions
- rtc: tx4939: avoid unintended sign extension on a 24 bit shift
- rtc: rp5c01: fix possible race condition
- rtc: goldfish: Add missing MODULE_LICENSE
- cxgb4: Correct ntuple mask validation for hash filters
- net: dsa: bcm_sf2: Fix RX_CLS_LOC_ANY overwrite for last rule
- net: dsa: Do not register devlink for unused ports
- net: dsa: bcm_sf2: Fix IPv6 rules and chain ID
- net: dsa: bcm_sf2: Fix IPv6 rule half deletion
- 3c59x: convert to generic DMA API
- net: ip6_gre: Request headroom in __gre6_xmit()
- net: ip6_gre: Split up ip6gre_tnl_link_config()
- net: ip6_gre: Split up ip6gre_tnl_change()
- net: ip6_gre: Split up ip6gre_newlink()
- net: ip6_gre: Split up ip6gre_changelink()
- qed: LL2 flush isles when connection is closed
- qed: Fix possibility of list corruption during rmmod flows
- qed: Fix LL2 race during connection terminate
- powerpc: Move default security feature flags
- Bluetooth: btusb: Add support for Intel Bluetooth device 22560 [8087:0026]
- staging: fsl-dpaa2/eth: Fix incorrect kfree
- crypto: inside-secure - move the digest to the request context
- scsi: lpfc: Fix NVME Initiator FirstBurst
- serial: mvebu-uart: fix tx lost characters
* Bionic update: upstream stable patchset 2018-07-20 (LP: #1782846)
- usbip: usbip_host: refine probe and disconnect debug msgs to be useful
- usbip: usbip_host: delete device from busid_table after rebind
- usbip: usbip_host: run rebind from exit when module is removed
- usbip: usbip_host: fix NULL-ptr deref and use-after-free errors
- usbip: usbip_host: fix bad unlock balance during stub_probe()
- ALSA: usb: mixer: volume quirk for CM102-A+/102S+
- ALSA: hda: Add Lenovo C50 All in one to the power_save blacklist
- ALSA: control: fix a redundant-copy issue
- spi: pxa2xx: Allow 64-bit DMA
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
- KVM: arm/arm64: VGIC/ITS save/restore: protect kvm_read_guest() calls
- KVM: arm/arm64: VGIC/ITS: protect kvm_read_guest() calls with SRCU lock
- vfio: ccw: fix cleanup if cp_prefetch fails
- tracing/x86/xen: Remove zero data size trace events
trace_xen_mmu_flush_tlb{_all}
- tee: shm: fix use-after-free via temporarily dropped reference
- netfilter: nf_tables: free set name in error path
- netfilter: nf_tables: can't fail after linking rule into active rule list
- netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6}
- i2c: designware: fix poll-after-enable regression
- powerpc/powernv: Fix NVRAM sleep in invalid context when crashing
- drm: Match sysfs name in link removal to link creation
- lib/test_bitmap.c: fix bitmap optimisation tests to report errors correctly
- radix tree: fix multi-order iteration race
- mm: don't allow deferred pages with NEED_PER_CPU_KM
- drm/i915/gen9: Add WaClearHIZ_WM_CHICKEN3 for bxt and glk
- s390/qdio: fix access to uninitialized qdio_q fields
- s390/qdio: don't release memory in qdio_setup_irq()
- s390: remove indirect branch from do_softirq_own_stack
- x86/pkeys: Override pkey when moving away from PROT_EXEC
- x86/pkeys: Do not special case protection key 0
- efi: Avoid potential crashes, fix the 'struct efi_pci_io_protocol_32'
definition for mixed mode
- ARM: 8771/1: kprobes: Prohibit kprobes on do_undefinstr
- x86/mm: Drop TS_COMPAT on 64-bit exec() syscall
- tick/broadcast: Use for_each_cpu() specially on UP kernels
- ARM: 8769/1: kprobes: Fix to use get_kprobe_ctlblk after irq-disabed
- ARM: 8770/1: kprobes: Prohibit probing on optimized_callback
- ARM: 8772/1: kprobes: Prohibit kprobes on get_user functions
- Btrfs: fix xattr loss after power failure
- Btrfs: send, fix invalid access to commit roots due to concurrent
snapshotting
- btrfs: property: Set incompat flag if lzo/zstd compression is set
- btrfs: fix crash when trying to resume balance without the resume flag
- btrfs: Split btrfs_del_delalloc_inode into 2 functions
- btrfs: Fix delalloc inodes invalidation during transaction abort
- btrfs: fix reading stale metadata blocks after degraded raid1 mounts
- xhci: Fix USB3 NULL pointer dereference at logical disconnect.
- KVM: arm/arm64: Properly protect VGIC locks from IRQs
- KVM: arm/arm64: VGIC/ITS: Promote irq_lock() in update_affinity
- hwmon: (k10temp) Fix reading critical temperature register
- hwmon: (k10temp) Use API function to access System Management Network
- vsprintf: Replace memory barrier with static_key for random_ptr_key update
- x86/amd_nb: Add support for Raven Ridge CPUs
- x86/apic/x2apic: Initialize cluster ID properly
* Bionic update: upstream stable patchset 2018-07-09 (LP: #1780858)
- 8139too: Use disable_irq_nosync() in rtl8139_poll_controller()
- bridge: check iface upper dev when setting master via ioctl
- dccp: fix tasklet usage
- ipv4: fix fnhe usage by non-cached routes
- ipv4: fix memory leaks in udp_sendmsg, ping_v4_sendmsg
- llc: better deal with too small mtu
- net: ethernet: sun: niu set correct packet size in skb
- net: ethernet: ti: cpsw: fix packet leaking in dual_mac mode
- net/mlx4_en: Fix an error handling path in 'mlx4_en_init_netdev()'
- net/mlx4_en: Verify coalescing parameters are in range
- net/mlx5e: Err if asked to offload TC match on frag being first
- net/mlx5: E-Switch, Include VF RDMA stats in vport statistics
- net sched actions: fix refcnt leak in skbmod
- net_sched: fq: take care of throttled flows before reuse
- net: support compat 64-bit time in {s,g}etsockopt
- net/tls: Don't recursively call push_record during tls_write_space callbacks
- net/tls: Fix connection stall on partial tls record
- openvswitch: Don't swap table in nlattr_set() after OVS_ATTR_NESTED is found
- qmi_wwan: do not steal interfaces from class drivers
- r8169: fix powering up RTL8168h
- rds: do not leak kernel memory to user land
- sctp: delay the authentication for the duplicated cookie-echo chunk
- sctp: fix the issue that the cookie-ack with auth can't get processed
- sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr
- sctp: remove sctp_chunk_put from fail_mark err path in
sctp_ulpevent_make_rcvmsg
- sctp: use the old asoc when making the cookie-ack chunk in dupcook_d
- tcp_bbr: fix to zero idle_restart only upon S/ACKed data
- tcp: ignore Fast Open on repair mode
- tg3: Fix vunmap() BUG_ON() triggered from tg3_free_consistent().
- bonding: do not allow rlb updates to invalid mac
- bonding: send learning packets for vlans on slave
- net: sched: fix error path in tcf_proto_create() when modules are not
configured
- net/mlx5e: TX, Use correct counter in dma_map error flow
- net/mlx5: Avoid cleaning flow steering table twice during error flow
- hv_netvsc: set master device
- ipv6: fix uninit-value in ip6_multipath_l3_keys()
- net/mlx5e: Allow offloading ipv4 header re-write for icmp
- nsh: fix infinite loop
- udp: fix SO_BINDTODEVICE
- l2tp: revert "l2tp: fix missing print session offset info"
- proc: do not access cmdline nor environ from file-backed areas
- net/smc: restrict non-blocking connect finish
- mlxsw: spectrum_switchdev: Do not remove mrouter port from MDB's ports list
- net/mlx5e: DCBNL fix min inline header size for dscp
- net: systemport: Correclty disambiguate driver instances
- sctp: clear the new asoc's stream outcnt in sctp_stream_update
- tcp: restore autocorking
- tipc: fix one byte leak in tipc_sk_set_orig_addr()
- hv_netvsc: Fix net device attach on older Windows hosts
* Bionic update: upstream stable patchset 2018-07-06 (LP: #1780499)
- ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS
- ipvs: fix rtnl_lock lockups caused by start_sync_thread
- netfilter: ebtables: don't attempt to allocate 0-sized compat array
- kcm: Call strp_stop before strp_done in kcm_attach
- crypto: af_alg - fix possible uninit-value in alg_bind()
- netlink: fix uninit-value in netlink_sendmsg
- net: fix rtnh_ok()
- net: initialize skb->peeked when cloning
- net: fix uninit-value in __hw_addr_add_ex()
- dccp: initialize ireq->ir_mark
- ipv4: fix uninit-value in ip_route_output_key_hash_rcu()
- soreuseport: initialise timewait reuseport field
- inetpeer: fix uninit-value in inet_getpeer
- memcg: fix per_node_info cleanup
- perf: Remove superfluous allocation error check
- tcp: fix TCP_REPAIR_QUEUE bound checking
- bdi: wake up concurrent wb_shutdown() callers.
- bdi: Fix oops in wb_workfn()
- gpioib: do not free unrequested descriptors
- gpio: fix aspeed_gpio unmask irq
- gpio: fix error path in lineevent_create
- rfkill: gpio: fix memory leak in probe error path
- libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs
- dm integrity: use kvfree for kvmalloc'd memory
- tracing: Fix regex_match_front() to not over compare the test string
- z3fold: fix reclaim lock-ups
- mm: sections are not offlined during memory hotremove
- mm, oom: fix concurrent munlock and oom reaper unmap, v3
- ceph: fix rsize/wsize capping in ceph_direct_read_write()
- can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg()
- can: hi311x: Acquire SPI lock on ->do_get_berr_counter
- can: hi311x: Work around TX complete interrupt erratum
- drm/vc4: Fix scaling of uni-planar formats
- drm/i915: Fix drm:intel_enable_lvds ERROR message in kernel log
- drm/atomic: Clean old_state/new_state in drm_atomic_state_default_clear()
- drm/atomic: Clean private obj old_state/new_state in
drm_atomic_state_default_clear()
- net: atm: Fix potential Spectre v1
- atm: zatm: Fix potential Spectre v1
- cpufreq: schedutil: Avoid using invalid next_freq
- Revert "Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174"
- Bluetooth: btusb: Only check needs_reset_resume DMI table for QCA rome
chipsets
- thermal: exynos: Reading temperature makes sense only when TMU is turned on
- thermal: exynos: Propagate error value from tmu_read()
- nvme: add quirk to force medium priority for SQ creation
- smb3: directory sync should not return an error
- sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]
- tracing/uprobe_event: Fix strncpy corner case
- perf/x86: Fix possible Spectre-v1 indexing for hw_perf_event cache_*
- perf/x86/cstate: Fix possible Spectre-v1 indexing for pkg_msr
- perf/x86/msr: Fix possible Spectre-v1 indexing in the MSR driver
- perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[]
- perf/x86: Fix possible Spectre-v1 indexing for x86_pmu::event_map()
- i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr()
- bdi: Fix use after free bug in debugfs_remove()
- drm/ttm: Use GFP_TRANSHUGE_LIGHT for allocating huge pages
- drm/i915: Adjust eDP's logical vco in a reliable place.
- drm/nouveau/ttm: don't dereference nvbo::cli, it can outlive client
- sched/core: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]
* Bionic update: upstream stable patchset 2018-06-26 (LP: #1778759)
- percpu: include linux/sched.h for cond_resched()
- ACPI / button: make module loadable when booted in non-ACPI mode
- USB: serial: option: Add support for Quectel EP06
- ALSA: hda - Fix incorrect usage of IS_REACHABLE()
- ALSA: pcm: Check PCM state at xfern compat ioctl
- ALSA: seq: Fix races at MIDI encoding in snd_virmidi_output_trigger()
- ALSA: dice: fix kernel NULL pointer dereference due to invalid calculation
for array index
- ALSA: aloop: Mark paused device as inactive
- ALSA: aloop: Add missing cable lock to ctl API callbacks
- tracepoint: Do not warn on ENOMEM
- scsi: target: Fix fortify_panic kernel exception
- Input: leds - fix out of bound access
- Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro
- rtlwifi: btcoex: Add power_on_setting routine
- rtlwifi: cleanup 8723be ant_sel definition
- xfs: prevent creating negative-sized file via INSERT_RANGE
- RDMA/cxgb4: release hw resources on device removal
- RDMA/ucma: Allow resolving address w/o specifying source address
- RDMA/mlx5: Fix multiple NULL-ptr deref errors in rereg_mr flow
- RDMA/mlx5: Protect from shift operand overflow
- NET: usb: qmi_wwan: add support for ublox R410M PID 0x90b2
- IB/mlx5: Use unlimited rate when static rate is not supported
- IB/hfi1: Fix handling of FECN marked multicast packet
- IB/hfi1: Fix loss of BECN with AHG
- IB/hfi1: Fix NULL pointer dereference when invalid num_vls is used
- iw_cxgb4: Atomically flush per QP HW CQEs
- drm/vmwgfx: Fix a buffer object leak
- drm/bridge: vga-dac: Fix edid memory leak
- test_firmware: fix setting old custom fw path back on exit, second try
- errseq: Always report a writeback error once
- USB: serial: visor: handle potential invalid device configuration
- usb: dwc3: gadget: Fix list_del corruption in dwc3_ep_dequeue
- USB: Accept bulk endpoints with 1024-byte maxpacket
- USB: serial: option: reimplement interface masking
- USB: serial: option: adding support for ublox R410M
- usb: musb: host: fix potential NULL pointer dereference
- usb: musb: trace: fix NULL pointer dereference in musb_g_tx()
- platform/x86: asus-wireless: Fix NULL pointer dereference
- irqchip/qcom: Fix check for spurious interrupts
- tracing: Fix bad use of igrab in trace_uprobe.c
- [Config] CONFIG_ARM64_ERRATUM_1024718=y
- arm64: Add work around for Arm Cortex-A55 Erratum 1024718
- Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro
- infiniband: mlx5: fix build errors when INFINIBAND_USER_ACCESS=m
- btrfs: Take trans lock before access running trans in check_delayed_ref
- drm/vc4: Make sure vc4_bo_{inc,dec}_usecnt() calls are balanced
- xhci: Fix use-after-free in xhci_free_virt_device
- platform/x86: Kconfig: Fix dell-laptop dependency chain.
- KVM: x86: remove APIC Timer periodic/oneshot spikes
- clocksource: Allow clocksource_mark_unstable() on unregistered clocksources
- clocksource: Initialize cs->wd_list
- clocksource: Consistent de-rate when marking unstable
* Bionic update: upstream stable patchset 2018-06-22 (LP: #1778265)
- ext4: set h_journal if there is a failure starting a reserved handle
- ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs
- ext4: add validity checks for bitmap block numbers
- ext4: fix bitmap position validation
- random: fix possible sleeping allocation from irq context
- random: rate limit unseeded randomness warnings
- usbip: usbip_event: fix to not print kernel pointer address
- usbip: usbip_host: fix to hold parent lock for device_attach() calls
- usbip: vhci_hcd: Fix usb device and sockfd leaks
- usbip: vhci_hcd: check rhport before using in vhci_hub_control()
- Revert "xhci: plat: Register shutdown for xhci_plat"
- USB: serial: simple: add libtransistor console
- USB: serial: ftdi_sio: use jtag quirk for Arrow USB Blaster
- USB: serial: cp210x: add ID for NI USB serial console
- usb: core: Add quirk for HP v222w 16GB Mini
- USB: Increment wakeup count on remote wakeup.
- ALSA: usb-audio: Skip broken EU on Dell dock USB-audio
- virtio: add ability to iterate over vqs
- virtio_console: don't tie bufs to a vq
- virtio_console: free buffers after reset
- virtio_console: drop custom control queue cleanup
- virtio_console: move removal code
- virtio_console: reset on out of memory
- drm/virtio: fix vq wait_event condition
- tty: Don't call panic() at tty_ldisc_init()
- tty: n_gsm: Fix long delays with control frame timeouts in ADM mode
- tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set
- tty: Avoid possible error pointer dereference at tty_ldisc_restore().
- tty: Use __GFP_NOFAIL for tty_ldisc_get()
- ALSA: dice: fix OUI for TC group
- ALSA: dice: fix error path to destroy initialized stream data
- ALSA: hda - Skip jack and others for non-existing PCM streams
- ALSA: opl3: Hardening for potential Spectre v1
- ALSA: asihpi: Hardening for potential Spectre v1
- ALSA: hdspm: Hardening for potential Spectre v1
- ALSA: rme9652: Hardening for potential Spectre v1
- ALSA: control: Hardening for potential Spectre v1
- ALSA: pcm: Return negative delays from SNDRV_PCM_IOCTL_DELAY.
- ALSA: core: Report audio_tstamp in snd_pcm_sync_ptr
- ALSA: seq: oss: Fix unbalanced use lock for synth MIDI device
- ALSA: seq: oss: Hardening for potential Spectre v1
- ALSA: hda: Hardening for potential Spectre v1
- ALSA: hda/realtek - Add some fixes for ALC233
- ALSA: hda/realtek - Update ALC255 depop optimize
- ALSA: hda/realtek - change the location for one of two front mics
- mtd: spi-nor: cadence-quadspi: Fix page fault kernel panic
- mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block.
- mtd: cfi: cmdset_0001: Workaround Micron Erase suspend bug.
- mtd: cfi: cmdset_0002: Do not allow read/write to suspend erase block.
- mtd: rawnand: tango: Fix struct clk memory leak
- kobject: don't use WARN for registration failures
- scsi: sd: Defer spinning up drive while SANITIZE is in progress
- bfq-iosched: ensure to clear bic/bfqq pointers when preparing request
- vfio: ccw: process ssch with interrupts disabled
- ANDROID: binder: prevent transactions into own process.
- PCI: aardvark: Fix logic in advk_pcie_{rd,wr}_conf()
- PCI: aardvark: Set PIO_ADDR_LS correctly in advk_pcie_rd_conf()
- PCI: aardvark: Use ISR1 instead of ISR0 interrupt in legacy irq mode
- PCI: aardvark: Fix PCIe Max Read Request Size setting
- ARM: amba: Make driver_override output consistent with other buses
- ARM: amba: Fix race condition with driver_override
- ARM: amba: Don't read past the end of sysfs "driver_override" buffer
- ARM: socfpga_defconfig: Remove QSPI Sector 4K size force
- KVM: arm/arm64: Close VMID generation race
- crypto: drbg - set freed buffers to NULL
- ASoC: fsl_esai: Fix divisor calculation failure at lower ratio
- libceph: un-backoff on tick when we have a authenticated session
- libceph: reschedule a tick in finish_hunting()
- libceph: validate con->state at the top of try_write()
- fpga-manager: altera-ps-spi: preserve nCONFIG state
- earlycon: Use a pointer table to fix __earlycon_table stride
- drm/amdgpu: set COMPUTE_PGM_RSRC1 for SGPR/VGPR clearing shaders
- drm/i915: Enable display WA#1183 from its correct spot
- objtool, perf: Fix GCC 8 -Wrestrict error
- tools/lib/subcmd/pager.c: do not alias select() params
- x86/ipc: Fix x32 version of shmid64_ds and msqid64_ds
- x86/smpboot: Don't use mwait_play_dead() on AMD systems
- x86/microcode/intel: Save microcode patch unconditionally
- x86/microcode: Do not exit early from __reload_late()
- tick/sched: Do not mess with an enqueued hrtimer
- arm/arm64: KVM: Add PSCI version selection API
- powerpc/eeh: Fix race with driver un/bind
- serial: mvebu-uart: Fix local flags handling on termios update
- block: do not use interruptible wait anywhere
- ASoC: dmic: Fix clock parenting
- PCI / PM: Do not clear state_saved in pci_pm_freeze() when smart suspend is
set
- module: Fix display of wrong module .text address
- drm/edid: Reset more of the display info
- drm/i915/fbdev: Enable late fbdev initial configuration
- drm/i915/audio: set minimum CD clock to twice the BCLK
- drm/amd/display: Fix deadlock when flushing irq
- drm/amd/display: Disallow enabling CRTC without primary plane with FB
* Bionic update: upstream stable patchset 2018-06-22 (LP: #1778265) //
CVE-2018-1108.
- random: set up the NUMA crng instances after the CRNG is fully initialized
* Ryzen/Raven Ridge USB ports do not work (LP: #1756700)
- xhci: Fix USB ports for Dell Inspiron 5775
* [Ubuntu 1804][boston][ixgbe] EEH causes kernel BUG at /build/linux-
jWa1Fv/linux-4.15.0/drivers/pci/msi.c:352 (i2S) (LP: #1776389)
- ixgbe/ixgbevf: Free IRQ when PCI error recovery removes the device
* Need fix to aacraid driver to prevent panic (LP: #1770095)
- scsi: aacraid: Correct hba_send to include iu_type
* kernel: Fix arch random implementation (LP: #1775391)
- s390/archrandom: Rework arch random implementation.
* kernel: Fix memory leak on CCA and EP11 CPRB processing. (LP: #1775390)
- s390/zcrypt: Fix CCA and EP11 CPRB processing failure memory leak.
* Various fixes for CXL kernel module (LP: #1774471)
- cxl: Remove function write_timebase_ctrl_psl9() for PSL9
- cxl: Set the PBCQ Tunnel BAR register when enabling capi mode
- cxl: Report the tunneled operations status
- cxl: Configure PSL to not use APC virtual machines
- cxl: Disable prefault_mode in Radix mode
* Bluetooth not working (LP: #1764645)
- Bluetooth: btusb: Apply QCA Rome patches for some ATH3012 models
* linux-snapdragon: wcn36xx: mac address generation on boot (LP: #1776491)
- [Config] arm64: snapdragon: WCN36XX_SNAPDRAGON_HACKS=y
- SAUCE: wcn36xx: read MAC from file or randomly generate one
* fscache: Fix hanging wait on page discarded by writeback (LP: #1777029)
- fscache: Fix hanging wait on page discarded by writeback
[ Ubuntu: 4.15.0-32.35 ]
* CVE-2018-3620 // CVE-2018-3646
- cpu: Fix per-cpu regression on ARM64
-- Khalid Elmously <email address hidden> Thu, 16 Aug 2018 04:55:07 +0000
-
linux-aws (4.15.0-1019.19) bionic; urgency=medium
[ Ubuntu: 4.15.0-32.34 ]
* CVE-2018-5391
- Revert "net: increase fragment memory usage limits"
* CVE-2018-3620 // CVE-2018-3646
- x86/Centaur: Initialize supported CPU features properly
- x86/Centaur: Report correct CPU/cache topology
- x86/CPU/AMD: Have smp_num_siblings and cpu_llc_id always be present
- perf/events/amd/uncore: Fix amd_uncore_llc ID to use pre-defined cpu_llc_id
- x86/CPU: Rename intel_cacheinfo.c to cacheinfo.c
- x86/CPU/AMD: Calculate last level cache ID from number of sharing threads
- x86/CPU: Modify detect_extended_topology() to return result
- x86/CPU/AMD: Derive CPU topology from CPUID function 0xB when available
- x86/CPU: Move cpu local function declarations to local header
- x86/CPU: Make intel_num_cpu_cores() generic
- x86/CPU: Move cpu_detect_cache_sizes() into init_intel_cacheinfo()
- x86/CPU: Move x86_cpuinfo::x86_max_cores assignment to
detect_num_cpu_cores()
- x86/CPU/AMD: Fix LLC ID bit-shift calculation
- x86/mm: Factor out pageattr _PAGE_GLOBAL setting
- x86/mm: Undo double _PAGE_PSE clearing
- x86/mm: Introduce "default" kernel PTE mask
- x86/espfix: Document use of _PAGE_GLOBAL
- x86/mm: Do not auto-massage page protections
- x86/mm: Remove extra filtering in pageattr code
- x86/mm: Comment _PAGE_GLOBAL mystery
- x86/mm: Do not forbid _PAGE_RW before init for __ro_after_init
- x86/ldt: Fix support_pte_mask filtering in map_ldt_struct()
- x86/power/64: Fix page-table setup for temporary text mapping
- x86/pti: Filter at vma->vm_page_prot population
- x86/boot/64/clang: Use fixup_pointer() to access '__supported_pte_mask'
- x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT
- x86/speculation/l1tf: Change order of offset/type in swap entry
- x86/speculation/l1tf: Protect swap entries against L1TF
- x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation
- x86/speculation/l1tf: Make sure the first page is always reserved
- x86/speculation/l1tf: Add sysfs reporting for l1tf
- x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings
- x86/speculation/l1tf: Limit swap file size to MAX_PA/2
- x86/bugs: Move the l1tf function and define pr_fmt properly
- sched/smt: Update sched_smt_present at runtime
- x86/smp: Provide topology_is_primary_thread()
- x86/topology: Provide topology_smt_supported()
- cpu/hotplug: Make bringup/teardown of smp threads symmetric
- cpu/hotplug: Split do_cpu_down()
- cpu/hotplug: Provide knobs to control SMT
- x86/cpu: Remove the pointless CPU printout
- x86/cpu/AMD: Remove the pointless detect_ht() call
- x86/cpu/common: Provide detect_ht_early()
- x86/cpu/topology: Provide detect_extended_topology_early()
- x86/cpu/intel: Evaluate smp_num_siblings early
- x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info
- x86/cpu/AMD: Evaluate smp_num_siblings early
- x86/apic: Ignore secondary threads if nosmt=force
- x86/speculation/l1tf: Extend 64bit swap file size limit
- x86/cpufeatures: Add detection of L1D cache flush support.
- x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings
- x86/speculation/l1tf: Protect PAE swap entries against L1TF
- x86/speculation/l1tf: Fix up pte->pfn conversion for PAE
- Revert "x86/apic: Ignore secondary threads if nosmt=force"
- cpu/hotplug: Boot HT siblings at least once
- x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present
- x86/KVM/VMX: Add module argument for L1TF mitigation
- x86/KVM/VMX: Add L1D flush algorithm
- x86/KVM/VMX: Add L1D MSR based flush
- x86/KVM/VMX: Add L1D flush logic
- x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers
- x86/KVM/VMX: Add find_msr() helper function
- x86/KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting
- x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs
- x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required
- cpu/hotplug: Online siblings when SMT control is turned on
- x86/litf: Introduce vmx status variable
- x86/kvm: Drop L1TF MSR list approach
- x86/l1tf: Handle EPT disabled state proper
- x86/kvm: Move l1tf setup function
- x86/kvm: Add static key for flush always
- x86/kvm: Serialize L1D flush parameter setter
- x86/kvm: Allow runtime control of L1D flush
- cpu/hotplug: Expose SMT control init function
- cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early
- x86/bugs, kvm: Introduce boot-time control of L1TF mitigations
- Documentation: Add section about CPU vulnerabilities
- x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures
- x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content
- Documentation/l1tf: Fix typos
- cpu/hotplug: detect SMT disabled by BIOS
- x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush()
- x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond'
- x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush()
- x86/irq: Demote irq_cpustat_t::__softirq_pending to u16
- x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d
- x86: Don't include linux/irq.h from asm/hardirq.h
- x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d
- x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr()
- Documentation/l1tf: Remove Yonah processors from not vulnerable list
- x86/speculation: Simplify sysfs report of VMX L1TF vulnerability
- x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry
- KVM: x86: Add a framework for supporting MSR-based features
- KVM: X86: Introduce kvm_get_msr_feature()
- KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR
- KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry
- cpu/hotplug: Fix SMT supported evaluation
- x86/speculation/l1tf: Invert all not present mappings
- x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert
- x86/mm/pat: Make set_memory_np() L1TF safe
-- Stefan Bader <email address hidden> Fri, 10 Aug 2018 11:05:53 +0200
-
linux-aws (4.15.0-1018.18) bionic; urgency=medium
* linux-aws: 4.15.0-1018.18 -proposed tracker (LP: #1784285)
[ Ubuntu: 4.15.0-31.33 ]
* linux: 4.15.0-31.33 -proposed tracker (LP: #1784281)
* ubuntu_bpf_jit test failed on Bionic s390x systems (LP: #1753941)
- test_bpf: flag tests that cannot be jited on s390
* HDMI/DP audio can't work on the laptop of Dell Latitude 5495 (LP: #1782689)
- drm/nouveau: fix nouveau_dsm_get_client_id()'s return type
- drm/radeon: fix radeon_atpx_get_client_id()'s return type
- drm/amdgpu: fix amdgpu_atpx_get_client_id()'s return type
- platform/x86: apple-gmux: fix gmux_get_client_id()'s return type
- ALSA: hda: use PCI_BASE_CLASS_DISPLAY to replace PCI_CLASS_DISPLAY_VGA
- vga_switcheroo: set audio client id according to bound GPU id
* locking sockets broken due to missing AppArmor socket mediation patches
(LP: #1780227)
- UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix sockets
* Update2 for ocxl driver (LP: #1781436)
- ocxl: Fix page fault handler in case of fault on dying process
* RTNL assertion failure on ipvlan (LP: #1776927)
- ipvlan: drop ipv6 dependency
- ipvlan: use per device spinlock to protect addrs list updates
* netns: unable to follow an interface that moves to another netns
(LP: #1774225)
- net: core: Expose number of link up/down transitions
- dev: always advertise the new nsid when the netns iface changes
- dev: advertise the new ifindex when the netns iface changes
* [Bionic] Disk IO hangs when using BFQ as io scheduler (LP: #1780066)
- block, bfq: fix occurrences of request finish method's old name
- block, bfq: remove batches of confusing ifdefs
- block, bfq: add requeue-request hook
* HP ProBook 455 G5 needs mute-led-gpio fixup (LP: #1781763)
- ALSA: hda: add mute led support for HP ProBook 455 G5
* [Bionic] bug fixes to improve stability of the ThunderX2 i2c driver
(LP: #1781476)
- i2c: xlp9xx: Fix issue seen when updating receive length
- i2c: xlp9xx: Make sure the transfer size is not more than
I2C_SMBUS_BLOCK_SIZE
* x86/kvm: fix LAPIC timer drift when guest uses periodic mode (LP: #1778486)
- x86/kvm: fix LAPIC timer drift when guest uses periodic mode
* Please include ax88179_178a and r8152 modules in d-i udeb (LP: #1771823)
- [Config:] d-i: Add ax88179_178a and r8152 to nic-modules
* Nvidia fails after switching its mode (LP: #1778658)
- PCI: Restore config space on runtime resume despite being unbound
* Kernel error "task zfs:pid blocked for more than 120 seconds" (LP: #1781364)
- SAUCE: (noup) zfs to 0.7.5-1ubuntu16.3
* CVE-2018-12232
- PATCH 1/1] socket: close race condition between sock_close() and
sockfs_setattr()
* CVE-2018-10323
- xfs: set format back to extents if xfs_bmap_extents_to_btree
* change front mic location for more lenovo m7/8/9xx machines (LP: #1781316)
- ALSA: hda/realtek - Fix the problem of two front mics on more machines
- ALSA: hda/realtek - two more lenovo models need fixup of MIC_LOCATION
* Cephfs + fscache: unable to handle kernel NULL pointer dereference at
0000000000000000 IP: jbd2__journal_start+0x22/0x1f0 (LP: #1783246)
- ceph: track read contexts in ceph_file_info
* Touchpad of ThinkPad P52 failed to work with message "lost sync at byte"
(LP: #1779802)
- Input: elantech - fix V4 report decoding for module with middle key
- Input: elantech - enable middle button of touchpads on ThinkPad P52
* xhci_hcd 0000:00:14.0: Root hub is not suspended (LP: #1779823)
- usb: xhci: dbc: Fix lockdep warning
- usb: xhci: dbc: Don't decrement runtime PM counter if DBC is not started
* CVE-2018-13406
- video: uvesafb: Fix integer overflow in allocation
* CVE-2018-10840
- ext4: correctly handle a zero-length xattr with a non-zero e_value_offs
* CVE-2018-11412
- ext4: do not allow external inodes for inline data
* CVE-2018-10881
- ext4: clear i_data in ext4_inode_info when removing inline data
* CVE-2018-12233
- jfs: Fix inconsistency between memory allocation and ea_buf->max_size
* CVE-2018-12904
- kvm: nVMX: Enforce cpl=0 for VMX instructions
* Error parsing PCC subspaces from PCCT (LP: #1528684)
- mailbox: PCC: erroneous error message when parsing ACPI PCCT
* CVE-2018-13094
- xfs: don't call xfs_da_shrink_inode with NULL bp
* other users' coredumps can be read via setgid directory and killpriv bypass
(LP: #1779923) // CVE-2018-13405
- Fix up non-directory creation in SGID directories
* Invoking obsolete 'firmware_install' target breaks snap build (LP: #1782166)
- snapcraft.yaml: stop invoking the obsolete (and non-existing)
'firmware_install' target
* snapcraft.yaml: missing ubuntu-retpoline-extract-one script breaks the build
(LP: #1782116)
- snapcraft.yaml: copy retpoline-extract-one to scripts before build
* Allow Raven Ridge's audio controller to be runtime suspended (LP: #1782540)
- ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
* CVE-2018-11506
- sr: pass down correctly sized SCSI sense buffer
* Bionic update: upstream stable patchset 2018-07-24 (LP: #1783418)
- net: Fix a bug in removing queues from XPS map
- net/mlx4_core: Fix error handling in mlx4_init_port_info.
- net/sched: fix refcnt leak in the error path of tcf_vlan_init()
- net: sched: red: avoid hashing NULL child
- net/smc: check for missing nlattrs in SMC_PNETID messages
- net: test tailroom before appending to linear skb
- packet: in packet_snd start writing at link layer allocation
- sock_diag: fix use-after-free read in __sk_free
- tcp: purge write queue in tcp_connect_init()
- vmxnet3: set the DMA mask before the first DMA map operation
- vmxnet3: use DMA memory barriers where required
- hv_netvsc: empty current transmit aggregation if flow blocked
- hv_netvsc: Use the num_online_cpus() for channel limit
- hv_netvsc: avoid retry on send during shutdown
- hv_netvsc: only wake transmit queue if link is up
- hv_netvsc: fix error unwind handling if vmbus_open fails
- hv_netvsc: cancel subchannel setup before halting device
- hv_netvsc: fix race in napi poll when rescheduling
- hv_netvsc: defer queue selection to VF
- hv_netvsc: disable NAPI before channel close
- hv_netvsc: use RCU to fix concurrent rx and queue changes
- hv_netvsc: change GPAD teardown order on older versions
- hv_netvsc: common detach logic
- hv_netvsc: Use Windows version instead of NVSP version on GPAD teardown
- hv_netvsc: Split netvsc_revoke_buf() and netvsc_teardown_gpadl()
- hv_netvsc: Ensure correct teardown message sequence order
- hv_netvsc: Fix a network regression after ifdown/ifup
- sparc: vio: use put_device() instead of kfree()
- ext2: fix a block leak
- s390: add assembler macros for CPU alternatives
- s390: move expoline assembler macros to a header
- s390/crc32-vx: use expoline for indirect branches
- s390/lib: use expoline for indirect branches
- s390/ftrace: use expoline for indirect branches
- s390/kernel: use expoline for indirect branches
- s390: move spectre sysfs attribute code
- s390: extend expoline to BC instructions
- s390: use expoline thunks in the BPF JIT
- scsi: sg: allocate with __GFP_ZERO in sg_build_indirect()
- scsi: zfcp: fix infinite iteration on ERP ready list
- loop: don't call into filesystem while holding lo_ctl_mutex
- loop: fix LOOP_GET_STATUS lock imbalance
- cfg80211: limit wiphy names to 128 bytes
- hfsplus: stop workqueue when fill_super() failed
- x86/kexec: Avoid double free_page() upon do_kexec_load() failure
- usb: gadget: f_uac2: fix bFirstInterface in composite gadget
- usb: dwc3: Undo PHY init if soft reset fails
- usb: dwc3: omap: don't miss events during suspend/resume
- usb: gadget: core: Fix use-after-free of usb_request
- usb: gadget: fsl_udc_core: fix ep valid checks
- usb: dwc2: Fix dwc2_hsotg_core_init_disconnected()
- usb: cdc_acm: prevent race at write to acm while system resumes
- net: usbnet: fix potential deadlock on 32bit hosts
- ARM: dts: imx7d-sdb: Fix regulator-usb-otg2-vbus node name
- usb: host: xhci-plat: revert "usb: host: xhci-plat: enable clk in resume
timing"
- USB: OHCI: Fix NULL dereference in HCDs using HCD_LOCAL_MEM
- net/usb/qmi_wwan.c: Add USB id for lt4120 modem
- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
- Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB
- ALSA: usb-audio: Add native DSD support for Luxman DA-06
- usb: dwc3: Add SoftReset PHY synchonization delay
- usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields
- usb: dwc3: Makefile: fix link error on randconfig
- xhci: zero usb device slot_id member when disabling and freeing a xhci slot
- usb: dwc2: Fix interval type issue
- usb: dwc2: hcd: Fix host channel halt flow
- usb: dwc2: host: Fix transaction errors in host mode
- usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS
- usb: gadget: ffs: Execute copy_to_user() with USER_DS set
- usbip: Correct maximum value of CONFIG_USBIP_VHCI_HC_PORTS
- usb: gadget: udc: change comparison to bitshift when dealing with a mask
- usb: gadget: composite: fix incorrect handling of OS desc requests
- media: lgdt3306a: Fix module count mismatch on usb unplug
- media: em28xx: USB bulk packet size fix
- Bluetooth: btusb: Add device ID for RTL8822BE
- xhci: Show what USB release number the xHC supports from protocol capablity
- staging: bcm2835-audio: Release resources on module_exit()
- staging: lustre: fix bug in osc_enter_cache_try
- staging: fsl-dpaa2/eth: Fix incorrect casts
- staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr
- staging: ks7010: Use constants from ieee80211_eid instead of literal ints.
- staging: lustre: lmv: correctly iput lmo_root
- crypto: inside-secure - wait for the request to complete if in the backlog
- crypto: atmel-aes - fix the keys zeroing on errors
- crypto: ccp - don't disable interrupts while setting up debugfs
- crypto: inside-secure - do not process request if no command was issued
- crypto: inside-secure - fix the cache_len computation
- crypto: inside-secure - fix the extra cache computation
- crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss
- crypto: inside-secure - fix the invalidation step during cra_exit
- scsi: mpt3sas: fix an out of bound write
- scsi: ufs: Enable quirk to ignore sending WRITE_SAME command
- scsi: bnx2fc: Fix check in SCSI completion handler for timed out request
- scsi: sym53c8xx_2: iterator underflow in sym_getsync()
- scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo()
- scsi: qla2xxx: Avoid triggering undefined behavior in
qla2x00_mbx_completion()
- scsi: storvsc: Increase cmd_per_lun for higher speed devices
- scsi: qedi: Fix truncation of CHAP name and secret
- scsi: aacraid: fix shutdown crash when init fails
- scsi: qla4xxx: skip error recovery in case of register disconnect.
- scsi: qedi: Fix kernel crash during port toggle
- scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM
- scsi: sd: Keep disk read-only when re-reading partition
- scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled
- scsi: aacraid: Insure command thread is not recursively stopped
- scsi: core: Make SCSI Status CONDITION MET equivalent to GOOD
- scsi: mvsas: fix wrong endianness of sgpio api
- ASoC: hdmi-codec: Fix module unloading caused kernel crash
- ASoC: rockchip: rk3288-hdmi-analog: Select needed codecs
- ASoC: samsung: odroid: Fix 32000 sample rate handling
- ASoC: topology: create TLV data for dapm widgets
- ASoC: samsung: i2s: Ensure the RCLK rate is properly determined
- clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228
- clk: Don't show the incorrect clock phase
- clk: hisilicon: mark wdt_mux_p[] as const
- clk: tegra: Fix pll_u rate configuration
- clk: rockchip: Prevent calculating mmc phase if clock rate is zero
- clk: samsung: s3c2410: Fix PLL rates
- clk: samsung: exynos7: Fix PLL rates
- clk: samsung: exynos5260: Fix PLL rates
- clk: samsung: exynos5433: Fix PLL rates
- clk: samsung: exynos5250: Fix PLL rates
- clk: samsung: exynos3250: Fix PLL rates
- media: dmxdev: fix error code for invalid ioctls
- media: Don't let tvp5150_get_vbi() go out of vbi_ram_default array
- media: ov5645: add missing of_node_put() in error path
- media: cx23885: Override 888 ImpactVCBe crystal frequency
- media: cx23885: Set subdev host data to clk_freq pointer
- media: s3c-camif: fix out-of-bounds array access
- media: lgdt3306a: Fix a double kfree on i2c device remove
- media: em28xx: Add Hauppauge SoloHD/DualHD bulk models
- media: v4l: vsp1: Fix display stalls when requesting too many inputs
- media: i2c: adv748x: fix HDMI field heights
- media: vb2: Fix videobuf2 to map correct area
- media: vivid: fix incorrect capabilities for radio
- media: cx25821: prevent out-of-bounds read on array card
- serial: xuartps: Fix out-of-bounds access through DT alias
- serial: sh-sci: Fix out-of-bounds access through DT alias
- serial: samsung: Fix out-of-bounds access through serial port index
- serial: mxs-auart: Fix out-of-bounds access through serial port index
- serial: imx: Fix out-of-bounds access through serial port index
- serial: fsl_lpuart: Fix out-of-bounds access through DT alias
- serial: arc_uart: Fix out-of-bounds access through DT alias
- serial: 8250: Don't service RX FIFO if interrupts are disabled
- serial: altera: ensure port->regshift is honored consistently
- rtc: snvs: Fix usage of snvs_rtc_enable
- rtc: hctosys: Ensure system time doesn't overflow time_t
- rtc: rk808: fix possible race condition
- rtc: m41t80: fix race conditions
- rtc: tx4939: avoid unintended sign extension on a 24 bit shift
- rtc: rp5c01: fix possible race condition
- rtc: goldfish: Add missing MODULE_LICENSE
- cxgb4: Correct ntuple mask validation for hash filters
- net: dsa: bcm_sf2: Fix RX_CLS_LOC_ANY overwrite for last rule
- net: dsa: Do not register devlink for unused ports
- net: dsa: bcm_sf2: Fix IPv6 rules and chain ID
- net: dsa: bcm_sf2: Fix IPv6 rule half deletion
- 3c59x: convert to generic DMA API
- net: ip6_gre: Request headroom in __gre6_xmit()
- net: ip6_gre: Split up ip6gre_tnl_link_config()
- net: ip6_gre: Split up ip6gre_tnl_change()
- net: ip6_gre: Split up ip6gre_newlink()
- net: ip6_gre: Split up ip6gre_changelink()
- qed: LL2 flush isles when connection is closed
- qed: Fix possibility of list corruption during rmmod flows
- qed: Fix LL2 race during connection terminate
- powerpc: Move default security feature flags
- Bluetooth: btusb: Add support for Intel Bluetooth device 22560 [8087:0026]
- staging: fsl-dpaa2/eth: Fix incorrect kfree
- crypto: inside-secure - move the digest to the request context
- scsi: lpfc: Fix NVME Initiator FirstBurst
- serial: mvebu-uart: fix tx lost characters
* Bionic update: upstream stable patchset 2018-07-20 (LP: #1782846)
- usbip: usbip_host: refine probe and disconnect debug msgs to be useful
- usbip: usbip_host: delete device from busid_table after rebind
- usbip: usbip_host: run rebind from exit when module is removed
- usbip: usbip_host: fix NULL-ptr deref and use-after-free errors
- usbip: usbip_host: fix bad unlock balance during stub_probe()
- ALSA: usb: mixer: volume quirk for CM102-A+/102S+
- ALSA: hda: Add Lenovo C50 All in one to the power_save blacklist
- ALSA: control: fix a redundant-copy issue
- spi: pxa2xx: Allow 64-bit DMA
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
- KVM: arm/arm64: VGIC/ITS save/restore: protect kvm_read_guest() calls
- KVM: arm/arm64: VGIC/ITS: protect kvm_read_guest() calls with SRCU lock
- vfio: ccw: fix cleanup if cp_prefetch fails
- tracing/x86/xen: Remove zero data size trace events
trace_xen_mmu_flush_tlb{_all}
- tee: shm: fix use-after-free via temporarily dropped reference
- netfilter: nf_tables: free set name in error path
- netfilter: nf_tables: can't fail after linking rule into active rule list
- netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6}
- i2c: designware: fix poll-after-enable regression
- powerpc/powernv: Fix NVRAM sleep in invalid context when crashing
- drm: Match sysfs name in link removal to link creation
- lib/test_bitmap.c: fix bitmap optimisation tests to report errors correctly
- radix tree: fix multi-order iteration race
- mm: don't allow deferred pages with NEED_PER_CPU_KM
- drm/i915/gen9: Add WaClearHIZ_WM_CHICKEN3 for bxt and glk
- s390/qdio: fix access to uninitialized qdio_q fields
- s390/qdio: don't release memory in qdio_setup_irq()
- s390: remove indirect branch from do_softirq_own_stack
- x86/pkeys: Override pkey when moving away from PROT_EXEC
- x86/pkeys: Do not special case protection key 0
- efi: Avoid potential crashes, fix the 'struct efi_pci_io_protocol_32'
definition for mixed mode
- ARM: 8771/1: kprobes: Prohibit kprobes on do_undefinstr
- x86/mm: Drop TS_COMPAT on 64-bit exec() syscall
- tick/broadcast: Use for_each_cpu() specially on UP kernels
- ARM: 8769/1: kprobes: Fix to use get_kprobe_ctlblk after irq-disabed
- ARM: 8770/1: kprobes: Prohibit probing on optimized_callback
- ARM: 8772/1: kprobes: Prohibit kprobes on get_user functions
- Btrfs: fix xattr loss after power failure
- Btrfs: send, fix invalid access to commit roots due to concurrent
snapshotting
- btrfs: property: Set incompat flag if lzo/zstd compression is set
- btrfs: fix crash when trying to resume balance without the resume flag
- btrfs: Split btrfs_del_delalloc_inode into 2 functions
- btrfs: Fix delalloc inodes invalidation during transaction abort
- btrfs: fix reading stale metadata blocks after degraded raid1 mounts
- xhci: Fix USB3 NULL pointer dereference at logical disconnect.
- KVM: arm/arm64: Properly protect VGIC locks from IRQs
- KVM: arm/arm64: VGIC/ITS: Promote irq_lock() in update_affinity
- hwmon: (k10temp) Fix reading critical temperature register
- hwmon: (k10temp) Use API function to access System Management Network
- vsprintf: Replace memory barrier with static_key for random_ptr_key update
- x86/amd_nb: Add support for Raven Ridge CPUs
- x86/apic/x2apic: Initialize cluster ID properly
* Bionic update: upstream stable patchset 2018-07-09 (LP: #1780858)
- 8139too: Use disable_irq_nosync() in rtl8139_poll_controller()
- bridge: check iface upper dev when setting master via ioctl
- dccp: fix tasklet usage
- ipv4: fix fnhe usage by non-cached routes
- ipv4: fix memory leaks in udp_sendmsg, ping_v4_sendmsg
- llc: better deal with too small mtu
- net: ethernet: sun: niu set correct packet size in skb
- net: ethernet: ti: cpsw: fix packet leaking in dual_mac mode
- net/mlx4_en: Fix an error handling path in 'mlx4_en_init_netdev()'
- net/mlx4_en: Verify coalescing parameters are in range
- net/mlx5e: Err if asked to offload TC match on frag being first
- net/mlx5: E-Switch, Include VF RDMA stats in vport statistics
- net sched actions: fix refcnt leak in skbmod
- net_sched: fq: take care of throttled flows before reuse
- net: support compat 64-bit time in {s,g}etsockopt
- net/tls: Don't recursively call push_record during tls_write_space callbacks
- net/tls: Fix connection stall on partial tls record
- openvswitch: Don't swap table in nlattr_set() after OVS_ATTR_NESTED is found
- qmi_wwan: do not steal interfaces from class drivers
- r8169: fix powering up RTL8168h
- rds: do not leak kernel memory to user land
- sctp: delay the authentication for the duplicated cookie-echo chunk
- sctp: fix the issue that the cookie-ack with auth can't get processed
- sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr
- sctp: remove sctp_chunk_put from fail_mark err path in
sctp_ulpevent_make_rcvmsg
- sctp: use the old asoc when making the cookie-ack chunk in dupcook_d
- tcp_bbr: fix to zero idle_restart only upon S/ACKed data
- tcp: ignore Fast Open on repair mode
- tg3: Fix vunmap() BUG_ON() triggered from tg3_free_consistent().
- bonding: do not allow rlb updates to invalid mac
- bonding: send learning packets for vlans on slave
- net: sched: fix error path in tcf_proto_create() when modules are not
configured
- net/mlx5e: TX, Use correct counter in dma_map error flow
- net/mlx5: Avoid cleaning flow steering table twice during error flow
- hv_netvsc: set master device
- ipv6: fix uninit-value in ip6_multipath_l3_keys()
- net/mlx5e: Allow offloading ipv4 header re-write for icmp
- nsh: fix infinite loop
- udp: fix SO_BINDTODEVICE
- l2tp: revert "l2tp: fix missing print session offset info"
- proc: do not access cmdline nor environ from file-backed areas
- net/smc: restrict non-blocking connect finish
- mlxsw: spectrum_switchdev: Do not remove mrouter port from MDB's ports list
- net/mlx5e: DCBNL fix min inline header size for dscp
- net: systemport: Correclty disambiguate driver instances
- sctp: clear the new asoc's stream outcnt in sctp_stream_update
- tcp: restore autocorking
- tipc: fix one byte leak in tipc_sk_set_orig_addr()
- hv_netvsc: Fix net device attach on older Windows hosts
* Bionic update: upstream stable patchset 2018-07-06 (LP: #1780499)
- ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS
- ipvs: fix rtnl_lock lockups caused by start_sync_thread
- netfilter: ebtables: don't attempt to allocate 0-sized compat array
- kcm: Call strp_stop before strp_done in kcm_attach
- crypto: af_alg - fix possible uninit-value in alg_bind()
- netlink: fix uninit-value in netlink_sendmsg
- net: fix rtnh_ok()
- net: initialize skb->peeked when cloning
- net: fix uninit-value in __hw_addr_add_ex()
- dccp: initialize ireq->ir_mark
- ipv4: fix uninit-value in ip_route_output_key_hash_rcu()
- soreuseport: initialise timewait reuseport field
- inetpeer: fix uninit-value in inet_getpeer
- memcg: fix per_node_info cleanup
- perf: Remove superfluous allocation error check
- tcp: fix TCP_REPAIR_QUEUE bound checking
- bdi: wake up concurrent wb_shutdown() callers.
- bdi: Fix oops in wb_workfn()
- gpioib: do not free unrequested descriptors
- gpio: fix aspeed_gpio unmask irq
- gpio: fix error path in lineevent_create
- rfkill: gpio: fix memory leak in probe error path
- libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs
- dm integrity: use kvfree for kvmalloc'd memory
- tracing: Fix regex_match_front() to not over compare the test string
- z3fold: fix reclaim lock-ups
- mm: sections are not offlined during memory hotremove
- mm, oom: fix concurrent munlock and oom reaper unmap, v3
- ceph: fix rsize/wsize capping in ceph_direct_read_write()
- can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg()
- can: hi311x: Acquire SPI lock on ->do_get_berr_counter
- can: hi311x: Work around TX complete interrupt erratum
- drm/vc4: Fix scaling of uni-planar formats
- drm/i915: Fix drm:intel_enable_lvds ERROR message in kernel log
- drm/atomic: Clean old_state/new_state in drm_atomic_state_default_clear()
- drm/atomic: Clean private obj old_state/new_state in
drm_atomic_state_default_clear()
- net: atm: Fix potential Spectre v1
- atm: zatm: Fix potential Spectre v1
- cpufreq: schedutil: Avoid using invalid next_freq
- Revert "Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174"
- Bluetooth: btusb: Only check needs_reset_resume DMI table for QCA rome
chipsets
- thermal: exynos: Reading temperature makes sense only when TMU is turned on
- thermal: exynos: Propagate error value from tmu_read()
- nvme: add quirk to force medium priority for SQ creation
- smb3: directory sync should not return an error
- sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]
- tracing/uprobe_event: Fix strncpy corner case
- perf/x86: Fix possible Spectre-v1 indexing for hw_perf_event cache_*
- perf/x86/cstate: Fix possible Spectre-v1 indexing for pkg_msr
- perf/x86/msr: Fix possible Spectre-v1 indexing in the MSR driver
- perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[]
- perf/x86: Fix possible Spectre-v1 indexing for x86_pmu::event_map()
- i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr()
- bdi: Fix use after free bug in debugfs_remove()
- drm/ttm: Use GFP_TRANSHUGE_LIGHT for allocating huge pages
- drm/i915: Adjust eDP's logical vco in a reliable place.
- drm/nouveau/ttm: don't dereference nvbo::cli, it can outlive client
- sched/core: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]
* Bionic update: upstream stable patchset 2018-06-26 (LP: #1778759)
- percpu: include linux/sched.h for cond_resched()
- ACPI / button: make module loadable when booted in non-ACPI mode
- USB: serial: option: Add support for Quectel EP06
- ALSA: hda - Fix incorrect usage of IS_REACHABLE()
- ALSA: pcm: Check PCM state at xfern compat ioctl
- ALSA: seq: Fix races at MIDI encoding in snd_virmidi_output_trigger()
- ALSA: dice: fix kernel NULL pointer dereference due to invalid calculation
for array index
- ALSA: aloop: Mark paused device as inactive
- ALSA: aloop: Add missing cable lock to ctl API callbacks
- tracepoint: Do not warn on ENOMEM
- scsi: target: Fix fortify_panic kernel exception
- Input: leds - fix out of bound access
- Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro
- rtlwifi: btcoex: Add power_on_setting routine
- rtlwifi: cleanup 8723be ant_sel definition
- xfs: prevent creating negative-sized file via INSERT_RANGE
- RDMA/cxgb4: release hw resources on device removal
- RDMA/ucma: Allow resolving address w/o specifying source address
- RDMA/mlx5: Fix multiple NULL-ptr deref errors in rereg_mr flow
- RDMA/mlx5: Protect from shift operand overflow
- NET: usb: qmi_wwan: add support for ublox R410M PID 0x90b2
- IB/mlx5: Use unlimited rate when static rate is not supported
- IB/hfi1: Fix handling of FECN marked multicast packet
- IB/hfi1: Fix loss of BECN with AHG
- IB/hfi1: Fix NULL pointer dereference when invalid num_vls is used
- iw_cxgb4: Atomically flush per QP HW CQEs
- drm/vmwgfx: Fix a buffer object leak
- drm/bridge: vga-dac: Fix edid memory leak
- test_firmware: fix setting old custom fw path back on exit, second try
- errseq: Always report a writeback error once
- USB: serial: visor: handle potential invalid device configuration
- usb: dwc3: gadget: Fix list_del corruption in dwc3_ep_dequeue
- USB: Accept bulk endpoints with 1024-byte maxpacket
- USB: serial: option: reimplement interface masking
- USB: serial: option: adding support for ublox R410M
- usb: musb: host: fix potential NULL pointer dereference
- usb: musb: trace: fix NULL pointer dereference in musb_g_tx()
- platform/x86: asus-wireless: Fix NULL pointer dereference
- irqchip/qcom: Fix check for spurious interrupts
- tracing: Fix bad use of igrab in trace_uprobe.c
- [Config] CONFIG_ARM64_ERRATUM_1024718=y
- arm64: Add work around for Arm Cortex-A55 Erratum 1024718
- Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro
- infiniband: mlx5: fix build errors when INFINIBAND_USER_ACCESS=m
- btrfs: Take trans lock before access running trans in check_delayed_ref
- drm/vc4: Make sure vc4_bo_{inc,dec}_usecnt() calls are balanced
- xhci: Fix use-after-free in xhci_free_virt_device
- platform/x86: Kconfig: Fix dell-laptop dependency chain.
- KVM: x86: remove APIC Timer periodic/oneshot spikes
- clocksource: Allow clocksource_mark_unstable() on unregistered clocksources
- clocksource: Initialize cs->wd_list
- clocksource: Consistent de-rate when marking unstable
* Bionic update: upstream stable patchset 2018-06-22 (LP: #1778265)
- ext4: set h_journal if there is a failure starting a reserved handle
- ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs
- ext4: add validity checks for bitmap block numbers
- ext4: fix bitmap position validation
- random: fix possible sleeping allocation from irq context
- random: rate limit unseeded randomness warnings
- usbip: usbip_event: fix to not print kernel pointer address
- usbip: usbip_host: fix to hold parent lock for device_attach() calls
- usbip: vhci_hcd: Fix usb device and sockfd leaks
- usbip: vhci_hcd: check rhport before using in vhci_hub_control()
- Revert "xhci: plat: Register shutdown for xhci_plat"
- USB: serial: simple: add libtransistor console
- USB: serial: ftdi_sio: use jtag quirk for Arrow USB Blaster
- USB: serial: cp210x: add ID for NI USB serial console
- usb: core: Add quirk for HP v222w 16GB Mini
- USB: Increment wakeup count on remote wakeup.
- ALSA: usb-audio: Skip broken EU on Dell dock USB-audio
- virtio: add ability to iterate over vqs
- virtio_console: don't tie bufs to a vq
- virtio_console: free buffers after reset
- virtio_console: drop custom control queue cleanup
- virtio_console: move removal code
- virtio_console: reset on out of memory
- drm/virtio: fix vq wait_event condition
- tty: Don't call panic() at tty_ldisc_init()
- tty: n_gsm: Fix long delays with control frame timeouts in ADM mode
- tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set
- tty: Avoid possible error pointer dereference at tty_ldisc_restore().
- tty: Use __GFP_NOFAIL for tty_ldisc_get()
- ALSA: dice: fix OUI for TC group
- ALSA: dice: fix error path to destroy initialized stream data
- ALSA: hda - Skip jack and others for non-existing PCM streams
- ALSA: opl3: Hardening for potential Spectre v1
- ALSA: asihpi: Hardening for potential Spectre v1
- ALSA: hdspm: Hardening for potential Spectre v1
- ALSA: rme9652: Hardening for potential Spectre v1
- ALSA: control: Hardening for potential Spectre v1
- ALSA: pcm: Return negative delays from SNDRV_PCM_IOCTL_DELAY.
- ALSA: core: Report audio_tstamp in snd_pcm_sync_ptr
- ALSA: seq: oss: Fix unbalanced use lock for synth MIDI device
- ALSA: seq: oss: Hardening for potential Spectre v1
- ALSA: hda: Hardening for potential Spectre v1
- ALSA: hda/realtek - Add some fixes for ALC233
- ALSA: hda/realtek - Update ALC255 depop optimize
- ALSA: hda/realtek - change the location for one of two front mics
- mtd: spi-nor: cadence-quadspi: Fix page fault kernel panic
- mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block.
- mtd: cfi: cmdset_0001: Workaround Micron Erase suspend bug.
- mtd: cfi: cmdset_0002: Do not allow read/write to suspend erase block.
- mtd: rawnand: tango: Fix struct clk memory leak
- kobject: don't use WARN for registration failures
- scsi: sd: Defer spinning up drive while SANITIZE is in progress
- bfq-iosched: ensure to clear bic/bfqq pointers when preparing request
- vfio: ccw: process ssch with interrupts disabled
- ANDROID: binder: prevent transactions into own process.
- PCI: aardvark: Fix logic in advk_pcie_{rd,wr}_conf()
- PCI: aardvark: Set PIO_ADDR_LS correctly in advk_pcie_rd_conf()
- PCI: aardvark: Use ISR1 instead of ISR0 interrupt in legacy irq mode
- PCI: aardvark: Fix PCIe Max Read Request Size setting
- ARM: amba: Make driver_override output consistent with other buses
- ARM: amba: Fix race condition with driver_override
- ARM: amba: Don't read past the end of sysfs "driver_override" buffer
- ARM: socfpga_defconfig: Remove QSPI Sector 4K size force
- KVM: arm/arm64: Close VMID generation race
- crypto: drbg - set freed buffers to NULL
- ASoC: fsl_esai: Fix divisor calculation failure at lower ratio
- libceph: un-backoff on tick when we have a authenticated session
- libceph: reschedule a tick in finish_hunting()
- libceph: validate con->state at the top of try_write()
- fpga-manager: altera-ps-spi: preserve nCONFIG state
- earlycon: Use a pointer table to fix __earlycon_table stride
- drm/amdgpu: set COMPUTE_PGM_RSRC1 for SGPR/VGPR clearing shaders
- drm/i915: Enable display WA#1183 from its correct spot
- objtool, perf: Fix GCC 8 -Wrestrict error
- tools/lib/subcmd/pager.c: do not alias select() params
- x86/ipc: Fix x32 version of shmid64_ds and msqid64_ds
- x86/smpboot: Don't use mwait_play_dead() on AMD systems
- x86/microcode/intel: Save microcode patch unconditionally
- x86/microcode: Do not exit early from __reload_late()
- tick/sched: Do not mess with an enqueued hrtimer
- arm/arm64: KVM: Add PSCI version selection API
- powerpc/eeh: Fix race with driver un/bind
- serial: mvebu-uart: Fix local flags handling on termios update
- block: do not use interruptible wait anywhere
- ASoC: dmic: Fix clock parenting
- PCI / PM: Do not clear state_saved in pci_pm_freeze() when smart suspend is
set
- module: Fix display of wrong module .text address
- drm/edid: Reset more of the display info
- drm/i915/fbdev: Enable late fbdev initial configuration
- drm/i915/audio: set minimum CD clock to twice the BCLK
- drm/amd/display: Fix deadlock when flushing irq
- drm/amd/display: Disallow enabling CRTC without primary plane with FB
* Bionic update: upstream stable patchset 2018-06-22 (LP: #1778265) //
CVE-2018-1108.
- random: set up the NUMA crng instances after the CRNG is fully initialized
* Ryzen/Raven Ridge USB ports do not work (LP: #1756700)
- xhci: Fix USB ports for Dell Inspiron 5775
* [Ubuntu 1804][boston][ixgbe] EEH causes kernel BUG at /build/linux-
jWa1Fv/linux-4.15.0/drivers/pci/msi.c:352 (i2S) (LP: #1776389)
- ixgbe/ixgbevf: Free IRQ when PCI error recovery removes the device
* Need fix to aacraid driver to prevent panic (LP: #1770095)
- scsi: aacraid: Correct hba_send to include iu_type
* kernel: Fix arch random implementation (LP: #1775391)
- s390/archrandom: Rework arch random implementation.
* kernel: Fix memory leak on CCA and EP11 CPRB processing. (LP: #1775390)
- s390/zcrypt: Fix CCA and EP11 CPRB processing failure memory leak.
* Various fixes for CXL kernel module (LP: #1774471)
- cxl: Remove function write_timebase_ctrl_psl9() for PSL9
- cxl: Set the PBCQ Tunnel BAR register when enabling capi mode
- cxl: Report the tunneled operations status
- cxl: Configure PSL to not use APC virtual machines
- cxl: Disable prefault_mode in Radix mode
* Bluetooth not working (LP: #1764645)
- Bluetooth: btusb: Apply QCA Rome patches for some ATH3012 models
* linux-snapdragon: wcn36xx: mac address generation on boot (LP: #1776491)
- [Config] arm64: snapdragon: WCN36XX_SNAPDRAGON_HACKS=y
- SAUCE: wcn36xx: read MAC from file or randomly generate one
* fscache: Fix hanging wait on page discarded by writeback (LP: #1777029)
- fscache: Fix hanging wait on page discarded by writeback
-- Stefan Bader <email address hidden> Thu, 02 Aug 2018 16:40:01 +0200
-
linux-aws (4.15.0-1017.17) bionic; urgency=medium
[ Ubuntu: 4.15.0-30.32 ]
* CVE-2018-5390
- tcp: free batches of packets in tcp_prune_ofo_queue()
- tcp: avoid collapses in tcp_prune_queue() if possible
- tcp: detect malicious patterns in tcp_collapse_ofo_queue()
- tcp: call tcp_drop() from tcp_data_queue_ofo()
- tcp: add tcp_ooo_try_coalesce() helper
-- Stefan Bader <email address hidden> Thu, 26 Jul 2018 19:50:14 +0200
-
linux-aws (4.15.0-1016.16) bionic; urgency=medium
* linux-aws: 4.15.0-1016.16 -proposed tracker (LP: #1782176)
[ Ubuntu: 4.15.0-29.31 ]
* linux: 4.15.0-29.31 -proposed tracker (LP: #1782173)
* [SRU Bionic][Cosmic] kernel panic in ipmi_ssif at msg_done_handler
(LP: #1777716)
- ipmi_ssif: Fix kernel panic at msg_done_handler
* Update to ocxl driver for 18.04.1 (LP: #1775786)
- misc: ocxl: use put_device() instead of device_unregister()
- powerpc: Add TIDR CPU feature for POWER9
- powerpc: Use TIDR CPU feature to control TIDR allocation
- powerpc: use task_pid_nr() for TID allocation
- ocxl: Rename pnv_ocxl_spa_remove_pe to clarify it's action
- ocxl: Expose the thread_id needed for wait on POWER9
- ocxl: Add an IOCTL so userspace knows what OCXL features are available
- ocxl: Document new OCXL IOCTLs
- ocxl: Fix missing unlock on error in afu_ioctl_enable_p9_wait()
* Critical upstream bugfix missing in Ubuntu 18.04 - frequent Xorg crash after
suspend (LP: #1776887)
- ocxl: Document the OCXL_IOCTL_GET_METADATA IOCTL
* Hard LOCKUP observed on stressing Ubuntu 18 04 (LP: #1777194)
- powerpc: use NMI IPI for smp_send_stop
- powerpc: Fix smp_send_stop NMI IPI handling
* IPL: ppc64_cpu --frequency hang with INFO: rcu_sched detected stalls on
CPUs/tasks on w34 and wsbmc016 with 920.1714.20170330n (LP: #1773964)
- rtc: opal: Fix OPAL RTC driver OPAL_BUSY loops
* [Regression] EXT4-fs error (device sda2): ext4_validate_block_bitmap:383:
comm stress-ng: bg 4705: bad block bitmap checksum (LP: #1781709)
- SAUCE: Revert "UBUNTU: SAUCE: ext4: fix ext4_validate_inode_bitmap: comm
stress-ng: Corrupt inode bitmap"
- SAUCE: ext4: check for allocation block validity with block group locked
linux-aws (4.15.0-1015.15) bionic; urgency=medium
* linux-aws: 4.15.0-1015.15 -proposed tracker (LP: #1781435)
[ Ubuntu: 4.15.0-28.30 ]
* linux: 4.15.0-28.30 -proposed tracker (LP: #1781433)
* Cannot set MTU higher than 1500 in Xen instance (LP: #1781413)
- xen-netfront: Fix mismatched rtnl_unlock
- xen-netfront: Update features after registering netdev
linux-aws (4.15.0-1014.14) bionic; urgency=medium
* linux-aws: 4.15.0-1014.14 -proposed tracker (LP: #1781065)
[ Ubuntu: 4.15.0-27.29 ]
* linux: 4.15.0-27.29 -proposed tracker (LP: #1781062)
* [Regression] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:99:
comm stress-ng: Corrupt inode bitmap (LP: #1780137)
- SAUCE: ext4: fix ext4_validate_inode_bitmap: comm stress-ng: Corrupt inode
bitmap
linux-aws (4.15.0-1013.13) bionic; urgency=medium
* linux-aws: 4.15.0-1013.13 -proposed tracker (LP: #1780115)
[ Ubuntu: 4.15.0-26.28 ]
* linux: 4.15.0-26.28 -proposed tracker (LP: #1780112)
* failure to boot with linux-image-4.15.0-24-generic (LP: #1779827) // Cloud-
init causes potentially huge boot delays with 4.15 kernels (LP: #1780062)
- random: Make getrandom() ready earlier
linux-aws (4.15.0-1012.12) bionic; urgency=medium
* linux-aws: 4.15.0-1012.12 -proposed tracker (LP: #1779358)
[ Ubuntu: 4.15.0-25.27 ]
* linux: 4.15.0-25.27 -proposed tracker (LP: #1779354)
* hisi_sas_v3_hw: internal task abort: timeout and not done. (LP: #1777736)
- scsi: hisi_sas: Update a couple of register settings for v3 hw
* hisi_sas: Add missing PHY spinlock init (LP: #1777734)
- scsi: hisi_sas: Add missing PHY spinlock init
* hisi_sas: improve read performance by pre-allocating slot DMA buffers
(LP: #1777727)
- scsi: hisi_sas: use dma_zalloc_coherent()
- scsi: hisi_sas: Use dmam_alloc_coherent()
- scsi: hisi_sas: Pre-allocate slot DMA buffers
* hisi_sas: Failures during host reset (LP: #1777696)
- scsi: hisi_sas: Only process broadcast change in phy_bcast_v3_hw()
- scsi: hisi_sas: Fix the conflict between dev gone and host reset
- scsi: hisi_sas: Adjust task reject period during host reset
- scsi: hisi_sas: Add a flag to filter PHY events during reset
- scsi: hisi_sas: Release all remaining resources in clear nexus ha
* Fake SAS addresses for SATA disks on HiSilicon D05 are non-unique
(LP: #1776750)
- scsi: hisi_sas: make SAS address of SATA disks unique
* Vcs-Git header on bionic linux source package points to zesty git tree
(LP: #1766055)
- [Packaging]: Update Vcs-Git
* large KVM instances run out of IRQ routes (LP: #1778261)
- SAUCE: kvm -- increase KVM_MAX_IRQ_ROUTES to 2048 on x86
-- Khalid Elmously <email address hidden> Wed, 18 Jul 2018 01:49:39 +0000
-
linux-aws (4.15.0-1015.15) bionic; urgency=medium
* linux-aws: 4.15.0-1015.15 -proposed tracker (LP: #1781435)
[ Ubuntu: 4.15.0-28.30 ]
* linux: 4.15.0-28.30 -proposed tracker (LP: #1781433)
* Cannot set MTU higher than 1500 in Xen instance (LP: #1781413)
- xen-netfront: Fix mismatched rtnl_unlock
- xen-netfront: Update features after registering netdev
linux-aws (4.15.0-1014.14) bionic; urgency=medium
* linux-aws: 4.15.0-1014.14 -proposed tracker (LP: #1781065)
[ Ubuntu: 4.15.0-27.29 ]
* linux: 4.15.0-27.29 -proposed tracker (LP: #1781062)
* [Regression] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:99:
comm stress-ng: Corrupt inode bitmap (LP: #1780137)
- SAUCE: ext4: fix ext4_validate_inode_bitmap: comm stress-ng: Corrupt inode
bitmap
linux-aws (4.15.0-1013.13) bionic; urgency=medium
* linux-aws: 4.15.0-1013.13 -proposed tracker (LP: #1780115)
[ Ubuntu: 4.15.0-26.28 ]
* linux: 4.15.0-26.28 -proposed tracker (LP: #1780112)
* failure to boot with linux-image-4.15.0-24-generic (LP: #1779827) // Cloud-
init causes potentially huge boot delays with 4.15 kernels (LP: #1780062)
- random: Make getrandom() ready earlier
linux-aws (4.15.0-1012.12) bionic; urgency=medium
* linux-aws: 4.15.0-1012.12 -proposed tracker (LP: #1779358)
[ Ubuntu: 4.15.0-25.27 ]
* linux: 4.15.0-25.27 -proposed tracker (LP: #1779354)
* hisi_sas_v3_hw: internal task abort: timeout and not done. (LP: #1777736)
- scsi: hisi_sas: Update a couple of register settings for v3 hw
* hisi_sas: Add missing PHY spinlock init (LP: #1777734)
- scsi: hisi_sas: Add missing PHY spinlock init
* hisi_sas: improve read performance by pre-allocating slot DMA buffers
(LP: #1777727)
- scsi: hisi_sas: use dma_zalloc_coherent()
- scsi: hisi_sas: Use dmam_alloc_coherent()
- scsi: hisi_sas: Pre-allocate slot DMA buffers
* hisi_sas: Failures during host reset (LP: #1777696)
- scsi: hisi_sas: Only process broadcast change in phy_bcast_v3_hw()
- scsi: hisi_sas: Fix the conflict between dev gone and host reset
- scsi: hisi_sas: Adjust task reject period during host reset
- scsi: hisi_sas: Add a flag to filter PHY events during reset
- scsi: hisi_sas: Release all remaining resources in clear nexus ha
* Fake SAS addresses for SATA disks on HiSilicon D05 are non-unique
(LP: #1776750)
- scsi: hisi_sas: make SAS address of SATA disks unique
* Vcs-Git header on bionic linux source package points to zesty git tree
(LP: #1766055)
- [Packaging]: Update Vcs-Git
* large KVM instances run out of IRQ routes (LP: #1778261)
- SAUCE: kvm -- increase KVM_MAX_IRQ_ROUTES to 2048 on x86
-- Khalid Elmously <email address hidden> Thu, 12 Jul 2018 20:21:09 -0400
-
linux-aws (4.15.0-1014.14) bionic; urgency=medium
* linux-aws: 4.15.0-1014.14 -proposed tracker (LP: #1781065)
[ Ubuntu: 4.15.0-27.29 ]
* linux: 4.15.0-27.29 -proposed tracker (LP: #1781062)
* [Regression] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:99:
comm stress-ng: Corrupt inode bitmap (LP: #1780137)
- SAUCE: ext4: fix ext4_validate_inode_bitmap: comm stress-ng: Corrupt inode
bitmap
linux-aws (4.15.0-1013.13) bionic; urgency=medium
* linux-aws: 4.15.0-1013.13 -proposed tracker (LP: #1780115)
[ Ubuntu: 4.15.0-26.28 ]
* linux: 4.15.0-26.28 -proposed tracker (LP: #1780112)
* failure to boot with linux-image-4.15.0-24-generic (LP: #1779827) // Cloud-
init causes potentially huge boot delays with 4.15 kernels (LP: #1780062)
- random: Make getrandom() ready earlier
linux-aws (4.15.0-1012.12) bionic; urgency=medium
* linux-aws: 4.15.0-1012.12 -proposed tracker (LP: #1779358)
[ Ubuntu: 4.15.0-25.27 ]
* linux: 4.15.0-25.27 -proposed tracker (LP: #1779354)
* hisi_sas_v3_hw: internal task abort: timeout and not done. (LP: #1777736)
- scsi: hisi_sas: Update a couple of register settings for v3 hw
* hisi_sas: Add missing PHY spinlock init (LP: #1777734)
- scsi: hisi_sas: Add missing PHY spinlock init
* hisi_sas: improve read performance by pre-allocating slot DMA buffers
(LP: #1777727)
- scsi: hisi_sas: use dma_zalloc_coherent()
- scsi: hisi_sas: Use dmam_alloc_coherent()
- scsi: hisi_sas: Pre-allocate slot DMA buffers
* hisi_sas: Failures during host reset (LP: #1777696)
- scsi: hisi_sas: Only process broadcast change in phy_bcast_v3_hw()
- scsi: hisi_sas: Fix the conflict between dev gone and host reset
- scsi: hisi_sas: Adjust task reject period during host reset
- scsi: hisi_sas: Add a flag to filter PHY events during reset
- scsi: hisi_sas: Release all remaining resources in clear nexus ha
* Fake SAS addresses for SATA disks on HiSilicon D05 are non-unique
(LP: #1776750)
- scsi: hisi_sas: make SAS address of SATA disks unique
* Vcs-Git header on bionic linux source package points to zesty git tree
(LP: #1766055)
- [Packaging]: Update Vcs-Git
* large KVM instances run out of IRQ routes (LP: #1778261)
- SAUCE: kvm -- increase KVM_MAX_IRQ_ROUTES to 2048 on x86
-- Khalid Elmously <email address hidden> Tue, 10 Jul 2018 21:26:22 -0400
-
linux-aws (4.15.0-1013.13) bionic; urgency=medium
* linux-aws: 4.15.0-1013.13 -proposed tracker (LP: #1780115)
[ Ubuntu: 4.15.0-26.28 ]
* linux: 4.15.0-26.28 -proposed tracker (LP: #1780112)
* failure to boot with linux-image-4.15.0-24-generic (LP: #1779827) // Cloud-
init causes potentially huge boot delays with 4.15 kernels (LP: #1780062)
- random: Make getrandom() ready earlier
linux-aws (4.15.0-1012.12) bionic; urgency=medium
* linux-aws: 4.15.0-1012.12 -proposed tracker (LP: #1779358)
[ Ubuntu: 4.15.0-25.27 ]
* linux: 4.15.0-25.27 -proposed tracker (LP: #1779354)
* hisi_sas_v3_hw: internal task abort: timeout and not done. (LP: #1777736)
- scsi: hisi_sas: Update a couple of register settings for v3 hw
* hisi_sas: Add missing PHY spinlock init (LP: #1777734)
- scsi: hisi_sas: Add missing PHY spinlock init
* hisi_sas: improve read performance by pre-allocating slot DMA buffers
(LP: #1777727)
- scsi: hisi_sas: use dma_zalloc_coherent()
- scsi: hisi_sas: Use dmam_alloc_coherent()
- scsi: hisi_sas: Pre-allocate slot DMA buffers
* hisi_sas: Failures during host reset (LP: #1777696)
- scsi: hisi_sas: Only process broadcast change in phy_bcast_v3_hw()
- scsi: hisi_sas: Fix the conflict between dev gone and host reset
- scsi: hisi_sas: Adjust task reject period during host reset
- scsi: hisi_sas: Add a flag to filter PHY events during reset
- scsi: hisi_sas: Release all remaining resources in clear nexus ha
* Fake SAS addresses for SATA disks on HiSilicon D05 are non-unique
(LP: #1776750)
- scsi: hisi_sas: make SAS address of SATA disks unique
* Vcs-Git header on bionic linux source package points to zesty git tree
(LP: #1766055)
- [Packaging]: Update Vcs-Git
* large KVM instances run out of IRQ routes (LP: #1778261)
- SAUCE: kvm -- increase KVM_MAX_IRQ_ROUTES to 2048 on x86
-- Khalid Elmously <email address hidden> Wed, 04 Jul 2018 21:45:16 -0400
-
linux-aws (4.15.0-1012.12) bionic; urgency=medium
* linux-aws: 4.15.0-1012.12 -proposed tracker (LP: #1779358)
[ Ubuntu: 4.15.0-25.27 ]
* linux: 4.15.0-25.27 -proposed tracker (LP: #1779354)
* hisi_sas_v3_hw: internal task abort: timeout and not done. (LP: #1777736)
- scsi: hisi_sas: Update a couple of register settings for v3 hw
* hisi_sas: Add missing PHY spinlock init (LP: #1777734)
- scsi: hisi_sas: Add missing PHY spinlock init
* hisi_sas: improve read performance by pre-allocating slot DMA buffers
(LP: #1777727)
- scsi: hisi_sas: use dma_zalloc_coherent()
- scsi: hisi_sas: Use dmam_alloc_coherent()
- scsi: hisi_sas: Pre-allocate slot DMA buffers
* hisi_sas: Failures during host reset (LP: #1777696)
- scsi: hisi_sas: Only process broadcast change in phy_bcast_v3_hw()
- scsi: hisi_sas: Fix the conflict between dev gone and host reset
- scsi: hisi_sas: Adjust task reject period during host reset
- scsi: hisi_sas: Add a flag to filter PHY events during reset
- scsi: hisi_sas: Release all remaining resources in clear nexus ha
* Fake SAS addresses for SATA disks on HiSilicon D05 are non-unique
(LP: #1776750)
- scsi: hisi_sas: make SAS address of SATA disks unique
* Vcs-Git header on bionic linux source package points to zesty git tree
(LP: #1766055)
- [Packaging]: Update Vcs-Git
* large KVM instances run out of IRQ routes (LP: #1778261)
- SAUCE: kvm -- increase KVM_MAX_IRQ_ROUTES to 2048 on x86
-- Khalid Elmously <email address hidden> Sun, 01 Jul 2018 22:47:45 -0400
-
linux-aws (4.15.0-1011.11) bionic; urgency=medium
* linux-aws: 4.15.0-1011.11 -proposed tracker (LP: #1776341)
* update ENA driver to latest mainline version 1.5.0K (LP: #1774490)
- net: ena: add detection and recovery mechanism for handling missed/misrouted
MSI-X
- net: ena: increase ena driver version to 1.5.0
- net: ena: Eliminate duplicate barriers on weakly-ordered archs
[ Ubuntu: 4.15.0-24.26 ]
* linux: 4.15.0-24.26 -proposed tracker (LP: #1776338)
* Bionic update: upstream stable patchset 2018-06-06 (LP: #1775483)
- drm: bridge: dw-hdmi: Fix overflow workaround for Amlogic Meson GX SoCs
- i40e: Fix attach VF to VM issue
- tpm: cmd_ready command can be issued only after granting locality
- tpm: tpm-interface: fix tpm_transmit/_cmd kdoc
- tpm: add retry logic
- Revert "ath10k: send (re)assoc peer command when NSS changed"
- bonding: do not set slave_dev npinfo before slave_enable_netpoll in
bond_enslave
- ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy
- ipv6: sr: fix NULL pointer dereference in seg6_do_srh_encap()- v4 pkts
- KEYS: DNS: limit the length of option strings
- l2tp: check sockaddr length in pppol2tp_connect()
- net: validate attribute sizes in neigh_dump_table()
- llc: delete timers synchronously in llc_sk_free()
- tcp: don't read out-of-bounds opsize
- net: af_packet: fix race in PACKET_{R|T}X_RING
- tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets
- net: fix deadlock while clearing neighbor proxy table
- team: avoid adding twice the same option to the event list
- net/smc: fix shutdown in state SMC_LISTEN
- team: fix netconsole setup over team
- packet: fix bitfield update race
- tipc: add policy for TIPC_NLA_NET_ADDR
- pppoe: check sockaddr length in pppoe_connect()
- vlan: Fix reading memory beyond skb->tail in skb_vlan_tagged_multi
- amd-xgbe: Add pre/post auto-negotiation phy hooks
- sctp: do not check port in sctp_inet6_cmp_addr
- amd-xgbe: Improve KR auto-negotiation and training
- strparser: Do not call mod_delayed_work with a timeout of LONG_MAX
- amd-xgbe: Only use the SFP supported transceiver signals
- strparser: Fix incorrect strp->need_bytes value.
- net: sched: ife: signal not finding metaid
- tcp: clear tp->packets_out when purging write queue
- net: sched: ife: handle malformed tlv length
- net: sched: ife: check on metadata length
- llc: hold llc_sap before release_sock()
- llc: fix NULL pointer deref for SOCK_ZAPPED
- net: ethernet: ti: cpsw: fix tx vlan priority mapping
- virtio_net: split out ctrl buffer
- virtio_net: fix adding vids on big-endian
- KVM: s390: force bp isolation for VSIE
- s390: correct module section names for expoline code revert
- microblaze: Setup dependencies for ASM optimized lib functions
- commoncap: Handle memory allocation failure.
- scsi: mptsas: Disable WRITE SAME
- cdrom: information leak in cdrom_ioctl_media_changed()
- m68k/mac: Don't remap SWIM MMIO region
- block/swim: Check drive type
- block/swim: Don't log an error message for an invalid ioctl
- block/swim: Remove extra put_disk() call from error path
- block/swim: Rename macros to avoid inconsistent inverted logic
- block/swim: Select appropriate drive on device open
- block/swim: Fix array bounds check
- block/swim: Fix IO error at end of medium
- tracing: Fix missing tab for hwlat_detector print format
- s390/cio: update chpid descriptor after resource accessibility event
- s390/dasd: fix IO error for newly defined devices
- s390/uprobes: implement arch_uretprobe_is_alive()
- ACPI / video: Only default only_lcd to true on Win8-ready _desktops_
- docs: ip-sysctl.txt: fix name of some ipv6 variables
- net: mvpp2: Fix DMA address mask size
- net: stmmac: Disable ACS Feature for GMAC >= 4
- l2tp: hold reference on tunnels in netlink dumps
- l2tp: hold reference on tunnels printed in pppol2tp proc file
- l2tp: hold reference on tunnels printed in l2tp/tunnels debugfs file
- l2tp: fix {pppol2tp, l2tp_dfs}_seq_stop() in case of seq_file overflow
- s390/qeth: fix error handling in adapter command callbacks
- s390/qeth: avoid control IO completion stalls
- s390/qeth: handle failure on workqueue creation
- bnxt_en: Fix memory fault in bnxt_ethtool_init()
- virtio-net: add missing virtqueue kick when flushing packets
- VSOCK: make af_vsock.ko removable again
- hwmon: (k10temp) Add temperature offset for Ryzen 2700X
- hwmon: (k10temp) Add support for AMD Ryzen w/ Vega graphics
- s390/cpum_cf: rename IBM z13/z14 counter names
- kprobes: Fix random address output of blacklist file
- Revert "pinctrl: intel: Initialize GPIO properly when used through irqchip"
* Lenovo V330 needs patch in ideapad_laptop module for rfkill (LP: #1774636)
- SAUCE: Add Lenovo V330 to the ideapad_laptop rfkill blacklist
* bluetooth controller fail after suspend with USB autosuspend on XPS 13 9360
(LP: #1775217)
- Bluetooth: btusb: Add Dell XPS 13 9360 to btusb_needs_reset_resume_table
* [Hyper-V] PCI: hv: Fix 2 hang issues in hv_compose_msi_msg (LP: #1758378)
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary
- PCI: hv: Remove the bogus test in hv_eject_device_work()
- PCI: hv: Fix a comment typo in _hv_pcifront_read_config()
* register on binfmt_misc may overflow and crash the system (LP: #1775856)
- fs/binfmt_misc.c: do not allow offset overflow
* CVE-2018-11508
- compat: fix 4-byte infoleak via uninitialized struct field
* Network installs fail on SocioNext board (LP: #1775884)
- net: netsec: reduce DMA mask to 40 bits
- net: socionext: reset hardware in ndo_stop
- net: netsec: enable tx-irq during open callback
* r8169 ethernet card don't work after returning from suspension
(LP: #1752772)
- PCI: Add pcim_set_mwi(), a device-managed pci_set_mwi()
- r8169: switch to device-managed functions in probe
- r8169: remove netif_napi_del in probe error path
- r8169: remove some WOL-related dead code
- r8169: disable WOL per default
- r8169: improve interrupt handling
- r8169: fix interrupt number after adding support for MSI-X interrupts
* ISST-LTE:KVM:Ubuntu18.04:BostonLC:boslcp3:boslcp3g3:Guest conosle hangs
after hotplug CPU add operation. (LP: #1759723)
- genirq/affinity: assign vectors to all possible CPUs
- genirq/affinity: Don't return with empty affinity masks on error
- genirq/affinity: Rename *node_to_possible_cpumask as *node_to_cpumask
- genirq/affinity: Move actual irq vector spreading into a helper function
- genirq/affinity: Allow irq spreading from a given starting point
- genirq/affinity: Spread irq vectors among present CPUs as far as possible
- blk-mq: simplify queue mapping & schedule with each possisble CPU
- blk-mq: make sure hctx->next_cpu is set correctly
- blk-mq: Avoid that blk_mq_delay_run_hw_queue() introduces unintended delays
- blk-mq: make sure that correct hctx->next_cpu is set
- blk-mq: avoid to write intermediate result to hctx->next_cpu
- blk-mq: introduce blk_mq_hw_queue_first_cpu() to figure out first cpu
- blk-mq: don't check queue mapped in __blk_mq_delay_run_hw_queue()
- nvme: pci: pass max vectors as num_possible_cpus() to pci_alloc_irq_vectors
- scsi: hpsa: fix selection of reply queue
- scsi: megaraid_sas: fix selection of reply queue
- scsi: core: introduce force_blk_mq
- scsi: virtio_scsi: fix IO hang caused by automatic irq vector affinity
- scsi: virtio_scsi: unify scsi_host_template
* Fix several bugs in RDMA/hns driver (LP: #1770974)
- RDMA/hns: Use structs to describe the uABI instead of opencoding
- RDMA/hns: Remove unnecessary platform_get_resource() error check
- RDMA/hns: Remove unnecessary operator
- RDMA/hns: Add names to function arguments in function pointers
- RDMA/hns: Fix misplaced call to hns_roce_cleanup_hem_table
- RDMA/hns: Fix a bug with modifying mac address
- RDMA/hns: Use free_pages function instead of free_page
- RDMA/hns: Replace __raw_write*(cpu_to_le*()) with LE write*()
- RDMA/hns: Bugfix for init hem table
- RDMA/hns: Intercept illegal RDMA operation when use inline data
- RDMA/hns: Fix the qp context state diagram
- RDMA/hns: Only assign mtu if IB_QP_PATH_MTU bit is set
- RDMA/hns: Remove some unnecessary attr_mask judgement
- RDMA/hns: Only assign dqpn if IB_QP_PATH_DEST_QPN bit is set
- RDMA/hns: Adjust the order of cleanup hem table
- RDMA/hns: Update assignment method for owner field of send wqe
- RDMA/hns: Submit bad wr
- RDMA/hns: Fix a couple misspellings
- RDMA/hns: Add rq inline flags judgement
- RDMA/hns: Bugfix for rq record db for kernel
- RDMA/hns: Load the RoCE dirver automatically
- RDMA/hns: Update convert function of endian format
- RDMA/hns: Add return operation when configured global param fail
- RDMA/hns: Not support qp transition from reset to reset for hip06
- RDMA/hns: Fix the bug with rq sge
- RDMA/hns: Set desc_dma_addr for zero when free cmq desc
- RDMA/hns: Enable inner_pa_vld filed of mpt
- RDMA/hns: Set NULL for __internal_mr
- RDMA/hns: Fix the bug with NULL pointer
- RDMA/hns: Bugfix for cq record db for kernel
- RDMA/hns: Move the location for initializing tmp_len
- RDMA/hns: Drop local zgid in favor of core defined variable
- RDMA/hns: Add 64KB page size support for hip08
- RDMA/hns: Rename the idx field of db
- RDMA/hns: Modify uar allocation algorithm to avoid bitmap exhaust
- RDMA/hns: Increase checking CMQ status timeout value
- RDMA/hns: Add reset process for RoCE in hip08
- RDMA/hns: Fix the illegal memory operation when cross page
- RDMA/hns: Implement the disassociate_ucontext API
* powerpc/livepatch: Implement reliable stack tracing for the consistency
model (LP: #1771844)
- powerpc/livepatch: Implement reliable stack tracing for the consistency
model
* vmxnet3: update to latest ToT (LP: #1768143)
- vmxnet3: avoid xmit reset due to a race in vmxnet3
- vmxnet3: use correct flag to indicate LRO feature
- vmxnet3: fix incorrect dereference when rxvlan is disabled
* 4.15.0-22-generic fails to boot on IBM S822LC (POWER8 (raw), altivec
supported) (LP: #1773162)
- Revert "powerpc/64s: Add support for a store forwarding barrier at kernel
entry/exit"
- powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit
* Decode ARM CPER records in kernel (LP: #1770244)
- [Config] CONFIG_UEFI_CPER_ARM=y
- efi: Move ARM CPER code to new file
- efi: Parse ARM error information value
* Adding back alx WoL feature (LP: #1772610)
- SAUCE: Revert "alx: remove WoL support"
- SAUCE: alx: add enable_wol paramenter
* Lancer A0 Asic HBA's won't boot with 18.04 (LP: #1768103)
- scsi: lpfc: Fix WQ/CQ creation for older asic's.
- scsi: lpfc: Fix 16gb hbas failing cq create.
* [LTCTest][OPAL][OP920] cpupower idle-info is not listing stop4 and stop5
idle states when all CORES are guarded (LP: #1771780)
- SAUCE: cpuidle/powernv : init all present cpus for deep states
* Huawei 25G/100G Network Adapters Unsupported (LP: #1770970)
- net-next/hinic: add pci device ids for 25ge and 100ge card
* [Ubuntu 18.04.1] POWER9 - Nvidia Volta - Kernel changes to enable Nvidia
driver on bare metal (LP: #1772991)
- powerpc/powernv/npu: Fix deadlock in mmio_invalidate()
- powerpc/powernv/mce: Don't silently restart the machine
- powerpc/npu-dma.c: Fix crash after __mmu_notifier_register failure
- powerpc/mm: Flush cache on memory hot(un)plug
- powerpc/powernv/memtrace: Let the arch hotunplug code flush cache
- powerpc/powernv/npu: Add lock to prevent race in concurrent context
init/destroy
- powerpc/powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback
parameters
- powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large
address range
- powerpc/mce: Fix a bug where mce loops on memory UE.
* cpum_sf: ensure sample freq is non-zero (LP: #1772593)
- s390/cpum_sf: ensure sample frequency of perf event attributes is non-zero
* PCIe link speeds of 16 GT/s are shown as "Unknown speed" (LP: #1773243)
- PCI: Add decoding for 16 GT/s link speed
* False positive ACPI _PRS error messages (LP: #1773295)
- ACPI / PCI: pci_link: Allow the absence of _PRS and change log level
* Dell systems crash when disabling Nvidia dGPU (LP: #1773299)
- ACPI / OSI: Add OEM _OSI strings to disable NVidia RTD3
* wlp3s0: failed to remove key (1, ff:ff:ff:ff:ff:ff) from hardware (-22)
(LP: #1720930)
- iwlwifi: mvm: fix "failed to remove key" message
* Expose arm64 CPU topology to userspace (LP: #1770231)
- ACPICA: ACPI 6.2: Additional PPTT flags
- drivers: base: cacheinfo: move cache_setup_of_node()
- drivers: base: cacheinfo: setup DT cache properties early
- cacheinfo: rename of_node to fw_token
- arm64/acpi: Create arch specific cpu to acpi id helper
- ACPI/PPTT: Add Processor Properties Topology Table parsing
- [Config] CONFIG_ACPI_PPTT=y
- ACPI: Enable PPTT support on ARM64
- drivers: base cacheinfo: Add support for ACPI based firmware tables
- arm64: Add support for ACPI based firmware tables
- arm64: topology: rename cluster_id
- arm64: topology: enable ACPI/PPTT based CPU topology
- ACPI: Add PPTT to injectable table list
- arm64: topology: divorce MC scheduling domain from core_siblings
* hisi_sas robustness fixes (LP: #1774466)
- scsi: hisi_sas: delete timer when removing hisi_sas driver
- scsi: hisi_sas: print device id for errors
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task twice
- scsi: hisi_sas: check host frozen before calling "done" function
- scsi: hisi_sas: check sas_dev gone earlier in hisi_sas_abort_task()
- scsi: hisi_sas: stop controller timer for reset
- scsi: hisi_sas: update PHY linkrate after a controller reset
- scsi: hisi_sas: change slot index allocation mode
- scsi: hisi_sas: Change common allocation mode of device id
- scsi: hisi_sas: Reset disks when discovered
- scsi: hisi_sas: Create a scsi_host_template per HW module
- scsi: hisi_sas: Init disks after controller reset
- scsi: hisi_sas: Try wait commands before before controller reset
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA command
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
- scsi: hisi_sas: Fix return value when get_free_slot() failed
- scsi: hisi_sas: Mark PHY as in reset for nexus reset
* hisi_sas: Support newer v3 hardware (LP: #1774467)
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
- scsi: hisi_sas: fix PI memory size
- scsi: hisi_sas: config ATA de-reset as an constrained command for v3 hw
- scsi: hisi_sas: remove redundant handling to event95 for v3
- scsi: hisi_sas: add readl poll timeout helper wrappers
- scsi: hisi_sas: workaround a v3 hw hilink bug
- scsi: hisi_sas: Add LED feature for v3 hw
* hisi_sas: improve performance by optimizing DQ locking (LP: #1774472)
- scsi: hisi_sas: initialize dq spinlock before use
- scsi: hisi_sas: optimise the usage of DQ locking
- scsi: hisi_sas: relocate smp sg map
- scsi: hisi_sas: make return type of prep functions void
- scsi: hisi_sas: allocate slot buffer earlier
- scsi: hisi_sas: Don't lock DQ for complete task sending
- scsi: hisi_sas: Use device lock to protect slot alloc/free
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
* Request to revert SAUCE patches in the 18.04 SRU and update with upstream
version (LP: #1768431)
- scsi: cxlflash: Handle spurious interrupts
- scsi: cxlflash: Remove commmands from pending list on timeout
- scsi: cxlflash: Synchronize reset and remove ops
- SAUCE: (no-up) cxlflash: OCXL diff between v2 and v3
* After update to 4.13-43 Intel Graphics are Laggy (LP: #1773520)
- SAUCE: Revert "drm/i915/edp: Allow alternate fixed mode for eDP if
available."
* ELANPAD ELAN0612 does not work, patch available (LP: #1773509)
- SAUCE: Input: elan_i2c - add ELAN0612 to the ACPI table
* FS-Cache: Assertion failed: FS-Cache: 6 == 5 is false (LP: #1774336)
- SAUCE: CacheFiles: fix a read_waiter/read_copier race
* hns3 driver updates (LP: #1768670)
- net: hns3: VF should get the real rss_size instead of rss_size_max
- net: hns3: set the cmdq out_vld bit to 0 after used
- net: hns3: fix endian issue when PF get mbx message flag
- net: hns3: fix the queue id for tqp enable&&reset
- net: hns3: set the max ring num when alloc netdev
- net: hns3: add support for VF driver inner interface
hclgevf_ops.get_tqps_and_rss_info
- net: hns3: refactor the hclge_get/set_rss function
- net: hns3: refactor the hclge_get/set_rss_tuple function
- net: hns3: fix for RSS configuration loss problem during reset
- net: hns3: fix for pause configuration lost during reset
- net: hns3: fix for use-after-free when setting ring parameter
- net: hns3: refactor the get/put_vector function
- net: hns3: fix for coalesce configuration lost during reset
- net: hns3: refactor the coalesce related struct
- net: hns3: fix for coal configuation lost when setting the channel
- net: hns3: add existence check when remove old uc mac address
- net: hns3: fix for netdev not running problem after calling net_stop and
net_open
- net: hns3: fix for ipv6 address loss problem after setting channels
- net: hns3: unify the pause params setup function
- net: hns3: fix rx path skb->truesize reporting bug
- net: hns3: add support for querying pfc puase packets statistic
- net: hns3: fix for loopback failure when vlan filter is enable
- net: hns3: fix for buffer overflow smatch warning
- net: hns3: fix error type definition of return value
- net: hns3: fix return value error of hclge_get_mac_vlan_cmd_status()
- net: hns3: add existence checking before adding unicast mac address
- net: hns3: add result checking for VF when modify unicast mac address
- net: hns3: reallocate tx/rx buffer after changing mtu
- net: hns3: fix the VF queue reset flow error
- net: hns3: fix for vlan table lost problem when resetting
- net: hns3: increase the max time for IMP handle command
- net: hns3: change GL update rate
- net: hns3: change the time interval of int_gl calculating
- net: hns3: fix for getting wrong link mode problem
- net: hns3: add get_link support to VF
- net: hns3: add querying speed and duplex support to VF
- net: hns3: fix for not returning problem in get_link_ksettings when phy
exists
- net: hns3: Changes to make enet watchdog timeout func common for PF/VF
- net: hns3: Add VF Reset Service Task to support event handling
- net: hns3: Add VF Reset device state and its handling
- net: hns3: Add support to request VF Reset to PF
- net: hns3: Add support to reset the enet/ring mgmt layer
- net: hns3: Add support to re-initialize the hclge device
- net: hns3: Changes to support ARQ(Asynchronous Receive Queue)
- net: hns3: Add *Asserting Reset* mailbox message & handling in VF
- net: hns3: Changes required in PF mailbox to support VF reset
- net: hns3: hclge_inform_reset_assert_to_vf() can be static
- net: hns3: fix for returning wrong value problem in hns3_get_rss_key_size
- net: hns3: fix for returning wrong value problem in hns3_get_rss_indir_size
- net: hns3: fix for the wrong shift problem in hns3_set_txbd_baseinfo
- net: hns3: fix for not initializing VF rss_hash_key problem
- net: hns3: never send command queue message to IMP when reset
- net: hns3: remove unnecessary pci_set_drvdata() and devm_kfree()
- net: hns3: fix length overflow when CONFIG_ARM64_64K_PAGES
- net: hns3: Remove error log when getting pfc stats fails
- net: hns3: fix to correctly fetch l4 protocol outer header
- net: hns3: Fixes the out of bounds access in hclge_map_tqp
- net: hns3: Fixes the error legs in hclge_init_ae_dev function
- net: hns3: fix for phy_addr error in hclge_mac_mdio_config
- net: hns3: Fix to support autoneg only for port attached with phy
- net: hns3: fix a dead loop in hclge_cmd_csq_clean
- net: hns3: Fix for packet loss due wrong filter config in VLAN tbls
- net: hns3: Remove packet statistics in the range of 8192~12287
- net: hns3: Add support of hardware rx-vlan-offload to HNS3 VF driver
- net: hns3: Fix for setting mac address when resetting
- net: hns3: remove add/del_tunnel_udp in hns3_enet module
- net: hns3: fix for cleaning ring problem
- net: hns3: refactor the loopback related function
- net: hns3: Fix for deadlock problem occurring when unregistering ae_algo
- net: hns3: Fix for the null pointer problem occurring when initializing
ae_dev failed
- net: hns3: Add a check for client instance init state
- net: hns3: Change return type of hnae3_register_ae_dev
- net: hns3: Change return type of hnae3_register_ae_algo
- net: hns3: Change return value in hnae3_register_client
- net: hns3: Fixes the back pressure setting when sriov is enabled
- net: hns3: Fix for fiber link up problem
- net: hns3: Add support of .sriov_configure in HNS3 driver
- net: hns3: Fixes the missing PCI iounmap for various legs
- net: hns3: Fixes error reported by Kbuild and internal review
- net: hns3: Fixes API to fetch ethernet header length with kernel default
- net: hns3: cleanup of return values in hclge_init_client_instance()
- net: hns3: Fix the missing client list node initialization
- net: hns3: Fix for hns3 module is loaded multiple times problem
- net: hns3: Use enums instead of magic number in hclge_is_special_opcode
- net: hns3: Fix for netdev not running problem after calling net_stop and
net_open
- net: hns3: Fixes kernel panic issue during rmmod hns3 driver
- net: hns3: Fix for CMDQ and Misc. interrupt init order problem
- net: hns3: Updates RX packet info fetch in case of multi BD
- net: hns3: Add support for tx_accept_tag2 and tx_accept_untag2 config
- net: hns3: Add STRP_TAGP field support for hardware revision 0x21
- net: hns3: Add support to enable TX/RX promisc mode for H/W rev(0x21)
- net: hns3: Fix for PF mailbox receving unknown message
- net: hns3: Fixes the state to indicate client-type initialization
- net: hns3: Fixes the init of the VALID BD info in the descriptor
- net: hns3: Removes unnecessary check when clearing TX/RX rings
- net: hns3: Clear TX/RX rings when stopping port & un-initializing client
- net: hns3: Remove unused led control code
- net: hns3: Adds support for led locate command for copper port
- net: hns3: Fixes initalization of RoCE handle and makes it conditional
- net: hns3: Disable vf vlan filter when vf vlan table is full
- net: hns3: Add support for IFF_ALLMULTI flag
- net: hns3: Add repeat address checking for setting mac address
- net: hns3: Fix setting mac address error
- net: hns3: Fix for service_task not running problem after resetting
- net: hns3: Fix for hclge_reset running repeatly problem
- net: hns3: Fix for phy not link up problem after resetting
- net: hns3: Add missing break in misc_irq_handle
- net: hns3: Fix for vxlan tx checksum bug
- net: hns3: Optimize the PF's process of updating multicast MAC
- net: hns3: Optimize the VF's process of updating multicast MAC
- SAUCE: {topost} net: hns3: add support for serdes loopback selftest
- SAUCE: {topost} net: hns3: RX BD information valid only in last BD except
VLD bit and buffer size
- SAUCE: {topost} net: hns3: remove hclge_get_vector_index from
hclge_bind_ring_with_vector
- SAUCE: {topost} net: hns3: rename the interface for init_client_instance and
uninit_client_instance
- SAUCE: {topost} net: hns3: add vector status check before free vector
- SAUCE: {topost} net: hns3: add l4_type check for both ipv4 and ipv6
- SAUCE: {topost} net: hns3: remove unused head file in hnae3.c
- SAUCE: {topost} net: hns3: extraction an interface for state state
init|uninit
- SAUCE: {topost} net: hns3: print the ret value in error information
- SAUCE: {topost} net: hns3: remove the Redundant put_vector in
hns3_client_uninit
- SAUCE: {topost} net: hns3: add unlikely for error check
- SAUCE: {topost} net: hns3: remove back in struct hclge_hw
- SAUCE: {topost} net: hns3: use lower_32_bits and upper_32_bits
- SAUCE: {topost} net: hns3: remove unused hclge_ring_to_dma_dir
- SAUCE: {topost} net: hns3: remove useless code in hclge_cmd_send
- SAUCE: {topost} net: hns3: remove some redundant assignments
- SAUCE: {topost} net: hns3: simplify hclge_cmd_csq_clean
- SAUCE: {topost} net: hns3: using modulo for cyclic counters in
hclge_cmd_send
- SAUCE: {topost} net: hns3: remove a redundant hclge_cmd_csq_done
- SAUCE: {topost} net: hns3: remove some unused members of some structures
- SAUCE: {topost} net: hns3: give default option while dependency HNS3 set
- SAUCE: {topost} net: hns3: use dma_zalloc_coherent instead of
kzalloc/dma_map_single
- SAUCE: {topost} net: hns3: modify hnae_ to hnae3_
- SAUCE: {topost} net: hns3: fix unused function warning in VF driver
- SAUCE: {topost} net: hns3: remove some redundant assignments
- SAUCE: {topost} net: hns3: standardize the handle of return value
- SAUCE: {topost} net: hns3: remove extra space and brackets
- SAUCE: {topost} net: hns3: fix unreasonable code comments
- SAUCE: {topost} net: hns3: use decimal for bit offset macros
- SAUCE: {topost} net: hns3: modify inconsistent bit mask macros
- SAUCE: {topost} net: hns3: fix mislead parameter name
- SAUCE: {topost} net: hns3: remove unused struct member and definition
- SAUCE: {topost} net: hns3: Add SPDX tags to hns3 driver
- SAUCE: {topost} net: hns3: Add pf reset for hip08 RoCE
- SAUCE: {topost} net: hns3: optimize the process of notifying roce client
- SAUCE: {topost} net: hns3: Add calling roce callback function when link
status change
- SAUCE: {topost} net: hns3: fix tc setup when netdev is first up
- SAUCE: {topost} net: hns3: fix for mac pause not disable in pfc mode
- SAUCE: {topost} net: hns3: fix for waterline not setting correctly
- SAUCE: {topost} net: hns3: fix for l4 checksum offload bug
- SAUCE: {topost} net: hns3: fix for mailbox message truncated problem
- SAUCE: {topost} net: hns3: Add configure for mac minimal frame size
- SAUCE: {topost} net: hns3: fix warning bug when doing lp selftest
- SAUCE: {topost} net: hns3: fix get_vector ops in hclgevf_main module
- SAUCE: {topost} net: hns3: remove the warning when clear reset cause
- SAUCE: {topost} net: hns3: Use roce handle when calling roce callback
function
- SAUCE: {topost} net: hns3: prevent sending command during global or core
reset
- SAUCE: {topost} net: hns3: modify the order of initializeing command queue
register
- SAUCE: {topost} net: hns3: reset net device with rtnl_lock
- SAUCE: {topost} net: hns3: prevent to request reset frequently
- SAUCE: {topost} net: hns3: correct reset event status register
- SAUCE: {topost} net: hns3: separate roce from nic when resetting
- SAUCE: net: hns3: Fix for phy link issue when using marvell phy driver
- SAUCE: {topost} net: hns3: fix return value error in
hns3_reset_notify_down_enet
- SAUCE: {topost} net: hns3: remove unnecessary ring configuration operation
while resetting
- SAUCE: {topost} net: hns3: fix for reset_level default assignment probelm
- SAUCE: {topost} net: hns3: fix for using wrong mask and shift in
hclge_get_ring_chain_from_mbx
- SAUCE: {topost} net: hns3: fix comments for hclge_get_ring_chain_from_mbx
- SAUCE: net: hns3: Fix for VF mailbox cannot receiving PF response
- SAUCE: net: hns3: Fix for VF mailbox receiving unknown message
- SAUCE: net: hns3: Optimize PF CMDQ interrupt switching process
* enable mic-mute hotkey and led on Lenovo M820z and M920z (LP: #1774306)
- ALSA: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs
* Bionic update: upstream stable patchset 2018-05-29 (LP: #1774063)
- cifs: do not allow creating sockets except with SMB1 posix exensions
- btrfs: fix unaligned access in readdir
- x86/acpi: Prevent X2APIC id 0xffffffff from being accounted
- clocksource/imx-tpm: Correct -ETIME return condition check
- x86/tsc: Prevent 32bit truncation in calc_hpet_ref()
- drm/vc4: Fix memory leak during BO teardown
- drm/i915/gvt: throw error on unhandled vfio ioctls
- drm/i915/audio: Fix audio detection issue on GLK
- drm/i915: Do no use kfree() to free a kmem_cache_alloc() return value
- drm/i915: Fix LSPCON TMDS output buffer enabling from low-power state
- drm/i915/bxt, glk: Increase PCODE timeouts during CDCLK freq changing
- usb: musb: fix enumeration after resume
- usb: musb: call pm_runtime_{get,put}_sync before reading vbus registers
- usb: musb: Fix external abort in musb_remove on omap2430
- firewire-ohci: work around oversized DMA reads on JMicron controllers
- x86/tsc: Allow TSC calibration without PIT
- NFSv4: always set NFS_LOCK_LOST when a lock is lost.
- ACPI / LPSS: Do not instiate platform_dev for devs without MMIO resources
- ALSA: hda - Use IS_REACHABLE() for dependency on input
- ASoC: au1x: Fix timeout tests in au1xac97c_ac97_read()
- kvm: x86: fix KVM_XEN_HVM_CONFIG ioctl
- RDMA/core: Clarify rdma_ah_find_type
- KVM: PPC: Book3S HV: Enable migration of decrementer register
- netfilter: ipv6: nf_defrag: Pass on packets to stack per RFC2460
- tracing/hrtimer: Fix tracing bugs by taking all clock bases and modes into
account
- KVM: s390: use created_vcpus in more places
- platform/x86: dell-laptop: Filter out spurious keyboard backlight change
events
- xprtrdma: Fix backchannel allocation of extra rpcrdma_reps
- selftest: ftrace: Fix to pick text symbols for kprobes
- PCI: Add function 1 DMA alias quirk for Marvell 9128
- Input: psmouse - fix Synaptics detection when protocol is disabled
- libbpf: Makefile set specified permission mode
- Input: synaptics - reset the ABS_X/Y fuzz after initializing MT axes
- i40iw: Free IEQ resources
- i40iw: Zero-out consumer key on allocate stag for FMR
- perf unwind: Do not look just at the global callchain_param.record_mode
- tools lib traceevent: Simplify pointer print logic and fix %pF
- perf callchain: Fix attr.sample_max_stack setting
- tools lib traceevent: Fix get_field_str() for dynamic strings
- perf record: Fix failed memory allocation for get_cpuid_str
- iommu/exynos: Don't unconditionally steal bus ops
- powerpc: System reset avoid interleaving oops using die synchronisation
- iommu/vt-d: Use domain instead of cache fetching
- dm thin: fix documentation relative to low water mark threshold
- dm mpath: return DM_MAPIO_REQUEUE on blk-mq rq allocation failure
- ubifs: Fix uninitialized variable in search_dh_cookie()
- net: stmmac: dwmac-meson8b: fix setting the RGMII TX clock on Meson8b
- net: stmmac: dwmac-meson8b: propagate rate changes to the parent clock
- spi: a3700: Clear DATA_OUT when performing a read
- IB/cq: Don't force IB_POLL_DIRECT poll context for ib_process_cq_direct
- nfs: Do not convert nfs_idmap_cache_timeout to jiffies
- MIPS: Fix clean of vmlinuz.{32,ecoff,bin,srec}
- PCI: Add dummy pci_irqd_intx_xlate() for CONFIG_PCI=n build
- watchdog: sp5100_tco: Fix watchdog disable bit
- kconfig: Don't leak main menus during parsing
- kconfig: Fix automatic menu creation mem leak
- kconfig: Fix expr_free() E_NOT leak
- ipmi/powernv: Fix error return code in ipmi_powernv_probe()
- Btrfs: set plug for fsync
- btrfs: Fix out of bounds access in btrfs_search_slot
- Btrfs: fix scrub to repair raid6 corruption
- btrfs: fail mount when sb flag is not in BTRFS_SUPER_FLAG_SUPP
- Btrfs: fix unexpected EEXIST from btrfs_get_extent
- Btrfs: raid56: fix race between merge_bio and rbio_orig_end_io
- RDMA/cma: Check existence of netdevice during port validation
- f2fs: avoid hungtask when GC encrypted block if io_bits is set
- scsi: devinfo: fix format of the device list
- scsi: fas216: fix sense buffer initialization
- Input: stmfts - set IRQ_NOAUTOEN to the irq flag
- HID: roccat: prevent an out of bounds read in kovaplus_profile_activated()
- nfp: fix error return code in nfp_pci_probe()
- block: Set BIO_TRACE_COMPLETION on new bio during split
- bpf: test_maps: cleanup sockmaps when test ends
- i40evf: Don't schedule reset_task when device is being removed
- i40evf: ignore link up if not running
- platform/x86: thinkpad_acpi: suppress warning about palm detection
- KVM: s390: vsie: use READ_ONCE to access some SCB fields
- blk-mq-debugfs: don't allow write on attributes with seq_operations set
- ASoC: rockchip: Use dummy_dai for rt5514 dsp dailink
- igb: Allow to remove administratively set MAC on VFs
- igb: Clear TXSTMP when ptp_tx_work() is timeout
- fm10k: fix "failed to kill vid" message for VF
- x86/hyperv: Stop suppressing X86_FEATURE_PCID
- tty: serial: exar: Relocate sleep wake-up handling
- device property: Define type of PROPERTY_ENRTY_*() macros
- crypto: artpec6 - remove select on non-existing CRYPTO_SHA384
- RDMA/uverbs: Use an unambiguous errno for method not supported
- jffs2: Fix use-after-free bug in jffs2_iget()'s error handling path
- ixgbe: don't set RXDCTL.RLPML for 82599
- i40e: program fragmented IPv4 filter input set
- i40e: fix reported mask for ntuple filters
- samples/bpf: Partially fixes the bpf.o build
- powerpc/numa: Use ibm,max-associativity-domains to discover possible nodes
- powerpc/numa: Ensure nodes initialized for hotplug
- RDMA/mlx5: Avoid memory leak in case of XRCD dealloc failure
- ntb_transport: Fix bug with max_mw_size parameter
- gianfar: prevent integer wrapping in the rx handler
- x86/hyperv: Check for required priviliges in hyperv_init()
- netfilter: x_tables: fix pointer leaks to userspace
- tcp_nv: fix potential integer overflow in tcpnv_acked
- kvm: Map PFN-type memory regions as writable (if possible)
- x86/kvm/vmx: do not use vm-exit instruction length for fast MMIO when
running nested
- fs/dax.c: release PMD lock even when there is no PMD support in DAX
- ocfs2: return -EROFS to mount.ocfs2 if inode block is invalid
- ocfs2/acl: use 'ip_xattr_sem' to protect getting extended attribute
- ocfs2: return error when we attempt to access a dirty bh in jbd2
- mm/mempolicy: fix the check of nodemask from user
- mm/mempolicy: add nodes_empty check in SYSC_migrate_pages
- asm-generic: provide generic_pmdp_establish()
- sparc64: update pmdp_invalidate() to return old pmd value
- mm: thp: use down_read_trylock() in khugepaged to avoid long block
- mm: pin address_space before dereferencing it while isolating an LRU page
- mm/fadvise: discard partial page if endbyte is also EOF
- openvswitch: Remove padding from packet before L3+ conntrack processing
- blk-mq: fix discard merge with scheduler attached
- IB/hfi1: Re-order IRQ cleanup to address driver cleanup race
- IB/hfi1: Fix for potential refcount leak in hfi1_open_file()
- IB/ipoib: Fix for potential no-carrier state
- IB/core: Map iWarp AH type to undefined in rdma_ah_find_type
- drm/nouveau/pmu/fuc: don't use movw directly anymore
- s390/eadm: fix CONFIG_BLOCK include dependency
- netfilter: ipv6: nf_defrag: Kill frag queue on RFC2460 failure
- x86/power: Fix swsusp_arch_resume prototype
- x86/dumpstack: Avoid uninitlized variable
- firmware: dmi_scan: Fix handling of empty DMI strings
- ACPI: processor_perflib: Do not send _PPC change notification if not ready
- ACPI / bus: Do not call _STA on battery devices with unmet dependencies
- ACPI / scan: Use acpi_bus_get_status() to initialize ACPI_TYPE_DEVICE devs
- MIPS: TXx9: use IS_BUILTIN() for CONFIG_LEDS_CLASS
- perf record: Fix period option handling
- MIPS: Generic: Support GIC in EIC mode
- perf evsel: Fix period/freq terms setup
- xen-netfront: Fix race between device setup and open
- xen/grant-table: Use put_page instead of free_page
- bpf: sockmap, fix leaking maps with attached but not detached progs
- RDS: IB: Fix null pointer issue
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE atomics
- proc: fix /proc/*/map_files lookup
- PM / domains: Fix up domain-idle-states OF parsing
- cifs: silence compiler warnings showing up with gcc-8.0.0
- bcache: properly set task state in bch_writeback_thread()
- bcache: fix for allocator and register thread race
- bcache: fix for data collapse after re-attaching an attached device
- bcache: return attach error when no cache set exist
- cpufreq: intel_pstate: Enable HWP during system resume on CPU0
- selftests/ftrace: Add some missing glob checks
- rxrpc: Don't put crypto buffers on the stack
- svcrdma: Fix Read chunk round-up
- net: Extra '_get' in declaration of arch_get_platform_mac_address
- tools/libbpf: handle issues with bpf ELF objects containing .eh_frames
- SUNRPC: Don't call __UDPX_INC_STATS() from a preemptible context
- net: stmmac: discard disabled flags in interrupt status register
- bpf: fix rlimit in reuseport net selftest
- ACPI / EC: Restore polling during noirq suspend/resume phases
- PM / wakeirq: Fix unbalanced IRQ enable for wakeirq
- vfs/proc/kcore, x86/mm/kcore: Fix SMAP fault when dumping vsyscall user page
- powerpc/mm/hash64: Zero PGD pages on allocation
- x86/platform/UV: Fix GAM Range Table entries less than 1GB
- locking/qspinlock: Ensure node->count is updated before initialising node
- powerpc/powernv: IMC fix out of bounds memory access at shutdown
- perf test: Fix test trace+probe_libc_inet_pton.sh for s390x
- irqchip/gic-v3: Ignore disabled ITS nodes
- cpumask: Make for_each_cpu_wrap() available on UP as well
- irqchip/gic-v3: Change pr_debug message to pr_devel
- RDMA/core: Reduce poll batch for direct cq polling
- alarmtimer: Init nanosleep alarm timer on stack
- netfilter: x_tables: cap allocations at 512 mbyte
- netfilter: x_tables: add counters allocation wrapper
- netfilter: compat: prepare xt_compat_init_offsets to return errors
- netfilter: compat: reject huge allocation requests
- netfilter: x_tables: limit allocation requests for blob rule heads
- perf: Fix sample_max_stack maximum check
- perf: Return proper values for user stack errors
- RDMA/mlx5: Fix NULL dereference while accessing XRC_TGT QPs
- Revert "KVM: X86: Fix SMRAM accessing even if VM is shutdown"
- mac80211_hwsim: fix use-after-free bug in hwsim_exit_net
- btrfs: Fix race condition between delayed refs and blockgroup removal
- mm,vmscan: Allow preallocating memory for register_shrinker().
* Bionic update: upstream stable patchset 2018-05-24 (LP: #1773233)
- tty: make n_tty_read() always abort if hangup is in progress
- cpufreq: CPPC: Use transition_delay_us depending transition_latency
- ubifs: Check ubifs_wbuf_sync() return code
- ubi: fastmap: Don't flush fastmap work on detach
- ubi: Fix error for write access
- ubi: Reject MLC NAND
- mm/ksm.c: fix inconsistent accounting of zero pages
- mm/hmm: hmm_pfns_bad() was accessing wrong struct
- task_struct: only use anon struct under randstruct plugin
- fs/reiserfs/journal.c: add missing resierfs_warning() arg
- resource: fix integer overflow at reallocation
- ipc/shm: fix use-after-free of shm file via remap_file_pages()
- mm, slab: reschedule cache_reap() on the same CPU
- usb: musb: gadget: misplaced out of bounds check
- phy: allwinner: sun4i-usb: poll vbus changes on A23/A33 when driving VBUS
- usb: gadget: udc: core: update usb_ep_queue() documentation
- ARM64: dts: meson: reduce odroid-c2 eMMC maximum rate
- KVM: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list
- ARM: EXYNOS: Fix coupled CPU idle freeze on Exynos4210
- arm: dts: mt7623: fix USB initialization fails on bananapi-r2
- ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property
- ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250
- ARM: dts: at91: sama5d4: fix pinctrl compatible string
- spi: atmel: init FIFOs before spi enable
- spi: Fix scatterlist elements size in spi_map_buf
- spi: Fix unregistration of controller with fixed SPI bus number
- media: atomisp_fops.c: disable atomisp_compat_ioctl32
- media: vivid: check if the cec_adapter is valid
- media: vsp1: Fix BRx conditional path in WPF
- x86/xen: Delay get_cpu_cap until stack canary is established
- regmap: Fix reversed bounds check in regmap_raw_write()
- ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E
- ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status()
- USB: gadget: f_midi: fixing a possible double-free in f_midi
- USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw
- usb: dwc3: prevent setting PRTCAP to OTG from debugfs
- usb: dwc3: pci: Properly cleanup resource
- usb: dwc3: gadget: never call ->complete() from ->ep_queue()
- cifs: fix memory leak in SMB2_open()
- fix smb3-encryption breakage when CONFIG_DEBUG_SG=y
- smb3: Fix root directory when server returns inode number of zero
- HID: i2c-hid: fix size check and type usage
- i2c: i801: Save register SMBSLVCMD value only once
- i2c: i801: Restore configuration at shutdown
- CIFS: refactor crypto shash/sdesc allocation&free
- CIFS: add sha512 secmech
- CIFS: fix sha512 check in cifs_crypto_secmech_release
- powerpc/64s: Fix dt_cpu_ftrs to have restore_cpu clear unwanted LPCR bits
- powerpc/64: Call H_REGISTER_PROC_TBL when running as a HPT guest on POWER9
- powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently
- powerpc/kprobes: Fix call trace due to incorrect preempt count
- powerpc/kexec_file: Fix error code when trying to load kdump kernel
- powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops
- powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops
- HID: Fix hid_report_len usage
- HID: core: Fix size as type u32
- soc: mediatek: fix the mistaken pointer accessed when subdomains are added
- ASoC: ssm2602: Replace reg_default_raw with reg_default
- ASoC: topology: Fix kcontrol name string handling
- irqchip/gic: Take lock when updating irq type
- random: use a tighter cap in credit_entropy_bits_safe()
- extcon: intel-cht-wc: Set direction and drv flags for V5 boost GPIO
- block: use 32-bit blk_status_t on Alpha
- jbd2: if the journal is aborted then don't allow update of the log tail
- ext4: shutdown should not prevent get_write_access
- ext4: eliminate sleep from shutdown ioctl
- ext4: pass -ESHUTDOWN code to jbd2 layer
- ext4: don't update checksum of new initialized bitmaps
- ext4: protect i_disksize update by i_data_sem in direct write path
- ext4: limit xattr size to INT_MAX
- ext4: always initialize the crc32c checksum driver
- ext4: don't allow r/w mounts if metadata blocks overlap the superblock
- ext4: move call to ext4_error() into ext4_xattr_check_block()
- ext4: add bounds checking to ext4_xattr_find_entry()
- ext4: add extra checks to ext4_xattr_block_get()
- dm crypt: limit the number of allocated pages
- RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device
- RDMA/mlx5: Protect from NULL pointer derefence
- RDMA/rxe: Fix an out-of-bounds read
- ALSA: pcm: Fix UAF at PCM release via PCM timer access
- IB/srp: Fix srp_abort()
- IB/srp: Fix completion vector assignment algorithm
- dmaengine: at_xdmac: fix rare residue corruption
- cxl: Fix possible deadlock when processing page faults from cxllib
- tpm: self test failure should not cause suspend to fail
- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
- libnvdimm, namespace: use a safe lookup for dimm device name
- nfit, address-range-scrub: fix scrub in-progress reporting
- nfit: skip region registration for incomplete control regions
- ring-buffer: Check if memory is available before allocation
- um: Compile with modern headers
- um: Use POSIX ucontext_t instead of struct ucontext
- iommu/vt-d: Fix a potential memory leak
- mmc: jz4740: Fix race condition in IRQ mask update
- mmc: tmio: Fix error handling when issuing CMD23
- PCI: Mark Broadcom HT1100 and HT2000 Root Port Extended Tags as broken
- clk: mvebu: armada-38x: add support for missing clocks
- clk: fix false-positive Wmaybe-uninitialized warning
- clk: mediatek: fix PWM clock source by adding a fixed-factor clock
- clk: bcm2835: De-assert/assert PLL reset signal when appropriate
- pwm: rcar: Fix a condition to prevent mismatch value setting to duty
- thermal: imx: Fix race condition in imx_thermal_probe()
- dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4
- watchdog: f71808e_wdt: Fix WD_EN register read
- ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation
- ALSA: pcm: Avoid potential races between OSS ioctls and read/write
- ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams
- ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls
- ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
- drm/amdgpu: Add an ATPX quirk for hybrid laptop
- drm/amdgpu: Fix always_valid bos multiple LRU insertions.
- drm/amdgpu/sdma: fix mask in emit_pipeline_sync
- drm/amdgpu: Fix PCIe lane width calculation
- drm/amdgpu/si: implement get/set pcie_lanes asic callback
- drm/rockchip: Clear all interrupts before requesting the IRQ
- drm/radeon: add PX quirk for Asus K73TK
- drm/radeon: Fix PCIe lane width calculation
- ALSA: line6: Use correct endpoint type for midi output
- ALSA: rawmidi: Fix missing input substream checks in compat ioctls
- ALSA: hda - New VIA controller suppor no-snoop path
- random: fix crng_ready() test
- random: use a different mixing algorithm for add_device_randomness()
- random: crng_reseed() should lock the crng instance that it is modifying
- random: add new ioctl RNDRESEEDCRNG
- HID: input: fix battery level reporting on BT mice
- HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device
- HID: wacom: bluetooth: send exit report for recent Bluetooth devices
- MIPS: uaccess: Add micromips clobbers to bzero invocation
- MIPS: memset.S: EVA & fault support for small_memset
- MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup
- MIPS: memset.S: Fix clobber of v1 in last_fixup
- powerpc/eeh: Fix enabling bridge MMIO windows
- powerpc/lib: Fix off-by-one in alternate feature patching
- udf: Fix leak of UTF-16 surrogates into encoded strings
- fanotify: fix logic of events on child
- mmc: sdhci-pci: Only do AMD tuning for HS200
- drm/i915: Correctly handle limited range YCbCr data on VLV/CHV
- jffs2_kill_sb(): deal with failed allocations
- hypfs_kill_super(): deal with failed allocations
- orangefs_kill_sb(): deal with allocation failures
- rpc_pipefs: fix double-dput()
- Don't leak MNT_INTERNAL away from internal mounts
- autofs: mount point create should honour passed in mode
- mm/filemap.c: fix NULL pointer in page_cache_tree_insert()
- Revert "media: lirc_zilog: driver only sends LIRCCODE"
- media: staging: lirc_zilog: incorrect reference counting
- writeback: safer lock nesting
- Bluetooth: hci_bcm: Add irq_polarity module option
- mm: hwpoison: disable memory error handling on 1GB hugepage
- media: rc: oops in ir_timer_keyup after device unplug
- acpi, nfit: rework NVDIMM leaf method detection
- ceph: always update atime/mtime/ctime for new inode
- ext4: fix offset overflow on 32-bit archs in ext4_iomap_begin()
- ext4: force revalidation of directory pointer after seekdir(2)
- RDMA/core: Avoid that ib_drain_qp() triggers an out-of-bounds stack access
- xprtrdma: Fix latency regression on NUMA NFS/RDMA clients
- xprtrdma: Fix corner cases when handling device removal
- IB/srpt: Fix an out-of-bounds stack access in srpt_zerolength_write()
- drivers/infiniband/core/verbs.c: fix build with gcc-4.4.4
- drivers/infiniband/ulp/srpt/ib_srpt.c: fix build with gcc-4.4.4
- mmc: core: Prevent bus reference leak in mmc_blk_init()
- drm/amd/display: HDMI has no sound after Panel power off/on
- trace_uprobe: Use %lx to display offset
- clk: tegra: Mark HCLK, SCLK and EMC as critical
- pwm: mediatek: Fix up PWM4 and PWM5 malfunction on MT7623
- pwm: mediatek: Improve precision in rate calculation
- HID: i2c-hid: Fix resume issue on Raydium touchscreen device
- s390: add support for IBM z14 Model ZR1
- drm/i915: Fix hibernation with ACPI S0 target state
- libnvdimm, dimm: handle EACCES failures from label reads
- device-dax: allow MAP_SYNC to succeed
- HID: i2c-hid: fix inverted return value from i2c_hid_command()
* CVE-2018-7755
- SAUCE: floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl
-- Kleber Sacilotto de Souza <email address hidden> Thu, 14 Jun 2018 12:31:09 +0200
-
linux-aws (4.15.0-1010.10) bionic; urgency=medium
* linux-aws: 4.15.0-1010.10 -proposed tracker (LP: #1772931)
* Switch Build-Depends: transfig to fig2dev (LP: #1770770)
- [Config] update Build-Depends: transfig to fig2dev
[ Ubuntu: 4.15.0-23.25 ]
* linux: 4.15.0-23.25 -proposed tracker (LP: #1772927)
* arm64 SDEI support needs trampoline code for KPTI (LP: #1768630)
- arm64: mmu: add the entry trampolines start/end section markers into
sections.h
- arm64: sdei: Add trampoline code for remapping the kernel
* Some PCIe errors not surfaced through rasdaemon (LP: #1769730)
- ACPI: APEI: handle PCIe AER errors in separate function
- ACPI: APEI: call into AER handling regardless of severity
* qla2xxx: Fix page fault at kmem_cache_alloc_node() (LP: #1770003)
- scsi: qla2xxx: Fix session cleanup for N2N
- scsi: qla2xxx: Remove unused argument from qlt_schedule_sess_for_deletion()
- scsi: qla2xxx: Serialize session deletion by using work_lock
- scsi: qla2xxx: Serialize session free in qlt_free_session_done
- scsi: qla2xxx: Don't call dma_free_coherent with IRQ disabled.
- scsi: qla2xxx: Fix warning in qla2x00_async_iocb_timeout()
- scsi: qla2xxx: Prevent relogin trigger from sending too many commands
- scsi: qla2xxx: Fix double free bug after firmware timeout
- scsi: qla2xxx: Fixup locking for session deletion
* Several hisi_sas bug fixes (LP: #1768974)
- scsi: hisi_sas: dt-bindings: add an property of signal attenuation
- scsi: hisi_sas: support the property of signal attenuation for v2 hw
- scsi: hisi_sas: fix the issue of link rate inconsistency
- scsi: hisi_sas: fix the issue of setting linkrate register
- scsi: hisi_sas: increase timer expire of internal abort task
- scsi: hisi_sas: remove unused variable hisi_sas_devices.running_req
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
- scsi: hisi_sas: Code cleanup and minor bug fixes
* [bionic] machine stuck and bonding not working well when nvmet_rdma module
is loaded (LP: #1764982)
- nvmet-rdma: Don't flush system_wq by default during remove_one
- nvme-rdma: Don't flush delete_wq by default during remove_one
* Warnings/hang during error handling of SATA disks on SAS controller
(LP: #1768971)
- scsi: libsas: defer ata device eh commands to libata
* Hotplugging a SATA disk into a SAS controller may cause crash (LP: #1768948)
- ata: do not schedule hot plug if it is a sas host
* ISST-LTE:pKVM:Ubuntu1804: rcu_sched self-detected stall on CPU follow by CPU
ATTEMPT TO RE-ENTER FIRMWARE! (LP: #1767927)
- powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write()
- powerpc/64s: return more carefully from sreset NMI
- powerpc/64s: sreset panic if there is no debugger or crash dump handlers
* fsnotify: Fix fsnotify_mark_connector race (LP: #1765564)
- fsnotify: Fix fsnotify_mark_connector race
* Hang on network interface removal in Xen virtual machine (LP: #1771620)
- xen-netfront: Fix hang on device removal
* HiSilicon HNS NIC names are truncated in /proc/interrupts (LP: #1765977)
- net: hns: Avoid action name truncation
* Ubuntu 18.04 kernel crashed while in degraded mode (LP: #1770849)
- SAUCE: powerpc/perf: Fix memory allocation for core-imc based on
num_possible_cpus()
* Switch Build-Depends: transfig to fig2dev (LP: #1770770)
- [Config] update Build-Depends: transfig to fig2dev
* smp_call_function_single/many core hangs with stop4 alone (LP: #1768898)
- cpufreq: powernv: Fix hardlockup due to synchronous smp_call in timer
interrupt
* Add d-i support for Huawei NICs (LP: #1767490)
- d-i: add hinic to nic-modules udeb
* unregister_netdevice: waiting for eth0 to become free. Usage count = 5
(LP: #1746474)
- xfrm: reuse uncached_list to track xdsts
* Include nfp driver in linux-modules (LP: #1768526)
- [Config] Add nfp.ko to generic inclusion list
* Kernel panic on boot (m1.small in cn-north-1) (LP: #1771679)
- x86/xen: Reset VCPU0 info pointer after shared_info remap
* CVE-2018-3639 (x86)
- x86/bugs: Fix the parameters alignment and missing void
- KVM: SVM: Move spec control call after restore of GS
- x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP
- x86/cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS
- x86/cpufeatures: Disentangle SSBD enumeration
- x86/cpufeatures: Add FEATURE_ZEN
- x86/speculation: Handle HT correctly on AMD
- x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL
- x86/speculation: Add virtualized speculative store bypass disable support
- x86/speculation: Rework speculative_store_bypass_update()
- x86/bugs: Unify x86_spec_ctrl_{set_guest,restore_host}
- x86/bugs: Expose x86_spec_ctrl_base directly
- x86/bugs: Remove x86_spec_ctrl_set()
- x86/bugs: Rework spec_ctrl base and mask logic
- x86/speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG
- KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD
- x86/bugs: Rename SSBD_NO to SSB_NO
- bpf: Prevent memory disambiguation attack
- KVM: VMX: Expose SSBD properly to guests.
* Suspend to idle: Open lid didn't resume (LP: #1771542)
- ACPI / PM: Do not reconfigure GPEs for suspend-to-idle
* Fix initialization failure detection in SDEI for device-tree based systems
(LP: #1768663)
- firmware: arm_sdei: Fix return value check in sdei_present_dt()
* No driver for Huawei network adapters on arm64 (LP: #1769899)
- net-next/hinic: add arm64 support
* CVE-2018-1092
- ext4: fail ext4_iget for root directory if unallocated
* kernel 4.15 breaks nouveau on Lenovo P50 (LP: #1763189)
- drm/nouveau: Fix deadlock in nv50_mstm_register_connector()
* update-initramfs not adding i915 GuC firmware for Kaby Lake, firmware fails
to load (LP: #1728238)
- Revert "UBUNTU: SAUCE: (no-up) i915: Remove MODULE_FIRMWARE statements for
unreleased firmware"
* Battery drains when laptop is off (shutdown) (LP: #1745646)
- PCI / PM: Check device_may_wakeup() in pci_enable_wake()
* Dell Latitude 5490/5590 BIOS update 1.1.9 causes black screen at boot
(LP: #1764194)
- drm/i915/bios: filter out invalid DDC pins from VBT child devices
* Intel 9462 A370:42A4 doesn't work (LP: #1748853)
- iwlwifi: add shared clock PHY config flag for some devices
- iwlwifi: add a bunch of new 9000 PCI IDs
* Fix an issue that some PCI devices get incorrectly suspended (LP: #1764684)
- PCI / PM: Always check PME wakeup capability for runtime wakeup support
* [SRU][Bionic/Artful] fix false positives in W+X checking (LP: #1769696)
- init: fix false positives in W+X checking
* Bionic update to v4.15.18 stable release (LP: #1769723)
- netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to
ip_set_net_exit()
- cdc_ether: flag the Cinterion AHS8 modem by gemalto as WWAN
- rds: MP-RDS may use an invalid c_path
- slip: Check if rstate is initialized before uncompressing
- vhost: fix vhost_vq_access_ok() log check
- l2tp: fix races in tunnel creation
- l2tp: fix race in duplicate tunnel detection
- ip_gre: clear feature flags when incompatible o_flags are set
- vhost: Fix vhost_copy_to_user()
- lan78xx: Correctly indicate invalid OTP
- media: v4l2-compat-ioctl32: don't oops on overlay
- media: v4l: vsp1: Fix header display list status check in continuous mode
- ipmi: Fix some error cleanup issues
- parisc: Fix out of array access in match_pci_device()
- parisc: Fix HPMC handler by increasing size to multiple of 16 bytes
- Drivers: hv: vmbus: do not mark HV_PCIE as perf_device
- PCI: hv: Serialize the present and eject work items
- PCI: hv: Fix 2 hang issues in hv_compose_msi_msg()
- KVM: PPC: Book3S HV: trace_tlbie must not be called in realmode
- perf/core: Fix use-after-free in uprobe_perf_close()
- x86/mce/AMD: Get address from already initialized block
- hwmon: (ina2xx) Fix access to uninitialized mutex
- ath9k: Protect queue draining by rcu_read_lock()
- x86/apic: Fix signedness bug in APIC ID validity checks
- f2fs: fix heap mode to reset it back
- block: Change a rcu_read_{lock,unlock}_sched() pair into
rcu_read_{lock,unlock}()
- nvme: Skip checking heads without namespaces
- lib: fix stall in __bitmap_parselist()
- blk-mq: order getting budget and driver tag
- blk-mq: don't keep offline CPUs mapped to hctx 0
- ovl: fix lookup with middle layer opaque dir and absolute path redirects
- xen: xenbus_dev_frontend: Fix XS_TRANSACTION_END handling
- hugetlbfs: fix bug in pgoff overflow checking
- nfsd: fix incorrect umasks
- scsi: qla2xxx: Fix small memory leak in qla2x00_probe_one on probe failure
- block/loop: fix deadlock after loop_set_status
- nfit: fix region registration vs block-data-window ranges
- s390/qdio: don't retry EQBS after CCQ 96
- s390/qdio: don't merge ERROR output buffers
- s390/ipl: ensure loadparm valid flag is set
- get_user_pages_fast(): return -EFAULT on access_ok failure
- mm/gup_benchmark: handle gup failures
- getname_kernel() needs to make sure that ->name != ->iname in long case
- Bluetooth: Fix connection if directed advertising and privacy is used
- Bluetooth: hci_bcm: Treat Interrupt ACPI resources as always being active-
low
- rtl8187: Fix NULL pointer dereference in priv->conf_mutex
- ovl: set lower layer st_dev only if setting lower st_ino
- Linux 4.15.18
* Kernel bug when unplugging Thunderbolt 3 cable, leaves xHCI host controller
dead (LP: #1768852)
- xhci: Fix Kernel oops in xhci dbgtty
* Incorrect blacklist of bcm2835_wdt (LP: #1766052)
- [Packaging] Fix missing watchdog for Raspberry Pi
* CVE-2018-8087
- mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl()
* Integrated Webcam Realtek Integrated_Webcam_HD (0bda:58f4) not working in
DELL XPS 13 9370 with firmware 1.50 (LP: #1763748)
- SAUCE: media: uvcvideo: Support realtek's UVC 1.5 device
* [ALSA] [PATCH] Clevo P950ER ALC1220 Fixup (LP: #1769721)
- SAUCE: ALSA: hda/realtek - Clevo P950ER ALC1220 Fixup
* Bionic: Intermittently sent to Emergency Mode on boot with unhandled kernel
NULL pointer dereference at 0000000000000980 (LP: #1768292)
- thunderbolt: Prevent crash when ICM firmware is not running
* linux-snapdragon: reduce EPROBEDEFER noise during boot (LP: #1768761)
- [Config] snapdragon: DRM_I2C_ADV7511=y
* regression Aquantia Corp. AQC107 4.15.0-13-generic -> 4.15.0-20-generic ?
(LP: #1767088)
- net: aquantia: Regression on reset with 1.x firmware
- net: aquantia: oops when shutdown on already stopped device
* e1000e msix interrupts broken in linux-image-4.15.0-15-generic
(LP: #1764892)
- e1000e: Remove Other from EIAC
* Acer Swift sf314-52 power button not managed (LP: #1766054)
- SAUCE: platform/x86: acer-wmi: add another KEY_POWER keycode
* set PINCFG_HEADSET_MIC to parse_flags for Dell precision 3630 (LP: #1766398)
- ALSA: hda/realtek - set PINCFG_HEADSET_MIC to parse_flags
* Change the location for one of two front mics on a lenovo thinkcentre
machine (LP: #1766477)
- ALSA: hda/realtek - adjust the location of one mic
* SRU: bionic: apply 50 ZFS upstream bugfixes (LP: #1764690)
- SAUCE: (noup) Update zfs to 0.7.5-1ubuntu15 (LP: #1764690)
* [8086:3e92] display becomes blank after S3 (LP: #1763271)
- drm/i915/edp: Do not do link training fallback or prune modes on EDP
-- Khalid Elmously <email address hidden> Thu, 24 May 2018 04:04:39 +0000
-
linux-aws (4.15.0-1009.9) bionic; urgency=medium
[ Ubuntu: 4.15.0-22.24 ]
* CVE-2018-3639 (powerpc)
- powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit
- stf-barrier: set eieio instruction bit 6 for future optimisations
* CVE-2018-3639 (x86)
- x86/nospec: Simplify alternative_msr_write()
- x86/bugs: Concentrate bug detection into a separate function
- x86/bugs: Concentrate bug reporting into a separate function
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits
- x86/bugs, KVM: Support the combination of guest and host IBRS
- x86/bugs: Expose /sys/../spec_store_bypass
- x86/cpufeatures: Add X86_FEATURE_RDS
- x86/bugs: Provide boot parameters for the spec_store_bypass_disable
mitigation
- x86/bugs/intel: Set proper CPU features and setup RDS
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if requested
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest
- x86/speculation: Create spec-ctrl.h to avoid include hell
- prctl: Add speculation control prctls
- x86/process: Allow runtime control of Speculative Store Bypass
- x86/speculation: Add prctl for Speculative Store Bypass mitigation
- nospec: Allow getting/setting on non-current task
- proc: Provide details on speculation flaw mitigations
- seccomp: Enable speculation flaw mitigations
- x86/bugs: Make boot modes __ro_after_init
- prctl: Add force disable speculation
- seccomp: Use PR_SPEC_FORCE_DISABLE
- seccomp: Add filter flag to opt-out of SSB mitigation
- seccomp: Move speculation migitation control to arch code
- x86/speculation: Make "seccomp" the default mode for Speculative Store
Bypass
- x86/bugs: Rename _RDS to _SSBD
- proc: Use underscores for SSBD in 'status'
- Documentation/spec_ctrl: Do some minor cleanups
- x86/bugs: Fix __ssb_select_mitigation() return type
- x86/bugs: Make cpu_show_common() static
* LSM Stacking prctl values should be redefined as to not collide with
upstream prctls (LP: #1769263) // CVE-2018-3639
- SAUCE: LSM stacking: adjust prctl values
linux-aws (4.15.0-1008.8) bionic; urgency=medium
* linux-aws: 4.15.0-1008.8 -proposed tracker (LP: #1767403)
* linux-image-4.15.0-20-generic install after upgrade from xenial breaks
(LP: #1767133)
- Packaging: Depends on linux-base that provides the necessary tools
[ Ubuntu: 4.15.0-21.22 ]
* linux: 4.15.0-21.22 -proposed tracker (LP: #1767397)
* initramfs-tools exception during pm.DoInstall with do-release-upgrade from
16.04 to 18.04 (LP: #1766727)
- Add linux-image-* Breaks on s390-tools (<< 2.3.0-0ubuntu3)
* linux-image-4.15.0-20-generic install after upgrade from xenial breaks
(LP: #1767133)
- Packaging: Depends on linux-base that provides the necessary tools
* linux-image packages need to Breaks flash-kernel << 3.90ubuntu2
(LP: #1766629)
- linux-image-* breaks on flash-kernel (<< 3.90ubuntu2)
-- Stefan Bader <email address hidden> Wed, 16 May 2018 16:33:06 +0200
-
linux-aws (4.15.0-1008.8) bionic; urgency=medium
* linux-aws: 4.15.0-1008.8 -proposed tracker (LP: #1767403)
* linux-image-4.15.0-20-generic install after upgrade from xenial breaks
(LP: #1767133)
- Packaging: Depends on linux-base that provides the necessary tools
[ Ubuntu: 4.15.0-21.22 ]
* linux: 4.15.0-21.22 -proposed tracker (LP: #1767397)
* initramfs-tools exception during pm.DoInstall with do-release-upgrade from
16.04 to 18.04 (LP: #1766727)
- Add linux-image-* Breaks on s390-tools (<< 2.3.0-0ubuntu3)
* linux-image-4.15.0-20-generic install after upgrade from xenial breaks
(LP: #1767133)
- Packaging: Depends on linux-base that provides the necessary tools
* linux-image packages need to Breaks flash-kernel << 3.90ubuntu2
(LP: #1766629)
- linux-image-* breaks on flash-kernel (<< 3.90ubuntu2)
-- Thadeu Lima de Souza Cascardo <email address hidden> Tue, 08 May 2018 09:32:21 -0300
-
linux-aws (4.15.0-1007.7) bionic; urgency=medium
* linux-aws: 4.15.0-1007.7 -proposed tracker (LP: #1766464)
[ Ubuntu: 4.15.0-20.21 ]
* linux: 4.15.0-20.21 -proposed tracker (LP: #1766452)
* package shim-signed (not installed) failed to install/upgrade: installed
shim-signed package post-installation script subprocess returned error exit
status 5 (LP: #1766391)
- [Packaging] fix invocation of header postinst hooks
-- Khalid Elmously <email address hidden> Tue, 24 Apr 2018 03:41:58 -0400
-
linux-aws (4.15.0-1006.6) bionic; urgency=medium
* linux-aws: 4.15.0-1006.6 -proposed tracker (LP: #1766024)
[ Ubuntu: 4.15.0-19.20 ]
* linux: 4.15.0-19.20 -proposed tracker (LP: #1766021)
* Kernel 4.15.0-15 breaks Dell PowerEdge 12th Gen servers (LP: #1765232)
- Revert "blk-mq: simplify queue mapping & schedule with each possisble CPU"
- Revert "genirq/affinity: assign vectors to all possible CPUs"
linux-aws (4.15.0-1005.5) bionic; urgency=medium
* linux-aws: 4.15.0-1005.5 -proposed tracker (LP: #1765494)
[ Ubuntu: 4.15.0-18.19 ]
* linux: 4.15.0-18.19 -proposed tracker (LP: #1765490)
* [regression] Ubuntu 18.04:[4.15.0-17-generic #18] KVM Guest Kernel:
meltdown: rfi/fallback displacement flush not enabled bydefault (kvm)
(LP: #1765429)
- powerpc/pseries: Fix clearing of security feature flags
* signing: only install a signed kernel (LP: #1764794)
- [Packaging] update to Debian like control scripts
- [Packaging] switch to triggers for postinst.d postrm.d handling
- [Packaging] signing -- switch to raw-signing tarballs
- [Packaging] signing -- switch to linux-image as signed when available
- [Config] signing -- enable Opal signing for ppc64el
- [Packaging] printenv -- add signing options
* [18.04 FEAT] Sign POWER host/NV kernels (LP: #1696154)
- [Packaging] signing -- add support for signing Opal kernel binaries
* Please cherrypick s390 unwind fix (LP: #1765083)
- s390/compat: fix setup_frame32
* Ubuntu 18.04 installer does not detect any IPR based HDD/RAID array [S822L]
[ipr] (LP: #1751813)
- d-i: move ipr to storage-core-modules on ppc64el
* drivers/gpu/drm/bridge/adv7511/adv7511.ko missing (LP: #1764816)
- SAUCE: (no-up) rename the adv7511 drm driver to adv7511_drm
* Miscellaneous Ubuntu changes
- [Packaging] Add linux-oem to rebuild test blacklist.
[ Ubuntu: 4.15.0-17.18 ]
* linux: 4.15.0-17.18 -proposed tracker (LP: #1764498)
* Eventual OOM with profile reloads (LP: #1750594)
- SAUCE: apparmor: fix memory leak when duplicate profile load
linux-aws (4.15.0-1004.4) bionic; urgency=medium
* linux-aws: 4.15.0-1004.4 -proposed tracker (LP: #1763788)
[ Ubuntu: 4.15.0-16.17 ]
* linux: 4.15.0-16.17 -proposed tracker (LP: #1763785)
* [18.04] [bug] CFL-S(CNP)/CNL GPIO testing failed (LP: #1757346)
- [Config]: Set CONFIG_PINCTRL_CANNONLAKE=y
* [Ubuntu 18.04] USB Type-C test failed on GLK (LP: #1758797)
- SAUCE: usb: typec: ucsi: Increase command completion timeout value
* Fix trying to "push" an already active pool VP (LP: #1763386)
- SAUCE: powerpc/xive: Fix trying to "push" an already active pool VP
* hisi_sas: Revert and replace SAUCE patches w/ upstream (LP: #1762824)
- Revert "UBUNTU: SAUCE: scsi: hisi_sas: export device table of v3 hw to
userspace"
- Revert "UBUNTU: SAUCE: scsi: hisi_sas: config for hip08 ES"
- scsi: hisi_sas: modify some register config for hip08
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE()
* Realtek card reader - RTS5243 [VEN_10EC&DEV_5260] (LP: #1737673)
- misc: rtsx: Move Realtek Card Reader Driver to misc
- updateconfigs for Realtek Card Reader Driver
- misc: rtsx: Add support for RTS5260
- misc: rtsx: Fix symbol clashes
* Mellanox [mlx5] [bionic] UBSAN: Undefined behaviour in
./include/linux/net_dim.h (LP: #1763269)
- net/mlx5e: Fix int overflow
* apparmor bug fixes for bionic (LP: #1763427)
- apparmor: fix logging of the existence test for signals
- apparmor: make signal label match work when matching stacked labels
- apparmor: audit unknown signal numbers
- apparmor: fix memory leak on buffer on error exit path
- apparmor: fix mediation of prlimit
* dangling symlinks to loaded apparmor policy (LP: #1755563) // apparmor bug
fixes for bionic (LP: #1763427)
- apparmor: fix dangling symlinks to policy rawdata after replacement
* [OPAL] Assert fail:
core/mem_region.c:447:lock_held_by_me(®ion->free_list_lock)
(LP: #1762913)
- powerpc/watchdog: remove arch_trigger_cpumask_backtrace
* [LTC Test] Ubuntu 18.04: tm_trap_test failed on P8 compat mode guest
(LP: #1762928)
- powerpc/tm: Fix endianness flip on trap
* Add support for RT5660 codec based sound cards on Baytrail (LP: #1657674)
- SAUCE: (no-up) ASoC: Intel: Support machine driver for RT5660 on Baytrail
- SAUCE: (no-up) ASoC: rt5660: Add ACPI support
- SAUCE: (no-up): ASoC: Intel: bytcr-rt5660: Add MCLK, quirks
- [Config] CONFIG_SND_SOC_INTEL_BYTCR_RT5660_MACH=m, CONFIG_SND_SOC_RT5660=m
* /dev/ipmi enumeration flaky on Cavium Sabre nodes (LP: #1762812)
- i2c: xlp9xx: return ENXIO on slave address NACK
- i2c: xlp9xx: Handle transactions with I2C_M_RECV_LEN properly
- i2c: xlp9xx: Check for Bus state before every transfer
- i2c: xlp9xx: Handle NACK on DATA properly
* [18.04 FEAT] Add kvm_stat from kernel tree (LP: #1734130)
- tools/kvm_stat: simplify the sortkey function
- tools/kvm_stat: use a namedtuple for storing the values
- tools/kvm_stat: use a more pythonic way to iterate over dictionaries
- tools/kvm_stat: avoid 'is' for equality checks
- tools/kvm_stat: fix crash when filtering out all non-child trace events
- tools/kvm_stat: print error on invalid regex
- tools/kvm_stat: fix debugfs handling
- tools/kvm_stat: mark private methods as such
- tools/kvm_stat: eliminate extra guest/pid selection dialog
- tools/kvm_stat: separate drilldown and fields filtering
- tools/kvm_stat: group child events indented after parent
- tools/kvm_stat: print 'Total' line for multiple events only
- tools/kvm_stat: Fix python3 syntax
- tools/kvm_stat: Don't use deprecated file()
- tools/kvm_stat: Remove unused function
- [Packaging] Add linux-tools-host package for VM host tools
- [Config] do_tools_host=true for amd64
* Bionic update to v4.15.17 stable release (LP: #1763366)
- i40iw: Fix sequence number for the first partial FPDU
- i40iw: Correct Q1/XF object count equation
- i40iw: Validate correct IRD/ORD connection parameters
- clk: meson: mpll: use 64-bit maths in params_from_rate
- ARM: dts: ls1021a: add "fsl,ls1021a-esdhc" compatible string to esdhc node
- Bluetooth: Add a new 04ca:3015 QCA_ROME device
- ipv6: Reinject IPv6 packets if IPsec policy matches after SNAT
- thermal: power_allocator: fix one race condition issue for thermal_instances
list
- perf probe: Find versioned symbols from map
- perf probe: Add warning message if there is unexpected event name
- perf evsel: Fix swap for samples with raw data
- perf evsel: Enable ignore_missing_thread for pid option
- l2tp: fix missing print session offset info
- rds; Reset rs->rs_bound_addr in rds_add_bound() failure path
- ACPI / video: Default lcd_only to true on Win8-ready and newer machines
- IB/mlx5: Report inner RSS capability
- VFS: close race between getcwd() and d_move()
- watchdog: dw_wdt: add stop watchdog operation
- clk: divider: fix incorrect usage of container_of
- PM / devfreq: Fix potential NULL pointer dereference in governor_store
- gpiolib: don't dereference a desc before validation
- net_sch: red: Fix the new offload indication
- selftests/net: fix bugs in address and port initialization
- thermal/drivers/hisi: Remove bogus const from function return type
- RDMA/cma: Mark end of CMA ID messages
- hwmon: (ina2xx) Make calibration register value fixed
- f2fs: fix lock dependency in between dio_rwsem & i_mmap_sem
- clk: sunxi-ng: a83t: Add M divider to TCON1 clock
- media: videobuf2-core: don't go out of the buffer range
- ASoC: Intel: Skylake: Disable clock gating during firmware and library
download
- ASoC: Intel: cht_bsw_rt5645: Analog Mic support
- drm/msm: Fix NULL deref in adreno_load_gpu
- IB/ipoib: Fix for notify send CQ failure messages
- spi: sh-msiof: Fix timeout failures for TX-only DMA transfers
- scsi: mpt3sas: Proper handling of set/clear of "ATA command pending" flag.
- irqchip/ompic: fix return value check in ompic_of_init()
- irqchip/gic-v3: Fix the driver probe() fail due to disabled GICC entry
- ACPI: EC: Fix debugfs_create_*() usage
- mac80211: Fix setting TX power on monitor interfaces
- vfb: fix video mode and line_length being set when loaded
- crypto: crypto4xx - perform aead icv check in the driver
- gpio: label descriptors using the device name
- arm64: asid: Do not replace active_asids if already 0
- powernv-cpufreq: Add helper to extract pstate from PMSR
- IB/rdmavt: Allocate CQ memory on the correct node
- blk-mq: avoid to map CPU into stale hw queue
- blk-mq: fix race between updating nr_hw_queues and switching io sched
- backlight: tdo24m: Fix the SPI CS between transfers
- nvme-fabrics: protect against module unload during create_ctrl
- nvme-fabrics: don't check for non-NULL module in nvmf_register_transport
- pinctrl: baytrail: Enable glitch filter for GPIOs used as interrupts
- nvme_fcloop: disassocate local port structs
- nvme_fcloop: fix abort race condition
- tpm: return a TPM_RC_COMMAND_CODE response if command is not implemented
- perf report: Fix a no annotate browser displayed issue
- staging: lustre: disable preempt while sampling processor id.
- ASoC: Intel: sst: Fix the return value of 'sst_send_byte_stream_mrfld()'
- power: supply: axp288_charger: Properly stop work on probe-error / remove
- rt2x00: do not pause queue unconditionally on error path
- wl1251: check return from call to wl1251_acx_arp_ip_filter
- net/mlx5: Fix race for multiple RoCE enable
- bcache: ret IOERR when read meets metadata error
- bcache: stop writeback thread after detaching
- bcache: segregate flash only volume write streams
- net: Fix netdev_WARN_ONCE macro
- net/mlx5e: IPoIB, Use correct timestamp in child receive flow
- blk-mq: fix kernel oops in blk_mq_tag_idle()
- tty: n_gsm: Allow ADM response in addition to UA for control dlci
- block, bfq: put async queues for root bfq groups too
- serdev: Fix serdev_uevent failure on ACPI enumerated serdev-controllers
- EDAC, mv64x60: Fix an error handling path
- uio_hv_generic: check that host supports monitor page
- Bluetooth: hci_bcm: Mandate presence of shutdown and device wake GPIO
- Bluetooth: hci_bcm: Validate IRQ before using it
- Bluetooth: hci_bcm: Make shutdown and device wake GPIO optional
- i40evf: don't rely on netif_running() outside rtnl_lock()
- drm/amd/powerplay: fix memory leakage when reload (v2)
- cxgb4vf: Fix SGE FL buffer initialization logic for 64K pages
- PM / domains: Don't skip driver's ->suspend|resume_noirq() callbacks
- scsi: megaraid_sas: Error handling for invalid ldcount provided by firmware
in RAID map
- scsi: megaraid_sas: unload flag should be set after scsi_remove_host is
called
- RDMA/cma: Fix rdma_cm path querying for RoCE
- gpio: thunderx: fix error return code in thunderx_gpio_probe()
- x86/gart: Exclude GART aperture from vmcore
- sdhci: Advertise 2.0v supply on SDIO host controller
- Input: goodix - disable IRQs while suspended
- mtd: mtd_oobtest: Handle bitflips during reads
- crypto: aes-generic - build with -Os on gcc-7+
- perf tools: Fix copyfile_offset update of output offset
- tcmu: release blocks for partially setup cmds
- thermal: int3400_thermal: fix error handling in int3400_thermal_probe()
- drm/i915/cnp: Ignore VBT request for know invalid DDC pin.
- drm/i915/cnp: Properly handle VBT ddc pin out of bounds.
- x86/microcode: Propagate return value from updating functions
- x86/CPU: Add a microcode loader callback
- x86/CPU: Check CPU feature bits after microcode upgrade
- x86/microcode: Get rid of struct apply_microcode_ctx
- x86/microcode/intel: Check microcode revision before updating sibling
threads
- x86/microcode/intel: Writeback and invalidate caches before updating
microcode
- x86/microcode: Do not upload microcode if CPUs are offline
- x86/microcode/intel: Look into the patch cache first
- x86/microcode: Request microcode on the BSP
- x86/microcode: Synchronize late microcode loading
- x86/microcode: Attempt late loading only when new microcode is present
- x86/microcode: Fix CPU synchronization routine
- arp: fix arp_filter on l3slave devices
- ipv6: the entire IPv6 header chain must fit the first fragment
- lan78xx: Crash in lan78xx_writ_reg (Workqueue: events
lan78xx_deferred_multicast_write)
- net: dsa: Discard frames from unused ports
- net: fix possible out-of-bound read in skb_network_protocol()
- net/ipv6: Fix route leaking between VRFs
- net/ipv6: Increment OUTxxx counters after netfilter hook
- netlink: make sure nladdr has correct size in netlink_connect()
- net/mlx5e: Verify coalescing parameters in range
- net sched actions: fix dumping which requires several messages to user space
- net/sched: fix NULL dereference in the error path of tcf_bpf_init()
- pptp: remove a buggy dst release in pptp_connect()
- r8169: fix setting driver_data after register_netdev
- sctp: do not leak kernel memory to user space
- sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
- vhost: correctly remove wait queue during poll failure
- vlan: also check phy_driver ts_info for vlan's real device
- vrf: Fix use after free and double free in vrf_finish_output
- bonding: fix the err path for dev hwaddr sync in bond_enslave
- bonding: move dev_mc_sync after master_upper_dev_link in bond_enslave
- bonding: process the err returned by dev_set_allmulti properly in
bond_enslave
- net: fool proof dev_valid_name()
- ip_tunnel: better validate user provided tunnel names
- ipv6: sit: better validate user provided tunnel names
- ip6_gre: better validate user provided tunnel names
- ip6_tunnel: better validate user provided tunnel names
- vti6: better validate user provided tunnel names
- net/mlx5e: Set EQE based as default TX interrupt moderation mode
- net_sched: fix a missing idr_remove() in u32_delete_key()
- net/sched: fix NULL dereference in the error path of tcf_vlan_init()
- net/mlx5e: Avoid using the ipv6 stub in the TC offload neigh update path
- net/mlx5e: Fix memory usage issues in offloading TC flows
- net/sched: fix NULL dereference in the error path of tcf_sample_init()
- nfp: use full 40 bits of the NSP buffer address
- ipv6: sr: fix seg6 encap performances with TSO enabled
- net/mlx5e: Don't override vport admin link state in switchdev mode
- net/mlx5e: Sync netdev vxlan ports at open
- net/sched: fix NULL dereference in the error path of tunnel_key_init()
- net/sched: fix NULL dereference on the error path of tcf_skbmod_init()
- strparser: Fix sign of err codes
- net/mlx4_en: Fix mixed PFC and Global pause user control requests
- net/mlx5e: Fix traffic being dropped on VF representor
- vhost: validate log when IOTLB is enabled
- route: check sysctl_fib_multipath_use_neigh earlier than hash
- team: move dev_mc_sync after master_upper_dev_link in team_port_add
- vhost_net: add missing lock nesting notation
- net/mlx4_core: Fix memory leak while delete slave's resources
- Linux 4.15.17
* sky2 gigabit ethernet driver sometimes stops working after lid-open resume
from sleep (88E8055) (LP: #1758507) // Bionic update to v4.15.17 stable
release (LP: #1763366)
- sky2: Increase D3 delay to sky2 stops working after suspend
* [Featire] CNL: Enable RAPL support (LP: #1685712)
- powercap: RAPL: Add support for Cannon Lake
* System Z {kernel} UBUNTU18.04 wrong kernel config (LP: #1762719)
- s390: move nobp parameter functions to nospec-branch.c
- s390: add automatic detection of the spectre defense
- s390: report spectre mitigation via syslog
- s390: add sysfs attributes for spectre
- [Config] CONFIG_EXPOLINE_AUTO=y, CONFIG_KERNEL_NOBP=n for s390
- s390: correct nospec auto detection init order
* Merge the linux-snapdragon kernel into bionic master/snapdragon
(LP: #1763040)
- drm/msm: fix spelling mistake: "ringubffer" -> "ringbuffer"
- drm/msm: fix msm_rd_dump_submit prototype
- drm/msm: gpu: Only sync fences on rings that exist
- wcn36xx: set default BTLE coexistence config
- wcn36xx: Add hardware scan offload support
- wcn36xx: Reduce spinlock in indication handler
- wcn36xx: fix incorrect assignment to msg_body.min_ch_time
- wcn36xx: release DMA memory in case of error
- mailbox: qcom: Convert APCS IPC driver to use regmap
- mailbox: qcom: Create APCS child device for clock controller
- clk: qcom: Add A53 PLL support
- clk: qcom: Add regmap mux-div clocks support
- clk: qcom: Add APCS clock controller support
- clk: qcom: msm8916: Fix return value check in qcom_apcs_msm8916_clk_probe()
- media: venus: venc: set correctly GOP size and number of B-frames
- media: venus: venc: configure entropy mode
- media: venus: venc: Apply inloop deblocking filter
- media: venus: cleanup set_property controls
- arm64: defconfig: enable REMOTEPROC
- arm64: defconfig: enable QCOM audio drivers for APQ8016 and DB410c
- kernel: configs; add distro.config
- arm64: configs: enable WCN36xx
- kernel: distro.config: enable debug friendly USB network adpater
- arm64: configs: enable QCOM Venus
- arm64: defconfig: Enable a53/apcs and avs
- arm64: defconfig: enable ondemand governor as default
- arm64: defconfig: enable QCOM_TSENS
- arm64: defconfig: enable new trigger modes for leds
- kernel: configs: enable dm_mod and dm_crypt
- Force the SMD regulator driver to be compiled-in
- arm64: defconfig: enable CFG80211_DEFAULT_PS by default
- arm64: configs: enable BT_QCOMSMD
- kernel: configs: add more USB net drivers
- arm64: defconfig: disable ANALOG_TV and DIGITAL_TV
- arm64: configs: Enable camera drivers
- kernel: configs: add freq stat to sysfs
- arm64: defconfig: enable CONFIG_USB_CONFIGFS_F_FS by default
- arm64: defconfig: Enable QRTR features
- kernel: configs: set USB_CONFIG_F_FS in distro.config
- kernel: distro.config: enable 'schedutil' CPUfreq governor
- kernel: distro.config: enable 'fq' and 'fq_codel' qdiscs
- kernel: distro.config: enable 'BBR' TCP congestion algorithm
- arm64: defconfig: enable LEDS_QCOM_LPG
- HACK: drm/msm/iommu: Remove runtime_put calls in map/unmap
- power: avs: Add support for CPR (Core Power Reduction)
- power: avs: cpr: Use raw mem access for qfprom
- power: avs: cpr: fix with new reg_sequence structures
- power: avs: cpr: Register with cpufreq-dt
- regulator: smd: Add floor and corner operations
- PM / OPP: Support adjusting OPP voltages at runtime
- PM / OPP: Drop RCU usage in dev_pm_opp_adjust_voltage()
- PM / OPP: HACK: Allow to set regulator without opp_list
- PM / OPP: Add a helper to get an opp regulator for device
- cpufreq: Add apq8016 to cpufreq-dt-platdev blacklist
- regulator: smd: Allow REGULATOR_QCOM_SMD_RPM=m
- ov5645: I2C address change
- i2c: Add Qualcomm Camera Control Interface driver
- camss: vfe: Skip first four frames from sensor
- camss: Do not register if no cameras are present
- i2c-qcom-cci: Fix run queue completion timeout
- i2c-qcom-cci: Fix I2C address bug
- media: ov5645: Fix I2C address
- drm/bridge/adv7511: Delay clearing of HPD interrupt status
- HACK: drm/msm/adv7511: Don't rely on interrupts for EDID parsing
- leds: Add driver for Qualcomm LPG
- wcn36xx: Fix warning due to duplicate scan_completed notification
- arm64: dts: Add CPR DT node for msm8916
- arm64: dts: add spmi-regulator nodes
- arm64: dts: msm8916: Add cpufreq support
- arm64: dts: msm8916: Add a shared CPU opp table
- arm64: dts: msm8916: Add cpu cooling maps
- arm64: dts: pm8916: Mark the s2 regulator as always-on
- dt-bindings: mailbox: qcom: Document the APCS clock binding
- arm64: dts: qcom: msm8916: Add msm8916 A53 PLL DT node
- arm64: dts: qcom: msm8916: Use the new APCS mailbox driver
- arm64: dts: qcom: msm8916: Add clock properties to the APCS node
- arm64: dts: qcom: apq8016-sbc: Allow USR4 LED to notify kernel panic
- dt-bindings: media: Binding document for Qualcomm Camera Control Interface
driver
- MAINTAINERS: Add Qualcomm Camera Control Interface driver
- DT: leds: Add Qualcomm Light Pulse Generator binding
- arm64: dts: qcom: msm8996: Add mpp and lpg blocks
- arm64: dts: qcom: Add pwm node for pm8916
- arm64: dts: qcom: Add user LEDs on db820c
- arm64: dts: qcom: Add WiFI/BT LEDs on db820c
- ARM: dts: qcom: Add LPG node to pm8941
- ARM: dts: qcom: honami: Add LPG node and RGB LED
- arm64: dts: qcom: Add Camera Control Interface support
- arm64: dts: qcom: Add apps_iommu vfe child node
- arm64: dts: qcom: Add camss device node
- arm64: dts: qcom: Add ov5645 device nodes
- arm64: dts: msm8916: Fix camera sensors I2C addresses
- arm: dts: qcom: db410c: Enable PWM signal on MPP4
- packaging: arm64: add a uboot flavour - part1
- packaging: arm64: add a uboot flavour - part2
- packaging: arm64: add a uboot flavour - part3
- packaging: arm64: add a uboot flavour - part4
- packaging: arm64: add a uboot flavour - part5
- packaging: arm64: rename uboot flavour to snapdragon
- [Config] updateconfigs after qcomlt import
- [Config] arm64: snapdragon: COMMON_CLK_QCOM=y
- [Config] arm64: snapdragon: MSM_GCC_8916=y
- [Config] arm64: snapdragon: REGULATOR_FIXED_VOLTAGE=y
- [Config] arm64: snapdragon: PINCTRL_MSM8916=y
- [Config] arm64: snapdragon: HWSPINLOCK_QCOM=y
- [Config] arm64: snapdragon: SPMI=y, SPMI_MSM_PMIC_ARB=y
- [Config] arm64: snapdragon: REGMAP_SPMI=y, PINCTRL_QCOM_SPMI_PMIC=y
- [Config] arm64: snapdragon: REGULATOR_QCOM_SPMI=y
- [Config] arm64: snapdragon: MFD_SPMI_PMIC=y
- [Config] arm64: snapdragon: QCOM_SMEM=y
- [Config] arm64: snapdragon: RPMSG=y, RPMSG_QCOM_SMD=y
- [Config] arm64: snapdragon: QCOM_SMD_RPM=y, REGULATOR_QCOM_SMD_RPM=y
- [Config] arm64: snapdragon: QCOM_CLK_SMD_RPM=y
- [Config] arm64: snapdragon: QCOM_BAM_DMA=y
- [Config] arm64: snapdragon: QCOM_HIDMA=y, QCOM_HIDMA_MGMT=y
- [Config] arm64: snapdragon: QCOM_CPR=y
- [Config] arm64: snapdragon: QCOM_QFPROM=y, QCOM_TSENS=y
- [Config] arm64: snapdragon: MMC_SDHCI=y, MMC_SDHCI_PLTFM=y, MMC_SDHCI_MSM=y
- [Config] turn off DRM_MSM_REGISTER_LOGGING
- [Config] arm64: snapdragon: I2C_QUP=y
- [Config] arm64: snapdragon: SPI_QUP=y
- [Config] arm64: snapdragon: USB_ULPI_BUS=y, PHY_QCOM_USB_HS=y
- [Config] arm64: snapdragon: QCOM_APCS_IPC=y
- [Config] arm64: snapdragon: QCOM_WCNSS_CTRL=y
- [Config] arm64: snapdragon: QCOM_SMSM=y
- [Config] arm64: snapdragon: QCOM_SMP2P=y
- [Config] arm64: snapdragon: DRM_MSM=y
- [Config] arm64: snapdragon: SND_SOC=y
- [Config] arm64: snapdragon: QCOM_WCNSS_PIL=m
- [Config] arm64: snapdragon: QCOM_A53PLL=y, QCOM_CLK_APCS_MSM8916=y
- [Config] arm64: snapdragon: INPUT_PM8941_PWRKEY=y
- [Config] arm64: snapdragon: MEDIA_SUBDRV_AUTOSELECT=y, VIDEO_OV5645=m
- [Config] arm64: snapdragon: SND_SOC_APQ8016_SBC=y, SND_SOC_LPASS_APQ8016=y
- [Config] arm64: snapdragon: SND_SOC_MSM8916_WCD_ANALOG=y,
SND_SOC_MSM8916_WCD_DIGITAL=y
- SAUCE: media: ov5645: skip address change if dt addr == default addr
- SAUCE: drm/msm/adv7511: wrap hacks under CONFIG_ADV7511_SNAPDRAGON_HACKS
#ifdefs
- [Config] arm64: snapdragon: ADV7511_SNAPDRAGON_HACKS=y
- packaging: snapdragon: fixup ABI paths
* LSM stacking patches for bionic (LP: #1763062)
- SAUCE: LSM stacking: procfs: add smack subdir to attrs
- SAUCE: LSM stacking: LSM: Manage credential security blobs
- SAUCE: LSM stacking: LSM: Manage file security blobs
- SAUCE: LSM stacking: LSM: Manage task security blobs
- SAUCE: LSM stacking: LSM: Manage remaining security blobs
- SAUCE: LSM stacking: LSM: General stacking
- SAUCE: LSM stacking: fixup initialize task->security
- SAUCE: LSM stacking: fixup: alloc_task_ctx is dead code
- SAUCE: LSM stacking: add support for stacking getpeersec_stream
- SAUCE: LSM stacking: add stacking support to apparmor network hooks
- SAUCE: LSM stacking: fixup apparmor stacking enablement
- SAUCE: LSM stacking: fixup stacking kconfig
- SAUCE: LSM stacking: allow selecting multiple LSMs using kernel boot params
- SAUCE: LSM stacking: provide prctl interface for setting context
- SAUCE: LSM stacking: inherit current display LSM
- SAUCE: LSM stacking: keep an index for each registered LSM
- SAUCE: LSM stacking: verify display LSM
- SAUCE: LSM stacking: provide a way to specify the default display lsm
- SAUCE: LSM stacking: make sure LSM blob align on 64 bit boundaries
- SAUCE: LSM stacking: add /proc/<pid>/attr/display_lsm
- SAUCE: LSM stacking: add Kconfig to set default display LSM
- SAUCE: LSM stacking: add configs for LSM stacking
- SAUCE: LSM stacking: add apparmor and selinux proc dirs
- SAUCE: LSM stacking: remove procfs context interface
* linux 4.13.0-13.14 ADT test failure with linux 4.13.0-13.14
(LP: #1720779) // LSM stacking patches for bionic (LP: #1763062)
- SAUCE: LSM stacking: check for invalid zero sized writes
* RDMA/hns: ensure for-loop actually iterates and free's buffers
(LP: #1762757)
- RDMA/hns: ensure for-loop actually iterates and free's buffers
* Support cq/rq record doorbell for RDMA on HSilicon hip08 systems
(LP: #1762755)
- RDMA/hns: Fix the endian problem for hns
- RDMA/hns: Support rq record doorbell for the user space
- RDMA/hns: Support cq record doorbell for the user space
- RDMA/hns: Support rq record doorbell for kernel space
- RDMA/hns: Support cq record doorbell for kernel space
- RDMA/hns: Fix cqn type and init resp
- RDMA/hns: Fix init resp when alloc ucontext
- RDMA/hns: Fix cq record doorbell enable in kernel
* Replace LPC patchset with upstream version (LP: #1762758)
- Revert "UBUNTU: SAUCE: MAINTAINERS: Add maintainer for HiSilicon LPC driver"
- Revert "UBUNTU: SAUCE: HISI LPC: Add ACPI support"
- Revert "UBUNTU: SAUCE: ACPI / scan: do not enumerate Indirect IO host
children"
- Revert "UBUNTU: SAUCE: HISI LPC: Support the LPC host on Hip06/Hip07 with DT
bindings"
- Revert "UBUNTU: SAUCE: OF: Add missing I/O range exception for indirect-IO
devices"
- Revert "UBUNTU: SAUCE: PCI: Apply the new generic I/O management on PCI IO
hosts"
- Revert "UBUNTU: SAUCE: PCI: Add fwnode handler as input param of
pci_register_io_range()"
- Revert "UBUNTU: SAUCE: PCI: Remove unused __weak attribute in
pci_register_io_range()"
- Revert "UBUNTU: SAUCE: LIB: Introduce a generic PIO mapping method"
- lib: Add generic PIO mapping method
- PCI: Remove __weak tag from pci_register_io_range()
- PCI: Add fwnode handler as input param of pci_register_io_range()
- PCI: Apply the new generic I/O management on PCI IO hosts
- of: Add missing I/O range exception for indirect-IO devices
- HISI LPC: Support the LPC host on Hip06/Hip07 with DT bindings
- ACPI / scan: Rename acpi_is_serial_bus_slave() for more general use
- ACPI / scan: Do not enumerate Indirect IO host children
- HISI LPC: Add ACPI support
- MAINTAINERS: Add John Garry as maintainer for HiSilicon LPC driver
* Enable Tunneled Operations on POWER9 (LP: #1762448)
- powerpc/powernv: Enable tunneled operations
- cxl: read PHB indications from the device tree
* PSL traces reset after PERST for debug AFU image (LP: #1762462)
- cxl: Enable NORST bit in PSL_DEBUG register for PSL9
* NFS + sec=krb5 is broken (LP: #1759791)
- sunrpc: remove incorrect HMAC request initialization
* Raspberry Pi 3 microSD support missing from the installer (LP: #1729128)
- d-i: add bcm2835 to block-modules
* Backport USB core quirks (LP: #1762695)
- usb: core: Add "quirks" parameter for usbcore
- usb: core: Copy parameter string correctly and remove superfluous null check
- usb: core: Add USB_QUIRK_DELAY_CTRL_MSG to usbcore quirks
* [Ubuntu 18.04] cryptsetup: 'device-mapper: reload ioctl on failed' when
setting up a second end-to-end encrypted disk (LP: #1762353)
- SAUCE: s390/crypto: Adjust s390 aes and paes cipher
* Additional spectre and meltdown patches (LP: #1760099) // CVE-2017-5715
- powerpc/64s: Wire up cpu_show_spectre_v2()
* Additional spectre and meltdown patches (LP: #1760099) // CVE-2017-5753
- powerpc/64s: Wire up cpu_show_spectre_v1()
* Additional spectre and meltdown patches (LP: #1760099) // CVE-2017-5754
- powerpc/rfi-flush: Move the logic to avoid a redo into the debugfs code
- powerpc/rfi-flush: Make it possible to call setup_rfi_flush() again
- powerpc/rfi-flush: Always enable fallback flush on pseries
- powerpc/rfi-flush: Differentiate enabled and patched flush types
- powerpc/rfi-flush: Call setup_rfi_flush() after LPM migration
- powerpc/64s: Move cpu_show_meltdown()
- powerpc/64s: Enhance the information in cpu_show_meltdown()
- powerpc/powernv: Use the security flags in pnv_setup_rfi_flush()
- powerpc/pseries: Use the security flags in pseries_setup_rfi_flush()
* Additional spectre and meltdown patches (LP: #1760099) // CVE-2017-5715 //
CVE-2017-5753 // CVE-2017-5754
- powerpc/pseries: Add new H_GET_CPU_CHARACTERISTICS flags
- powerpc: Add security feature flags for Spectre/Meltdown
- powerpc/pseries: Set or clear security feature flags
- powerpc/powernv: Set or clear security feature flags
* Hisilicon network subsystem 3 support (LP: #1761610)
- net: hns3: export pci table of hclge and hclgevf to userspace
- d-i: Add hns3 drivers to nic-modules
* "ip a" command on a guest VM shows UNKNOWN status (LP: #1761534)
- virtio-net: Fix operstate for virtio when no VIRTIO_NET_F_STATUS
* perf vendor events arm64: Enable JSON events for ThunderX2 B0 (LP: #1760712)
- perf vendor events aarch64: Add JSON metrics for ARM Cortex-A53 Processor
- perf vendor events: Drop incomplete multiple mapfile support
- perf vendor events: Fix error code in json_events()
- perf vendor events: Drop support for unused topic directories
- perf vendor events: Add support for pmu events vendor subdirectory
- perf vendor events arm64: Relocate ThunderX2 JSON to cavium subdirectory
- perf vendor events arm64: Relocate Cortex A53 JSONs to arm subdirectory
- perf vendor events: Add support for arch standard events
- perf vendor events arm64: Add armv8-recommended.json
- perf vendor events arm64: Fixup ThunderX2 to use recommended events
- perf vendor events arm64: fixup A53 to use recommended events
- perf vendor events arm64: add HiSilicon hip08 JSON file
- perf vendor events arm64: Enable JSON events for ThunderX2 B0
* Warning "cache flush timed out!" seen when unloading the cxl driver
(LP: #1762367)
- cxl: Check if PSL data-cache is available before issue flush request
* Bionic update to 4.15.16 stable release (LP: #1762370)
- ARM: OMAP: Fix SRAM W+X mapping
- ARM: 8746/1: vfp: Go back to clearing vfp_current_hw_state[]
- ARM: dts: sun6i: a31s: bpi-m2: improve pmic properties
- ARM: dts: sun6i: a31s: bpi-m2: add missing regulators
- mtd: jedec_probe: Fix crash in jedec_read_mfr()
- mtd: nand: atmel: Fix get_sectorsize() function
- ALSA: usb-audio: Add native DSD support for TEAC UD-301
- ALSA: pcm: Use dma_bytes as size parameter in dma_mmap_coherent()
- ALSA: pcm: potential uninitialized return values
- x86/platform/uv/BAU: Add APIC idt entry
- perf/hwbp: Simplify the perf-hwbp code, fix documentation
- ceph: only dirty ITER_IOVEC pages for direct read
- ipc/shm.c: add split function to shm_vm_ops
- i2c: i2c-stm32f7: fix no check on returned setup
- powerpc/mm: Add tracking of the number of coprocessors using a context
- powerpc/mm: Workaround Nest MMU bug with TLB invalidations
- powerpc/64s: Fix i-side SLB miss bad address handler saving nonvolatile GPRs
- partitions/msdos: Unable to mount UFS 44bsd partitions
- xfrm_user: uncoditionally validate esn replay attribute struct
- RDMA/ucma: Check AF family prior resolving address
- RDMA/ucma: Fix use-after-free access in ucma_close
- RDMA/ucma: Ensure that CM_ID exists prior to access it
- RDMA/rdma_cm: Fix use after free race with process_one_req
- RDMA/ucma: Check that device is connected prior to access it
- RDMA/ucma: Check that device exists prior to accessing it
- RDMA/ucma: Introduce safer rdma_addr_size() variants
- ipv6: fix possible deadlock in rt6_age_examine_exception()
- net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()
- xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems
- percpu: add __GFP_NORETRY semantics to the percpu balancing path
- netfilter: x_tables: make allocation less aggressive
- netfilter: bridge: ebt_among: add more missing match size checks
- l2tp: fix races with ipv4-mapped ipv6 addresses
- netfilter: drop template ct when conntrack is skipped.
- netfilter: x_tables: add and use xt_check_proc_name
- phy: qcom-ufs: add MODULE_LICENSE tag
- Bluetooth: Fix missing encryption refresh on Security Request
- drm/i915/dp: Write to SET_POWER dpcd to enable MST hub.
- bitmap: fix memset optimization on big-endian systems
- USB: serial: ftdi_sio: add RT Systems VX-8 cable
- USB: serial: ftdi_sio: add support for Harman FirmwareHubEmulator
- USB: serial: cp210x: add ELDAT Easywave RX09 id
- serial: 8250: Add Nuvoton NPCM UART
- mei: remove dev_err message on an unsupported ioctl
- /dev/mem: Avoid overwriting "err" in read_mem()
- media: usbtv: prevent double free in error case
- parport_pc: Add support for WCH CH382L PCI-E single parallel port card.
- crypto: lrw - Free rctx->ext with kzfree
- crypto: talitos - don't persistently map req_ctx->hw_context and
req_ctx->buf
- crypto: inside-secure - fix clock management
- crypto: testmgr - Fix incorrect values in PKCS#1 test vector
- crypto: talitos - fix IPsec cipher in length
- crypto: ahash - Fix early termination in hash walk
- crypto: caam - Fix null dereference at error path
- crypto: ccp - return an actual key size from RSA max_size callback
- crypto: arm,arm64 - Fix random regeneration of S_shipped
- crypto: x86/cast5-avx - fix ECB encryption when long sg follows short one
- Btrfs: fix unexpected cow in run_delalloc_nocow
- staging: comedi: ni_mio_common: ack ai fifo error interrupts.
- Revert "base: arch_topology: fix section mismatch build warnings"
- Input: ALPS - fix TrackStick detection on Thinkpad L570 and Latitude 7370
- Input: i8042 - add Lenovo ThinkPad L460 to i8042 reset list
- Input: i8042 - enable MUX on Sony VAIO VGN-CS series to fix touchpad
- vt: change SGR 21 to follow the standards
- ARM: dts: DRA76-EVM: Set powerhold property for tps65917
- net: hns: Fix ethtool private flags
- Fix slab name "biovec-(1<<(21-12))"
- Revert "ARM: dts: am335x-pepper: Fix the audio CODEC's reset pin"
- Revert "ARM: dts: omap3-n900: Fix the audio CODEC's reset pin"
- Revert "cpufreq: Fix governor module removal race"
- Revert "ip6_vti: adjust vti mtu according to mtu of lower device"
- Linux 4.15.16
* [18.04][config] regression: nvme and nvme_core couldn't be built as modules
starting 4.15-rc2 (LP: #1759893)
- SAUCE: Revert "lightnvm: include NVM Express driver if OCSSD is selected for
build"
- [Config] CONFIG_BLK_DEV_NMVE=m
* Miscellaneous Ubuntu changes
- [Packaging] Only install cloud init files when do_tools_common=true
-- Seth Forshee <email address hidden> Sat, 21 Apr 2018 21:41:41 -0500
-
linux-aws (4.15.0-1005.5) bionic; urgency=medium
* linux-aws: 4.15.0-1005.5 -proposed tracker (LP: #1765494)
[ Ubuntu: 4.15.0-18.19 ]
* linux: 4.15.0-18.19 -proposed tracker (LP: #1765490)
* [regression] Ubuntu 18.04:[4.15.0-17-generic #18] KVM Guest Kernel:
meltdown: rfi/fallback displacement flush not enabled bydefault (kvm)
(LP: #1765429)
- powerpc/pseries: Fix clearing of security feature flags
* signing: only install a signed kernel (LP: #1764794)
- [Packaging] update to Debian like control scripts
- [Packaging] switch to triggers for postinst.d postrm.d handling
- [Packaging] signing -- switch to raw-signing tarballs
- [Packaging] signing -- switch to linux-image as signed when available
- [Config] signing -- enable Opal signing for ppc64el
- [Packaging] printenv -- add signing options
* [18.04 FEAT] Sign POWER host/NV kernels (LP: #1696154)
- [Packaging] signing -- add support for signing Opal kernel binaries
* Please cherrypick s390 unwind fix (LP: #1765083)
- s390/compat: fix setup_frame32
* Ubuntu 18.04 installer does not detect any IPR based HDD/RAID array [S822L]
[ipr] (LP: #1751813)
- d-i: move ipr to storage-core-modules on ppc64el
* drivers/gpu/drm/bridge/adv7511/adv7511.ko missing (LP: #1764816)
- SAUCE: (no-up) rename the adv7511 drm driver to adv7511_drm
* Miscellaneous Ubuntu changes
- [Packaging] Add linux-oem to rebuild test blacklist.
[ Ubuntu: 4.15.0-17.18 ]
* linux: 4.15.0-17.18 -proposed tracker (LP: #1764498)
* Eventual OOM with profile reloads (LP: #1750594)
- SAUCE: apparmor: fix memory leak when duplicate profile load
linux-aws (4.15.0-1004.4) bionic; urgency=medium
* linux-aws: 4.15.0-1004.4 -proposed tracker (LP: #1763788)
[ Ubuntu: 4.15.0-16.17 ]
* linux: 4.15.0-16.17 -proposed tracker (LP: #1763785)
* [18.04] [bug] CFL-S(CNP)/CNL GPIO testing failed (LP: #1757346)
- [Config]: Set CONFIG_PINCTRL_CANNONLAKE=y
* [Ubuntu 18.04] USB Type-C test failed on GLK (LP: #1758797)
- SAUCE: usb: typec: ucsi: Increase command completion timeout value
* Fix trying to "push" an already active pool VP (LP: #1763386)
- SAUCE: powerpc/xive: Fix trying to "push" an already active pool VP
* hisi_sas: Revert and replace SAUCE patches w/ upstream (LP: #1762824)
- Revert "UBUNTU: SAUCE: scsi: hisi_sas: export device table of v3 hw to
userspace"
- Revert "UBUNTU: SAUCE: scsi: hisi_sas: config for hip08 ES"
- scsi: hisi_sas: modify some register config for hip08
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE()
* Realtek card reader - RTS5243 [VEN_10EC&DEV_5260] (LP: #1737673)
- misc: rtsx: Move Realtek Card Reader Driver to misc
- updateconfigs for Realtek Card Reader Driver
- misc: rtsx: Add support for RTS5260
- misc: rtsx: Fix symbol clashes
* Mellanox [mlx5] [bionic] UBSAN: Undefined behaviour in
./include/linux/net_dim.h (LP: #1763269)
- net/mlx5e: Fix int overflow
* apparmor bug fixes for bionic (LP: #1763427)
- apparmor: fix logging of the existence test for signals
- apparmor: make signal label match work when matching stacked labels
- apparmor: audit unknown signal numbers
- apparmor: fix memory leak on buffer on error exit path
- apparmor: fix mediation of prlimit
* dangling symlinks to loaded apparmor policy (LP: #1755563) // apparmor bug
fixes for bionic (LP: #1763427)
- apparmor: fix dangling symlinks to policy rawdata after replacement
* [OPAL] Assert fail:
core/mem_region.c:447:lock_held_by_me(®ion->free_list_lock)
(LP: #1762913)
- powerpc/watchdog: remove arch_trigger_cpumask_backtrace
* [LTC Test] Ubuntu 18.04: tm_trap_test failed on P8 compat mode guest
(LP: #1762928)
- powerpc/tm: Fix endianness flip on trap
* Add support for RT5660 codec based sound cards on Baytrail (LP: #1657674)
- SAUCE: (no-up) ASoC: Intel: Support machine driver for RT5660 on Baytrail
- SAUCE: (no-up) ASoC: rt5660: Add ACPI support
- SAUCE: (no-up): ASoC: Intel: bytcr-rt5660: Add MCLK, quirks
- [Config] CONFIG_SND_SOC_INTEL_BYTCR_RT5660_MACH=m, CONFIG_SND_SOC_RT5660=m
* /dev/ipmi enumeration flaky on Cavium Sabre nodes (LP: #1762812)
- i2c: xlp9xx: return ENXIO on slave address NACK
- i2c: xlp9xx: Handle transactions with I2C_M_RECV_LEN properly
- i2c: xlp9xx: Check for Bus state before every transfer
- i2c: xlp9xx: Handle NACK on DATA properly
* [18.04 FEAT] Add kvm_stat from kernel tree (LP: #1734130)
- tools/kvm_stat: simplify the sortkey function
- tools/kvm_stat: use a namedtuple for storing the values
- tools/kvm_stat: use a more pythonic way to iterate over dictionaries
- tools/kvm_stat: avoid 'is' for equality checks
- tools/kvm_stat: fix crash when filtering out all non-child trace events
- tools/kvm_stat: print error on invalid regex
- tools/kvm_stat: fix debugfs handling
- tools/kvm_stat: mark private methods as such
- tools/kvm_stat: eliminate extra guest/pid selection dialog
- tools/kvm_stat: separate drilldown and fields filtering
- tools/kvm_stat: group child events indented after parent
- tools/kvm_stat: print 'Total' line for multiple events only
- tools/kvm_stat: Fix python3 syntax
- tools/kvm_stat: Don't use deprecated file()
- tools/kvm_stat: Remove unused function
- [Packaging] Add linux-tools-host package for VM host tools
- [Config] do_tools_host=true for amd64
* Bionic update to v4.15.17 stable release (LP: #1763366)
- i40iw: Fix sequence number for the first partial FPDU
- i40iw: Correct Q1/XF object count equation
- i40iw: Validate correct IRD/ORD connection parameters
- clk: meson: mpll: use 64-bit maths in params_from_rate
- ARM: dts: ls1021a: add "fsl,ls1021a-esdhc" compatible string to esdhc node
- Bluetooth: Add a new 04ca:3015 QCA_ROME device
- ipv6: Reinject IPv6 packets if IPsec policy matches after SNAT
- thermal: power_allocator: fix one race condition issue for thermal_instances
list
- perf probe: Find versioned symbols from map
- perf probe: Add warning message if there is unexpected event name
- perf evsel: Fix swap for samples with raw data
- perf evsel: Enable ignore_missing_thread for pid option
- l2tp: fix missing print session offset info
- rds; Reset rs->rs_bound_addr in rds_add_bound() failure path
- ACPI / video: Default lcd_only to true on Win8-ready and newer machines
- IB/mlx5: Report inner RSS capability
- VFS: close race between getcwd() and d_move()
- watchdog: dw_wdt: add stop watchdog operation
- clk: divider: fix incorrect usage of container_of
- PM / devfreq: Fix potential NULL pointer dereference in governor_store
- gpiolib: don't dereference a desc before validation
- net_sch: red: Fix the new offload indication
- selftests/net: fix bugs in address and port initialization
- thermal/drivers/hisi: Remove bogus const from function return type
- RDMA/cma: Mark end of CMA ID messages
- hwmon: (ina2xx) Make calibration register value fixed
- f2fs: fix lock dependency in between dio_rwsem & i_mmap_sem
- clk: sunxi-ng: a83t: Add M divider to TCON1 clock
- media: videobuf2-core: don't go out of the buffer range
- ASoC: Intel: Skylake: Disable clock gating during firmware and library
download
- ASoC: Intel: cht_bsw_rt5645: Analog Mic support
- drm/msm: Fix NULL deref in adreno_load_gpu
- IB/ipoib: Fix for notify send CQ failure messages
- spi: sh-msiof: Fix timeout failures for TX-only DMA transfers
- scsi: mpt3sas: Proper handling of set/clear of "ATA command pending" flag.
- irqchip/ompic: fix return value check in ompic_of_init()
- irqchip/gic-v3: Fix the driver probe() fail due to disabled GICC entry
- ACPI: EC: Fix debugfs_create_*() usage
- mac80211: Fix setting TX power on monitor interfaces
- vfb: fix video mode and line_length being set when loaded
- crypto: crypto4xx - perform aead icv check in the driver
- gpio: label descriptors using the device name
- arm64: asid: Do not replace active_asids if already 0
- powernv-cpufreq: Add helper to extract pstate from PMSR
- IB/rdmavt: Allocate CQ memory on the correct node
- blk-mq: avoid to map CPU into stale hw queue
- blk-mq: fix race between updating nr_hw_queues and switching io sched
- backlight: tdo24m: Fix the SPI CS between transfers
- nvme-fabrics: protect against module unload during create_ctrl
- nvme-fabrics: don't check for non-NULL module in nvmf_register_transport
- pinctrl: baytrail: Enable glitch filter for GPIOs used as interrupts
- nvme_fcloop: disassocate local port structs
- nvme_fcloop: fix abort race condition
- tpm: return a TPM_RC_COMMAND_CODE response if command is not implemented
- perf report: Fix a no annotate browser displayed issue
- staging: lustre: disable preempt while sampling processor id.
- ASoC: Intel: sst: Fix the return value of 'sst_send_byte_stream_mrfld()'
- power: supply: axp288_charger: Properly stop work on probe-error / remove
- rt2x00: do not pause queue unconditionally on error path
- wl1251: check return from call to wl1251_acx_arp_ip_filter
- net/mlx5: Fix race for multiple RoCE enable
- bcache: ret IOERR when read meets metadata error
- bcache: stop writeback thread after detaching
- bcache: segregate flash only volume write streams
- net: Fix netdev_WARN_ONCE macro
- net/mlx5e: IPoIB, Use correct timestamp in child receive flow
- blk-mq: fix kernel oops in blk_mq_tag_idle()
- tty: n_gsm: Allow ADM response in addition to UA for control dlci
- block, bfq: put async queues for root bfq groups too
- serdev: Fix serdev_uevent failure on ACPI enumerated serdev-controllers
- EDAC, mv64x60: Fix an error handling path
- uio_hv_generic: check that host supports monitor page
- Bluetooth: hci_bcm: Mandate presence of shutdown and device wake GPIO
- Bluetooth: hci_bcm: Validate IRQ before using it
- Bluetooth: hci_bcm: Make shutdown and device wake GPIO optional
- i40evf: don't rely on netif_running() outside rtnl_lock()
- drm/amd/powerplay: fix memory leakage when reload (v2)
- cxgb4vf: Fix SGE FL buffer initialization logic for 64K pages
- PM / domains: Don't skip driver's ->suspend|resume_noirq() callbacks
- scsi: megaraid_sas: Error handling for invalid ldcount provided by firmware
in RAID map
- scsi: megaraid_sas: unload flag should be set after scsi_remove_host is
called
- RDMA/cma: Fix rdma_cm path querying for RoCE
- gpio: thunderx: fix error return code in thunderx_gpio_probe()
- x86/gart: Exclude GART aperture from vmcore
- sdhci: Advertise 2.0v supply on SDIO host controller
- Input: goodix - disable IRQs while suspended
- mtd: mtd_oobtest: Handle bitflips during reads
- crypto: aes-generic - build with -Os on gcc-7+
- perf tools: Fix copyfile_offset update of output offset
- tcmu: release blocks for partially setup cmds
- thermal: int3400_thermal: fix error handling in int3400_thermal_probe()
- drm/i915/cnp: Ignore VBT request for know invalid DDC pin.
- drm/i915/cnp: Properly handle VBT ddc pin out of bounds.
- x86/microcode: Propagate return value from updating functions
- x86/CPU: Add a microcode loader callback
- x86/CPU: Check CPU feature bits after microcode upgrade
- x86/microcode: Get rid of struct apply_microcode_ctx
- x86/microcode/intel: Check microcode revision before updating sibling
threads
- x86/microcode/intel: Writeback and invalidate caches before updating
microcode
- x86/microcode: Do not upload microcode if CPUs are offline
- x86/microcode/intel: Look into the patch cache first
- x86/microcode: Request microcode on the BSP
- x86/microcode: Synchronize late microcode loading
- x86/microcode: Attempt late loading only when new microcode is present
- x86/microcode: Fix CPU synchronization routine
- arp: fix arp_filter on l3slave devices
- ipv6: the entire IPv6 header chain must fit the first fragment
- lan78xx: Crash in lan78xx_writ_reg (Workqueue: events
lan78xx_deferred_multicast_write)
- net: dsa: Discard frames from unused ports
- net: fix possible out-of-bound read in skb_network_protocol()
- net/ipv6: Fix route leaking between VRFs
- net/ipv6: Increment OUTxxx counters after netfilter hook
- netlink: make sure nladdr has correct size in netlink_connect()
- net/mlx5e: Verify coalescing parameters in range
- net sched actions: fix dumping which requires several messages to user space
- net/sched: fix NULL dereference in the error path of tcf_bpf_init()
- pptp: remove a buggy dst release in pptp_connect()
- r8169: fix setting driver_data after register_netdev
- sctp: do not leak kernel memory to user space
- sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
- vhost: correctly remove wait queue during poll failure
- vlan: also check phy_driver ts_info for vlan's real device
- vrf: Fix use after free and double free in vrf_finish_output
- bonding: fix the err path for dev hwaddr sync in bond_enslave
- bonding: move dev_mc_sync after master_upper_dev_link in bond_enslave
- bonding: process the err returned by dev_set_allmulti properly in
bond_enslave
- net: fool proof dev_valid_name()
- ip_tunnel: better validate user provided tunnel names
- ipv6: sit: better validate user provided tunnel names
- ip6_gre: better validate user provided tunnel names
- ip6_tunnel: better validate user provided tunnel names
- vti6: better validate user provided tunnel names
- net/mlx5e: Set EQE based as default TX interrupt moderation mode
- net_sched: fix a missing idr_remove() in u32_delete_key()
- net/sched: fix NULL dereference in the error path of tcf_vlan_init()
- net/mlx5e: Avoid using the ipv6 stub in the TC offload neigh update path
- net/mlx5e: Fix memory usage issues in offloading TC flows
- net/sched: fix NULL dereference in the error path of tcf_sample_init()
- nfp: use full 40 bits of the NSP buffer address
- ipv6: sr: fix seg6 encap performances with TSO enabled
- net/mlx5e: Don't override vport admin link state in switchdev mode
- net/mlx5e: Sync netdev vxlan ports at open
- net/sched: fix NULL dereference in the error path of tunnel_key_init()
- net/sched: fix NULL dereference on the error path of tcf_skbmod_init()
- strparser: Fix sign of err codes
- net/mlx4_en: Fix mixed PFC and Global pause user control requests
- net/mlx5e: Fix traffic being dropped on VF representor
- vhost: validate log when IOTLB is enabled
- route: check sysctl_fib_multipath_use_neigh earlier than hash
- team: move dev_mc_sync after master_upper_dev_link in team_port_add
- vhost_net: add missing lock nesting notation
- net/mlx4_core: Fix memory leak while delete slave's resources
- Linux 4.15.17
* sky2 gigabit ethernet driver sometimes stops working after lid-open resume
from sleep (88E8055) (LP: #1758507) // Bionic update to v4.15.17 stable
release (LP: #1763366)
- sky2: Increase D3 delay to sky2 stops working after suspend
* [Featire] CNL: Enable RAPL support (LP: #1685712)
- powercap: RAPL: Add support for Cannon Lake
* System Z {kernel} UBUNTU18.04 wrong kernel config (LP: #1762719)
- s390: move nobp parameter functions to nospec-branch.c
- s390: add automatic detection of the spectre defense
- s390: report spectre mitigation via syslog
- s390: add sysfs attributes for spectre
- [Config] CONFIG_EXPOLINE_AUTO=y, CONFIG_KERNEL_NOBP=n for s390
- s390: correct nospec auto detection init order
* Merge the linux-snapdragon kernel into bionic master/snapdragon
(LP: #1763040)
- drm/msm: fix spelling mistake: "ringubffer" -> "ringbuffer"
- drm/msm: fix msm_rd_dump_submit prototype
- drm/msm: gpu: Only sync fences on rings that exist
- wcn36xx: set default BTLE coexistence config
- wcn36xx: Add hardware scan offload support
- wcn36xx: Reduce spinlock in indication handler
- wcn36xx: fix incorrect assignment to msg_body.min_ch_time
- wcn36xx: release DMA memory in case of error
- mailbox: qcom: Convert APCS IPC driver to use regmap
- mailbox: qcom: Create APCS child device for clock controller
- clk: qcom: Add A53 PLL support
- clk: qcom: Add regmap mux-div clocks support
- clk: qcom: Add APCS clock controller support
- clk: qcom: msm8916: Fix return value check in qcom_apcs_msm8916_clk_probe()
- media: venus: venc: set correctly GOP size and number of B-frames
- media: venus: venc: configure entropy mode
- media: venus: venc: Apply inloop deblocking filter
- media: venus: cleanup set_property controls
- arm64: defconfig: enable REMOTEPROC
- arm64: defconfig: enable QCOM audio drivers for APQ8016 and DB410c
- kernel: configs; add distro.config
- arm64: configs: enable WCN36xx
- kernel: distro.config: enable debug friendly USB network adpater
- arm64: configs: enable QCOM Venus
- arm64: defconfig: Enable a53/apcs and avs
- arm64: defconfig: enable ondemand governor as default
- arm64: defconfig: enable QCOM_TSENS
- arm64: defconfig: enable new trigger modes for leds
- kernel: configs: enable dm_mod and dm_crypt
- Force the SMD regulator driver to be compiled-in
- arm64: defconfig: enable CFG80211_DEFAULT_PS by default
- arm64: configs: enable BT_QCOMSMD
- kernel: configs: add more USB net drivers
- arm64: defconfig: disable ANALOG_TV and DIGITAL_TV
- arm64: configs: Enable camera drivers
- kernel: configs: add freq stat to sysfs
- arm64: defconfig: enable CONFIG_USB_CONFIGFS_F_FS by default
- arm64: defconfig: Enable QRTR features
- kernel: configs: set USB_CONFIG_F_FS in distro.config
- kernel: distro.config: enable 'schedutil' CPUfreq governor
- kernel: distro.config: enable 'fq' and 'fq_codel' qdiscs
- kernel: distro.config: enable 'BBR' TCP congestion algorithm
- arm64: defconfig: enable LEDS_QCOM_LPG
- HACK: drm/msm/iommu: Remove runtime_put calls in map/unmap
- power: avs: Add support for CPR (Core Power Reduction)
- power: avs: cpr: Use raw mem access for qfprom
- power: avs: cpr: fix with new reg_sequence structures
- power: avs: cpr: Register with cpufreq-dt
- regulator: smd: Add floor and corner operations
- PM / OPP: Support adjusting OPP voltages at runtime
- PM / OPP: Drop RCU usage in dev_pm_opp_adjust_voltage()
- PM / OPP: HACK: Allow to set regulator without opp_list
- PM / OPP: Add a helper to get an opp regulator for device
- cpufreq: Add apq8016 to cpufreq-dt-platdev blacklist
- regulator: smd: Allow REGULATOR_QCOM_SMD_RPM=m
- ov5645: I2C address change
- i2c: Add Qualcomm Camera Control Interface driver
- camss: vfe: Skip first four frames from sensor
- camss: Do not register if no cameras are present
- i2c-qcom-cci: Fix run queue completion timeout
- i2c-qcom-cci: Fix I2C address bug
- media: ov5645: Fix I2C address
- drm/bridge/adv7511: Delay clearing of HPD interrupt status
- HACK: drm/msm/adv7511: Don't rely on interrupts for EDID parsing
- leds: Add driver for Qualcomm LPG
- wcn36xx: Fix warning due to duplicate scan_completed notification
- arm64: dts: Add CPR DT node for msm8916
- arm64: dts: add spmi-regulator nodes
- arm64: dts: msm8916: Add cpufreq support
- arm64: dts: msm8916: Add a shared CPU opp table
- arm64: dts: msm8916: Add cpu cooling maps
- arm64: dts: pm8916: Mark the s2 regulator as always-on
- dt-bindings: mailbox: qcom: Document the APCS clock binding
- arm64: dts: qcom: msm8916: Add msm8916 A53 PLL DT node
- arm64: dts: qcom: msm8916: Use the new APCS mailbox driver
- arm64: dts: qcom: msm8916: Add clock properties to the APCS node
- arm64: dts: qcom: apq8016-sbc: Allow USR4 LED to notify kernel panic
- dt-bindings: media: Binding document for Qualcomm Camera Control Interface
driver
- MAINTAINERS: Add Qualcomm Camera Control Interface driver
- DT: leds: Add Qualcomm Light Pulse Generator binding
- arm64: dts: qcom: msm8996: Add mpp and lpg blocks
- arm64: dts: qcom: Add pwm node for pm8916
- arm64: dts: qcom: Add user LEDs on db820c
- arm64: dts: qcom: Add WiFI/BT LEDs on db820c
- ARM: dts: qcom: Add LPG node to pm8941
- ARM: dts: qcom: honami: Add LPG node and RGB LED
- arm64: dts: qcom: Add Camera Control Interface support
- arm64: dts: qcom: Add apps_iommu vfe child node
- arm64: dts: qcom: Add camss device node
- arm64: dts: qcom: Add ov5645 device nodes
- arm64: dts: msm8916: Fix camera sensors I2C addresses
- arm: dts: qcom: db410c: Enable PWM signal on MPP4
- packaging: arm64: add a uboot flavour - part1
- packaging: arm64: add a uboot flavour - part2
- packaging: arm64: add a uboot flavour - part3
- packaging: arm64: add a uboot flavour - part4
- packaging: arm64: add a uboot flavour - part5
- packaging: arm64: rename uboot flavour to snapdragon
- [Config] updateconfigs after qcomlt import
- [Config] arm64: snapdragon: COMMON_CLK_QCOM=y
- [Config] arm64: snapdragon: MSM_GCC_8916=y
- [Config] arm64: snapdragon: REGULATOR_FIXED_VOLTAGE=y
- [Config] arm64: snapdragon: PINCTRL_MSM8916=y
- [Config] arm64: snapdragon: HWSPINLOCK_QCOM=y
- [Config] arm64: snapdragon: SPMI=y, SPMI_MSM_PMIC_ARB=y
- [Config] arm64: snapdragon: REGMAP_SPMI=y, PINCTRL_QCOM_SPMI_PMIC=y
- [Config] arm64: snapdragon: REGULATOR_QCOM_SPMI=y
- [Config] arm64: snapdragon: MFD_SPMI_PMIC=y
- [Config] arm64: snapdragon: QCOM_SMEM=y
- [Config] arm64: snapdragon: RPMSG=y, RPMSG_QCOM_SMD=y
- [Config] arm64: snapdragon: QCOM_SMD_RPM=y, REGULATOR_QCOM_SMD_RPM=y
- [Config] arm64: snapdragon: QCOM_CLK_SMD_RPM=y
- [Config] arm64: snapdragon: QCOM_BAM_DMA=y
- [Config] arm64: snapdragon: QCOM_HIDMA=y, QCOM_HIDMA_MGMT=y
- [Config] arm64: snapdragon: QCOM_CPR=y
- [Config] arm64: snapdragon: QCOM_QFPROM=y, QCOM_TSENS=y
- [Config] arm64: snapdragon: MMC_SDHCI=y, MMC_SDHCI_PLTFM=y, MMC_SDHCI_MSM=y
- [Config] turn off DRM_MSM_REGISTER_LOGGING
- [Config] arm64: snapdragon: I2C_QUP=y
- [Config] arm64: snapdragon: SPI_QUP=y
- [Config] arm64: snapdragon: USB_ULPI_BUS=y, PHY_QCOM_USB_HS=y
- [Config] arm64: snapdragon: QCOM_APCS_IPC=y
- [Config] arm64: snapdragon: QCOM_WCNSS_CTRL=y
- [Config] arm64: snapdragon: QCOM_SMSM=y
- [Config] arm64: snapdragon: QCOM_SMP2P=y
- [Config] arm64: snapdragon: DRM_MSM=y
- [Config] arm64: snapdragon: SND_SOC=y
- [Config] arm64: snapdragon: QCOM_WCNSS_PIL=m
- [Config] arm64: snapdragon: QCOM_A53PLL=y, QCOM_CLK_APCS_MSM8916=y
- [Config] arm64: snapdragon: INPUT_PM8941_PWRKEY=y
- [Config] arm64: snapdragon: MEDIA_SUBDRV_AUTOSELECT=y, VIDEO_OV5645=m
- [Config] arm64: snapdragon: SND_SOC_APQ8016_SBC=y, SND_SOC_LPASS_APQ8016=y
- [Config] arm64: snapdragon: SND_SOC_MSM8916_WCD_ANALOG=y,
SND_SOC_MSM8916_WCD_DIGITAL=y
- SAUCE: media: ov5645: skip address change if dt addr == default addr
- SAUCE: drm/msm/adv7511: wrap hacks under CONFIG_ADV7511_SNAPDRAGON_HACKS
#ifdefs
- [Config] arm64: snapdragon: ADV7511_SNAPDRAGON_HACKS=y
- packaging: snapdragon: fixup ABI paths
* LSM stacking patches for bionic (LP: #1763062)
- SAUCE: LSM stacking: procfs: add smack subdir to attrs
- SAUCE: LSM stacking: LSM: Manage credential security blobs
- SAUCE: LSM stacking: LSM: Manage file security blobs
- SAUCE: LSM stacking: LSM: Manage task security blobs
- SAUCE: LSM stacking: LSM: Manage remaining security blobs
- SAUCE: LSM stacking: LSM: General stacking
- SAUCE: LSM stacking: fixup initialize task->security
- SAUCE: LSM stacking: fixup: alloc_task_ctx is dead code
- SAUCE: LSM stacking: add support for stacking getpeersec_stream
- SAUCE: LSM stacking: add stacking support to apparmor network hooks
- SAUCE: LSM stacking: fixup apparmor stacking enablement
- SAUCE: LSM stacking: fixup stacking kconfig
- SAUCE: LSM stacking: allow selecting multiple LSMs using kernel boot params
- SAUCE: LSM stacking: provide prctl interface for setting context
- SAUCE: LSM stacking: inherit current display LSM
- SAUCE: LSM stacking: keep an index for each registered LSM
- SAUCE: LSM stacking: verify display LSM
- SAUCE: LSM stacking: provide a way to specify the default display lsm
- SAUCE: LSM stacking: make sure LSM blob align on 64 bit boundaries
- SAUCE: LSM stacking: add /proc/<pid>/attr/display_lsm
- SAUCE: LSM stacking: add Kconfig to set default display LSM
- SAUCE: LSM stacking: add configs for LSM stacking
- SAUCE: LSM stacking: add apparmor and selinux proc dirs
- SAUCE: LSM stacking: remove procfs context interface
* linux 4.13.0-13.14 ADT test failure with linux 4.13.0-13.14
(LP: #1720779) // LSM stacking patches for bionic (LP: #1763062)
- SAUCE: LSM stacking: check for invalid zero sized writes
* RDMA/hns: ensure for-loop actually iterates and free's buffers
(LP: #1762757)
- RDMA/hns: ensure for-loop actually iterates and free's buffers
* Support cq/rq record doorbell for RDMA on HSilicon hip08 systems
(LP: #1762755)
- RDMA/hns: Fix the endian problem for hns
- RDMA/hns: Support rq record doorbell for the user space
- RDMA/hns: Support cq record doorbell for the user space
- RDMA/hns: Support rq record doorbell for kernel space
- RDMA/hns: Support cq record doorbell for kernel space
- RDMA/hns: Fix cqn type and init resp
- RDMA/hns: Fix init resp when alloc ucontext
- RDMA/hns: Fix cq record doorbell enable in kernel
* Replace LPC patchset with upstream version (LP: #1762758)
- Revert "UBUNTU: SAUCE: MAINTAINERS: Add maintainer for HiSilicon LPC driver"
- Revert "UBUNTU: SAUCE: HISI LPC: Add ACPI support"
- Revert "UBUNTU: SAUCE: ACPI / scan: do not enumerate Indirect IO host
children"
- Revert "UBUNTU: SAUCE: HISI LPC: Support the LPC host on Hip06/Hip07 with DT
bindings"
- Revert "UBUNTU: SAUCE: OF: Add missing I/O range exception for indirect-IO
devices"
- Revert "UBUNTU: SAUCE: PCI: Apply the new generic I/O management on PCI IO
hosts"
- Revert "UBUNTU: SAUCE: PCI: Add fwnode handler as input param of
pci_register_io_range()"
- Revert "UBUNTU: SAUCE: PCI: Remove unused __weak attribute in
pci_register_io_range()"
- Revert "UBUNTU: SAUCE: LIB: Introduce a generic PIO mapping method"
- lib: Add generic PIO mapping method
- PCI: Remove __weak tag from pci_register_io_range()
- PCI: Add fwnode handler as input param of pci_register_io_range()
- PCI: Apply the new generic I/O management on PCI IO hosts
- of: Add missing I/O range exception for indirect-IO devices
- HISI LPC: Support the LPC host on Hip06/Hip07 with DT bindings
- ACPI / scan: Rename acpi_is_serial_bus_slave() for more general use
- ACPI / scan: Do not enumerate Indirect IO host children
- HISI LPC: Add ACPI support
- MAINTAINERS: Add John Garry as maintainer for HiSilicon LPC driver
* Enable Tunneled Operations on POWER9 (LP: #1762448)
- powerpc/powernv: Enable tunneled operations
- cxl: read PHB indications from the device tree
* PSL traces reset after PERST for debug AFU image (LP: #1762462)
- cxl: Enable NORST bit in PSL_DEBUG register for PSL9
* NFS + sec=krb5 is broken (LP: #1759791)
- sunrpc: remove incorrect HMAC request initialization
* Raspberry Pi 3 microSD support missing from the installer (LP: #1729128)
- d-i: add bcm2835 to block-modules
* Backport USB core quirks (LP: #1762695)
- usb: core: Add "quirks" parameter for usbcore
- usb: core: Copy parameter string correctly and remove superfluous null check
- usb: core: Add USB_QUIRK_DELAY_CTRL_MSG to usbcore quirks
* [Ubuntu 18.04] cryptsetup: 'device-mapper: reload ioctl on failed' when
setting up a second end-to-end encrypted disk (LP: #1762353)
- SAUCE: s390/crypto: Adjust s390 aes and paes cipher
* Additional spectre and meltdown patches (LP: #1760099) // CVE-2017-5715
- powerpc/64s: Wire up cpu_show_spectre_v2()
* Additional spectre and meltdown patches (LP: #1760099) // CVE-2017-5753
- powerpc/64s: Wire up cpu_show_spectre_v1()
* Additional spectre and meltdown patches (LP: #1760099) // CVE-2017-5754
- powerpc/rfi-flush: Move the logic to avoid a redo into the debugfs code
- powerpc/rfi-flush: Make it possible to call setup_rfi_flush() again
- powerpc/rfi-flush: Always enable fallback flush on pseries
- powerpc/rfi-flush: Differentiate enabled and patched flush types
- powerpc/rfi-flush: Call setup_rfi_flush() after LPM migration
- powerpc/64s: Move cpu_show_meltdown()
- powerpc/64s: Enhance the information in cpu_show_meltdown()
- powerpc/powernv: Use the security flags in pnv_setup_rfi_flush()
- powerpc/pseries: Use the security flags in pseries_setup_rfi_flush()
* Additional spectre and meltdown patches (LP: #1760099) // CVE-2017-5715 //
CVE-2017-5753 // CVE-2017-5754
- powerpc/pseries: Add new H_GET_CPU_CHARACTERISTICS flags
- powerpc: Add security feature flags for Spectre/Meltdown
- powerpc/pseries: Set or clear security feature flags
- powerpc/powernv: Set or clear security feature flags
* Hisilicon network subsystem 3 support (LP: #1761610)
- net: hns3: export pci table of hclge and hclgevf to userspace
- d-i: Add hns3 drivers to nic-modules
* "ip a" command on a guest VM shows UNKNOWN status (LP: #1761534)
- virtio-net: Fix operstate for virtio when no VIRTIO_NET_F_STATUS
* perf vendor events arm64: Enable JSON events for ThunderX2 B0 (LP: #1760712)
- perf vendor events aarch64: Add JSON metrics for ARM Cortex-A53 Processor
- perf vendor events: Drop incomplete multiple mapfile support
- perf vendor events: Fix error code in json_events()
- perf vendor events: Drop support for unused topic directories
- perf vendor events: Add support for pmu events vendor subdirectory
- perf vendor events arm64: Relocate ThunderX2 JSON to cavium subdirectory
- perf vendor events arm64: Relocate Cortex A53 JSONs to arm subdirectory
- perf vendor events: Add support for arch standard events
- perf vendor events arm64: Add armv8-recommended.json
- perf vendor events arm64: Fixup ThunderX2 to use recommended events
- perf vendor events arm64: fixup A53 to use recommended events
- perf vendor events arm64: add HiSilicon hip08 JSON file
- perf vendor events arm64: Enable JSON events for ThunderX2 B0
* Warning "cache flush timed out!" seen when unloading the cxl driver
(LP: #1762367)
- cxl: Check if PSL data-cache is available before issue flush request
* Bionic update to 4.15.16 stable release (LP: #1762370)
- ARM: OMAP: Fix SRAM W+X mapping
- ARM: 8746/1: vfp: Go back to clearing vfp_current_hw_state[]
- ARM: dts: sun6i: a31s: bpi-m2: improve pmic properties
- ARM: dts: sun6i: a31s: bpi-m2: add missing regulators
- mtd: jedec_probe: Fix crash in jedec_read_mfr()
- mtd: nand: atmel: Fix get_sectorsize() function
- ALSA: usb-audio: Add native DSD support for TEAC UD-301
- ALSA: pcm: Use dma_bytes as size parameter in dma_mmap_coherent()
- ALSA: pcm: potential uninitialized return values
- x86/platform/uv/BAU: Add APIC idt entry
- perf/hwbp: Simplify the perf-hwbp code, fix documentation
- ceph: only dirty ITER_IOVEC pages for direct read
- ipc/shm.c: add split function to shm_vm_ops
- i2c: i2c-stm32f7: fix no check on returned setup
- powerpc/mm: Add tracking of the number of coprocessors using a context
- powerpc/mm: Workaround Nest MMU bug with TLB invalidations
- powerpc/64s: Fix i-side SLB miss bad address handler saving nonvolatile GPRs
- partitions/msdos: Unable to mount UFS 44bsd partitions
- xfrm_user: uncoditionally validate esn replay attribute struct
- RDMA/ucma: Check AF family prior resolving address
- RDMA/ucma: Fix use-after-free access in ucma_close
- RDMA/ucma: Ensure that CM_ID exists prior to access it
- RDMA/rdma_cm: Fix use after free race with process_one_req
- RDMA/ucma: Check that device is connected prior to access it
- RDMA/ucma: Check that device exists prior to accessing it
- RDMA/ucma: Introduce safer rdma_addr_size() variants
- ipv6: fix possible deadlock in rt6_age_examine_exception()
- net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()
- xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems
- percpu: add __GFP_NORETRY semantics to the percpu balancing path
- netfilter: x_tables: make allocation less aggressive
- netfilter: bridge: ebt_among: add more missing match size checks
- l2tp: fix races with ipv4-mapped ipv6 addresses
- netfilter: drop template ct when conntrack is skipped.
- netfilter: x_tables: add and use xt_check_proc_name
- phy: qcom-ufs: add MODULE_LICENSE tag
- Bluetooth: Fix missing encryption refresh on Security Request
- drm/i915/dp: Write to SET_POWER dpcd to enable MST hub.
- bitmap: fix memset optimization on big-endian systems
- USB: serial: ftdi_sio: add RT Systems VX-8 cable
- USB: serial: ftdi_sio: add support for Harman FirmwareHubEmulator
- USB: serial: cp210x: add ELDAT Easywave RX09 id
- serial: 8250: Add Nuvoton NPCM UART
- mei: remove dev_err message on an unsupported ioctl
- /dev/mem: Avoid overwriting "err" in read_mem()
- media: usbtv: prevent double free in error case
- parport_pc: Add support for WCH CH382L PCI-E single parallel port card.
- crypto: lrw - Free rctx->ext with kzfree
- crypto: talitos - don't persistently map req_ctx->hw_context and
req_ctx->buf
- crypto: inside-secure - fix clock management
- crypto: testmgr - Fix incorrect values in PKCS#1 test vector
- crypto: talitos - fix IPsec cipher in length
- crypto: ahash - Fix early termination in hash walk
- crypto: caam - Fix null dereference at error path
- crypto: ccp - return an actual key size from RSA max_size callback
- crypto: arm,arm64 - Fix random regeneration of S_shipped
- crypto: x86/cast5-avx - fix ECB encryption when long sg follows short one
- Btrfs: fix unexpected cow in run_delalloc_nocow
- staging: comedi: ni_mio_common: ack ai fifo error interrupts.
- Revert "base: arch_topology: fix section mismatch build warnings"
- Input: ALPS - fix TrackStick detection on Thinkpad L570 and Latitude 7370
- Input: i8042 - add Lenovo ThinkPad L460 to i8042 reset list
- Input: i8042 - enable MUX on Sony VAIO VGN-CS series to fix touchpad
- vt: change SGR 21 to follow the standards
- ARM: dts: DRA76-EVM: Set powerhold property for tps65917
- net: hns: Fix ethtool private flags
- Fix slab name "biovec-(1<<(21-12))"
- Revert "ARM: dts: am335x-pepper: Fix the audio CODEC's reset pin"
- Revert "ARM: dts: omap3-n900: Fix the audio CODEC's reset pin"
- Revert "cpufreq: Fix governor module removal race"
- Revert "ip6_vti: adjust vti mtu according to mtu of lower device"
- Linux 4.15.16
* [18.04][config] regression: nvme and nvme_core couldn't be built as modules
starting 4.15-rc2 (LP: #1759893)
- SAUCE: Revert "lightnvm: include NVM Express driver if OCSSD is selected for
build"
- [Config] CONFIG_BLK_DEV_NMVE=m
* Miscellaneous Ubuntu changes
- [Packaging] Only install cloud init files when do_tools_common=true
-- Thadeu Lima de Souza Cascardo <email address hidden> Fri, 20 Apr 2018 13:07:28 -0300
-
linux-aws (4.15.0-1003.3) bionic; urgency=medium
* linux-aws: 4.15.0-1003.3 -proposed tracker (LP: #1761179)
[ Ubuntu: 4.15.0-15.16 ]
* linux: 4.15.0-15.16 -proposed tracker (LP: #1761177)
* FFe: Enable configuring resume offset via sysfs (LP: #1760106)
- PM / hibernate: Make passing hibernate offsets more friendly
* /dev/bcache/by-uuid links not created after reboot (LP: #1729145)
- SAUCE: (no-up) bcache: decouple emitting a cached_dev CHANGE uevent
* Ubuntu18.04:POWER9:DD2.2 - Unable to start a KVM guest with default machine
type(pseries-bionic) complaining "KVM implementation does not support
Transactional Memory, try cap-htm=off" (kvm) (LP: #1752026)
- powerpc: Use feature bit for RTC presence rather than timebase presence
- powerpc: Book E: Remove unused CPU_FTR_L2CSR bit
- powerpc: Free up CPU feature bits on 64-bit machines
- powerpc: Add CPU feature bits for TM bug workarounds on POWER9 v2.2
- powerpc/powernv: Provide a way to force a core into SMT4 mode
- KVM: PPC: Book3S HV: Work around transactional memory bugs in POWER9
- KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode
- KVM: PPC: Book3S HV: Work around TEXASR bug in fake suspend state
* Important Kernel fixes to be backported for Power9 (kvm) (LP: #1758910)
- powerpc/mm: Fixup tlbie vs store ordering issue on POWER9
* Ubuntu 18.04 - IO Hang on some namespaces when running HTX with 16
namespaces (Bolt / NVMe) (LP: #1757497)
- powerpc/64s: Fix lost pending interrupt due to race causing lost update to
irq_happened
* fwts-efi-runtime-dkms 18.03.00-0ubuntu1: fwts-efi-runtime-dkms kernel module
failed to build (LP: #1760876)
- [Packaging] include the retpoline extractor in the headers
[ Ubuntu: 4.15.0-14.15 ]
* linux: 4.15.0-14.15 -proposed tracker (LP: #1760678)
* [Bionic] mlx4 ETH - mlnx_qos failed when set some TC to vendor
(LP: #1758662)
- net/mlx4_en: Change default QoS settings
* AT_BASE_PLATFORM in AUXV is absent on kernels available on Ubuntu 17.10
(LP: #1759312)
- powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features
* Bionic update to 4.15.15 stable release (LP: #1760585)
- net: dsa: Fix dsa_is_user_port() test inversion
- openvswitch: meter: fix the incorrect calculation of max delta_t
- qed: Fix MPA unalign flow in case header is split across two packets.
- tcp: purge write queue upon aborting the connection
- qed: Fix non TCP packets should be dropped on iWARP ll2 connection
- sysfs: symlink: export sysfs_create_link_nowarn()
- net: phy: relax error checking when creating sysfs link netdev->phydev
- devlink: Remove redundant free on error path
- macvlan: filter out unsupported feature flags
- net: ipv6: keep sk status consistent after datagram connect failure
- ipv6: old_dport should be a __be16 in __ip6_datagram_connect()
- ipv6: sr: fix NULL pointer dereference when setting encap source address
- ipv6: sr: fix scheduling in RCU when creating seg6 lwtunnel state
- mlxsw: spectrum_buffers: Set a minimum quota for CPU port traffic
- net: phy: Tell caller result of phy_change()
- ipv6: Reflect MTU changes on PMTU of exceptions for MTU-less routes
- net sched actions: return explicit error when tunnel_key mode is not
specified
- ppp: avoid loop in xmit recursion detection code
- rhashtable: Fix rhlist duplicates insertion
- test_rhashtable: add test case for rhltable with duplicate objects
- kcm: lock lower socket in kcm_attach
- sch_netem: fix skb leak in netem_enqueue()
- ieee802154: 6lowpan: fix possible NULL deref in lowpan_device_event()
- net: use skb_to_full_sk() in skb_update_prio()
- net: Fix hlist corruptions in inet_evict_bucket()
- s390/qeth: free netdevice when removing a card
- s390/qeth: when thread completes, wake up all waiters
- s390/qeth: lock read device while queueing next buffer
- s390/qeth: on channel error, reject further cmd requests
- soc/fsl/qbman: fix issue in qman_delete_cgr_safe()
- dpaa_eth: fix error in dpaa_remove()
- dpaa_eth: remove duplicate initialization
- dpaa_eth: increment the RX dropped counter when needed
- dpaa_eth: remove duplicate increment of the tx_errors counter
- dccp: check sk for closed state in dccp_sendmsg()
- ipv6: fix access to non-linear packet in ndisc_fill_redirect_hdr_option()
- l2tp: do not accept arbitrary sockets
- net: ethernet: arc: Fix a potential memory leak if an optional regulator is
deferred
- net: ethernet: ti: cpsw: add check for in-band mode setting with RGMII PHY
interface
- net: fec: Fix unbalanced PM runtime calls
- net/iucv: Free memory obtained by kzalloc
- netlink: avoid a double skb free in genlmsg_mcast()
- net: Only honor ifindex in IP_PKTINFO if non-0
- net: systemport: Rewrite __bcm_sysport_tx_reclaim()
- qede: Fix qedr link update
- skbuff: Fix not waking applications when errors are enqueued
- team: Fix double free in error path
- Linux 4.15.15
* Ubuntu 18.04 [ WSP DD2.2 with stop4 and stop5 enabled ]: kdump fails to
capture dump when smt=2 or off. (LP: #1758206)
- powerpc/crash: Remove the test for cpu_online in the IPI callback
- powernv/kdump: Fix cases where the kdump kernel can get HMI's
- powerpc/kdump: Fix powernv build break when KEXEC_CORE=n
* [Intel Ubuntu 18.04 Bug] Null pointer dereference, when disconnecting RAID
rebuild target (LP: #1759279)
- md: document lifetime of internal rdev pointer.
* [Feature]Crystal Ridge:add support for the platform capabilities NFIT sub-
table in ACPI 6.2A (LP: #1730829)
- ACPICA: ACPI 6.0A: Changes to the NFIT ACPI table
- acpi: nfit: Add support for detect platform CPU cache flush on power loss
- acpi: nfit: add persistent memory control flag for nd_region
- libnvdimm: expose platform persistence attribute for nd_region
- libnvdimm: re-enable deep flush for pmem devices via fsync()
- libnvdimm, nfit: fix persistence domain reporting
* Allow multiple mounts of zfs datasets (LP: #1759848)
- SAUCE: Allow mounting datasets more than once (LP: #1759848)
* Update Aquantia driver to fix various issues (LP: #1759303)
- net: aquantia: Eliminate AQ_DIMOF, replace with ARRAY_SIZE
- net: aquantia: Cleanup status flags accesses
- net: aquantia: Cleanup hardware access modules
- net: aquantia: Remove duplicate hardware descriptors declarations
- net: aquantia: Add const qualifiers for hardware ops tables
- net: aquantia: Simplify dependencies between pci modules
- net: aquantia: Eliminate aq_nic structure abstraction
- net: aquantia: Fix register definitions to linux style
- net: aquantia: Prepend hw access functions declarations with prefix
- net: aquantia: Fix internal stats calculation on rx
- net: aquantia: Introduce new device ids and constants
- net: aquantia: Introduce new AQC devices and capabilities
- net: aquantia: Convert hw and caps structures to const static pointers
- net: aquantia: Cleanup pci functions module
- net: aquantia: Remove create/destroy from hw ops
- net: aquantia: Change confusing no_ff_addr to more meaningful name
- net: aquantia: Introduce firmware ops callbacks
- net: aquantia: Introduce support for new firmware on AQC cards
- net: aquantia: Introduce global AQC hardware reset sequence
- net: aquantia: Report correct mediatype via ethtool
- net: aquantia: bump driver version to match aquantia internal numbering
- net: aquantia: Fix hardware reset when SPI may rarely hangup
- net: aquantia: Fix a regression with reset on old firmware
- net: aquantia: Change inefficient wait loop on fw data reads
- net: aquantia: Add tx clean budget and valid budget handling logic
- net: aquantia: Allow live mac address changes
- net: aquantia: Implement pci shutdown callback
- net: aquantia: driver version bump
* ISST-LTE:KVM:Ubuntu1804:BostonLC:boslcp3: cpu hotplug on boslcp3g4 guest
dumping call traces continuously. (LP: #1759722)
- blk-mq: turn WARN_ON in __blk_mq_run_hw_queue into printk
* ISST-LTE:KVM:Ubuntu18.04:BostonLC:boslcp3:boslcp3g3:Guest conosle hangs
after hotplug CPU add operation. (LP: #1759723)
- genirq/affinity: assign vectors to all possible CPUs
- blk-mq: simplify queue mapping & schedule with each possisble CPU
* test_bpf fails (LP: #1756150)
- test_bpf: Fix testing with CONFIG_BPF_JIT_ALWAYS_ON=y on other arches
* Bionic update to v4.15.14 stable release (LP: #1759655)
- MIPS: ralink: Remove ralink_halt()
- MIPS: ralink: Fix booting on MT7621
- MIPS: lantiq: Fix Danube USB clock
- MIPS: lantiq: Enable AHB Bus for USB
- MIPS: lantiq: ase: Enable MFD_SYSCON
- iio: chemical: ccs811: Corrected firmware boot/application mode transition
- iio: st_pressure: st_accel: pass correct platform data to init
- iio: adc: meson-saradc: unlock on error in meson_sar_adc_lock()
- ALSA: usb-audio: Fix parsing descriptor of UAC2 processing unit
- ALSA: aloop: Sync stale timer before release
- ALSA: aloop: Fix access to not-yet-ready substream via cable
- ALSA: hda - Force polling mode on CFL for fixing codec communication
- ALSA: hda/realtek - Fix speaker no sound after system resume
- ALSA: hda/realtek - Fix Dell headset Mic can't record
- ALSA: hda/realtek - Always immediately update mute LED with pin VREF
- mmc: core: Fix tracepoint print of blk_addr and blksz
- mmc: core: Disable HPI for certain Micron (Numonyx) eMMC cards
- mmc: block: fix updating ext_csd caches on ioctl call
- mmc: dw_mmc: Fix the DTO/CTO timeout overflow calculation for 32-bit systems
- mmc: dw_mmc: exynos: fix the suspend/resume issue for exynos5433
- mmc: dw_mmc: fix falling from idmac to PIO mode when dw_mci_reset occurs
- PCI: Add function 1 DMA alias quirk for Highpoint RocketRAID 644L
- ahci: Add PCI-id for the Highpoint Rocketraid 644L card
- lockdep: fix fs_reclaim warning
- clk: bcm2835: Fix ana->maskX definitions
- clk: bcm2835: Protect sections updating shared registers
- clk: sunxi-ng: a31: Fix CLK_OUT_* clock ops
- RDMA/mlx5: Fix crash while accessing garbage pointer and freed memory
- Drivers: hv: vmbus: Fix ring buffer signaling
- pinctrl: samsung: Validate alias coming from DT
- Bluetooth: btusb: Remove Yoga 920 from the btusb_needs_reset_resume_table
- Bluetooth: btusb: Add Dell OptiPlex 3060 to btusb_needs_reset_resume_table
- Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174
- libata: fix length validation of ATAPI-relayed SCSI commands
- libata: remove WARN() for DMA or PIO command without data
- libata: don't try to pass through NCQ commands to non-NCQ devices
- libata: Apply NOLPM quirk to Crucial MX100 512GB SSDs
- libata: Enable queued TRIM for Samsung SSD 860
- libata: Apply NOLPM quirk to Crucial M500 480 and 960GB SSDs
- libata: Make Crucial BX100 500GB LPM quirk apply to all firmware versions
- libata: Modify quirks for MX100 to limit NCQ_TRIM quirk to MU01 version
- sched, cgroup: Don't reject lower cpu.max on ancestors
- cgroup: fix rule checking for threaded mode switching
- nfsd: remove blocked locks on client teardown
- media: tegra-cec: reset rx_buf_cnt when start bit detected
- hugetlbfs: check for pgoff value overflow
- h8300: remove extraneous __BIG_ENDIAN definition
- mm/vmalloc: add interfaces to free unmapped page table
- x86/mm: implement free pmd/pte page interfaces
- mm/khugepaged.c: convert VM_BUG_ON() to collapse fail
- mm/thp: do not wait for lock_page() in deferred_split_scan()
- mm/shmem: do not wait for lock_page() in shmem_unused_huge_shrink()
- Revert "mm: page_alloc: skip over regions of invalid pfns where possible"
- drm/vmwgfx: Fix black screen and device errors when running without fbdev
- drm/vmwgfx: Fix a destoy-while-held mutex problem.
- drm/radeon: Don't turn off DP sink when disconnected
- drm/amd/display: We shouldn't set format_default on plane as atomic driver
- drm/amd/display: Add one to EDID's audio channel count when passing to DC
- drm: Reject getfb for multi-plane framebuffers
- drm: udl: Properly check framebuffer mmap offsets
- mm/vmscan: wake up flushers for legacy cgroups too
- module: propagate error in modules_open()
- acpi, numa: fix pxm to online numa node associations
- ACPI / watchdog: Fix off-by-one error at resource assignment
- libnvdimm, {btt, blk}: do integrity setup before add_disk()
- brcmfmac: fix P2P_DEVICE ethernet address generation
- rtlwifi: rtl8723be: Fix loss of signal
- tracing: probeevent: Fix to support minus offset from symbol
- mtdchar: fix usage of mtd_ooblayout_ecc()
- mtd: nand: fsl_ifc: Fix nand waitfunc return value
- mtd: nand: fsl_ifc: Fix eccstat array overflow for IFC ver >= 2.0.0
- mtd: nand: fsl_ifc: Read ECCSTAT0 and ECCSTAT1 registers for IFC 2.0
- staging: ncpfs: memory corruption in ncp_read_kernel()
- can: peak/pcie_fd: fix echo_skb is occupied! bug
- can: peak/pcie_fd: remove useless code when interface starts
- can: ifi: Repair the error handling
- can: ifi: Check core revision upon probe
- can: cc770: Fix stalls on rt-linux, remove redundant IRQ ack
- can: cc770: Fix queue stall & dropped RTR reply
- can: cc770: Fix use after free in cc770_tx_interrupt()
- tty: vt: fix up tabstops properly
- x86/entry/64: Don't use IST entry for #BP stack
- selftests/x86/ptrace_syscall: Fix for yet more glibc interference
- x86/vsyscall/64: Use proper accessor to update P4D entry
- x86/efi: Free efi_pgd with free_pages()
- posix-timers: Protect posix clock array access against speculation
- kvm/x86: fix icebp instruction handling
- x86/build/64: Force the linker to use 2MB page size
- x86/boot/64: Verify alignment of the LOAD segment
- hwmon: (k10temp) Only apply temperature offset if result is positive
- hwmon: (k10temp) Add temperature offset for Ryzen 1900X
- perf/x86/intel/uncore: Fix Skylake UPI event format
- perf stat: Fix CVS output format for non-supported counters
- perf/core: Fix ctx_event_type in ctx_resched()
- trace/bpf: remove helper bpf_perf_prog_read_value from tracepoint type
programs
- perf/x86/intel: Don't accidentally clear high bits in bdw_limit_period()
- perf/x86/intel/uncore: Fix multi-domain PCI CHA enumeration bug on Skylake
servers
- iio: ABI: Fix name of timestamp sysfs file
- iio: imu: st_lsm6dsx: fix endianness in st_lsm6dsx_read_oneshot()
- iio: imu: st_lsm6dsx: introduce conf_lock mutex
- staging: android: ion: Zero CMA allocated memory
- kbuild: disable clang's default use of -fmerge-all-constants
- bpf: skip unnecessary capability check
- bpf, x64: increase number of passes
- Linux 4.15.14
* System fails to start (boot) on battery due to read-only root file-system
(LP: #1726930) // Bionic update to v4.15.14 stable release (LP: #1759655)
- libata: disable LPM for Crucial BX100 SSD 500GB drive
* [Feature][CFL][ICL] [CNL]Thunderbolt support (Titan Ridge) (LP: #1730775)
- thunderbolt: Resume control channel after hibernation image is created
- thunderbolt: Serialize PCIe tunnel creation with PCI rescan
- thunderbolt: Handle connecting device in place of host properly
- thunderbolt: Do not overwrite error code when domain adding fails
- thunderbolt: Wait a bit longer for root switch config space
- thunderbolt: Wait a bit longer for ICM to authenticate the active NVM
- thunderbolt: Handle rejected Thunderbolt devices
- thunderbolt: Factor common ICM add and update operations out
- thunderbolt: Correct function name in kernel-doc comment
- thunderbolt: Add tb_switch_get()
- thunderbolt: Add tb_switch_find_by_route()
- thunderbolt: Add tb_xdomain_find_by_route()
- thunderbolt: Add constant for approval timeout
- thunderbolt: Move driver ready handling to struct icm
- thunderbolt: Add 'boot' attribute for devices
- thunderbolt: Add support for preboot ACL
- Documentation/admin-guide: fixes for thunderbolt.rst
- thunderbolt: Introduce USB only (SL4) security level
- thunderbolt: Add support for Intel Titan Ridge
* QCA9377 requires more IRAM banks for its new firmware (LP: #1748345)
- ath10k: update the IRAM bank number for QCA9377
* nfp: fix disabling on hw-tc-offload in flower (LP: #1752828)
- nfp: bpf: require ETH table
- nfp: don't advertise hw-tc-offload on non-port netdevs
- nfp: forbid disabling hw-tc-offload on representors while offload active
* Fix an issue that when system in S3, USB keyboard can't wake up the system.
(LP: #1759511)
- ACPI / PM: Allow deeper wakeup power states with no _SxD nor _SxW
* retpoline hints: primary infrastructure and initial hints (LP: #1758856)
- [Packaging] retpoline -- add safe usage hint support
- [Packaging] retpoline-check -- only report additions
- [Packaging] retpoline -- widen indirect call/jmp detection
- [Packaging] retpoline -- elide %rip relative indirections
- [Packaging] retpoline -- clear hint information from packages
- SAUCE: apm -- annotate indirect calls within
firmware_restrict_branch_speculation_{start,end}
- SAUCE: EFI -- annotate indirect calls within
firmware_restrict_branch_speculation_{start,end}
- SAUCE: early/late -- annotate indirect calls in early/late initialisation
code
- SAUCE: vga_set_mode -- avoid jump tables
- [Config] retpoine -- switch to new format
* zfs system process hung on container stop/delete (LP: #1754584)
- SAUCE: Fix non-prefaulted page deadlock (LP: #1754584)
- Revert "UBUNTU: SAUCE: Fix non-prefaulted page deadlock (LP: #1754584)"
- SAUCE: Fix non-prefaulted page deadlock (LP: #1754584)
* Important KVM fixes for ppc64el (LP: #1759045)
- KVM: PPC: Book3S HV: Do SLB load/unload with guest LPCR value loaded
- KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code
- KVM: PPC: Book3S HV: Make HPT resizing work on POWER9
- KVM: PPC: Book3S: Add MMIO emulation for VMX instructions
- KVM: PPC: Book3S: Fix compile error that occurs with some gcc versions
- KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry
- KVM: PPC: Book3S HV: Fix duplication of host SLB entries
* ubuntu_zram_smoke test will cause soft lockup on Artful ThunderX ARM64
(LP: #1755073)
- SAUCE: crypto: thunderx_zip: Fix fallout from CONFIG_VMAP_STACK
* Update to ocxl driver (LP: #1755161)
- ocxl: fix signed comparison with less than zero
- ocxl: Fix potential bad errno on irq allocation
- ocxl: Add get_metadata IOCTL to share OCXL information to userspace
* CAPI Flash (cxlflash) update (LP: #1752672)
- scsi: cxlflash: Update cxl-specific arguments to generic cookie
- scsi: cxlflash: Explicitly cache number of interrupts per context
- scsi: cxlflash: Remove embedded CXL work structures
- scsi: cxlflash: Adapter context init can return error
- scsi: cxlflash: Staging to support future accelerators
- SAUCE: cxlflash: Preserve number of interrupts for master contexts
- SAUCE: cxlflash: Avoid clobbering context control register value
- SAUCE: cxlflash: Add argument identifier names
- SAUCE: cxlflash: Introduce OCXL backend
- SAUCE: cxlflash: Hardware AFU for OCXL
- SAUCE: cxlflash: Read host function configuration
- SAUCE: cxlflash: Setup function acTag range
- SAUCE: cxlflash: Read host AFU configuration
- SAUCE: cxlflash: Setup AFU acTag range
- SAUCE: cxlflash: Setup AFU PASID
- SAUCE: cxlflash: Adapter context support for OCXL
- SAUCE: cxlflash: Use IDR to manage adapter contexts
- SAUCE: cxlflash: Support adapter file descriptors for OCXL
- SAUCE: cxlflash: Support adapter context discovery
- SAUCE: cxlflash: Support image reload policy modification
- SAUCE: cxlflash: MMIO map the AFU
- SAUCE: cxlflash: Support starting an adapter context
- SAUCE: cxlflash: Support process specific mappings
- SAUCE: cxlflash: Support AFU state toggling
- SAUCE: cxlflash: Support reading adapter VPD data
- SAUCE: cxlflash: Setup function OCXL link
- SAUCE: cxlflash: Setup OCXL transaction layer
- SAUCE: cxlflash: Support process element lifecycle
- SAUCE: cxlflash: Support AFU interrupt management
- SAUCE: cxlflash: Support AFU interrupt mapping and registration
- SAUCE: cxlflash: Support starting user contexts
- SAUCE: cxlflash: Support adapter context polling
- SAUCE: cxlflash: Support adapter context reading
- SAUCE: cxlflash: Support adapter context mmap and release
- SAUCE: cxlflash: Support file descriptor mapping
- SAUCE: cxlflash: Introduce object handle fop
- SAUCE: cxlflash: Setup LISNs for user contexts
- SAUCE: cxlflash: Setup LISNs for master contexts
- SAUCE: cxlflash: Update synchronous interrupt status bits
- SAUCE: cxlflash: Introduce OCXL context state machine
- SAUCE: cxlflash: Register for translation errors
- SAUCE: cxlflash: Support AFU reset
- SAUCE: cxlflash: Enable OCXL operations
* [Feature][CFL] Enable pmc_core driver for H, S, and U SKUs (LP: #1730770)
- platform/x86: intel_pmc_core: Remove unused EXPORTED API
- platform/x86: intel_pmc_core: Change driver to a module
- platform/x86: intel_pmc_core: Fix file permission warnings
- platform/x86: intel_pmc_core: Refactor debugfs entries
- platform/x86: intel_pmc_core: Substitute PCI with CPUID enumeration
- platform/x86: intel_pmc_core: Convert to ICPU macro
- platform/x86: intel_pmc_core: Remove unused header file
- ACPI / LPIT: Export lpit_read_residency_count_address()
- platform/x86: intel_pmc_core: Read base address from LPIT
- x86/cpu: Add Cannonlake to Intel family
- platform/x86: intel_pmc_core: Add CannonLake PCH support
- platform/x86: intel_pmc_core: Special case for Coffeelake
* Cpu utilization showing system time for kvm guests (performance) (sysstat)
(LP: #1755979)
- KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN
* [Artful][Wyse 3040] System hang when trying to enable an offlined CPU core
(LP: #1736393)
- SAUCE: drm/i915:Don't set chip specific data
- SAUCE: drm/i915: make previous commit affects Wyse 3040 only
* [Bug] ISH support for CFL-H (LP: #1739522)
- HID: intel-ish-hid: Enable Cannon Lake and Coffee Lake laptop/desktop
* ath9k can't connect to wifi AP (LP: #1727228)
- ath9k: add MSI support
- ath9k: add a quirk to set use_msi automatically
* [P9,Power NV][Witherspoon][Ubuntu 18.04][Perf] : PMU events by name it is
not listed under perf list (LP: #1755470)
- iperf vendor events: Use more flexible pattern matching for CPU
identification for mapfile.csv
* zed process consuming 100% cpu (LP: #1751796)
- SAUCE: Fix ioctl loop-spin in zed (LP: #1751796)
* Bionic update to 4.15.13 stable release (LP: #1758886)
- scsi: megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura
controllers
- staging: android: ashmem: Fix possible deadlock in ashmem_ioctl
- drm/amdgpu: use polling mem to set SDMA3 wptr for VF
- Bluetooth: hci_qca: Avoid setup failure on missing rampatch
- Bluetooth: btqcomsmd: Fix skb double free corruption
- cpufreq: longhaul: Revert transition_delay_us to 200 ms
- media: c8sectpfe: fix potential NULL pointer dereference in
c8sectpfe_timer_interrupt
- drm/msm: fix leak in failed get_pages
- IB/ipoib: Warn when one port fails to initialize
- RDMA/iwpm: Fix uninitialized error code in iwpm_send_mapinfo()
- hv_netvsc: Fix the receive buffer size limit
- hv_netvsc: Fix the TX/RX buffer default sizes
- tcp: allow TLP in ECN CWR
- spi: sh-msiof: Avoid writing to registers from spi_master.setup()
- libbpf: prefer global symbols as bpf program name source
- rtlwifi: rtl_pci: Fix the bug when inactiveps is enabled.
- rtlwifi: always initialize variables given to RT_TRACE()
- media: bt8xx: Fix err 'bt878_probe()'
- ath10k: handling qos at STA side based on AP WMM enable/disable
- media: [RESEND] media: dvb-frontends: Add delay to Si2168 restart
- qmi_wwan: set FLAG_SEND_ZLP to avoid network initiated disconnect
- tty: goldfish: Enable 'earlycon' only if built-in
- serial: 8250_dw: Disable clock on error
- cros_ec: fix nul-termination for firmware build info
- watchdog: Fix potential kref imbalance when opening watchdog
- watchdog: Fix kref imbalance seen if handle_boot_enabled=0
- platform/chrome: Use proper protocol transfer function
- dmaengine: zynqmp_dma: Fix race condition in the probe
- drm/tilcdc: ensure nonatomic iowrite64 is not used
- mmc: avoid removing non-removable hosts during suspend
- mmc: block: fix logical error to avoid memory leak
- /dev/mem: Add bounce buffer for copy-out
- net: phy: meson-gxl: check phy_write return value
- sfp: fix EEPROM reading in the case of non-SFF8472 SFPs
- sfp: fix non-detection of PHY
- media: s5p-mfc: Fix lock contention - request_firmware() once
- rtc: ac100: Fix multiple race conditions
- IB/ipoib: Avoid memory leak if the SA returns a different DGID
- RDMA/cma: Use correct size when writing netlink stats
- IB/umem: Fix use of npages/nmap fields
- iser-target: avoid reinitializing rdma contexts for isert commands
- bpf/cgroup: fix a verification error for a CGROUP_DEVICE type prog
- vgacon: Set VGA struct resource types
- omapdrm: panel: fix compatible vendor string for td028ttec1
- mmc: sdhci-xenon: wait 5ms after set 1.8V signal enable
- drm/omap: DMM: Check for DMM readiness after successful transaction commit
- pty: cancel pty slave port buf's work in tty_release
- coresight: Fix disabling of CoreSight TPIU
- PCI: designware-ep: Fix ->get_msi() to check MSI_EN bit
- PCI: endpoint: Fix find_first_zero_bit() usage
- PCI: rcar: Handle rcar_pcie_parse_request_of_pci_ranges() failures
- media: davinci: fix a debug printk
- clk: check ops pointer on clock register
- dt-bindings: display: panel: Fix compatible string for Toshiba LT089AC29000
- clk: use round rate to bail out early in set_rate
- pinctrl: Really force states during suspend/resume
- pinctrl: rockchip: enable clock when reading pin direction register
- iommu/vt-d: clean up pr_irq if request_threaded_irq fails
- ip6_vti: adjust vti mtu according to mtu of lower device
- ip_gre: fix error path when erspan_rcv failed
- ip_gre: fix potential memory leak in erspan_rcv
- soc: qcom: smsm: fix child-node lookup
- RDMA/ocrdma: Fix permissions for OCRDMA_RESET_STATS
- ARM: dts: aspeed-evb: Add unit name to memory node
- nfsd4: permit layoutget of executable-only files
- clk: at91: pmc: Wait for clocks when resuming
- clk: Don't touch hardware when reparenting during registration
- clk: axi-clkgen: Correctly handle nocount bit in recalc_rate()
- clk: si5351: Rename internal plls to avoid name collisions
- crypto: artpec6 - set correct iv size for gcm(aes)
- hwrng: core - Clean up RNG list when last hwrng is unregistered
- dmaengine: ti-dma-crossbar: Fix event mapping for TPCC_EVT_MUX_60_63
- IB/mlx5: Fix integer overflows in mlx5_ib_create_srq
- IB/mlx5: Fix out-of-bounds read in create_raw_packet_qp_rq
- RDMA/vmw_pvrdma: Fix usage of user response structures in ABI file
- serial: 8250_pci: Don't fail on multiport card class
- RDMA/core: Do not use invalid destination in determining port reuse
- clk: migrate the count of orphaned clocks at init
- RDMA/ucma: Fix access to non-initialized CM_ID object
- RDMA/ucma: Don't allow join attempts for unsupported AF family
- Linux 4.15.13
* Ubuntu18.04:PowerPC - Set Transparent Huge Pages (THP) by default to
"always" (LP: #1753708)
- Config: Set TRANSPARENT_HUGEPAGE_ALWAYS=y on ppc64el
* Bionic update to 4.15.12 stable release (LP: #1757465)
- x86/cpufeatures: Add Intel Total Memory Encryption cpufeature
- x86/cpufeatures: Add Intel PCONFIG cpufeature
- selftests/x86/entry_from_vm86: Exit with 1 if we fail
- selftests/x86/entry_from_vm86: Add test cases for POPF
- x86/vm86/32: Fix POPF emulation
- x86/speculation, objtool: Annotate indirect calls/jumps for objtool on
32-bit kernels
- x86/speculation: Remove Skylake C2 from Speculation Control microcode
blacklist
- KVM: x86: Fix device passthrough when SME is active
- x86/mm: Fix vmalloc_fault to use pXd_large
- parisc: Handle case where flush_cache_range is called with no context
- ALSA: pcm: Fix UAF in snd_pcm_oss_get_formats()
- ALSA: hda - Revert power_save option default value
- ALSA: seq: Fix possible UAF in snd_seq_check_queue()
- ALSA: seq: Clear client entry before deleting else at closing
- drm/nouveau/bl: Fix oops on driver unbind
- drm/nouveau/mmu: ALIGN_DOWN correct variable
- drm/amdgpu: fix prime teardown order
- drm/radeon: fix prime teardown order
- drm/amdgpu/dce: Don't turn off DP sink when disconnected
- fs: Teach path_connected to handle nfs filesystems with multiple roots.
- KVM: arm/arm64: Reduce verbosity of KVM init log
- KVM: arm/arm64: Reset mapped IRQs on VM reset
- kvm: arm/arm64: vgic-v3: Tighten synchronization for guests using v2 on v3
- KVM: arm/arm64: vgic: Don't populate multiple LRs with the same vintid
- lock_parent() needs to recheck if dentry got __dentry_kill'ed under it
- fs/aio: Add explicit RCU grace period when freeing kioctx
- fs/aio: Use RCU accessors for kioctx_table->table[]
- RDMAVT: Fix synchronization around percpu_ref
- irqchip/gic-v3-its: Ensure nr_ites >= nr_lpis
- nvme: fix subsystem multiple controllers support check
- xfs: preserve i_rdev when recycling a reclaimable inode
- btrfs: Fix NULL pointer exception in find_bio_stripe
- btrfs: add missing initialization in btrfs_check_shared
- btrfs: alloc_chunk: fix DUP stripe size handling
- btrfs: Fix use-after-free when cleaning up fs_devs with a single stale
device
- btrfs: remove spurious WARN_ON(ref->count < 0) in find_parent_nodes
- btrfs: Fix memory barriers usage with device stats counters
- scsi: qla2xxx: Fix smatch warning in qla25xx_delete_{rsp|req}_que
- scsi: qla2xxx: Fix NULL pointer access for fcport structure
- scsi: qla2xxx: Fix logo flag for qlt_free_session_done()
- scsi: qla2xxx: Fix crashes in qla2x00_probe_one on probe failure
- usb: dwc2: fix STM32F7 USB OTG HS compatible
- dt-bindings: usb: fix the STM32F7 DWC2 OTG HS core binding
- USB: gadget: udc: Add missing platform_device_put() on error in
bdc_pci_probe()
- usb: dwc3: Fix GDBGFIFOSPACE_TYPE values
- usb: dwc3: core: Power-off core/PHYs on system_suspend in host mode
- usb: dwc3: of-simple: fix oops by unbalanced clk disable call
- usb: gadget: udc: renesas_usb3: fix oops in renesas_usb3_remove()
- phy: phy-brcm-usb: Fix two DT properties to match bindings doc
- phy: phy-brcm-usb-init: Some Low Speed keyboards fail on 7271
- phy: phy-brcm-usb-init: DRD mode can cause crash on startup
- phy: phy-brcm-usb-init: Power down USB 3.0 PHY when XHCI disabled
- Linux 4.15.12
* cxl: Fix timebase synchronization status on POWER9 missing (CAPI)
(LP: #1757228)
- cxl: Fix timebase synchronization status on P9
* [Feature][GLK] Enable L2 CDP (Code and Data Prioritization) (LP: #1737873)
- x86/intel_rdt: Enumerate L2 Code and Data Prioritization (CDP) feature
- x86/intel_rdt: Add command line parameter to control L2_CDP
* [Feature] Crystal Ridge-Restrict DAX to configurations with struct page
(LP: #1751724)
- mm, dax: introduce pfn_t_special()
- ext2: auto disable dax instead of failing mount
- ext4: auto disable dax instead of failing mount
- dax: require 'struct page' by default for filesystem dax
- Config: Enable CONFIG_FS_DAX_LIMITED
* Bionic update to 4.15.11 stable release (LP: #1756978)
- x86: Treat R_X86_64_PLT32 as R_X86_64_PC32
- ASoC: sun4i-i2s: Fix RX slot number of SUN8I
- ASoC: sgtl5000: Fix suspend/resume
- ASoC: wm_adsp: For TLV controls only register TLV get/set
- ASoC: rt5651: Fix regcache sync errors on resume
- usb: host: xhci-rcar: add support for r8a77965
- xhci: Fix front USB ports on ASUS PRIME B350M-A
- xhci: fix endpoint context tracer output
- serial: sh-sci: prevent lockup on full TTY buffers
- tty/serial: atmel: add new version check for usart
- uas: fix comparison for error code
- staging: comedi: fix comedi_nsamples_left.
- staging: android: ashmem: Fix lockdep issue during llseek
- scsi: sd_zbc: Fix potential memory leak
- USB: storage: Add JMicron bridge 152d:2567 to unusual_devs.h
- usbip: vudc: fix null pointer dereference on udc->lock
- usb: quirks: add control message delay for 1b1c:1b20
- usb: usbmon: Read text within supplied buffer size
- usb: gadget: f_fs: Fix use-after-free in ffs_fs_kill_sb()
- usb: dwc3: Fix lock-up on ID change during system suspend/resume
- serial: 8250_pci: Add Brainboxes UC-260 4 port serial device
- serial: core: mark port as initialized in autoconfig
- earlycon: add reg-offset to physical address before mapping
- dm mpath: fix passing integrity data
- Revert "btrfs: use proper endianness accessors for super_copy"
- gfs2: Clean up {lookup,fillup}_metapath
- gfs2: Fixes to "Implement iomap for block_map" (2)
- drm/panel: rpi-touchscreen: propagate errors in rpi_touchscreen_i2c_read()
- spi: imx: Fix failure path leak on GPIO request error correctly
- HID: multitouch: Only look at non touch fields in first packet of a frame
- KVM: PPC: Book3S HV: Avoid shifts by negative amounts
- drm/edid: set ELD connector type in drm_edid_to_eld()
- dma-buf/fence: Fix lock inversion within dma-fence-array
- video/hdmi: Allow "empty" HDMI infoframes
- KVM: PPC: Book3S HV: Fix typo in kvmppc_hv_get_dirty_log_radix()
- HID: elo: clear BTN_LEFT mapping
- iwlwifi: mvm: rs: don't override the rate history in the search cycle
- ARM: dts: koelsch: Move cec_clock to root node
- clk: meson: gxbb: fix wrong clock for SARADC/SANA
- ARM: dts: exynos: Correct Trats2 panel reset line
- drm/amdgpu: fix get_max_engine_clock_in_mhz
- staging: rtl8822be: fix missing null check on dev_alloc_skb return
- typec: tcpm: fusb302: Resolve out of order messaging events
- USB: ledtrig-usbport: fix of-node leak
- dt-bindings: serial: Add common rs485 binding for RTS polarity
- sched: Stop switched_to_rt() from sending IPIs to offline CPUs
- sched: Stop resched_cpu() from sending IPIs to offline CPUs
- crypto: chelsio - Fix an error code in chcr_hash_dma_map()
- crypto: ecc - Fix NULL pointer deref. on no default_rng
- crypto: keywrap - Add missing ULL suffixes for 64-bit constants
- crypto: cavium - fix memory leak on info
- test_firmware: fix setting old custom fw path back on exit
- drm/vblank: Fix vblank timestamp debugs
- net: ieee802154: adf7242: Fix bug if defined DEBUG
- rtc: brcmstb-waketimer: fix error handling in brcmstb_waketmr_probe()
- perf report: Fix -D output for user metadata events
- net: xfrm: allow clearing socket xfrm policies.
- gpiolib: don't allow OPEN_DRAIN & OPEN_SOURCE flags simultaneously
- mtd: nand: fix interpretation of NAND_CMD_NONE in nand_command[_lp]()
- net: thunderx: Set max queue count taking XDP_TX into account
- ARM: dts: am335x-pepper: Fix the audio CODEC's reset pin
- ARM: dts: omap3-n900: Fix the audio CODEC's reset pin
- mtd: nand: ifc: update bufnum mask for ver >= 2.0.0
- userns: Don't fail follow_automount based on s_user_ns
- xfrm: Fix xfrm_replay_overflow_offload_esn
- leds: pm8058: Silence pointer to integer size warning
- bpf: fix stack state printing in verifier log
- power: supply: sbs-message: double left shift bug in sbsm_select()
- power: supply: ab8500_charger: Fix an error handling path
- power: supply: ab8500_charger: Bail out in case of error in
'ab8500_charger_init_hw_registers()'
- drm/etnaviv: make THERMAL selectable
- iio: adc: ina2xx: Shift bus voltage register to mask flag bits
- iio: health: max30102: Add power enable parameter to get_temp function
- ath10k: update tdls teardown state to target
- cpufreq: Fix governor module removal race
- KVM: X86: Restart the guest when insn_len is zero and SEV is enabled
- drm/amdgpu:fix random missing of FLR NOTIFY
- scsi: ses: don't ask for diagnostic pages repeatedly during probe
- pwm: stmpe: Fix wrong register offset for hwpwm=2 case
- drm/sun4i: Fix format mask in DE2 driver
- pinctrl: sh-pfc: r8a7791: Add can_clk function
- pinctrl: sh-pfc: r8a7795-es1: Fix MOD_SEL1 bit[25:24] to 0x3 when using
STP_ISEN_1_D
- perf annotate: Fix unnecessary memory allocation for s390x
- perf annotate: Fix objdump comment parsing for Intel mov dissassembly
- iwlwifi: mvm: avoid dumping assert log when device is stopped
- drm/amdgpu:fix virtual dce bug
- drm/amdgpu: fix amdgpu_sync_resv v2
- bnxt_en: Uninitialized variable in bnxt_tc_parse_actions()
- clk: qcom: msm8916: fix mnd_width for codec_digcodec
- mwifiex: cfg80211: do not change virtual interface during scan processing
- ath10k: fix invalid STS_CAP_OFFSET_MASK
- tools/usbip: fixes build with musl libc toolchain
- spi: sun6i: disable/unprepare clocks on remove
- bnxt_en: Don't print "Link speed -1 no longer supported" messages.
- scsi: core: scsi_get_device_flags_keyed(): Always return device flags
- scsi: devinfo: apply to HP XP the same flags as Hitachi VSP
- scsi: dh: add new rdac devices
- clk: renesas: r8a77970: Add LVDS clock
- staging: fsl-dpaa2/eth: Fix access to FAS field
- media: vsp1: Prevent suspending and resuming DRM pipelines
- dm raid: fix raid set size revalidation
- media: cpia2: Fix a couple off by one bugs
- media: davinci: vpif_capture: add NULL check on devm_kzalloc return value
- virtio_net: Disable interrupts if napi_complete_done rescheduled napi
- net: sched: drop qdisc_reset from dev_graft_qdisc
- veth: set peer GSO values
- drm/amdkfd: Fix memory leaks in kfd topology
- powerpc/64: Don't trace irqs-off at interrupt return to soft-disabled
context
- arm64: dts: renesas: salvator-common: Add EthernetAVB PHY reset
- agp/intel: Flush all chipset writes after updating the GGTT
- mac80211_hwsim: enforce PS_MANUAL_POLL to be set after PS_ENABLED
- mac80211: remove BUG() when interface type is invalid
- crypto: caam/qi - use correct print specifier for size_t
- ASoC: nuc900: Fix a loop timeout test
- mmc: mmc_test: Ensure command queue is disabled for testing
- Fix misannotated out-of-line _copy_to_user()
- ipvlan: add L2 check for packets arriving via virtual devices
- rcutorture/configinit: Fix build directory error message
- locking/locktorture: Fix num reader/writer corner cases
- ima: relax requiring a file signature for new files with zero length
- IB/mlx5: revisit -Wmaybe-uninitialized warning
- dmaengine: qcom_hidma: check pending interrupts
- drm/i915/glk: Disable Guc and HuC on GLK
- Linux 4.15.11
- Config: Enable CONFIG_DRM_ETNAVIV_THERMAL=y
* [FFE][Feature] KVM CLX avx512_vnni (LP: #1739665)
- KVM: x86: add support for UMIP
- KVM: Expose new cpu features to guest
* Ubuntu18.04[P9 DD2.2 Boston]:Unable to boot power8 compat mode
guests(ubuntu14.04.5) (kvm) (LP: #1756254)
- KVM: PPC: Book3S HV: Allow HPT and radix on the same core for POWER9 v2.2
* Allow hugepage backing for "p8compat" mode kvm guests (LP: #1754206)
- KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing
* [Bug][KVM][Crystal Ridge] Terrible performance of vNVDIMM on QEMU with
device DAX backend (LP: #1745899)
- x86/mm: add a function to check if a pfn is UC/UC-/WC
- KVM: MMU: consider host cache mode in MMIO page check
* nfp: read ME frequency from vNIC ctrl memory (LP: #1752818)
- nfp: add TLV capabilities to the BAR
- nfp: read ME frequency from vNIC ctrl memory
- nfp: fix TLV offset calculation
* Miscellaneous Ubuntu changes
- [Packaging] skip cloud tools packaging when not building package
- [Packaging] final-checks -- remove check for empty retpoline files
-- Kamal Mostafa <email address hidden> Wed, 04 Apr 2018 11:48:05 -0700
-
linux-aws (4.15.0-1002.2) bionic; urgency=medium
* linux-aws: 4.15.0-1002.2 -proposed tracker (LP: #1757166)
[ Ubuntu: 4.15.0-13.14 ]
* linux: 4.15.0-13.14 -proposed tracker (LP: #1756408)
* devpts: handle bind-mounts (LP: #1755857)
- SAUCE: devpts: hoist out check for DEVPTS_SUPER_MAGIC
- SAUCE: devpts: resolve devpts bind-mounts
- SAUCE: devpts: comment devpts_mntget()
- SAUCE: selftests: add devpts selftests
* [bionic][arm64] d-i: add hisi_sas_v3_hw to scsi-modules (LP: #1756103)
- d-i: add hisi_sas_v3_hw to scsi-modules
* [Bionic][ARM64] enable ROCE and HNS3 driver support for hip08 SoC
(LP: #1756097)
- RDMA/hns: Refactor eq code for hip06
- RDMA/hns: Add eq support of hip08
- RDMA/hns: Add detailed comments for mb() call
- RDMA/hns: Add rq inline data support for hip08 RoCE
- RDMA/hns: Update the usage of sr_max and rr_max field
- RDMA/hns: Set access flags of hip08 RoCE
- RDMA/hns: Filter for zero length of sge in hip08 kernel mode
- RDMA/hns: Fix QP state judgement before sending work requests
- RDMA/hns: Assign dest_qp when deregistering mr
- RDMA/hns: Fix endian problems around imm_data and rkey
- RDMA/hns: Assign the correct value for tx_cqn
- RDMA/hns: Create gsi qp in hip08
- RDMA/hns: Add gsi qp support for modifying qp in hip08
- RDMA/hns: Fill sq wqe context of ud type in hip08
- RDMA/hns: Assign zero for pkey_index of wc in hip08
- RDMA/hns: Update the verbs of polling for completion
- RDMA/hns: Set the guid for hip08 RoCE device
- net: hns3: Refactor of the reset interrupt handling logic
- net: hns3: Add reset service task for handling reset requests
- net: hns3: Refactors the requested reset & pending reset handling code
- net: hns3: Add HNS3 VF IMP(Integrated Management Proc) cmd interface
- net: hns3: Add mailbox support to VF driver
- net: hns3: Add HNS3 VF HCL(Hardware Compatibility Layer) Support
- net: hns3: Add HNS3 VF driver to kernel build framework
- net: hns3: Unified HNS3 {VF|PF} Ethernet Driver for hip08 SoC
- net: hns3: Add mailbox support to PF driver
- net: hns3: Change PF to add ring-vect binding & resetQ to mailbox
- net: hns3: Add mailbox interrupt handling to PF driver
- net: hns3: add support to query tqps number
- net: hns3: add support to modify tqps number
- net: hns3: change the returned tqp number by ethtool -x
- net: hns3: free the ring_data structrue when change tqps
- net: hns3: get rss_size_max from configuration but not hardcode
- net: hns3: add a mask initialization for mac_vlan table
- net: hns3: add vlan offload config command
- net: hns3: add ethtool related offload command
- net: hns3: add handling vlan tag offload in bd
- net: hns3: cleanup mac auto-negotiation state query
- net: hns3: fix for getting auto-negotiation state in hclge_get_autoneg
- net: hns3: add support for set_pauseparam
- net: hns3: add support to update flow control settings after autoneg
- net: hns3: add Asym Pause support to phy default features
- net: hns3: add support for querying advertised pause frame by ethtool ethx
- net: hns3: Increase the default depth of bucket for TM shaper
- net: hns3: change TM sched mode to TC-based mode when SRIOV enabled
- net: hns3: hns3_get_channels() can be static
- net: hns3: Add ethtool interface for vlan filter
- net: hns3: Disable VFs change rxvlan offload status
- net: hns3: Unify the strings display of packet statistics
- net: hns3: Fix spelling errors
- net: hns3: Remove repeat statistic of rx_errors
- net: hns3: Modify the update period of packet statistics
- net: hns3: Mask the packet statistics query when NIC is down
- net: hns3: Fix an error of total drop packet statistics
- net: hns3: Fix a loop index error of tqp statistics query
- net: hns3: Fix an error macro definition of HNS3_TQP_STAT
- net: hns3: Remove a useless member of struct hns3_stats
- net: hns3: Add packet statistics of netdev
- net: hns3: Fix a response data read error of tqp statistics query
- net: hns3: fix for updating fc_mode_last_time
- net: hns3: fix for setting MTU
- net: hns3: fix for changing MTU
- net: hns3: add MTU initialization for hardware
- net: hns3: fix for not setting pause parameters
- net: hns3: remove redundant semicolon
- net: hns3: Add more packet size statisctics
- Revert "net: hns3: Add packet statistics of netdev"
- net: hns3: report the function type the same line with hns3_nic_get_stats64
- net: hns3: add ethtool_ops.get_channels support for VF
- net: hns3: remove TSO config command from VF driver
- net: hns3: add ethtool_ops.get_coalesce support to PF
- net: hns3: add ethtool_ops.set_coalesce support to PF
- net: hns3: refactor interrupt coalescing init function
- net: hns3: refactor GL update function
- net: hns3: remove unused GL setup function
- net: hns3: change the unit of GL value macro
- net: hns3: add int_gl_idx setup for TX and RX queues
- net: hns3: add feature check when feature changed
- net: hns3: check for NULL function pointer in hns3_nic_set_features
- net: hns: Fix for variable may be used uninitialized warnings
- net: hns3: add support for get_regs
- net: hns3: add manager table initialization for hardware
- net: hns3: add ethtool -p support for fiber port
- net: hns3: add net status led support for fiber port
- net: hns3: converting spaces into tabs to avoid checkpatch.pl warning
- net: hns3: add get/set_coalesce support to VF
- net: hns3: add int_gl_idx setup for VF
- [Config]: enable CONFIG_HNS3_HCLGEVF as module.
* [Bionic][ARM64] add RAS extension and SDEI features (LP: #1756096)
- KVM: arm64: Store vcpu on the stack during __guest_enter()
- KVM: arm/arm64: Convert kvm_host_cpu_state to a static per-cpu allocation
- KVM: arm64: Change hyp_panic()s dependency on tpidr_el2
- arm64: alternatives: use tpidr_el2 on VHE hosts
- KVM: arm64: Stop save/restoring host tpidr_el1 on VHE
- Docs: dt: add devicetree binding for describing arm64 SDEI firmware
- firmware: arm_sdei: Add driver for Software Delegated Exceptions
- arm64: Add vmap_stack header file
- arm64: uaccess: Add PAN helper
- arm64: kernel: Add arch-specific SDEI entry code and CPU masking
- firmware: arm_sdei: Add support for CPU and system power states
- firmware: arm_sdei: add support for CPU private events
- arm64: acpi: Remove __init from acpi_psci_use_hvc() for use by SDEI
- firmware: arm_sdei: Discover SDEI support via ACPI
- arm64: sysreg: Move to use definitions for all the SCTLR bits
- arm64: cpufeature: Detect CPU RAS Extentions
- arm64: kernel: Survive corrected RAS errors notified by SError
- arm64: Unconditionally enable IESB on exception entry/return for firmware-
first
- arm64: kernel: Prepare for a DISR user
- KVM: arm/arm64: mask/unmask daif around VHE guests
- KVM: arm64: Set an impdef ESR for Virtual-SError using VSESR_EL2.
- KVM: arm64: Save/Restore guest DISR_EL1
- KVM: arm64: Save ESR_EL2 on guest SError
- KVM: arm64: Handle RAS SErrors from EL1 on guest exit
- KVM: arm64: Handle RAS SErrors from EL2 on guest exit
- KVM: arm64: Emulate RAS error registers and set HCR_EL2's TERR & TEA
- [Config]: enable RAS_EXTN and ARM_SDE_INTERFACE
* [Bionic][ARM64] PCI and SAS driver patches for hip08 SoCs (LP: #1756094)
- scsi: hisi_sas: fix dma_unmap_sg() parameter
- scsi: ata: enhance the definition of SET MAX feature field value
- scsi: hisi_sas: relocate clearing ITCT and freeing device
- scsi: hisi_sas: optimise port id refresh function
- scsi: hisi_sas: some optimizations of host controller reset
- scsi: hisi_sas: modify hisi_sas_dev_gone() for reset
- scsi: hisi_sas: add an mechanism to do reset work synchronously
- scsi: hisi_sas: change ncq process for v3 hw
- scsi: hisi_sas: add RAS feature for v3 hw
- scsi: hisi_sas: add some print to enhance debugging
- scsi: hisi_sas: improve int_chnl_int_v2_hw() consistency with v3 hw
- scsi: hisi_sas: add v2 hw port AXI error handling support
- scsi: hisi_sas: use an general way to delay PHY work
- scsi: hisi_sas: do link reset for some CHL_INT2 ints
- scsi: hisi_sas: judge result of internal abort
- scsi: hisi_sas: add internal abort dev in some places
- scsi: hisi_sas: fix SAS_QUEUE_FULL problem while running IO
- scsi: hisi_sas: re-add the lldd_port_deformed()
- scsi: hisi_sas: add v3 hw suspend and resume
- scsi: hisi_sas: Change frame type for SET MAX commands
- scsi: hisi_sas: make local symbol host_attrs static
- scsi: hisi_sas: fix a bug in hisi_sas_dev_gone()
- SAUCE: scsi: hisi_sas: config for hip08 ES
- SAUCE: scsi: hisi_sas: export device table of v3 hw to userspace
- PM / core: Add LEAVE_SUSPENDED driver flag
- PCI / PM: Support for LEAVE_SUSPENDED driver flag
- PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI
- PCI/ASPM: Calculate LTR_L1.2_THRESHOLD from device characteristics
- PCI/ASPM: Enable Latency Tolerance Reporting when supported
- PCI/ASPM: Unexport internal ASPM interfaces
- PCI: Make PCI_SCAN_ALL_PCIE_DEVS work for Root as well as Downstream Ports
- PCI/AER: Return error if AER is not supported
- PCI/DPC: Enable DPC only if AER is available
* [CVE] Spectre: System Z {kernel} UBUNTU18.04 (LP: #1754580)
- s390: scrub registers on kernel entry and KVM exit
- s390: add optimized array_index_mask_nospec
- s390/alternative: use a copy of the facility bit mask
- s390: add options to change branch prediction behaviour for the kernel
- s390: run user space and KVM guests with modified branch prediction
- s390: introduce execute-trampolines for branches
- s390: Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*)
- s390: do not bypass BPENTER for interrupt system calls
- s390/entry.S: fix spurious zeroing of r0
* s390/crypto: Fix kernel crash on aes_s390 module remove (LP: #1753424)
- SAUCE: s390/crypto: Fix kernel crash on aes_s390 module remove.
* [Feature]Update Ubuntu 18.04 lpfc FC driver with 32/64GB HBA support and bug
fixes (LP: #1752182)
- scsi: lpfc: FLOGI failures are reported when connected to a private loop.
- scsi: lpfc: Expand WQE capability of every NVME hardware queue
- scsi: lpfc: Handle XRI_ABORTED_CQE in soft IRQ
- scsi: lpfc: Fix NVME LS abort_xri
- scsi: lpfc: Raise maximum NVME sg list size for 256 elements
- scsi: lpfc: Driver fails to detect direct attach storage array
- scsi: lpfc: Fix display for debugfs queInfo
- scsi: lpfc: Adjust default value of lpfc_nvmet_mrq
- scsi: lpfc: Fix ndlp ref count for pt2pt mode issue RSCN
- scsi: lpfc: Linux LPFC driver does not process all RSCNs
- scsi: lpfc: correct port registrations with nvme_fc
- scsi: lpfc: Correct driver deregistrations with host nvme transport
- scsi: lpfc: Fix crash during driver unload with running nvme traffic
- scsi: lpfc: Fix driver handling of nvme resources during unload
- scsi: lpfc: small sg cnt cleanup
- scsi: lpfc: Fix random heartbeat timeouts during heavy IO
- scsi: lpfc: update driver version to 11.4.0.5
- scsi: lpfc: Fix -EOVERFLOW behavior for NVMET and defer_rcv
- scsi: lpfc: Fix receive PRLI handling
- scsi: lpfc: Increase SCSI CQ and WQ sizes.
- scsi: lpfc: Fix SCSI LUN discovery when SCSI and NVME enabled
- scsi: lpfc: Fix issues connecting with nvme initiator
- scsi: lpfc: Fix infinite wait when driver unregisters a remote NVME port.
- scsi: lpfc: Beef up stat counters for debug
- scsi: lpfc: update driver version to 11.4.0.6
- scsi: lpfc: correct sg_seg_cnt attribute min vs default
- scsi: scsi_transport_fc: fix typos on 64/128 GBit define names
- scsi: lpfc: don't dereference localport before it has been null checked
- scsi: lpfc: fix a couple of minor indentation issues
- treewide: Use DEVICE_ATTR_RW
- treewide: Use DEVICE_ATTR_RO
- treewide: Use DEVICE_ATTR_WO
- scsi: lpfc: Fix frequency of Release WQE CQEs
- scsi: lpfc: Increase CQ and WQ sizes for SCSI
- scsi: lpfc: move placement of target destroy on driver detach
- scsi: lpfc: correct debug counters for abort
- scsi: lpfc: Add WQ Full Logic for NVME Target
- scsi: lpfc: Fix PRLI handling when topology type changes
- scsi: lpfc: Fix IO failure during hba reset testing with nvme io.
- scsi: lpfc: Fix RQ empty firmware trap
- scsi: lpfc: Allow set of maximum outstanding SCSI cmd limit for a target
- scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP testing
- scsi: lpfc: Fix issue_lip if link is disabled
- scsi: lpfc: Indicate CONF support in NVMe PRLI
- scsi: lpfc: Fix SCSI io host reset causing kernel crash
- scsi: lpfc: Validate adapter support for SRIU option
- scsi: lpfc: Fix header inclusion in lpfc_nvmet
- scsi: lpfc: Treat SCSI Write operation Underruns as an error
- scsi: lpfc: Fix nonrecovery of NVME controller after cable swap.
- scsi: lpfc: update driver version to 11.4.0.7
- scsi: lpfc: Update 11.4.0.7 modified files for 2018 Copyright
- scsi: lpfc: Rework lpfc to allow different sli4 cq and eq handlers
- scsi: lpfc: Rework sli4 doorbell infrastructure
- scsi: lpfc: Add SLI-4 if_type=6 support to the code base
- scsi: lpfc: Add push-to-adapter support to sli4
- scsi: lpfc: Add PCI Ids for if_type=6 hardware
- scsi: lpfc: Add 64G link speed support
- scsi: lpfc: Add if_type=6 support for cycling valid bits
- scsi: lpfc: Enable fw download on if_type=6 devices
- scsi: lpfc: Add embedded data pointers for enhanced performance
- scsi: lpfc: Fix nvme embedded io length on new hardware
- scsi: lpfc: Work around NVME cmd iu SGL type
- scsi: lpfc: update driver version to 12.0.0.0
- scsi: lpfc: Change Copyright of 12.0.0.0 modified files to 2018
- scsi: lpfc: use __raw_writeX on DPP copies
- scsi: lpfc: Add missing unlock in WQ full logic
* CVE-2018-8043
- net: phy: mdio-bcm-unimac: fix potential NULL dereference in
unimac_mdio_probe()
* Bionic update to 4.15.10 stable release (LP: #1756100)
- Revert "UBUNTU: SAUCE: ALSA: hda/realtek - Add support headset mode for DELL
WYSE"
- RDMA/ucma: Limit possible option size
- RDMA/ucma: Check that user doesn't overflow QP state
- RDMA/mlx5: Fix integer overflow while resizing CQ
- bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc()
- IB/uverbs: Improve lockdep_check
- mac80211_hwsim: don't use WQ_MEM_RECLAIM
- net/smc: fix NULL pointer dereference on sock_create_kern() error path
- regulator: stm32-vrefbuf: fix check on ready flag
- drm/i915: Check for fused or unused pipes
- drm/i915/audio: fix check for av_enc_map overflow
- drm/i915: Fix rsvd2 mask when out-fence is returned
- drm/i915: Clear the in-use marker on execbuf failure
- drm/i915: Disable DC states around GMBUS on GLK
- drm/i915: Update watermark state correctly in sanitize_watermarks
- drm/i915: Try EDID bitbanging on HDMI after failed read
- drm/i915/perf: fix perf stream opening lock
- scsi: core: Avoid that ATA error handling can trigger a kernel hang or oops
- scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS
- drm/i915: Always call to intel_display_set_init_power() in resume_early.
- workqueue: Allow retrieval of current task's work struct
- drm: Allow determining if current task is output poll worker
- drm/nouveau: Fix deadlock on runtime suspend
- drm/radeon: Fix deadlock on runtime suspend
- drm/amdgpu: Fix deadlock on runtime suspend
- drm/nouveau: prefer XBGR2101010 for addfb ioctl
- drm/amd/powerplay/smu7: allow mclk switching with no displays
- drm/amd/powerplay/vega10: allow mclk switching with no displays
- Revert "drm/radeon/pm: autoswitch power state when in balanced mode"
- drm/amd/display: check for ipp before calling cursor operations
- drm/radeon: insist on 32-bit DMA for Cedar on PPC64/PPC64LE
- drm/amd/powerplay: fix power over limit on Fiji
- drm/amd/display: Default HDMI6G support to true. Log VBIOS table error.
- drm/amdgpu: used cached pcie gen info for SI (v2)
- drm/amdgpu: Notify sbios device ready before send request
- drm/radeon: fix KV harvesting
- drm/amdgpu: fix KV harvesting
- drm/amdgpu:Correct max uvd handles
- drm/amdgpu:Always save uvd vcpu_bo in VM Mode
- ovl: redirect_dir=nofollow should not follow redirect for opaque lower
- MIPS: BMIPS: Do not mask IPIs during suspend
- MIPS: ath25: Check for kzalloc allocation failure
- MIPS: OCTEON: irq: Check for null return on kzalloc allocation
- PCI: dwc: Fix enumeration end when reaching root subordinate
- Input: matrix_keypad - fix race when disabling interrupts
- Revert "Input: synaptics - Lenovo Thinkpad T460p devices should use RMI"
- bug: use %pB in BUG and stack protector failure
- lib/bug.c: exclude non-BUG/WARN exceptions from report_bug()
- mm/memblock.c: hardcode the end_pfn being -1
- Documentation/sphinx: Fix Directive import error
- loop: Fix lost writes caused by missing flag
- virtio_ring: fix num_free handling in error case
- KVM: s390: fix memory overwrites when not using SCA entries
- arm64: mm: fix thinko in non-global page table attribute check
- IB/core: Fix missing RDMA cgroups release in case of failure to register
device
- Revert "nvme: create 'slaves' and 'holders' entries for hidden controllers"
- kbuild: Handle builtin dtb file names containing hyphens
- dm bufio: avoid false-positive Wmaybe-uninitialized warning
- IB/mlx5: Fix incorrect size of klms in the memory region
- bcache: fix crashes in duplicate cache device register
- bcache: don't attach backing with duplicate UUID
- x86/MCE: Save microcode revision in machine check records
- x86/MCE: Serialize sysfs changes
- perf tools: Fix trigger class trigger_on()
- x86/spectre_v2: Don't check microcode versions when running under
hypervisors
- ALSA: hda/realtek - Add support headset mode for DELL WYSE
- ALSA: hda/realtek - Add headset mode support for Dell laptop
- ALSA: hda/realtek: Limit mic boost on T480
- ALSA: hda/realtek - Fix dock line-out volume on Dell Precision 7520
- ALSA: hda/realtek - Make dock sound work on ThinkPad L570
- ALSA: seq: More protection for concurrent write and ioctl races
- ALSA: hda: add dock and led support for HP EliteBook 820 G3
- ALSA: hda: add dock and led support for HP ProBook 640 G2
- scsi: qla2xxx: Fix NULL pointer crash due to probe failure
- scsi: qla2xxx: Fix recursion while sending terminate exchange
- dt-bindings: Document mti,mips-cpc binding
- MIPS: CPC: Map registers using DT in mips_cpc_default_phys_base()
- nospec: Kill array_index_nospec_mask_check()
- nospec: Include <asm/barrier.h> dependency
- x86/entry: Reduce the code footprint of the 'idtentry' macro
- x86/entry/64: Use 'xorl' for faster register clearing
- x86/mm: Remove stale comment about KMEMCHECK
- x86/asm: Improve how GEN_*_SUFFIXED_RMWcc() specify clobbers
- x86/IO-APIC: Avoid warning in 32-bit builds
- x86/LDT: Avoid warning in 32-bit builds with older gcc
- x86-64/realmode: Add instruction suffix
- Revert "x86/retpoline: Simplify vmexit_fill_RSB()"
- x86/speculation: Use IBRS if available before calling into firmware
- x86/retpoline: Support retpoline builds with Clang
- x86/speculation, objtool: Annotate indirect calls/jumps for objtool
- x86/speculation: Move firmware_restrict_branch_speculation_*() from C to CPP
- x86/paravirt, objtool: Annotate indirect calls
- x86/boot, objtool: Annotate indirect jump in secondary_startup_64()
- x86/mm/sme, objtool: Annotate indirect call in sme_encrypt_execute()
- objtool: Use existing global variables for options
- objtool: Add retpoline validation
- objtool: Add module specific retpoline rules
- objtool, retpolines: Integrate objtool with retpoline support more closely
- objtool: Fix another switch table detection issue
- objtool: Fix 32-bit build
- x86/kprobes: Fix kernel crash when probing .entry_trampoline code
- watchdog: hpwdt: SMBIOS check
- watchdog: hpwdt: Check source of NMI
- watchdog: hpwdt: fix unused variable warning
- watchdog: hpwdt: Remove legacy NMI sourcing.
- netfilter: add back stackpointer size checks
- netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation
- netfilter: xt_hashlimit: fix lock imbalance
- netfilter: x_tables: fix missing timer initialization in xt_LED
- netfilter: nat: cope with negative port range
- netfilter: IDLETIMER: be syzkaller friendly
- netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
- netfilter: bridge: ebt_among: add missing match size checks
- netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
- netfilter: use skb_to_full_sk in ip6_route_me_harder
- tpm_tis: Move ilb_base_addr to tpm_tis_data
- tpm: Keep CLKRUN enabled throughout the duration of transmit_cmd()
- tpm: delete the TPM_TIS_CLK_ENABLE flag
- tpm: remove unused variables
- tpm: only attempt to disable the LPC CLKRUN if is already enabled
- x86/xen: Calculate __max_logical_packages on PV domains
- scsi: qla2xxx: Fix system crash for Notify ack timeout handling
- scsi: qla2xxx: Fix gpnid error processing
- scsi: qla2xxx: Move session delete to driver work queue
- scsi: qla2xxx: Skip IRQ affinity for Target QPairs
- scsi: qla2xxx: Fix re-login for Nport Handle in use
- scsi: qla2xxx: Retry switch command on time out
- scsi: qla2xxx: Serialize GPNID for multiple RSCN
- scsi: qla2xxx: Fix login state machine stuck at GPDB
- scsi: qla2xxx: Fix NPIV host cleanup in target mode
- scsi: qla2xxx: Relogin to target port on a cable swap
- scsi: qla2xxx: Fix Relogin being triggered too fast
- scsi: qla2xxx: Fix PRLI state check
- scsi: qla2xxx: Fix abort command deadlock due to spinlock
- scsi: qla2xxx: Replace fcport alloc with qla2x00_alloc_fcport
- scsi: qla2xxx: Fix scan state field for fcport
- scsi: qla2xxx: Clear loop id after delete
- scsi: qla2xxx: Defer processing of GS IOCB calls
- scsi: qla2xxx: Remove aborting ELS IOCB call issued as part of timeout.
- scsi: qla2xxx: Fix system crash in qlt_plogi_ack_unref
- scsi: qla2xxx: Fix memory leak in dual/target mode
- NFS: Fix an incorrect type in struct nfs_direct_req
- pNFS: Prevent the layout header refcount going to zero in pnfs_roc()
- NFS: Fix unstable write completion
- Linux 4.15.10
* Bionic update to 4.15.10 stable release (LP: #1756100) // CVE-2018-1000004.
- ALSA: seq: Don't allow resizing pool in use
* nfp: prioritize stats updates (LP: #1752061)
- nfp: flower: prioritize stats updates
* Ubuntu 18.04 - Kernel crash on nvme subsystem-reset /dev/nvme0 (Bolt / NVMe)
(LP: #1753371)
- nvme-pci: Fix EEH failure on ppc
* sbsa watchdog crashes thunderx2 system (LP: #1755595)
- watchdog: sbsa: use 32-bit read for WCV
* KVM: s390: add vcpu stat counters for many instruction (LP: #1755132)
- KVM: s390: diagnoses are instructions as well
- KVM: s390: add vcpu stat counters for many instruction
* CIFS SMB2/SMB3 does not work for domain based DFS (LP: #1747572)
- CIFS: make IPC a regular tcon
- CIFS: use tcon_ipc instead of use_ipc parameter of SMB2_ioctl
- CIFS: dump IPC tcon in debug proc file
* i2c-thunderx: erroneous error message "unhandled state: 0" (LP: #1754076)
- i2c: octeon: Prevent error message on bus error
* Boston-LC:bos1u1: Stress test on Qlogic Fibre Channel on Ubuntu KVM guest
that caused KVM host crashed in qlt_free_session_done call (LP: #1750441)
- scsi: qla2xxx: Fix memory corruption during hba reset test
* Ubuntu 18.04 - Performance: Radix page fault handler bug in KVM
(LP: #1752236)
- KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler
* Fix ARC hit rate (LP: #1755158)
- SAUCE: Fix ARC hit rate (LP: #1755158)
* Bionic update to 4.15.9 stable release (LP: #1755275)
- bpf: fix mlock precharge on arraymaps
- bpf: fix memory leak in lpm_trie map_free callback function
- bpf: fix rcu lockdep warning for lpm_trie map_free callback
- bpf, x64: implement retpoline for tail call
- bpf, arm64: fix out of bounds access in tail call
- bpf: add schedule points in percpu arrays management
- bpf: allow xadd only on aligned memory
- bpf, ppc64: fix out of bounds access in tail call
- scsi: mpt3sas: fix oops in error handlers after shutdown/unload
- scsi: mpt3sas: wait for and flush running commands on shutdown/unload
- KVM: x86: fix backward migration with async_PF
- Linux 4.15.9
* Bionic update to 4.15.8 stable release (LP: #1755179)
- hrtimer: Ensure POSIX compliance (relative CLOCK_REALTIME hrtimers)
- ipmi_si: Fix error handling of platform device
- platform/x86: dell-laptop: Allocate buffer on heap rather than globally
- powerpc/pseries: Enable RAS hotplug events later
- Bluetooth: btusb: Use DMI matching for QCA reset_resume quirking
- ixgbe: fix crash in build_skb Rx code path
- tpm: st33zp24: fix potential buffer overruns caused by bit glitches on the
bus
- tpm: fix potential buffer overruns caused by bit glitches on the bus
- tpm_i2c_infineon: fix potential buffer overruns caused by bit glitches on
the bus
- tpm_i2c_nuvoton: fix potential buffer overruns caused by bit glitches on the
bus
- tpm_tis: fix potential buffer overruns caused by bit glitches on the bus
- ALSA: usb-audio: Add a quirck for B&W PX headphones
- ALSA: control: Fix memory corruption risk in snd_ctl_elem_read
- ALSA: x86: Fix missing spinlock and mutex initializations
- ALSA: hda: Add a power_save blacklist
- ALSA: hda - Fix pincfg at resume on Lenovo T470 dock
- mmc: sdhci-pci: Fix S0i3 for Intel BYT-based controllers
- mmc: dw_mmc-k3: Fix out-of-bounds access through DT alias
- mmc: dw_mmc: Avoid accessing registers in runtime suspended state
- mmc: dw_mmc: Factor out dw_mci_init_slot_caps
- mmc: dw_mmc: Fix out-of-bounds access for slot's caps
- timers: Forward timer base before migrating timers
- parisc: Use cr16 interval timers unconditionally on qemu
- parisc: Reduce irq overhead when run in qemu
- parisc: Fix ordering of cache and TLB flushes
- parisc: Hide virtual kernel memory layout
- btrfs: use proper endianness accessors for super_copy
- block: fix the count of PGPGOUT for WRITE_SAME
- block: kyber: fix domain token leak during requeue
- block: pass inclusive 'lend' parameter to truncate_inode_pages_range
- vfio: disable filesystem-dax page pinning
- cpufreq: s3c24xx: Fix broken s3c_cpufreq_init()
- dax: fix vma_is_fsdax() helper
- direct-io: Fix sleep in atomic due to sync AIO
- x86/xen: Zero MSR_IA32_SPEC_CTRL before suspend
- x86/platform/intel-mid: Handle Intel Edison reboot correctly
- x86/cpu_entry_area: Sync cpu_entry_area to initial_page_table
- bridge: check brport attr show in brport_show
- fib_semantics: Don't match route with mismatching tclassid
- hdlc_ppp: carrier detect ok, don't turn off negotiation
- ipv6 sit: work around bogus gcc-8 -Wrestrict warning
- net: amd-xgbe: fix comparison to bitshift when dealing with a mask
- net: ethernet: ti: cpsw: fix net watchdog timeout
- net: fix race on decreasing number of TX queues
- net: ipv4: don't allow setting net.ipv4.route.min_pmtu below 68
- netlink: ensure to loop over all netns in genlmsg_multicast_allns()
- net: sched: report if filter is too large to dump
- ppp: prevent unregistered channels from connecting to PPP units
- sctp: verify size of a new chunk in _sctp_make_chunk()
- udplite: fix partial checksum initialization
- net/mlx5e: Fix TCP checksum in LRO buffers
- sctp: fix dst refcnt leak in sctp_v4_get_dst
- mlxsw: spectrum_switchdev: Check success of FDB add operation
- net/mlx5e: Specify numa node when allocating drop rq
- net: phy: fix phy_start to consider PHY_IGNORE_INTERRUPT
- tcp: Honor the eor bit in tcp_mtu_probe
- rxrpc: Fix send in rxrpc_send_data_packet()
- tcp_bbr: better deal with suboptimal GSO
- doc: Change the min default value of tcp_wmem/tcp_rmem.
- net/mlx5e: Fix loopback self test when GRO is off
- net_sched: gen_estimator: fix broken estimators based on percpu stats
- net/sched: cls_u32: fix cls_u32 on filter replace
- sctp: do not pr_err for the duplicated node in transport rhlist
- mlxsw: spectrum_router: Fix error path in mlxsw_sp_vr_create
- net: ipv4: Set addr_type in hash_keys for forwarded case
- sctp: fix dst refcnt leak in sctp_v6_get_dst()
- bridge: Fix VLAN reference count problem
- net/mlx5e: Verify inline header size do not exceed SKB linear size
- tls: Use correct sk->sk_prot for IPV6
- amd-xgbe: Restore PCI interrupt enablement setting on resume
- cls_u32: fix use after free in u32_destroy_key()
- mlxsw: spectrum_router: Do not unconditionally clear route offload
indication
- netlink: put module reference if dump start fails
- tcp: purge write queue upon RST
- tuntap: correctly add the missing XDP flush
- tuntap: disable preemption during XDP processing
- virtio-net: disable NAPI only when enabled during XDP set
- cxgb4: fix trailing zero in CIM LA dump
- net/mlx5: Fix error handling when adding flow rules
- net: phy: Restore phy_resume() locking assumption
- tcp: tracepoint: only call trace_tcp_send_reset with full socket
- l2tp: don't use inet_shutdown on tunnel destroy
- l2tp: don't use inet_shutdown on ppp session destroy
- l2tp: fix races with tunnel socket close
- l2tp: fix race in pppol2tp_release with session object destroy
- l2tp: fix tunnel lookup use-after-free race
- s390/qeth: fix underestimated count of buffer elements
- s390/qeth: fix SETIP command handling
- s390/qeth: fix overestimated count of buffer elements
- s390/qeth: fix IP removal on offline cards
- s390/qeth: fix double-free on IP add/remove race
- Revert "s390/qeth: fix using of ref counter for rxip addresses"
- s390/qeth: fix IP address lookup for L3 devices
- s390/qeth: fix IPA command submission race
- tcp: revert F-RTO middle-box workaround
- tcp: revert F-RTO extension to detect more spurious timeouts
- blk-mq: don't call io sched's .requeue_request when requeueing rq to
->dispatch
- media: m88ds3103: don't call a non-initalized function
- EDAC, sb_edac: Fix out of bound writes during DIMM configuration on KNL
- KVM: s390: take care of clock-comparator sign control
- KVM: s390: provide only a single function for setting the tod (fix SCK)
- KVM: s390: consider epoch index on hotplugged CPUs
- KVM: s390: consider epoch index on TOD clock syncs
- nospec: Allow index argument to have const-qualified type
- x86/mm: Fix {pmd,pud}_{set,clear}_flags()
- ARM: orion: fix orion_ge00_switch_board_info initialization
- ARM: dts: rockchip: Remove 1.8 GHz operation point from phycore som
- ARM: mvebu: Fix broken PL310_ERRATA_753970 selects
- ARM: kvm: fix building with gcc-8
- KVM: X86: Fix SMRAM accessing even if VM is shutdown
- KVM: mmu: Fix overlap between public and private memslots
- KVM/x86: Remove indirect MSR op calls from SPEC_CTRL
- KVM: x86: move LAPIC initialization after VMCS creation
- KVM/VMX: Optimize vmx_vcpu_run() and svm_vcpu_run() by marking the RDMSR
path as unlikely()
- KVM: x86: fix vcpu initialization with userspace lapic
- KVM/x86: remove WARN_ON() for when vm_munmap() fails
- ACPI / bus: Parse tables as term_list for Dell XPS 9570 and Precision M5530
- ARM: dts: LogicPD SOM-LV: Fix I2C1 pinmux
- ARM: dts: LogicPD Torpedo: Fix I2C1 pinmux
- powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID
- md: only allow remove_and_add_spares when no sync_thread running.
- platform/x86: dell-laptop: fix kbd_get_state's request value
- Linux 4.15.8
* ZFS setgid broken on 0.7 (LP: #1753288)
- SAUCE: Fix ZFS setgid
* /proc/kallsyms prints "(null)" for null addresses in 4.15 (LP: #1754297)
- vsprintf: avoid misleading "(null)" for %px
* Miscellaneous Ubuntu changes
- d-i: Add netsec to nic-modules
- [Config] fix up retpoline abi files
- [Config] set NOBP and expoline options for s390
[ Ubuntu: 4.15.0-12.13 ]
* linux: 4.15.0-12.13 -proposed tracker (LP: #1754059)
* CONFIG_EFI=y on armhf (LP: #1726362)
- [Config] CONFIG_EFI=y on armhf, reconcile secureboot EFI settings
* ppc64el: Support firmware disable of RFI flush (LP: #1751994)
- powerpc/pseries: Support firmware disable of RFI flush
- powerpc/powernv: Support firmware disable of RFI flush
* [Feature] CFL/CNL (PCH:CNP-H): New GPIO Commit added (GPIO Driver needed)
(LP: #1751714)
- gpio / ACPI: Drop unnecessary ACPI GPIO to Linux GPIO translation
- pinctrl: intel: Allow custom GPIO base for pad groups
- pinctrl: cannonlake: Align GPIO number space with Windows
* [Feature] Add xHCI debug device support in the driver (LP: #1730832)
- usb: xhci: Make some static functions global
- usb: xhci: Add DbC support in xHCI driver
- [Config] USB_XHCI_DBGCAP=y for commit mainline dfba2174dc42.
* [SRU] Lenovo E41 Mic mute hotkey is not responding (LP: #1753347)
- platform/x86: ideapad-laptop: Increase timeout to wait for EC answer
* headset mic can't be detected on two Dell machines (LP: #1748807)
- ALSA: hda - Fix a wrong FIXUP for alc289 on Dell machines
* hisi_sas: Add disk LED support (LP: #1752695)
- scsi: hisi_sas: directly attached disk LED feature for v2 hw
* [Feature] [Graphics]Whiskey Lake (Coffelake-U 4+2) new PCI Device ID adds
(LP: #1742561)
- drm/i915/cfl: Adding more Coffee Lake PCI IDs.
* [Bug] [USB Function][CFL-CNL PCH]Stall Error and USB Transaction Error in
trace, Disable of device-initiated U1/U2 failed and rebind failed: -517
during suspend/resume with usb storage. (LP: #1730599)
- usb: Don't print a warning if interface driver rebind is deferred at resume
* retpoline: ignore %cs:0xNNN constant indirections (LP: #1752655)
- [Packaging] retpoline -- elide %cs:0xNNNN constants on i386
- [Config] retpoline -- clean up i386 retpoline files
* hisilicon hibmc regression due to ea642c3216cb ("drm/ttm: add io_mem_pfn
callback") (LP: #1738334)
- drm/ttm: add ttm_bo_io_mem_pfn to check io_mem_pfn
* [Asus UX360UA] battery status in unity-panel is not changing when battery is
being charged (LP: #1661876) // AC adapter status not detected on Asus
ZenBook UX410UAK (LP: #1745032)
- ACPI / battery: Add quirk for Asus UX360UA and UX410UAK
* ASUS UX305LA - Battery state not detected correctly (LP: #1482390)
- ACPI / battery: Add quirk for Asus GL502VSK and UX305LA
* [18.04 FEAT] Automatically detect layer2 setting in the qeth device driver
(LP: #1747639)
- s390/diag: add diag26c support for VNIC info
- s390/qeth: support early setup for z/VM NICs
* Bionic update to v4.15.7 stable release (LP: #1752317)
- netfilter: drop outermost socket lock in getsockopt()
- arm64: mm: don't write garbage into TTBR1_EL1 register
- kconfig.h: Include compiler types to avoid missed struct attributes
- MIPS: boot: Define __ASSEMBLY__ for its.S build
- xtensa: fix high memory/reserved memory collision
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info
- MIPS: Drop spurious __unused in struct compat_flock
- cfg80211: fix cfg80211_beacon_dup
- i2c: designware: must wait for enable
- i2c: bcm2835: Set up the rising/falling edge delays
- X.509: fix BUG_ON() when hash algorithm is unsupported
- X.509: fix NULL dereference when restricting key with unsupported_sig
- PKCS#7: fix certificate chain verification
- PKCS#7: fix certificate blacklisting
- extcon: int3496: process id-pin first so that we start with the right status
- genirq/matrix: Handle CPU offlining proper
- RDMA/uverbs: Protect from races between lookup and destroy of uobjects
- RDMA/uverbs: Protect from command mask overflow
- RDMA/uverbs: Fix bad unlock balance in ib_uverbs_close_xrcd
- RDMA/uverbs: Fix circular locking dependency
- RDMA/uverbs: Sanitize user entered port numbers prior to access it
- iio: adc: stm32: fix stm32h7_adc_enable error handling
- iio: srf08: fix link error "devm_iio_triggered_buffer_setup" undefined
- iio: buffer: check if a buffer has been set up when poll is called
- iio: adis_lib: Initialize trigger before requesting interrupt
- Kbuild: always define endianess in kconfig.h
- x86/apic/vector: Handle vector release on CPU unplug correctly
- x86/oprofile: Fix bogus GCC-8 warning in nmi_setup()
- mm, swap, frontswap: fix THP swap if frontswap enabled
- mm: don't defer struct page initialization for Xen pv guests
- uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define
- irqchip/gic-v3: Use wmb() instead of smb_wmb() in gic_raise_softirq()
- irqchip/mips-gic: Avoid spuriously handling masked interrupts
- PCI/cxgb4: Extend T3 PCI quirk to T4+ devices
- net: thunderbolt: Tear down connection properly on suspend
- net: thunderbolt: Run disconnect flow asynchronously when logout is received
- ohci-hcd: Fix race condition caused by ohci_urb_enqueue() and
io_watchdog_func()
- usb: ohci: Proper handling of ed_rm_list to handle race condition between
usb_kill_urb() and finish_unlinks()
- arm64: Remove unimplemented syscall log message
- arm64: Disable unhandled signal log messages by default
- arm64: cpufeature: Fix CTR_EL0 field definitions
- Add delay-init quirk for Corsair K70 RGB keyboards
- usb: host: ehci: use correct device pointer for dma ops
- usb: dwc3: gadget: Set maxpacket size for ep0 IN
- usb: dwc3: ep0: Reset TRB counter for ep0 IN
- usb: phy: mxs: Fix NULL pointer dereference on i.MX23/28
- usb: ldusb: add PIDs for new CASSY devices supported by this driver
- Revert "usb: musb: host: don't start next rx urb if current one failed"
- usb: gadget: f_fs: Process all descriptors during bind
- usb: gadget: f_fs: Use config_ep_by_speed()
- usb: renesas_usbhs: missed the "running" flag in usb_dmac with rx path
- drm/cirrus: Load lut in crtc_commit
- drm/atomic: Fix memleak on ERESTARTSYS during non-blocking commits
- drm: Handle unexpected holes in color-eviction
- drm/amdgpu: disable MMHUB power gating on raven
- drm/amdgpu: fix VA hole handling on Vega10 v3
- drm/amdgpu: Add dpm quirk for Jet PRO (v2)
- drm/amdgpu: only check mmBIF_IOV_FUNC_IDENTIFIER on tonga/fiji
- drm/amdgpu: Avoid leaking PM domain on driver unbind (v2)
- drm/amdgpu: add new device to use atpx quirk
- arm64: __show_regs: Only resolve kernel symbols when running at EL1
- drm/i915/breadcrumbs: Ignore unsubmitted signalers
- microblaze: fix endian handling
- Linux 4.15.7
* [regression] Colour banding and artefacts appear system-wide on an Asus
Zenbook UX303LA with Intel HD 4400 graphics (LP: #1749420) // Bionic update
to v4.15.7 stable release (LP: #1752317)
- drm/edid: Add 6 bpc quirk for CPT panel in Asus UX303LA
* errors with sas hotplug (LP: #1752146)
- scsi: libsas: fix memory leak in sas_smp_get_phy_events()
- scsi: libsas: fix error when getting phy events
- scsi: libsas: initialize sas_phy status according to response of DISCOVER
- scsi: libsas: Use dynamic alloced work to avoid sas event lost
- scsi: libsas: shut down the PHY if events reached the threshold
- scsi: libsas: make the event threshold configurable
- scsi: libsas: Use new workqueue to run sas event and disco event
- scsi: libsas: use flush_workqueue to process disco events synchronously
- scsi: libsas: direct call probe and destruct
- scsi: libsas: notify event PORTE_BROADCAST_RCVD in sas_enable_revalidation()
* rtnetlink: enable namespace identifying properties in rtnetlink requests
(LP: #1748232)
- rtnetlink: enable IFLA_IF_NETNSID in do_setlink()
- rtnetlink: enable IFLA_IF_NETNSID for RTM_SETLINK
- rtnetlink: enable IFLA_IF_NETNSID for RTM_DELLINK
- rtnetlink: enable IFLA_IF_NETNSID for RTM_NEWLINK
- rtnetlink: remove check for IFLA_IF_NETNSID
- rtnetlink: require unique netns identifier
* Bionic update to v4.15.6 stable release (LP: #1752119)
- tun: fix tun_napi_alloc_frags() frag allocator
- ptr_ring: fail early if queue occupies more than KMALLOC_MAX_SIZE
- ptr_ring: try vmalloc() when kmalloc() fails
- selinux: ensure the context is NUL terminated in
security_context_to_sid_core()
- selinux: skip bounded transition processing if the policy isn't loaded
- media: pvrusb2: properly check endpoint types
- crypto: x86/twofish-3way - Fix %rbp usage
- staging: android: ion: Add __GFP_NOWARN for system contig heap
- staging: android: ion: Switch from WARN to pr_warn
- blk_rq_map_user_iov: fix error override
- KVM: x86: fix escape of guest dr6 to the host
- kcov: detect double association with a single task
- netfilter: x_tables: fix int overflow in xt_alloc_table_info()
- netfilter: x_tables: avoid out-of-bounds reads in
xt_request_find_{match|target}
- netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()
- netfilter: on sockopt() acquire sock lock only in the required scope
- netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
- netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
- rds: tcp: correctly sequence cleanup on netns deletion.
- rds: tcp: atomically purge entries from rds_tcp_conn_list during netns
delete
- net: avoid skb_warn_bad_offload on IS_ERR
- net_sched: gen_estimator: fix lockdep splat
- soc: qcom: rmtfs_mem: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE
- ASoC: ux500: add MODULE_LICENSE tag
- video: fbdev/mmp: add MODULE_LICENSE
- ARM: 8743/1: bL_switcher: add MODULE_LICENSE tag
- arm64: dts: add #cooling-cells to CPU nodes
- dn_getsockoptdecnet: move nf_{get/set}sockopt outside sock lock
- ANDROID: binder: remove WARN() for redundant txn error
- ANDROID: binder: synchronize_rcu() when using POLLFREE.
- staging: android: ashmem: Fix a race condition in pin ioctls
- binder: check for binder_thread allocation failure in binder_poll()
- binder: replace "%p" with "%pK"
- staging: fsl-mc: fix build testing on x86
- staging: iio: adc: ad7192: fix external frequency setting
- staging: iio: ad5933: switch buffer mode to software
- xhci: Fix NULL pointer in xhci debugfs
- xhci: Fix xhci debugfs devices node disappearance after hibernation
- xhci: xhci debugfs device nodes weren't removed after device plugged out
- xhci: fix xhci debugfs errors in xhci_stop
- usbip: keep usbip_device sockfd state in sync with tcp_socket
- crypto: s5p-sss - Fix kernel Oops in AES-ECB mode
- mei: me: add cannon point device ids
- mei: me: add cannon point device ids for 4th device
- vmalloc: fix __GFP_HIGHMEM usage for vmalloc_32 on 32b systems
- Linux 4.15.6
* Unable to insert test_bpf module on Bionic s390x (LP: #1751234)
- bpf: fix selftests/bpf test_kmod.sh failure when CONFIG_BPF_JIT_ALWAYS_ON=y
* [Ubuntu 18.04 FEAT] OpenCAPI enabling (LP: #1746988)
- powerpc/powernv: Introduce new PHB type for opencapi links
- powerpc/powernv: Set correct configuration space size for opencapi devices
- powerpc/powernv: Add opal calls for opencapi
- powerpc/powernv: Add platform-specific services for opencapi
- powerpc/powernv: Capture actag information for the device
- ocxl: Driver code for 'generic' opencapi devices
- ocxl: Add AFU interrupt support
- ocxl: Add a kernel API for other opencapi drivers
- ocxl: Add trace points
- ocxl: Add Makefile and Kconfig
- [Config] CONFIG_OCXL=m for ppc64el
- cxl: Remove support for "Processing accelerators" class
- ocxl: Documentation
- ocxl: add MAINTAINERS entry
- cxl: Add support for ASB_Notify on POWER9
* Request to update 18.04 kernel aacraid to upstream 4.16 version
(LP: #1746801)
- scsi: aacraid: remove unused variable managed_request_id
- scsi: aacraid: Do not attempt abort when Fw panicked
- scsi: aacraid: Do not remove offlined devices
- scsi: aacraid: Fix ioctl reset hang
- scsi: aacraid: Allow reset_host sysfs var to recover Panicked Fw
- scsi: aacraid: Refactor reset_host store function
- scsi: aacraid: Move code to wait for IO completion to shutdown func
- scsi: aacraid: Create bmic submission function from bmic identify
- scsi: aacraid: Change phy luns function to use common bmic function
- scsi: aacraid: Refactor and rename to make mirror existing changes
- scsi: aacraid: Add target setup helper function
- scsi: aacraid: Untangle targets setup from report phy luns
- scsi: aacraid: Move function around to match existing code
- scsi: aacraid: Create helper functions to get lun info
- scsi: aacraid: Save bmic phy information for each phy
- scsi: aacraid: Add helper function to set queue depth
- scsi: aacraid: Merge func to get container information
- scsi: aacraid: Process hba and container hot plug events in single function
- scsi: aacraid: Added macros to help loop through known buses and targets
- scsi: aacraid: Refactor resolve luns code and scsi functions
- scsi: aacraid: Merge adapter setup with resolve luns
- scsi: aacraid: Block concurrent hotplug event handling
- scsi: aacraid: Use hotplug handling function in place of scsi_scan_host
- scsi: aacraid: Reschedule host scan in case of failure
- scsi: aacraid: Fix hang while scanning in eh recovery
- scsi: aacraid: Skip schedule rescan in case of kdump
- scsi: aacraid: Remove unused rescan variable
- scsi: aacraid: Remove AAC_HIDE_DISK check in queue command
- scsi: aacraid: Update driver version to 50877
- scsi: aacraid: Fix driver oops with dead battery
- scsi: aacraid: remove redundant setting of variable c
- scsi: aacraid: Get correct lun count
- scsi: aacraid: Delay for rescan worker needs to be 10 seconds
* [18.04] kpatch - Add livepatch hook support for ppc64le (LP: #1741992)
- powerpc/modules: Add REL24 relocation support of livepatch symbols
- powerpc/modules: Don't try to restore r2 after a sibling call
- powerpc/modules: Improve restore_r2() error message
* Ubuntu 18.04 - Include latest ibmvnic fixes in Ubuntu kernel (LP: #1748517)
- ibmvnic: Rename IBMVNIC_MAX_TX_QUEUES to IBMVNIC_MAX_QUEUES
- ibmvnic: Increase maximum number of RX/TX queues
- ibmvnic: Include header descriptor support for ARP packets
- ibmvnic: Don't handle RX interrupts when not up.
- ibmvnic: Wait for device response when changing MAC
- ibmvnic: fix firmware version when no firmware level has been provided by
the VIOS server
- ibmvnic: fix empty firmware version and errors cleanup
- ibmvnic: Fix rx queue cleanup for non-fatal resets
- ibmvnic: Ensure that buffers are NULL after free
- ibmvnic: queue reset when CRQ gets closed during reset
- ibmvnic: Reset long term map ID counter
- ibmvnic: Remove skb->protocol checks in ibmvnic_xmit
- ibmvnic: Wait until reset is complete to set carrier on
- ibmvnic: Fix login buffer memory leaks
- ibmvnic: Fix NAPI structures memory leak
- ibmvnic: Free RX socket buffer in case of adapter error
- ibmvnic: Clean RX pool buffers during device close
- ibmvnic: Check for NULL skb's in NAPI poll routine
- ibmvnic: Fix early release of login buffer
* Power9 DD 2.2 needs HMI fixup backport of upstream
patch(d075745d893c78730e4a3b7a60fca23c2f764081) into kernel (LP: #1751834)
- KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9
* Driver not found in Ubuntu kernel does not detect interface (LP: #1745927)
- d-i: add cxgb4 to nic-modules
* BCM5719/tg3 loses connectivity due to missing heartbeats between fw and
driver (LP: #1751337)
- tg3: APE heartbeat changes
* Miscellaneous Ubuntu changes
- ubuntu: vbox -- update to 5.2.6-dfsg-5
- Revert "UBUNTU: SAUCE: Import aufs driver"
- SAUCE: Import aufs driver
- Revert "UBUNTU: SAUCE: (no-up) Convert bnx2x firmware files to ihex format"
- [Packaging] retpoline-extract: flag *0xNNN(%reg) branches
- [Config] fix up retpoline abi files
- ubuntu: vbox -- update to 5.2.8-dfsg-2
[ Ubuntu: 4.15.0-11.12 ]
* linux: 4.15.0-11.12 -proposed tracker (LP: #1751285)
* Support low-pin-count devices on Hisilicon SoCs (LP: #1677319)
- [Config] CONFIG_INDIRECT_PIO=y
- SAUCE: LIB: Introduce a generic PIO mapping method
- SAUCE: PCI: Remove unused __weak attribute in pci_register_io_range()
- SAUCE: PCI: Add fwnode handler as input param of pci_register_io_range()
- SAUCE: PCI: Apply the new generic I/O management on PCI IO hosts
- SAUCE: OF: Add missing I/O range exception for indirect-IO devices
- [Config] CONFIG_HISILICON_LPC=y
- SAUCE: HISI LPC: Support the LPC host on Hip06/Hip07 with DT bindings
- SAUCE: ACPI / scan: do not enumerate Indirect IO host children
- SAUCE: HISI LPC: Add ACPI support
- SAUCE: MAINTAINERS: Add maintainer for HiSilicon LPC driver
* Bionic update to v4.15.5 stable release (LP: #1751131)
- scsi: smartpqi: allow static build ("built-in")
- IB/umad: Fix use of unprotected device pointer
- IB/qib: Fix comparison error with qperf compare/swap test
- IB/mlx4: Fix incorrectly releasing steerable UD QPs when have only ETH ports
- IB/core: Fix two kernel warnings triggered by rxe registration
- IB/core: Fix ib_wc structure size to remain in 64 bytes boundary
- IB/core: Avoid a potential OOPs for an unused optional parameter
- selftests: seccomp: fix compile error seccomp_bpf
- kselftest: fix OOM in memory compaction test
- RDMA/rxe: Fix a race condition related to the QP error state
- RDMA/rxe: Fix a race condition in rxe_requester()
- RDMA/rxe: Fix rxe_qp_cleanup()
- cpufreq: powernv: Dont assume distinct pstate values for nominal and pmin
- PM / devfreq: Propagate error from devfreq_add_device()
- mwifiex: resolve reset vs. remove()/shutdown() deadlocks
- ocfs2: try a blocking lock before return AOP_TRUNCATED_PAGE
- trace_uprobe: Display correct offset in uprobe_events
- powerpc/radix: Remove trace_tlbie call from radix__flush_tlb_all
- powerpc/kernel: Block interrupts when updating TIDR
- powerpc/vas: Don't set uses_vas for kernel windows
- powerpc/numa: Invalidate numa_cpu_lookup_table on cpu remove
- powerpc/mm: Flush radix process translations when setting MMU type
- powerpc/xive: Use hw CPU ids when configuring the CPU queues
- dma-buf: fix reservation_object_wait_timeout_rcu once more v2
- s390: fix handling of -1 in set{,fs}[gu]id16 syscalls
- arm64: dts: msm8916: Correct ipc references for smsm
- ARM: lpc3250: fix uda1380 gpio numbers
- ARM: dts: STi: Add gpio polarity for "hdmi,hpd-gpio" property
- ARM: dts: nomadik: add interrupt-parent for clcd
- arm: dts: mt7623: fix card detection issue on bananapi-r2
- arm: spear600: Add missing interrupt-parent of rtc
- arm: spear13xx: Fix dmas cells
- arm: spear13xx: Fix spics gpio controller's warning
- x86/gpu: add CFL to early quirks
- x86/kexec: Make kexec (mostly) work in 5-level paging mode
- x86/xen: init %gs very early to avoid page faults with stack protector
- x86: PM: Make APM idle driver initialize polling state
- mm, memory_hotplug: fix memmap initialization
- x86/entry/64: Clear extra registers beyond syscall arguments, to reduce
speculation attack surface
- x86/entry/64/compat: Clear registers for compat syscalls, to reduce
speculation attack surface
- compiler-gcc.h: Introduce __optimize function attribute
- compiler-gcc.h: __nostackprotector needs gcc-4.4 and up
- crypto: sun4i_ss_prng - fix return value of sun4i_ss_prng_generate
- crypto: sun4i_ss_prng - convert lock to _bh in sun4i_ss_prng_generate
- powerpc/mm/radix: Split linear mapping on hot-unplug
- x86/mm/pti: Fix PTI comment in entry_SYSCALL_64()
- x86/speculation: Update Speculation Control microcode blacklist
- x86/speculation: Correct Speculation Control microcode blacklist again
- Revert "x86/speculation: Simplify indirect_branch_prediction_barrier()"
- KVM/x86: Reduce retpoline performance impact in slot_handle_level_range(),
by always inlining iterator helper methods
- X86/nVMX: Properly set spec_ctrl and pred_cmd before merging MSRs
- KVM/nVMX: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR
bitmap
- x86/speculation: Clean up various Spectre related details
- PM / runtime: Update links_count also if !CONFIG_SRCU
- PM: cpuidle: Fix cpuidle_poll_state_init() prototype
- platform/x86: wmi: fix off-by-one write in wmi_dev_probe()
- x86/entry/64: Clear registers for exceptions/interrupts, to reduce
speculation attack surface
- x86/entry/64: Merge SAVE_C_REGS and SAVE_EXTRA_REGS, remove unused
extensions
- x86/entry/64: Merge the POP_C_REGS and POP_EXTRA_REGS macros into a single
POP_REGS macro
- x86/entry/64: Interleave XOR register clearing with PUSH instructions
- x86/entry/64: Introduce the PUSH_AND_CLEAN_REGS macro
- x86/entry/64: Use PUSH_AND_CLEAN_REGS in more cases
- x86/entry/64: Get rid of the ALLOC_PT_GPREGS_ON_STACK and
SAVE_AND_CLEAR_REGS macros
- x86/entry/64: Indent PUSH_AND_CLEAR_REGS and POP_REGS properly
- x86/entry/64: Fix paranoid_entry() frame pointer warning
- x86/entry/64: Remove the unused 'icebp' macro
- selftests/x86: Fix vDSO selftest segfault for vsyscall=none
- selftests/x86: Clean up and document sscanf() usage
- selftests/x86/pkeys: Remove unused functions
- selftests/x86: Fix build bug caused by the 5lvl test which has been moved to
the VM directory
- selftests/x86: Do not rely on "int $0x80" in test_mremap_vdso.c
- gfs2: Fixes to "Implement iomap for block_map"
- selftests/x86: Do not rely on "int $0x80" in single_step_syscall.c
- selftests/x86: Disable tests requiring 32-bit support on pure 64-bit systems
- objtool: Fix segfault in ignore_unreachable_insn()
- x86/debug, objtool: Annotate WARN()-related UD2 as reachable
- x86/debug: Use UD2 for WARN()
- x86/speculation: Fix up array_index_nospec_mask() asm constraint
- nospec: Move array_index_nospec() parameter checking into separate macro
- x86/speculation: Add <asm/msr-index.h> dependency
- x86/mm: Rename flush_tlb_single() and flush_tlb_one() to
__flush_tlb_one_[user|kernel]()
- selftests/x86/mpx: Fix incorrect bounds with old _sigfault
- x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping
- x86/spectre: Fix an error message
- x86/cpu: Change type of x86_cache_size variable to unsigned int
- x86/entry/64: Fix CR3 restore in paranoid_exit()
- drm/ttm: Don't add swapped BOs to swap-LRU list
- drm/ttm: Fix 'buf' pointer update in ttm_bo_vm_access_kmap() (v2)
- drm/qxl: unref cursor bo when finished with it
- drm/qxl: reapply cursor after resetting primary
- drm/amd/powerplay: Fix smu_table_entry.handle type
- drm/ast: Load lut in crtc_commit
- drm: Check for lessee in DROP_MASTER ioctl
- arm64: Add missing Falkor part number for branch predictor hardening
- drm/radeon: Add dpm quirk for Jet PRO (v2)
- drm/radeon: adjust tested variable
- x86/smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a
physical CPU
- rtc-opal: Fix handling of firmware error codes, prevent busy loops
- mbcache: initialize entry->e_referenced in mb_cache_entry_create()
- mmc: sdhci: Implement an SDHCI-specific bounce buffer
- mmc: bcm2835: Don't overwrite max frequency unconditionally
- Revert "mmc: meson-gx: include tx phase in the tuning process"
- mlx5: fix mlx5_get_vector_affinity to start from completion vector 0
- Revert "apple-gmux: lock iGP IO to protect from vgaarb changes"
- jbd2: fix sphinx kernel-doc build warnings
- ext4: fix a race in the ext4 shutdown path
- ext4: save error to disk in __ext4_grp_locked_error()
- ext4: correct documentation for grpid mount option
- mm: hide a #warning for COMPILE_TEST
- mm: Fix memory size alignment in devm_memremap_pages_release()
- MIPS: Fix typo BIG_ENDIAN to CPU_BIG_ENDIAN
- MIPS: CPS: Fix MIPS_ISA_LEVEL_RAW fallout
- MIPS: Fix incorrect mem=X@Y handling
- PCI: Disable MSI for HiSilicon Hip06/Hip07 only in Root Port mode
- PCI: iproc: Fix NULL pointer dereference for BCMA
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
- PCI: keystone: Fix interrupt-controller-node lookup
- video: fbdev: atmel_lcdfb: fix display-timings lookup
- console/dummy: leave .con_font_get set to NULL
- rbd: whitelist RBD_FEATURE_OPERATIONS feature bit
- xen: Fix {set,clear}_foreign_p2m_mapping on autotranslating guests
- xenbus: track caller request id
- seq_file: fix incomplete reset on read from zero offset
- tracing: Fix parsing of globs with a wildcard at the beginning
- mpls, nospec: Sanitize array index in mpls_label_ok()
- rtlwifi: rtl8821ae: Fix connection lost problem correctly
- arm64: proc: Set PTE_NG for table entries to avoid traversing them twice
- xprtrdma: Fix calculation of ri_max_send_sges
- xprtrdma: Fix BUG after a device removal
- blk-wbt: account flush requests correctly
- target/iscsi: avoid NULL dereference in CHAP auth error path
- iscsi-target: make sure to wake up sleeping login worker
- dm: correctly handle chained bios in dec_pending()
- Btrfs: fix deadlock in run_delalloc_nocow
- Btrfs: fix crash due to not cleaning up tree log block's dirty bits
- Btrfs: fix extent state leak from tree log
- Btrfs: fix btrfs_evict_inode to handle abnormal inodes correctly
- Btrfs: fix use-after-free on root->orphan_block_rsv
- Btrfs: fix unexpected -EEXIST when creating new inode
- 9p/trans_virtio: discard zero-length reply
- mtd: nand: vf610: set correct ooblayout
- ALSA: usb-audio: Fix UAC2 get_ctl request with a RANGE attribute
- ALSA: hda/realtek - Add headset mode support for Dell laptop
- ALSA: hda/realtek - Enable Thinkpad Dock device for ALC298 platform
- ALSA: hda/realtek: PCI quirk for Fujitsu U7x7
- ALSA: usb-audio: add implicit fb quirk for Behringer UFX1204
- ALSA: usb: add more device quirks for USB DSD devices
- ALSA: seq: Fix racy pool initializations
- mvpp2: fix multicast address filter
- usb: Move USB_UHCI_BIG_ENDIAN_* out of USB_SUPPORT
- x86/mm, mm/hwpoison: Don't unconditionally unmap kernel 1:1 pages
- ARM: dts: exynos: fix RTC interrupt for exynos5410
- ARM: pxa/tosa-bt: add MODULE_LICENSE tag
- arm64: dts: msm8916: Add missing #phy-cells
- ARM: dts: s5pv210: add interrupt-parent for ohci
- arm: dts: mt7623: Update ethsys binding
- arm: dts: mt2701: Add reset-cells
- ARM: dts: Delete bogus reference to the charlcd
- media: r820t: fix r820t_write_reg for KASAN
- mmc: sdhci-of-esdhc: fix eMMC couldn't work after kexec
- mmc: sdhci-of-esdhc: fix the mmc error after sleep on ls1046ardb
- Linux 4.15.5
* retpoline abi files are empty on i386 (LP: #1751021)
- [Packaging] retpoline-extract -- instantiate retpoline files for i386
- [Packaging] final-checks -- sanity checking ABI contents
- [Packaging] final-checks -- check for empty retpoline files
- [Config] Disable i386 retpoline check for next upload
* Bionic update to v4.15.4 stable release (LP: #1751064)
- watchdog: indydog: Add dependency on SGI_HAS_INDYDOG
- cifs: Fix missing put_xid in cifs_file_strict_mmap
- cifs: Fix autonegotiate security settings mismatch
- CIFS: zero sensitive data when freeing
- cpufreq: mediatek: add mediatek related projects into blacklist
- dmaengine: dmatest: fix container_of member in dmatest_callback
- ssb: Do not disable PCI host on non-Mips
- watchdog: gpio_wdt: set WDOG_HW_RUNNING in gpio_wdt_stop
- Revert "drm/i915: mark all device info struct with __initconst"
- sched/rt: Use container_of() to get root domain in rto_push_irq_work_func()
- sched/rt: Up the root domain ref count when passing it around via IPIs
- media: dvb-usb-v2: lmedm04: Improve logic checking of warm start
- media: dvb-usb-v2: lmedm04: move ts2020 attach to dm04_lme2510_tuner
- media: hdpvr: Fix an error handling path in hdpvr_probe()
- arm64: mm: Use non-global mappings for kernel space
- arm64: mm: Temporarily disable ARM64_SW_TTBR0_PAN
- arm64: mm: Move ASID from TTBR0 to TTBR1
- arm64: mm: Remove pre_ttbr0_update_workaround for Falkor erratum #E1003
- arm64: mm: Rename post_ttbr0_update_workaround
- arm64: mm: Fix and re-enable ARM64_SW_TTBR0_PAN
- arm64: mm: Allocate ASIDs in pairs
- arm64: mm: Add arm64_kernel_unmapped_at_el0 helper
- arm64: mm: Invalidate both kernel and user ASIDs when performing TLBI
- arm64: entry: Add exception trampoline page for exceptions from EL0
- arm64: mm: Map entry trampoline into trampoline and kernel page tables
- arm64: entry: Explicitly pass exception level to kernel_ventry macro
- arm64: entry: Hook up entry trampoline to exception vectors
- arm64: erratum: Work around Falkor erratum #E1003 in trampoline code
- arm64: cpu_errata: Add Kryo to Falkor 1003 errata
- arm64: tls: Avoid unconditional zeroing of tpidrro_el0 for native tasks
- arm64: entry: Add fake CPU feature for unmapping the kernel at EL0
- arm64: kaslr: Put kernel vectors address in separate data page
- arm64: use RET instruction for exiting the trampoline
- arm64: Kconfig: Add CONFIG_UNMAP_KERNEL_AT_EL0
- arm64: Kconfig: Reword UNMAP_KERNEL_AT_EL0 kconfig entry
- arm64: Take into account ID_AA64PFR0_EL1.CSV3
- arm64: capabilities: Handle duplicate entries for a capability
- arm64: mm: Introduce TTBR_ASID_MASK for getting at the ASID in the TTBR
- arm64: kpti: Fix the interaction between ASID switching and software PAN
- arm64: cputype: Add MIDR values for Cavium ThunderX2 CPUs
- arm64: kpti: Make use of nG dependent on arm64_kernel_unmapped_at_el0()
- arm64: mm: Permit transitioning from Global to Non-Global without BBM
- arm64: kpti: Add ->enable callback to remap swapper using nG mappings
- arm64: Force KPTI to be disabled on Cavium ThunderX
- arm64: entry: Reword comment about post_ttbr_update_workaround
- arm64: idmap: Use "awx" flags for .idmap.text .pushsection directives
- perf: arm_spe: Fail device probe when arm64_kernel_unmapped_at_el0()
- arm64: barrier: Add CSDB macros to control data-value prediction
- arm64: Implement array_index_mask_nospec()
- arm64: Make USER_DS an inclusive limit
- arm64: Use pointer masking to limit uaccess speculation
- arm64: entry: Ensure branch through syscall table is bounded under
speculation
- arm64: uaccess: Prevent speculative use of the current addr_limit
- arm64: uaccess: Don't bother eliding access_ok checks in __{get, put}_user
- arm64: uaccess: Mask __user pointers for __arch_{clear, copy_*}_user
- arm64: futex: Mask __user pointers prior to dereference
- arm64: cpufeature: __this_cpu_has_cap() shouldn't stop early
- arm64: Run enable method for errata work arounds on late CPUs
- arm64: cpufeature: Pass capability structure to ->enable callback
- drivers/firmware: Expose psci_get_version through psci_ops structure
- arm64: Move post_ttbr_update_workaround to C code
- arm64: Add skeleton to harden the branch predictor against aliasing attacks
- arm64: Move BP hardening to check_and_switch_context
- arm64: KVM: Use per-CPU vector when BP hardening is enabled
- arm64: entry: Apply BP hardening for high-priority synchronous exceptions
- arm64: entry: Apply BP hardening for suspicious interrupts from EL0
- arm64: cputype: Add missing MIDR values for Cortex-A72 and Cortex-A75
- arm64: Implement branch predictor hardening for affected Cortex-A CPUs
- arm64: Implement branch predictor hardening for Falkor
- arm64: Branch predictor hardening for Cavium ThunderX2
- arm64: KVM: Increment PC after handling an SMC trap
- arm/arm64: KVM: Consolidate the PSCI include files
- arm/arm64: KVM: Add PSCI_VERSION helper
- arm/arm64: KVM: Add smccc accessors to PSCI code
- arm/arm64: KVM: Implement PSCI 1.0 support
- arm/arm64: KVM: Advertise SMCCC v1.1
- arm64: KVM: Make PSCI_VERSION a fast path
- arm/arm64: KVM: Turn kvm_psci_version into a static inline
- arm64: KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support
- arm64: KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling
- firmware/psci: Expose PSCI conduit
- firmware/psci: Expose SMCCC version through psci_ops
- arm/arm64: smccc: Make function identifiers an unsigned quantity
- arm/arm64: smccc: Implement SMCCC v1.1 inline primitive
- arm64: Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support
- arm64: Kill PSCI_GET_VERSION as a variant-2 workaround
- mtd: cfi: convert inline functions to macros
- mtd: nand: brcmnand: Disable prefetch by default
- mtd: nand: Fix nand_do_read_oob() return value
- mtd: nand: sunxi: Fix ECC strength choice
- ubi: Fix race condition between ubi volume creation and udev
- ubi: fastmap: Erase outdated anchor PEBs during attach
- ubi: block: Fix locking for idr_alloc/idr_remove
- ubifs: free the encrypted symlink target
- nfs/pnfs: fix nfs_direct_req ref leak when i/o falls back to the mds
- nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE
- NFS: Add a cond_resched() to nfs_commit_release_pages()
- NFS: Fix nfsstat breakage due to LOOKUPP
- NFS: commit direct writes even if they fail partially
- NFS: reject request for id_legacy key without auxdata
- NFS: Fix a race between mmap() and O_DIRECT
- nfsd: Detect unhashed stids in nfsd4_verify_open_stid()
- kernfs: fix regression in kernfs_fop_write caused by wrong type
- ahci: Annotate PCI ids for mobile Intel chipsets as such
- ahci: Add PCI ids for Intel Bay Trail, Cherry Trail and Apollo Lake AHCI
- ahci: Add Intel Cannon Lake PCH-H PCI ID
- crypto: hash - introduce crypto_hash_alg_has_setkey()
- crypto: cryptd - pass through absence of ->setkey()
- crypto: mcryptd - pass through absence of ->setkey()
- crypto: poly1305 - remove ->setkey() method
- crypto: hash - annotate algorithms taking optional key
- crypto: hash - prevent using keyed hashes without setting key
- media: v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt
- media: v4l2-ioctl.c: don't copy back the result for -ENOTTY
- media: v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF
- media: v4l2-compat-ioctl32.c: fix the indentation
- media: v4l2-compat-ioctl32.c: move 'helper' functions to
__get/put_v4l2_format32
- media: v4l2-compat-ioctl32.c: avoid sizeof(type)
- media: v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32
- media: v4l2-compat-ioctl32.c: fix ctrl_is_pointer
- media: v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32
- media: v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type
- media: v4l2-compat-ioctl32.c: don't copy back the result for certain errors
- media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic
- media: v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs
- crypto: caam - fix endless loop when DECO acquire fails
- crypto: sha512-mb - initialize pending lengths correctly
- crypto: talitos - fix Kernel Oops on hashing an empty file
- arm: KVM: Fix SMCCC handling of unimplemented SMC/HVC calls
- KVM: nVMX: Fix races when sending nested PI while dest enters/leaves L2
- KVM: nVMX: Fix bug of injecting L2 exception into L1
- KVM: PPC: Book3S HV: Make sure we don't re-enter guest without XIVE loaded
- KVM: PPC: Book3S HV: Drop locks before reading guest memory
- KVM: arm/arm64: Handle CPU_PM_ENTER_FAILED
- KVM: PPC: Book3S PR: Fix broken select due to misspelling
- ASoC: acpi: fix machine driver selection based on quirk
- ASoC: rockchip: i2s: fix playback after runtime resume
- ASoC: skl: Fix kernel warning due to zero NHTL entry
- ASoC: compress: Correct handling of copy callback
- watchdog: imx2_wdt: restore previous timeout after suspend+resume
- afs: Add missing afs_put_cell()
- afs: Need to clear responded flag in addr cursor
- afs: Fix missing cursor clearance
- afs: Fix server list handling
- btrfs: Handle btrfs_set_extent_delalloc failure in fixup worker
- Btrfs: raid56: iterate raid56 internal bio with bio_for_each_segment_all
- kasan: don't emit builtin calls when sanitization is off
- kasan: rework Kconfig settings
- media: dvb_frontend: be sure to init dvb_frontend_handle_ioctl() return code
- media: dvb-frontends: fix i2c access helpers for KASAN
- media: dt-bindings/media/cec-gpio.txt: mention the CEC/HPD max voltages
- media: ts2020: avoid integer overflows on 32 bit machines
- media: vivid: fix module load error when enabling fb and no_error_inj=1
- media: cxusb, dib0700: ignore XC2028_I2C_FLUSH
- fs/proc/kcore.c: use probe_kernel_read() instead of memcpy()
- kernel/async.c: revert "async: simplify lowest_in_progress()"
- kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"
- pipe: actually allow root to exceed the pipe buffer limits
- pipe: fix off-by-one error when checking buffer limits
- HID: quirks: Fix keyboard + touchpad on Toshiba Click Mini not working
- Bluetooth: btsdio: Do not bind to non-removable BCM43341
- ipmi: use dynamic memory for DMI driver override
- signal/openrisc: Fix do_unaligned_access to send the proper signal
- signal/sh: Ensure si_signo is initialized in do_divide_error
- alpha: fix crash if pthread_create races with signal delivery
- alpha: osf_sys.c: fix put_tv32 regression
- alpha: Fix mixed up args in EXC macro in futex operations
- alpha: fix reboot on Avanti platform
- alpha: fix formating of stack content
- xtensa: fix futex_atomic_cmpxchg_inatomic
- EDAC, octeon: Fix an uninitialized variable warning
- genirq: Make legacy autoprobing work again
- pinctrl: intel: Initialize GPIO properly when used through irqchip
- pinctrl: mcp23s08: fix irq setup order
- pinctrl: sx150x: Unregister the pinctrl on release
- pinctrl: sx150x: Register pinctrl before adding the gpiochip
- pinctrl: sx150x: Add a static gpio/pinctrl pin range mapping
- pktcdvd: Fix pkt_setup_dev() error path
- pktcdvd: Fix a recently introduced NULL pointer dereference
- blk-mq: quiesce queue before freeing queue
- clocksource/drivers/stm32: Fix kernel panic with multiple timers
- lib/ubsan.c: s/missaligned/misaligned/
- lib/ubsan: add type mismatch handler for new GCC/Clang
- objtool: Fix switch-table detection
- arm64: dts: marvell: add Ethernet aliases
- drm/i915: Avoid PPS HW/SW state mismatch due to rounding
- ACPI: sbshc: remove raw pointer from printk() message
- acpi, nfit: fix register dimm error handling
- ovl: force r/o mount when index dir creation fails
- ovl: fix failure to fsync lower dir
- ovl: take mnt_want_write() for work/index dir setup
- ovl: take mnt_want_write() for removing impure xattr
- ovl: hash directory inodes for fsnotify
- mn10300/misalignment: Use SIGSEGV SEGV_MAPERR to report a failed user copy
- devpts: fix error handling in devpts_mntget()
- ftrace: Remove incorrect setting of glob search field
- scsi: core: Ensure that the SCSI error handler gets woken up
- scsi: lpfc: Fix crash after bad bar setup on driver attachment
- scsi: cxlflash: Reset command ioasc
- rcu: Export init_rcu_head() and destroy_rcu_head() to GPL modules
- Linux 4.15.4
- updateconfigs after v4.14.4 stable updates
* Bionic update to v4.15.4 stable release (LP: #1751064) // CVE-2017-5754 and
do not need KPTI when KASLR is off.
- arm64: Turn on KPTI only on CPUs that need it
* Miscellaneous Ubuntu changes
- [Config] fix up removed retpoline call sites
-- Kamal Mostafa <email address hidden> Tue, 20 Mar 2018 10:49:59 -0700
-
linux-aws (4.15.0-1001.1) bionic; urgency=medium
[ Kamal Mostafa ]
* Initial linux-aws packaging based on linux (4.15.0-11.12) bionic
-- Kamal Mostafa <email address hidden> Fri, 23 Feb 2018 13:45:39 -0800
