Change logs for linux source package in Disco

  • linux (5.0.0-40.44) disco; urgency=medium
    
      * disco/linux: 5.0.0-40.44 -proposed tracker (LP: #1859724)
    
      * use-after-free in i915_ppgtt_close (LP: #1859522) // CVE-2020-7053
        - SAUCE: drm/i915: Fix use-after-free when destroying GEM context
    
      * CVE-2019-14615
        - drm/i915/gen9: Clear residual context state on context switch
    
      * System hang with kernel traces while entering reboot process on a Disco
        ARM64 moonshot node (LP: #1859582)
        - Revert "RDMA/cm: Fix memory leak in cm_add/remove_one"
    
    linux (5.0.0-39.43) disco; urgency=medium
    
      * disco/linux: 5.0.0-39.43 -proposed tracker (LP: #1858547)
    
      * [Regression] usb usb2-port2: Cannot enable. Maybe the USB cable is bad?
        (LP: #1856608)
        - SAUCE: Revert "usb: handle warm-reset port requests on hub resume"
    
      * PAN is broken for execute-only user mappings on ARMv8 (LP: #1858815)
        - arm64: Revert support for execute-only user mappings
    
      * Fix unusable USB hub on Dell TB16 after S3 (LP: #1855312)
        - SAUCE: USB: core: Make port power cycle a seperate helper function
        - SAUCE: USB: core: Attempt power cycle port when it's in eSS.Disabled state
    
      * [sas-1126]scsi: hisi_sas: Fix out of bound at debug_I_T_nexus_reset()
        (LP: #1853992)
        - scsi: hisi_sas: Fix out of bound at debug_I_T_nexus_reset()
    
      * [sas-1126]scsi: hisi_sas: Assign NCQ tag for all NCQ commands (LP: #1853995)
        - scsi: hisi_sas: Assign NCQ tag for all NCQ commands
    
      * [sas-1126]scsi: hisi_sas: Fix the conflict between device gone and host
        reset (LP: #1853997)
        - scsi: hisi_sas: Fix the conflict between device gone and host reset
    
      * scsi: hisi_sas: Check sas_port before using it (LP: #1855952)
        - scsi: hisi_sas: Check sas_port before using it
    
      * CVE-2019-18885
        - btrfs: refactor btrfs_find_device() take fs_devices as argument
        - btrfs: merge btrfs_find_device and find_device
    
      *  Integrate Intel SGX driver into linux-azure (LP: #1844245)
        - [Packaging] Add systemd service to load intel_sgx
    
      * [SRU][B/OEM-B/OEM-OSP1/D/E/F] Add LG I2C touchscreen multitouch support
        (LP: #1857541)
        - SAUCE: HID: multitouch: Add LG MELF0410 I2C touchscreen support
    
      * cifs: DFS Caching feature causing problems traversing multi-tier DFS setups
        (LP: #1854887)
        - cifs: Fix retrieval of DFS referrals in cifs_mount()
    
      * qede driver causes 100% CPU load (LP: #1855409)
        - qede: Handle infinite driver spinning for Tx timestamp.
    
      * [roce-1126]RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
        (LP: #1853989)
        - RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver
        - RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
    
      * [roce-1126]RDMA/hns: Fixs hw access invalid dma memory error (LP: #1853990)
        - RDMA/hns: Fixs hw access invalid dma memory error
    
      * [hns-1126]net: hns3: revert to old channel when setting new channel num fail
        (LP: #1853983)
        - net: hns3: revert to old channel when setting new channel num fail
    
      * [hns-1126]net: hns3: fix port setting handle for fibre port
        (LP: #1853984)
        - net: hns3: fix port setting handle for fibre port
    
      * [hns-1126] net: hns: add support for vlan TSO (LP: #1853937)
        - net: hns: add support for vlan TSO
    
      * [hns-1126]net: hns3: fix flow control configure issue for fibre port
        (LP: #1853948)
        - net: hns3: fix flow control configure issue for fibre port
    
      * mce: ras:  When inject 1bit ecc error,  there is no mce log recorded in the
        dmesg (LP: #1857413)
        - RAS/CEC: Increment cec_entered under the mutex lock
        - RAS/CEC: Check count_threshold unconditionally
    
      * efivarfs test in ubuntu_kernel_selftest failed on the second run
        (LP: #1809704)
        - selftests/efivarfs: clean up test files from test_create*()
    
      * CVE-2019-19082
        - drm/amd/display: prevent memory leak
    
      * CVE-2019-19078
        - ath10k: fix memory leak
    
      * CVE-2019-19077
        - RDMA: Fix goto target to release the allocated memory
    
      * Disco update: upstream stable patchset 2019-12-17 (LP: #1856754)
        - rsi: release skb if rsi_prepare_beacon fails
        - arm64: tegra: Fix 'active-low' warning for Jetson TX1 regulator
        - sparc64: implement ioremap_uc
        - lp: fix sparc64 LPSETTIMEOUT ioctl
        - usb: gadget: u_serial: add missing port entry locking
        - tty: serial: fsl_lpuart: use the sg count from dma_map_sg
        - tty: serial: msm_serial: Fix flow control
        - serial: pl011: Fix DMA ->flush_buffer()
        - serial: serial_core: Perform NULL checks for break_ctl ops
        - serial: ifx6x60: add missed pm_runtime_disable
        - autofs: fix a leak in autofs_expire_indirect()
        - RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN
        - iwlwifi: pcie: don't consider IV len in A-MSDU
        - exportfs_decode_fh(): negative pinned may become positive without the parent
          locked
        - audit_get_nd(): don't unlock parent too early
        - NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error
        - xfrm: release device reference for invalid state
        - Input: cyttsp4_core - fix use after free bug
        - sched/core: Avoid spurious lock dependencies
        - perf/core: Consistently fail fork on allocation failures
        - ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed()
        - drm/sun4i: tcon: Set min division of TCON0_DCLK to 1.
        - selftests: kvm: fix build with glibc >= 2.30
        - rsxx: add missed destroy_workqueue calls in remove
        - net: ep93xx_eth: fix mismatch of request_mem_region in remove
        - i2c: core: fix use after free in of_i2c_notify
        - fuse: verify nlink
        - fuse: verify attributes
        - ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC
        - ALSA: pcm: oss: Avoid potential buffer overflows
        - ALSA: hda - Add mute led support for HP ProBook 645 G4
        - Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus
        - Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash
        - Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers
        - Input: goodix - add upside-down quirk for Teclast X89 tablet
        - coresight: etm4x: Fix input validation for sysfs.
        - Input: Fix memory leak in psxpad_spi_probe
        - x86/mm/32: Sync only to VMALLOC_END in vmalloc_sync_all()
        - CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks
        - CIFS: Fix SMB2 oplock break processing
        - tty: vt: keyboard: reject invalid keycodes
        - can: slcan: Fix use-after-free Read in slcan_open
        - kernfs: fix ino wrap-around detection
        - jbd2: Fix possible overflow in jbd2_log_space_left()
        - drm/msm: fix memleak on release
        - drm/i810: Prevent underflow in ioctl
        - arm64: dts: exynos: Revert "Remove unneeded address space mapping for soc
          node"
        - KVM: arm/arm64: vgic: Don't rely on the wrong pending table
        - KVM: x86: do not modify masked bits of shared MSRs
        - KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES
        - KVM: x86: Grab KVM's srcu lock when setting nested state
        - crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr
        - crypto: atmel-aes - Fix IV handling when req->nbytes < ivsize
        - crypto: af_alg - cast ki_complete ternary op to int
        - crypto: ccp - fix uninitialized list head
        - crypto: ecdh - fix big endian bug in ECC library
        - crypto: user - fix memory leak in crypto_report
        - spi: atmel: Fix CS high support
        - mwifiex: update set_mac_address logic
        - can: ucan: fix non-atomic allocation in completion handler
        - RDMA/qib: Validate ->show()/store() callbacks before calling them
        - iomap: Fix pipe page leakage during splicing
        - thermal: Fix deadlock in thermal thermal_zone_device_check
        - vcs: prevent write access to vcsu devices
        - binder: Fix race between mmap() and binder_alloc_print_pages()
        - binder: Handle start==NULL in binder_update_page_range()
        - ALSA: hda - Fix pending unsol events at shutdown
        - watchdog: aspeed: Fix clock behaviour for ast2600
        - perf script: Fix invalid LBR/binary mismatch error
        - xfs: add missing error check in xfs_prepare_shift()
        - KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)
        - net: qrtr: fix memort leak in qrtr_tun_write_iter
        - appletalk: Fix potential NULL pointer dereference in unregister_snap_client
        - appletalk: Set error code if register_snap_client failed
        - time: Zero the upper 32-bits in __kernel_timespec on 32-bit
        - RDMA/hns: Correct the value of srq_desc_size
        - ecryptfs: fix unlink and rmdir in face of underlying fs modifications
        - x86/resctrl: Fix potential lockdep warning
        - ravb: implement MTU change while device is up
        - net: hns3: reallocate SSU' buffer size when pfc_en changes
        - net: hns3: fix ETS bandwidth validation bug
        - media: rc: mark input device as pointing stick
        - nfsd: Ensure CLONE persists data and metadata changes to the target file
        - drm: damage_helper: Fix race checking plane->state->fb
        - KVM: nVMX: Always write vmcs02.GUEST_CR3 during nested VM-Enter
        - crypto: geode-aes - switch to skcipher for cbc(aes) fallback
        - spi: stm32-qspi: Fix kernel oops when unbinding driver
        - spi: Fix SPI_CS_HIGH setting when using native and GPIO CS
        - spi: Fix NULL pointer when setting SPI_CS_HIGH for GPIO CS
        - EDAC/ghes: Fix locking and memory barrier issues
        - kselftest: Fix NULL INSTALL_PATH for TARGETS runlist
        - ALSA: hda: hdmi - fix pin setup on Tigerlake
    
      * Realtek ALC256M with DTS Audio Processing internal microphone doesn't work
        on Redmi Book 14 2019 (LP: #1846148) // Disco update: upstream stable
        patchset 2019-12-17 (LP: #1856754)
        - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
    
      * Disco update: upstream stable patchset 2019-12-12 (LP: #1856213)
        - clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate
        - clocksource/drivers/mediatek: Fix error handling
        - ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX
        - ASoC: compress: fix unsigned integer overflow check
        - reset: Fix memory leak in reset_control_array_put()
        - clk: samsung: exynos5433: Fix error paths
        - ASoC: kirkwood: fix external clock probe defer
        - ASoC: kirkwood: fix device remove ordering
        - clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume
        - pinctrl: cherryview: Allocate IRQ chip dynamic
        - ARM: dts: imx6qdl-sabreauto: Fix storm of accelerometer interrupts
        - reset: fix reset_control_ops kerneldoc comment
        - clk: at91: avoid sleeping early
        - clk: sunxi: Fix operator precedence in sunxi_divs_clk_setup
        - clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18
        - ARM: dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend
        - samples/bpf: fix build by setting HAVE_ATTR_TEST to zero
        - powerpc/bpf: Fix tail call implementation
        - idr: Fix integer overflow in idr_for_each_entry
        - idr: Fix idr_alloc_u32 on 32-bit systems
        - x86/resctrl: Prevent NULL pointer dereference when reading mondata
        - clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call
        - clk: ti: clkctrl: Fix failed to enable error with double udelay timeout
        - net: fec: add missed clk_disable_unprepare in remove
        - bridge: ebtables: don't crash when using dnat target in output chains
        - can: peak_usb: report bus recovery as well
        - can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open
        - can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb
          mem leak
        - can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue
          beyond skb_queue_len_max
        - can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on
          queue overflow or OOM
        - can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate
          error value in case of errors
        - can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error
        - can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error
        - can: flexcan: increase error counters if skb enqueueing via
          can_rx_offload_queue_sorted() fails
        - can: mcp251x: mcp251x_restart_work_handler(): Fix potential force_quit race
          condition
        - watchdog: meson: Fix the wrong value of left time
        - ASoC: stm32: sai: add restriction on mmap support
        - scripts/gdb: fix debugging modules compiled with hot/cold partitioning
        - net: bcmgenet: use RGMII loopback for MAC reset
        - net: bcmgenet: reapply manual settings to the PHY
        - net: mscc: ocelot: fix __ocelot_rmw_ix prototype
        - ceph: return -EINVAL if given fsc mount option on kernel w/o support
        - net/fq_impl: Switch to kvmalloc() for memory allocation
        - mac80211: fix station inactive_time shortly after boot
        - block: drbd: remove a stray unlock in __drbd_send_protocol()
        - pwm: bcm-iproc: Prevent unloading the driver module while in use
        - clk: at91: fix update bit maps on CFG_MOR write
        - usb: dwc2: use a longer core rest timeout in dwc2_core_reset()
        - staging: rtl8192e: fix potential use after free
        - staging: rtl8723bs: Drop ACPI device ids
        - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids
        - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P
        - mei: bus: prefix device names on bus with the bus name
        - mei: me: add comet point V device id
        - thunderbolt: Power cycle the router if NVM authentication fails
        - media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE
        - pwm: Clear chip_data in pwm_put()
        - media: atmel: atmel-isc: fix INIT_WORK misplacement
        - macvlan: schedule bc_work even if error
        - net: psample: fix skb_over_panic
        - openvswitch: fix flow command message size
        - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook
        - slip: Fix use-after-free Read in slip_open
        - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info()
        - openvswitch: remove another BUG_ON()
        - selftests: bpf: test_sockmap: handle file creation failures gracefully
        - tipc: fix link name length check
        - sctp: cache netns in sctp_ep_common
        - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues
        - net: macb: add missed tasklet_kill
        - ext4: add more paranoia checking in ext4_expand_extra_isize handling
        - watchdog: sama5d4: fix WDD value to be always set to max
        - net: macb: Fix SUBNS increment and increase resolution
        - net: macb driver, check for SKBTX_HW_TSTAMP
        - mtd: rawnand: atmel: Fix spelling mistake in error message
        - mtd: rawnand: atmel: fix possible object reference leak
        - drm/atmel-hlcdc: revert shift by 8
        - mailbox: stm32_ipcc: add spinlock to fix channels concurrent access
        - tcp: exit if nothing to retransmit on RTO timeout
        - HID: core: check whether Usage Page item is after Usage ID items
        - crypto: stm32/hash - Fix hmac issue more than 256 bytes
        - media: stm32-dcmi: fix DMA corruption when stopping streaming
        - media: stm32-dcmi: fix check of pm_runtime_get_sync return value
        - hwrng: stm32 - fix unbalanced pm_runtime_enable
        - clk: stm32mp1: fix HSI divider flag
        - clk: stm32mp1: fix mcu divider table
        - clk: stm32mp1: add CLK_SET_RATE_NO_REPARENT to Kernel clocks
        - clk: stm32mp1: parent clocks update
        - mailbox: mailbox-test: fix null pointer if no mmio
        - pinctrl: stm32: fix memory leak issue
        - ASoC: stm32: i2s: fix dma configuration
        - ASoC: stm32: i2s: fix 16 bit format support
        - ASoC: stm32: i2s: fix IRQ clearing
        - ASoC: stm32: sai: add missing put_device()
        - platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer
        - platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size
        - net: fec: fix clock count mis-match
        - net: separate out the msghdr copy from ___sys_{send,recv}msg()
        - XArray: Fix xas_next() with a single entry at 0
        - thunderbolt: Fix lockdep circular locking depedency warning
        - soundwire: intel: fix intel_register_dai PDI offsets and numbers
        - clk: samsung: exynos542x: Move G3D subsystem clocks to its sub-CMU
        - arm64: dts: ls1028a: fix a compatible issue
        - soc: imx: gpc: fix initialiser format
        - bpf: Change size to u64 for bpf_map_{area_alloc, charge_init}()
        - idr: Fix idr_get_next_ul race with idr_remove
        - fbdev: c2p: Fix link failure on non-inlining
        - ASoC: hdac_hda: fix race in device removal
        - x86/tsc: Respect tsc command line paraemeter for clocksource_tsc_early
        - perf scripting engines: Iterate on tep event arrays directly
        - nvme-rdma: fix a segmentation fault during module unload
        - nvme-multipath: fix crash in nvme_mpath_clear_ctrl_paths
        - watchdog: pm8916_wdt: fix pretimeout registration flow
        - ALSA: hda: hdmi - add Tigerlake support
        - mm/gup_benchmark: fix MAP_HUGETLB case
        - drm/amdgpu: dont schedule jobs while in reset
        - net/mlx5e: Fix eswitch debug print of max fdb flow
        - drm/amdgpu: add warning for GRBM 1-cycle delay issue in gfx9
        - net: stmmac: gmac4: bitrev32 returns u32
        - net: stmmac: xgmac: Fix TSA selection
        - net: stmmac: xgmac: Disable Flow Control when 1 or more queues are in AV
        - mac80211: fix ieee80211_txq_setup_flows() failure path
        - ice: fix potential infinite loop because loop counter being too small
        - iavf: initialize ITRN registers with correct values
        - x86/fpu: Don't cache access to fpu_fpregs_owner_ctx
        - net/tls: take into account that bpf_exec_tx_verdict() may free the record
        - net/tls: free the record on encryption error
        - net: skmsg: fix TLS 1.3 crash with full sk_msg
        - selftests/tls: add a test for fragmented messages
        - net/tls: remove the dead inplace_crypto code
        - net/tls: use sg_next() to walk sg entries
        - selftests: bpf: correct perror strings
    
      * CVE-2019-19050
        - crypto: user - fix memory leak in crypto_reportstat
    
      * headphone has noise as not mute on dell machines with alc236/256
        (LP: #1854401)
        - SAUCE: ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236
    
      * Disco update: upstream stable patchset 2019-12-03 (LP: #1855011)
        - mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel
        - net/mlx4_en: fix mlx4 ethtool -N insertion
        - net/mlx4_en: Fix wrong limitation for number of TX rings
        - net: rtnetlink: prevent underflows in do_setvfinfo()
        - net/sched: act_pedit: fix WARN() in the traffic path
        - net: sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key
        - sfc: Only cancel the PPS workqueue if it exists
        - net/mlx5e: Fix set vf link state error flow
        - net/mlxfw: Verify FSM error code translation doesn't exceed array size
        - net/mlx5: Fix auto group size calculation
        - vhost/vsock: split packets to send using multiple buffers
        - gpio: max77620: Fixup debounce delays
        - tools: gpio: Correctly add make dependencies for gpio_utils
        - nbd:fix memory leak in nbd_get_socket()
        - virtio_console: allocate inbufs in add_port() only if it is needed
        - Revert "fs: ocfs2: fix possible null-pointer dereferences in
          ocfs2_xa_prepare_entry()"
        - mm/ksm.c: don't WARN if page is still mapped in remove_stable_node()
        - drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported ASICs
        - drm/i915/pmu: "Frequency" is reported as accumulated cycles
        - drm/i915/userptr: Try to acquire the page lock around set_page_dirty()
        - mwifiex: Fix NL80211_TX_POWER_LIMITED
        - Bluetooth: Fix invalid-free in bcsp_close()
        - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
        - ath9k_hw: fix uninitialized variable data
        - md/raid10: prevent access of uninitialized resync_pages offset
        - mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span()
        - net: phy: dp83867: fix speed 10 in sgmii mode
        - net: phy: dp83867: increase SGMII autoneg timer duration
        - ARM: 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary
        - x86/insn: Fix awk regexp warnings
        - x86/speculation: Fix incorrect MDS/TAA mitigation status
        - x86/speculation: Fix redundant MDS mitigation message
        - nbd: prevent memory leak
        - futex: Prevent robust futex exit race
        - ALSA: usb-audio: Fix NULL dereference at parsing BADD
        - nfc: port100: handle command failure cleanly
        - media: vivid: Set vid_cap_streaming and vid_out_streaming to true
        - media: vivid: Fix wrong locking that causes race conditions on streaming
          stop
        - media: usbvision: Fix races among open, close, and disconnect
        - cpufreq: Add NULL checks to show() and store() methods of cpufreq
        - media: uvcvideo: Fix error path in control parsing failure
        - media: b2c2-flexcop-usb: add sanity checking
        - media: cxusb: detect cxusb_ctrl_msg error in query
        - media: imon: invalid dereference in imon_touch_event
        - virtio_ring: fix return code on DMA mapping fails
        - USBIP: add config dependency for SGL_ALLOC
        - usbip: tools: fix fd leakage in the function of read_attr_usbip_status
        - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
        - usb-serial: cp201x: support Mark-10 digital force gauge
        - USB: chaoskey: fix error case of a timeout
        - appledisplay: fix error handling in the scheduled work
        - USB: serial: mos7840: add USB ID to support Moxa UPort 2210
        - USB: serial: mos7720: fix remote wakeup
        - USB: serial: mos7840: fix remote wakeup
        - USB: serial: option: add support for DW5821e with eSIM support
        - USB: serial: option: add support for Foxconn T77W968 LTE modules
        - staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
        - net/tls: remove unused function tls_sw_sendpage_locked
        - net/tls: enable sk_msg redirect to tls socket egress
        - net/mlx5e: Fix error flow cleanup in mlx5e_tc_tun_create_header_ipv4/6
        - net/mlx5: Update the list of the PCI supported devices
        - net/mlx5: Update the list of the PCI supported devices
        - virtio_balloon: fix shrinker count
        - drm/amdgpu: disable gfxoff when using register read interface
        - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues"
        - x86/xen/32: Make xen_iret_crit_fixup() independent of frame layout
        - x86/xen/32: Simplify ring check in xen_iret_crit_fixup()
        - x86/doublefault/32: Fix stack canaries in the double fault handler
        - x86/pti/32: Size initial_page_table correctly
        - x86/cpu_entry_area: Add guard page for entry stack on 32bit
        - selftests/x86/mov_ss_trap: Fix the SYSENTER test
        - selftests/x86/sigreturn/32: Invalidate DS and ES when abusing the kernel
        - x86/pti/32: Calculate the various PTI cpu_entry_area sizes correctly, make
          the CPU_ENTRY_AREA_PAGES assert precise
        - x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3
        - media: usbvision: Fix invalid accesses after device disconnect
        - media: mceusb: fix out of bounds read in MCE receiver buffer
    
      * Miscellaneous Ubuntu changes
        - update dkms package versions
    
     -- Marcelo Henrique Cerri <email address hidden>  Tue, 14 Jan 2020 21:14:53 -0300
  • linux (5.0.0-39.43) disco; urgency=medium
    
      * disco/linux: 5.0.0-39.43 -proposed tracker (LP: #1858547)
    
      * [Regression] usb usb2-port2: Cannot enable. Maybe the USB cable is bad?
        (LP: #1856608)
        - SAUCE: Revert "usb: handle warm-reset port requests on hub resume"
    
      * PAN is broken for execute-only user mappings on ARMv8 (LP: #1858815)
        - arm64: Revert support for execute-only user mappings
    
      * Fix unusable USB hub on Dell TB16 after S3 (LP: #1855312)
        - SAUCE: USB: core: Make port power cycle a seperate helper function
        - SAUCE: USB: core: Attempt power cycle port when it's in eSS.Disabled state
    
      * [sas-1126]scsi: hisi_sas: Fix out of bound at debug_I_T_nexus_reset()
        (LP: #1853992)
        - scsi: hisi_sas: Fix out of bound at debug_I_T_nexus_reset()
    
      * [sas-1126]scsi: hisi_sas: Assign NCQ tag for all NCQ commands (LP: #1853995)
        - scsi: hisi_sas: Assign NCQ tag for all NCQ commands
    
      * [sas-1126]scsi: hisi_sas: Fix the conflict between device gone and host
        reset (LP: #1853997)
        - scsi: hisi_sas: Fix the conflict between device gone and host reset
    
      * scsi: hisi_sas: Check sas_port before using it (LP: #1855952)
        - scsi: hisi_sas: Check sas_port before using it
    
      * CVE-2019-18885
        - btrfs: refactor btrfs_find_device() take fs_devices as argument
        - btrfs: merge btrfs_find_device and find_device
    
      *  Integrate Intel SGX driver into linux-azure (LP: #1844245)
        - [Packaging] Add systemd service to load intel_sgx
    
      * [SRU][B/OEM-B/OEM-OSP1/D/E/F] Add LG I2C touchscreen multitouch support
        (LP: #1857541)
        - SAUCE: HID: multitouch: Add LG MELF0410 I2C touchscreen support
    
      * cifs: DFS Caching feature causing problems traversing multi-tier DFS setups
        (LP: #1854887)
        - cifs: Fix retrieval of DFS referrals in cifs_mount()
    
      * qede driver causes 100% CPU load (LP: #1855409)
        - qede: Handle infinite driver spinning for Tx timestamp.
    
      * [roce-1126]RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
        (LP: #1853989)
        - RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver
        - RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
    
      * [roce-1126]RDMA/hns: Fixs hw access invalid dma memory error (LP: #1853990)
        - RDMA/hns: Fixs hw access invalid dma memory error
    
      * [hns-1126]net: hns3: revert to old channel when setting new channel num fail
        (LP: #1853983)
        - net: hns3: revert to old channel when setting new channel num fail
    
      * [hns-1126]net: hns3: fix port setting handle for fibre port
        (LP: #1853984)
        - net: hns3: fix port setting handle for fibre port
    
      * [hns-1126] net: hns: add support for vlan TSO (LP: #1853937)
        - net: hns: add support for vlan TSO
    
      * [hns-1126]net: hns3: fix flow control configure issue for fibre port
        (LP: #1853948)
        - net: hns3: fix flow control configure issue for fibre port
    
      * mce: ras:  When inject 1bit ecc error,  there is no mce log recorded in the
        dmesg (LP: #1857413)
        - RAS/CEC: Increment cec_entered under the mutex lock
        - RAS/CEC: Check count_threshold unconditionally
    
      * efivarfs test in ubuntu_kernel_selftest failed on the second run
        (LP: #1809704)
        - selftests/efivarfs: clean up test files from test_create*()
    
      * CVE-2019-19082
        - drm/amd/display: prevent memory leak
    
      * CVE-2019-19078
        - ath10k: fix memory leak
    
      * CVE-2019-19077
        - RDMA: Fix goto target to release the allocated memory
    
      * Disco update: upstream stable patchset 2019-12-17 (LP: #1856754)
        - rsi: release skb if rsi_prepare_beacon fails
        - arm64: tegra: Fix 'active-low' warning for Jetson TX1 regulator
        - sparc64: implement ioremap_uc
        - lp: fix sparc64 LPSETTIMEOUT ioctl
        - usb: gadget: u_serial: add missing port entry locking
        - tty: serial: fsl_lpuart: use the sg count from dma_map_sg
        - tty: serial: msm_serial: Fix flow control
        - serial: pl011: Fix DMA ->flush_buffer()
        - serial: serial_core: Perform NULL checks for break_ctl ops
        - serial: ifx6x60: add missed pm_runtime_disable
        - autofs: fix a leak in autofs_expire_indirect()
        - RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN
        - iwlwifi: pcie: don't consider IV len in A-MSDU
        - exportfs_decode_fh(): negative pinned may become positive without the parent
          locked
        - audit_get_nd(): don't unlock parent too early
        - NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error
        - xfrm: release device reference for invalid state
        - Input: cyttsp4_core - fix use after free bug
        - sched/core: Avoid spurious lock dependencies
        - perf/core: Consistently fail fork on allocation failures
        - ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed()
        - drm/sun4i: tcon: Set min division of TCON0_DCLK to 1.
        - selftests: kvm: fix build with glibc >= 2.30
        - rsxx: add missed destroy_workqueue calls in remove
        - net: ep93xx_eth: fix mismatch of request_mem_region in remove
        - i2c: core: fix use after free in of_i2c_notify
        - fuse: verify nlink
        - fuse: verify attributes
        - ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC
        - ALSA: pcm: oss: Avoid potential buffer overflows
        - ALSA: hda - Add mute led support for HP ProBook 645 G4
        - Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus
        - Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash
        - Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers
        - Input: goodix - add upside-down quirk for Teclast X89 tablet
        - coresight: etm4x: Fix input validation for sysfs.
        - Input: Fix memory leak in psxpad_spi_probe
        - x86/mm/32: Sync only to VMALLOC_END in vmalloc_sync_all()
        - CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks
        - CIFS: Fix SMB2 oplock break processing
        - tty: vt: keyboard: reject invalid keycodes
        - can: slcan: Fix use-after-free Read in slcan_open
        - kernfs: fix ino wrap-around detection
        - jbd2: Fix possible overflow in jbd2_log_space_left()
        - drm/msm: fix memleak on release
        - drm/i810: Prevent underflow in ioctl
        - arm64: dts: exynos: Revert "Remove unneeded address space mapping for soc
          node"
        - KVM: arm/arm64: vgic: Don't rely on the wrong pending table
        - KVM: x86: do not modify masked bits of shared MSRs
        - KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES
        - KVM: x86: Grab KVM's srcu lock when setting nested state
        - crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr
        - crypto: atmel-aes - Fix IV handling when req->nbytes < ivsize
        - crypto: af_alg - cast ki_complete ternary op to int
        - crypto: ccp - fix uninitialized list head
        - crypto: ecdh - fix big endian bug in ECC library
        - crypto: user - fix memory leak in crypto_report
        - spi: atmel: Fix CS high support
        - mwifiex: update set_mac_address logic
        - can: ucan: fix non-atomic allocation in completion handler
        - RDMA/qib: Validate ->show()/store() callbacks before calling them
        - iomap: Fix pipe page leakage during splicing
        - thermal: Fix deadlock in thermal thermal_zone_device_check
        - vcs: prevent write access to vcsu devices
        - binder: Fix race between mmap() and binder_alloc_print_pages()
        - binder: Handle start==NULL in binder_update_page_range()
        - ALSA: hda - Fix pending unsol events at shutdown
        - watchdog: aspeed: Fix clock behaviour for ast2600
        - perf script: Fix invalid LBR/binary mismatch error
        - xfs: add missing error check in xfs_prepare_shift()
        - KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)
        - net: qrtr: fix memort leak in qrtr_tun_write_iter
        - appletalk: Fix potential NULL pointer dereference in unregister_snap_client
        - appletalk: Set error code if register_snap_client failed
        - time: Zero the upper 32-bits in __kernel_timespec on 32-bit
        - RDMA/hns: Correct the value of srq_desc_size
        - ecryptfs: fix unlink and rmdir in face of underlying fs modifications
        - x86/resctrl: Fix potential lockdep warning
        - ravb: implement MTU change while device is up
        - net: hns3: reallocate SSU' buffer size when pfc_en changes
        - net: hns3: fix ETS bandwidth validation bug
        - media: rc: mark input device as pointing stick
        - nfsd: Ensure CLONE persists data and metadata changes to the target file
        - drm: damage_helper: Fix race checking plane->state->fb
        - KVM: nVMX: Always write vmcs02.GUEST_CR3 during nested VM-Enter
        - crypto: geode-aes - switch to skcipher for cbc(aes) fallback
        - spi: stm32-qspi: Fix kernel oops when unbinding driver
        - spi: Fix SPI_CS_HIGH setting when using native and GPIO CS
        - spi: Fix NULL pointer when setting SPI_CS_HIGH for GPIO CS
        - EDAC/ghes: Fix locking and memory barrier issues
        - kselftest: Fix NULL INSTALL_PATH for TARGETS runlist
        - ALSA: hda: hdmi - fix pin setup on Tigerlake
    
      * Realtek ALC256M with DTS Audio Processing internal microphone doesn't work
        on Redmi Book 14 2019 (LP: #1846148) // Disco update: upstream stable
        patchset 2019-12-17 (LP: #1856754)
        - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
    
      * Disco update: upstream stable patchset 2019-12-12 (LP: #1856213)
        - clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate
        - clocksource/drivers/mediatek: Fix error handling
        - ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX
        - ASoC: compress: fix unsigned integer overflow check
        - reset: Fix memory leak in reset_control_array_put()
        - clk: samsung: exynos5433: Fix error paths
        - ASoC: kirkwood: fix external clock probe defer
        - ASoC: kirkwood: fix device remove ordering
        - clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume
        - pinctrl: cherryview: Allocate IRQ chip dynamic
        - ARM: dts: imx6qdl-sabreauto: Fix storm of accelerometer interrupts
        - reset: fix reset_control_ops kerneldoc comment
        - clk: at91: avoid sleeping early
        - clk: sunxi: Fix operator precedence in sunxi_divs_clk_setup
        - clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18
        - ARM: dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend
        - samples/bpf: fix build by setting HAVE_ATTR_TEST to zero
        - powerpc/bpf: Fix tail call implementation
        - idr: Fix integer overflow in idr_for_each_entry
        - idr: Fix idr_alloc_u32 on 32-bit systems
        - x86/resctrl: Prevent NULL pointer dereference when reading mondata
        - clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call
        - clk: ti: clkctrl: Fix failed to enable error with double udelay timeout
        - net: fec: add missed clk_disable_unprepare in remove
        - bridge: ebtables: don't crash when using dnat target in output chains
        - can: peak_usb: report bus recovery as well
        - can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open
        - can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb
          mem leak
        - can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue
          beyond skb_queue_len_max
        - can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on
          queue overflow or OOM
        - can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate
          error value in case of errors
        - can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error
        - can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error
        - can: flexcan: increase error counters if skb enqueueing via
          can_rx_offload_queue_sorted() fails
        - can: mcp251x: mcp251x_restart_work_handler(): Fix potential force_quit race
          condition
        - watchdog: meson: Fix the wrong value of left time
        - ASoC: stm32: sai: add restriction on mmap support
        - scripts/gdb: fix debugging modules compiled with hot/cold partitioning
        - net: bcmgenet: use RGMII loopback for MAC reset
        - net: bcmgenet: reapply manual settings to the PHY
        - net: mscc: ocelot: fix __ocelot_rmw_ix prototype
        - ceph: return -EINVAL if given fsc mount option on kernel w/o support
        - net/fq_impl: Switch to kvmalloc() for memory allocation
        - mac80211: fix station inactive_time shortly after boot
        - block: drbd: remove a stray unlock in __drbd_send_protocol()
        - pwm: bcm-iproc: Prevent unloading the driver module while in use
        - clk: at91: fix update bit maps on CFG_MOR write
        - usb: dwc2: use a longer core rest timeout in dwc2_core_reset()
        - staging: rtl8192e: fix potential use after free
        - staging: rtl8723bs: Drop ACPI device ids
        - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids
        - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P
        - mei: bus: prefix device names on bus with the bus name
        - mei: me: add comet point V device id
        - thunderbolt: Power cycle the router if NVM authentication fails
        - media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE
        - pwm: Clear chip_data in pwm_put()
        - media: atmel: atmel-isc: fix INIT_WORK misplacement
        - macvlan: schedule bc_work even if error
        - net: psample: fix skb_over_panic
        - openvswitch: fix flow command message size
        - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook
        - slip: Fix use-after-free Read in slip_open
        - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info()
        - openvswitch: remove another BUG_ON()
        - selftests: bpf: test_sockmap: handle file creation failures gracefully
        - tipc: fix link name length check
        - sctp: cache netns in sctp_ep_common
        - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues
        - net: macb: add missed tasklet_kill
        - ext4: add more paranoia checking in ext4_expand_extra_isize handling
        - watchdog: sama5d4: fix WDD value to be always set to max
        - net: macb: Fix SUBNS increment and increase resolution
        - net: macb driver, check for SKBTX_HW_TSTAMP
        - mtd: rawnand: atmel: Fix spelling mistake in error message
        - mtd: rawnand: atmel: fix possible object reference leak
        - drm/atmel-hlcdc: revert shift by 8
        - mailbox: stm32_ipcc: add spinlock to fix channels concurrent access
        - tcp: exit if nothing to retransmit on RTO timeout
        - HID: core: check whether Usage Page item is after Usage ID items
        - crypto: stm32/hash - Fix hmac issue more than 256 bytes
        - media: stm32-dcmi: fix DMA corruption when stopping streaming
        - media: stm32-dcmi: fix check of pm_runtime_get_sync return value
        - hwrng: stm32 - fix unbalanced pm_runtime_enable
        - clk: stm32mp1: fix HSI divider flag
        - clk: stm32mp1: fix mcu divider table
        - clk: stm32mp1: add CLK_SET_RATE_NO_REPARENT to Kernel clocks
        - clk: stm32mp1: parent clocks update
        - mailbox: mailbox-test: fix null pointer if no mmio
        - pinctrl: stm32: fix memory leak issue
        - ASoC: stm32: i2s: fix dma configuration
        - ASoC: stm32: i2s: fix 16 bit format support
        - ASoC: stm32: i2s: fix IRQ clearing
        - ASoC: stm32: sai: add missing put_device()
        - platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer
        - platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size
        - net: fec: fix clock count mis-match
        - net: separate out the msghdr copy from ___sys_{send,recv}msg()
        - XArray: Fix xas_next() with a single entry at 0
        - thunderbolt: Fix lockdep circular locking depedency warning
        - soundwire: intel: fix intel_register_dai PDI offsets and numbers
        - clk: samsung: exynos542x: Move G3D subsystem clocks to its sub-CMU
        - arm64: dts: ls1028a: fix a compatible issue
        - soc: imx: gpc: fix initialiser format
        - bpf: Change size to u64 for bpf_map_{area_alloc, charge_init}()
        - idr: Fix idr_get_next_ul race with idr_remove
        - fbdev: c2p: Fix link failure on non-inlining
        - ASoC: hdac_hda: fix race in device removal
        - x86/tsc: Respect tsc command line paraemeter for clocksource_tsc_early
        - perf scripting engines: Iterate on tep event arrays directly
        - nvme-rdma: fix a segmentation fault during module unload
        - nvme-multipath: fix crash in nvme_mpath_clear_ctrl_paths
        - watchdog: pm8916_wdt: fix pretimeout registration flow
        - ALSA: hda: hdmi - add Tigerlake support
        - mm/gup_benchmark: fix MAP_HUGETLB case
        - drm/amdgpu: dont schedule jobs while in reset
        - net/mlx5e: Fix eswitch debug print of max fdb flow
        - drm/amdgpu: add warning for GRBM 1-cycle delay issue in gfx9
        - net: stmmac: gmac4: bitrev32 returns u32
        - net: stmmac: xgmac: Fix TSA selection
        - net: stmmac: xgmac: Disable Flow Control when 1 or more queues are in AV
        - mac80211: fix ieee80211_txq_setup_flows() failure path
        - ice: fix potential infinite loop because loop counter being too small
        - iavf: initialize ITRN registers with correct values
        - x86/fpu: Don't cache access to fpu_fpregs_owner_ctx
        - net/tls: take into account that bpf_exec_tx_verdict() may free the record
        - net/tls: free the record on encryption error
        - net: skmsg: fix TLS 1.3 crash with full sk_msg
        - selftests/tls: add a test for fragmented messages
        - net/tls: remove the dead inplace_crypto code
        - net/tls: use sg_next() to walk sg entries
        - selftests: bpf: correct perror strings
    
      * CVE-2019-19050
        - crypto: user - fix memory leak in crypto_reportstat
    
      * headphone has noise as not mute on dell machines with alc236/256
        (LP: #1854401)
        - SAUCE: ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236
    
      * Disco update: upstream stable patchset 2019-12-03 (LP: #1855011)
        - mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel
        - net/mlx4_en: fix mlx4 ethtool -N insertion
        - net/mlx4_en: Fix wrong limitation for number of TX rings
        - net: rtnetlink: prevent underflows in do_setvfinfo()
        - net/sched: act_pedit: fix WARN() in the traffic path
        - net: sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key
        - sfc: Only cancel the PPS workqueue if it exists
        - net/mlx5e: Fix set vf link state error flow
        - net/mlxfw: Verify FSM error code translation doesn't exceed array size
        - net/mlx5: Fix auto group size calculation
        - vhost/vsock: split packets to send using multiple buffers
        - gpio: max77620: Fixup debounce delays
        - tools: gpio: Correctly add make dependencies for gpio_utils
        - nbd:fix memory leak in nbd_get_socket()
        - virtio_console: allocate inbufs in add_port() only if it is needed
        - Revert "fs: ocfs2: fix possible null-pointer dereferences in
          ocfs2_xa_prepare_entry()"
        - mm/ksm.c: don't WARN if page is still mapped in remove_stable_node()
        - drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported ASICs
        - drm/i915/pmu: "Frequency" is reported as accumulated cycles
        - drm/i915/userptr: Try to acquire the page lock around set_page_dirty()
        - mwifiex: Fix NL80211_TX_POWER_LIMITED
        - Bluetooth: Fix invalid-free in bcsp_close()
        - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
        - ath9k_hw: fix uninitialized variable data
        - md/raid10: prevent access of uninitialized resync_pages offset
        - mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span()
        - net: phy: dp83867: fix speed 10 in sgmii mode
        - net: phy: dp83867: increase SGMII autoneg timer duration
        - ARM: 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary
        - x86/insn: Fix awk regexp warnings
        - x86/speculation: Fix incorrect MDS/TAA mitigation status
        - x86/speculation: Fix redundant MDS mitigation message
        - nbd: prevent memory leak
        - futex: Prevent robust futex exit race
        - ALSA: usb-audio: Fix NULL dereference at parsing BADD
        - nfc: port100: handle command failure cleanly
        - media: vivid: Set vid_cap_streaming and vid_out_streaming to true
        - media: vivid: Fix wrong locking that causes race conditions on streaming
          stop
        - media: usbvision: Fix races among open, close, and disconnect
        - cpufreq: Add NULL checks to show() and store() methods of cpufreq
        - media: uvcvideo: Fix error path in control parsing failure
        - media: b2c2-flexcop-usb: add sanity checking
        - media: cxusb: detect cxusb_ctrl_msg error in query
        - media: imon: invalid dereference in imon_touch_event
        - virtio_ring: fix return code on DMA mapping fails
        - USBIP: add config dependency for SGL_ALLOC
        - usbip: tools: fix fd leakage in the function of read_attr_usbip_status
        - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
        - usb-serial: cp201x: support Mark-10 digital force gauge
        - USB: chaoskey: fix error case of a timeout
        - appledisplay: fix error handling in the scheduled work
        - USB: serial: mos7840: add USB ID to support Moxa UPort 2210
        - USB: serial: mos7720: fix remote wakeup
        - USB: serial: mos7840: fix remote wakeup
        - USB: serial: option: add support for DW5821e with eSIM support
        - USB: serial: option: add support for Foxconn T77W968 LTE modules
        - staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
        - net/tls: remove unused function tls_sw_sendpage_locked
        - net/tls: enable sk_msg redirect to tls socket egress
        - net/mlx5e: Fix error flow cleanup in mlx5e_tc_tun_create_header_ipv4/6
        - net/mlx5: Update the list of the PCI supported devices
        - net/mlx5: Update the list of the PCI supported devices
        - virtio_balloon: fix shrinker count
        - drm/amdgpu: disable gfxoff when using register read interface
        - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues"
        - x86/xen/32: Make xen_iret_crit_fixup() independent of frame layout
        - x86/xen/32: Simplify ring check in xen_iret_crit_fixup()
        - x86/doublefault/32: Fix stack canaries in the double fault handler
        - x86/pti/32: Size initial_page_table correctly
        - x86/cpu_entry_area: Add guard page for entry stack on 32bit
        - selftests/x86/mov_ss_trap: Fix the SYSENTER test
        - selftests/x86/sigreturn/32: Invalidate DS and ES when abusing the kernel
        - x86/pti/32: Calculate the various PTI cpu_entry_area sizes correctly, make
          the CPU_ENTRY_AREA_PAGES assert precise
        - x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3
        - media: usbvision: Fix invalid accesses after device disconnect
        - media: mceusb: fix out of bounds read in MCE receiver buffer
    
      * Miscellaneous Ubuntu changes
        - update dkms package versions
    
     -- Marcelo Henrique Cerri <email address hidden>  Thu, 09 Jan 2020 09:33:14 -0300
  • linux (5.0.0-38.41) disco; urgency=medium
    
      * disco/linux: 5.0.0-38.41 -proposed tracker (LP: #1854788)
    
      * [Regression] Failed to boot disco kernel built from master-next (kernel
        kernel NULL pointer dereference) (LP: #1853981)
        - SAUCE: blk-mq: Fix blk_mq_make_request for mq devices
    
      * CVE-2019-14901
        - SAUCE: mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()
    
      * CVE-2019-14896 // CVE-2019-14897
        - SAUCE: libertas: Fix two buffer overflows at parsing bss descriptor
    
      * CVE-2019-14895
        - SAUCE: mwifiex: fix possible heap overflow in mwifiex_process_country_ie()
    
      * [CML] New device id's for CMP-H (LP: #1846335)
        - mmc: sdhci-pci: Add another Id for Intel CML
        - i2c: i801: Add support for Intel Comet Lake PCH-H
        - mtd: spi-nor: intel-spi: Add support for Intel Comet Lake-H SPI serial flash
        - mfd: intel-lpss: Add Intel Comet Lake PCH-H PCI IDs
    
      * Please add patch fixing RK818 ID detection (LP: #1853192)
        - SAUCE: mfd: rk808: Fix RK818 ID template
    
      * [SRU][B/OEM-B/OEM-OSP1/D] Enable new Elan touchpads which are not in current
        whitelist (LP: #1853246)
        - Input: elan_i2c - export the device id whitelist
        - HID: quirks: Refactor ELAN 400 and 401 handling
    
      * Lenovo dock MAC Address pass through doesn't work in Ubuntu  (LP: #1827961)
        - r8152: Add macpassthru support for ThinkPad Thunderbolt 3 Dock Gen 2
    
      * [CML-S62] Need enable turbostat patch support for Comet lake- S 6+2
        (LP: #1847451)
        - SAUCE: tools/power turbostat: Add Cometlake support
    
      * External microphone can't work on some dell machines with the codec alc256
        or alc236 (LP: #1853791)
        - SAUCE: ALSA: hda/realtek - Move some alc256 pintbls to fallback table
        - SAUCE: ALSA: hda/realtek - Move some alc236 pintbls to fallback table
    
      * Memory leak in net/xfrm/xfrm_state.c - 8 pages per ipsec connection
        (LP: #1853197)
        - xfrm: Fix memleak on xfrm state destroy
    
      * CVE-2019-18660: patches for Ubuntu (LP: #1853142) // CVE-2019-18660
        - powerpc/64s: support nospectre_v2 cmdline option
        - powerpc/book3s64: Fix link stack flush on context switch
        - KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel
    
      * Raydium Touchscreen on ThinkPad L390 does not work (LP: #1849721)
        - HID: i2c-hid: fix no irq after reset on raydium 3118
    
      * Make Goodix I2C touchpads work (LP: #1853842)
        - HID: i2c-hid: Remove runtime power management
        - HID: i2c-hid: Send power-on command after reset
    
      * Touchpad doesn't work on Dell Inspiron 7000 2-in-1 (LP: #1851901)
        - Revert "UBUNTU: SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390
          2-in-1"
        - lib: devres: add a helper function for ioremap_uc
        - mfd: intel-lpss: Use devm_ioremap_uc for MMIO
    
      * CVE-2019-19055
        - nl80211: fix memory leak in nl80211_get_ftm_responder_stats
    
      * [CML-S62] Need enable intel_rapl patch support for Comet lake- S 6+2
        (LP: #1847454)
        - powercap/intel_rapl: add support for CometLake Mobile
        - powercap/intel_rapl: add support for Cometlake desktop
    
      * [CML-S62] Need enable intel_pmc_core driver patch for Comet lake- S 6+2
        (LP: #1847450)
        - SAUCE: platform/x86: intel_pmc_core: Add Comet Lake (CML) platform support
          to intel_pmc_core driver
    
      * update ENA driver for DIMLIB dynamic interrupt moderation (LP: #1853180)
        - net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it
        - net: ena: switch to dim algorithm for rx adaptive interrupt moderation
        - net: ena: reimplement set/get_coalesce()
        - net: ena: enable the interrupt_moderation in driver_supported_features
        - net: ena: remove code duplication in
          ena_com_update_nonadaptive_moderation_interval _*()
        - net: ena: remove old adaptive interrupt moderation code from ena_netdev
        - net: ena: remove ena_restore_ethtool_params() and relevant fields
        - net: ena: remove all old adaptive rx interrupt moderation code from ena_com
        - net: ena: fix update of interrupt moderation register
        - net: ena: fix retrieval of nonadaptive interrupt moderation intervals
        - net: ena: fix incorrect update of intr_delay_resolution
        - net: ena: Select DIMLIB for ENA_ETHERNET
        - SAUCE: net: ena: fix issues in setting interrupt moderation params in
          ethtool
        - SAUCE: net: ena: fix too long default tx interrupt moderation interval
    
      * CONFIG_ARCH_ROCKCHIP is not set in ubuntu 18.04 aarch64,arm64 (LP: #1825222)
        - [Config] Enable ROCKCHIP support for arm64
    
      * remount of multilower moved pivoted-root overlayfs root, results in I/O
        errors on some modified files (LP: #1824407)
        - SAUCE: ovl: fix lookup failure on multi lower squashfs
    
      * backport DIMLIB (lib/dim/) to pre-5.2 kernels (LP: #1852637)
        - linux/dim: Move logic to dim.h
        - linux/dim: Remove "net" prefix from internal DIM members
        - linux/dim: Rename externally exposed macros
        - linux/dim: Rename net_dim_sample() to net_dim_update_sample()
        - linux/dim: Rename externally used net_dim members
        - [Config] updateconfigs for DIMLIB
        - linux/dim: Move implementation to .c files
        - linux/dim: Add completions count to dim_sample
        - linux/dim: Implement RDMA adaptive moderation (DIM)
        - linux/dim: Fix overflow in dim calculation
        - lib/dim: Fix -Wunused-const-variable warnings
    
      * The alsa hda driver is not loaded due to the missing of PCIID for Comet
        Lake-S [8086:a3f0] (LP: #1852070)
        - SAUCE: ALSA: hda: Add Cometlake-S PCI ID
    
      * Can't adjust brightness on DELL UHD dGPU AIO (LP: #1813877)
        - SAUCE: platform/x86: dell-uart-backlight: add missing status command
        - SAUCE: platform/x86: dell-uart-backlight: load driver by scalar status
        - SAUCE: platform/x86: dell-uart-backlight: add force parameter
        - SAUCE: platform/x86: dell-uart-backlight: add quirk for old platforms
    
      * Enable framebuffer fonts auto selection for HighDPI screen (LP: #1851623)
        - fonts: Fix coding style
        - fonts: Prefer a bigger font for high resolution screens
    
      * Disable unreliable HPET on CFL-H system (LP: #1852216)
        - SAUCE: x86/intel: Disable HPET on Intel Coffe Lake H platforms
    
      * i40e: Setting VF MAC address causes General Protection Fault (LP: #1852432)
        - i40e: Fix crash caused by stress setting of VF MAC addresses
    
      * CVE-2019-19072
        - tracing: Have error path in predicate_parse() free its allocated memory
    
      * CVE-2019-2214
        - binder: Set end of SG buffer area properly.
    
      * Disco update: upstream stable patchset 2019-11-27 (LP: #1854229)
        - i2c: mediatek: modify threshold passed to i2c_get_dma_safe_msg_buf()
        - Revert "OPP: Protect dev_list with opp_table lock"
        - net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size()
        - mm/memory_hotplug: don't access uninitialized memmaps in shrink_pgdat_span()
        - mm/memory_hotplug: fix updating the node span
        - arm64: uaccess: Ensure PAN is re-enabled after unhandled uaccess fault
        - fbdev: Ditch fb_edid_add_monspecs
        - bpf, x32: Fix bug for BPF_ALU64 | BPF_NEG
        - bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_X shift by 0
        - bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_K shift by 0
        - bpf, x32: Fix bug for BPF_JMP | {BPF_JSGT, BPF_JSLE, BPF_JSLT, BPF_JSGE}
        - bpf: btf: Fix a missing check bug
    
      * Disco update: upstream stable patchset 2019-11-26 (LP: #1854094)
        - KVM: x86: introduce is_pae_paging
        - scsi: core: Handle drivers which set sg_tablesize to zero
        - ax88172a: fix information leak on short answers
        - ipmr: Fix skb headroom in ipmr_get_route().
        - net: gemini: add missed free_netdev
        - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules
        - slip: Fix memory leak in slip_open error path
        - ALSA: usb-audio: Fix missing error check at mixer resolution test
        - ALSA: usb-audio: not submit urb for stopped endpoint
        - ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk()
        - ALSA: usb-audio: Fix incorrect size check for processing/extension units
        - Btrfs: fix log context list corruption after rename exchange operation
        - Input: ff-memless - kill timer in destroy()
        - Input: synaptics-rmi4 - fix video buffer size
        - Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver
        - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12)
        - Input: synaptics-rmi4 - clear IRQ enables for F54
        - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing
        - IB/hfi1: Ensure full Gen3 speed in a Gen4 system
        - IB/hfi1: Use a common pad buffer for 9B and 16B packets
        - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present
        - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable
        - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either
        - net: ethernet: dwmac-sun8i: Use the correct function in exit path
        - iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros
        - mm: mempolicy: fix the wrong return value and potential pages leak of mbind
        - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm()
        - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup()
        - mmc: sdhci-of-at91: fix quirk2 overwrite
        - dmaengine: at_xdmac: remove a stray bottom half unlock
        - slcan: Fix memory leak in error path
        - tcp: remove redundant new line from tcp_event_sk_skb
        - dpaa2-eth: free already allocated channels on probe defer
        - KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved
        - drm/i915: update rawclk also on resume
        - ntp/y2038: Remove incorrect time_t truncation
        - mm/page_io.c: do not free shared swap slots
    
      * Disco update: upstream stable patchset 2019-11-22 (LP: #1853659)
        - bonding: fix state transition issue in link monitoring
        - CDC-NCM: handle incomplete transfer of MTU
        - ipv4: Fix table id reference in fib_sync_down_addr
        - net: ethernet: octeon_mgmt: Account for second possible VLAN header
        - net: fix data-race in neigh_event_send()
        - net: qualcomm: rmnet: Fix potential UAF when unregistering
        - net: usb: qmi_wwan: add support for DW5821e with eSIM support
        - NFC: fdp: fix incorrect free object
        - nfc: netlink: fix double device reference drop
        - NFC: st21nfca: fix double free
        - qede: fix NULL pointer deref in __qede_remove()
        - net: mscc: ocelot: don't handle netdev events for other netdevs
        - net: mscc: ocelot: fix NULL pointer on LAG slave removal
        - ipv6: fixes rt6_probe() and fib6_nh->last_probe init
        - net: hns: Fix the stray netpoll locks causing deadlock in NAPI path
        - ALSA: timer: Fix incorrectly assigned timer instance
        - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite
          Saffire Pro i/o series
        - ALSA: hda/ca0132 - Fix possible workqueue stall
        - mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges
        - mm, meminit: recalculate pcpu batch and high limits after init completes
        - mm: thp: handle page cache THP correctly in PageTransCompoundMap
        - mm, vmstat: hide /proc/pagetypeinfo from normal users
        - dump_stack: avoid the livelock of the dump_lock
        - tools: gpio: Use !building_out_of_srctree to determine srctree
        - perf tools: Fix time sorting
        - drm/radeon: fix si_enable_smc_cac() failed issue
        - HID: wacom: generic: Treat serial number and related fields as unsigned
        - soundwire: depend on ACPI
        - soundwire: bus: set initial value to port_status
        - arm64: Do not mask out PTE_RDONLY in pte_same()
        - ceph: fix use-after-free in __ceph_remove_cap()
        - ceph: add missing check in d_revalidate snapdir handling
        - iio: adc: stm32-adc: fix stopping dma
        - iio: imu: adis16480: make sure provided frequency is positive
        - iio: srf04: fix wrong limitation in distance measuring
        - ARM: sunxi: Fix CPU powerdown on A83T
        - netfilter: nf_tables: Align nft_expr private data to 64-bit
        - netfilter: ipset: Fix an error code in ip_set_sockfn_get()
        - intel_th: pci: Add Comet Lake PCH support
        - intel_th: pci: Add Jasper Lake PCH support
        - x86/apic/32: Avoid bogus LDR warnings
        - SMB3: Fix persistent handles reconnect
        - can: usb_8dev: fix use-after-free on disconnect
        - can: flexcan: disable completely the ECC mechanism
        - can: c_can: c_can_poll(): only read status register after status IRQ
        - can: peak_usb: fix a potential out-of-sync while decoding packets
        - can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid
          skb mem leak
        - can: gs_usb: gs_can_open(): prevent memory leak
        - can: dev: add missing of_node_put() after calling of_get_child_by_name()
        - can: mcba_usb: fix use-after-free on disconnect
        - can: peak_usb: fix slab info leak
        - configfs: stash the data we need into configfs_buffer at open time
        - configfs_register_group() shouldn't be (and isn't) called in rmdirable parts
        - configfs: new object reprsenting tree fragments
        - configfs: provide exclusion between IO and removals
        - configfs: fix a deadlock in configfs_symlink()
        - ALSA: usb-audio: More validations of descriptor units
        - ALSA: usb-audio: Simplify parse_audio_unit()
        - ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects
        - ALSA: usb-audio: Remove superfluous bLength checks
        - ALSA: usb-audio: Clean up check_input_term()
        - ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk()
        - ALSA: usb-audio: remove some dead code
        - ALSA: usb-audio: Fix copy&paste error in the validator
        - usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path
        - usbip: Implement SG support to vhci-hcd and stub driver
        - PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30
        - HID: google: add magnemite/masterball USB ids
        - dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config
        - dmaengine: sprd: Fix the possible memory leak issue
        - HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring()
        - RDMA/mlx5: Clear old rate limit when closing QP
        - iw_cxgb4: fix ECN check on the passive accept
        - RDMA/qedr: Fix reported firmware version
        - net/mlx5e: TX, Fix consumer index of error cqe dump
        - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq
        - scsi: qla2xxx: fixup incorrect usage of host_byte
        - RDMA/uverbs: Prevent potential underflow
        - net: openvswitch: free vport unless register_netdevice() succeeds
        - scsi: lpfc: Honor module parameter lpfc_use_adisc
        - scsi: qla2xxx: Initialized mailbox to prevent driver load failure
        - netfilter: nf_flow_table: set timeout before insertion into hashes
        - ipvs: don't ignore errors in case refcounting ip_vs module fails
        - ipvs: move old_secure_tcp into struct netns_ipvs
        - bonding: fix unexpected IFF_BONDING bit unset
        - macsec: fix refcnt leak in module exit routine
        - usb: fsl: Check memory resource before releasing it
        - usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode.
        - usb: gadget: composite: Fix possible double free memory bug
        - usb: dwc3: pci: prevent memory leak in dwc3_pci_probe
        - usb: gadget: configfs: fix concurrent issue between composite APIs
        - usb: dwc3: remove the call trace of USBx_GFLADJ
        - perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise
          RIP validity
        - perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h)
        - perf/x86/uncore: Fix event group support
        - USB: Skip endpoints with 0 maxpacket length
        - USB: ldusb: use unsigned size format specifiers
        - usbip: tools: Fix read_usb_vudc_device() error path handling
        - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case
        - RDMA/hns: Prevent memory leaks of eq->buf_list
        - scsi: qla2xxx: stop timer in shutdown path
        - nvme-multipath: fix possible io hang after ctrl reconnect
        - fjes: Handle workqueue allocation failure
        - net: hisilicon: Fix "Trying to free already-free IRQ"
        - net: mscc: ocelot: fix vlan_filtering when enslaving to bridge before link
          is up
        - net: mscc: ocelot: refuse to overwrite the port's native vlan
        - iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41
        - drm/amdgpu: If amdgpu_ib_schedule fails return back the error.
        - drm/amd/display: Passive DP->HDMI dongle detection fix
        - hv_netvsc: Fix error handling in netvsc_attach()
        - usb: dwc3: gadget: fix race when disabling ep with cancelled xfers
        - NFSv4: Don't allow a cached open with a revoked delegation
        - net: ethernet: arc: add the missed clk_disable_unprepare
        - igb: Fix constant media auto sense switching when no cable is connected
        - e1000: fix memory leaks
        - pinctrl: intel: Avoid potential glitches if pin is in GPIO mode
        - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write()
        - pinctrl: cherryview: Fix irq_valid_mask calculation
        - blkcg: make blkcg_print_stat() print stats only for online blkgs
        - iio: imu: mpu6050: Add support for the ICM 20602 IMU
        - iio: imu: inv_mpu6050: fix no data on MPU6050
        - mm/filemap.c: don't initiate writeback if mapping has no dirty pages
        - cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is
          dead
        - usbip: Fix free of unallocated memory in vhci tx
        - netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets
        - net: prevent load/store tearing on sk->sk_stamp
        - iio: imu: mpu6050: Fix FIFO layout for ICM20602
        - vsock/virtio: fix sock refcnt holding during the shutdown
        - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs
        - x86/cpu: Add Tremont to the cpu vulnerability whitelist
        - Documentation: Add ITLB_MULTIHIT documentation
        - net/tls: fix sk_msg trim on fallback to copy mode
        - net/tls: add a TX lock
        - selftests/tls: add test for concurrent recv and send
        - net/smc: fix ethernet interface refcounting
        - perf map: Use zalloc for map_groups
        - soundwire: depend on ACPI || OF
        - ASoC: rsnd: dma: fix SSI9 4/5/6/7 busif dma address
        - ceph: fix RCU case handling in ceph_d_revalidate()
        - ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open
        - ceph: don't allow copy_file_range when stripe_count != 1
        - cpufreq: intel_pstate: Fix invalid EPB setting
        - dmaengine: sprd: Fix the link-list pointer register configuration issue
        - dmaengine: xilinx_dma: Fix 64-bit simple AXIDMA transfer
        - net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow
        - scsi: ufs-bsg: Wake the device before sending raw upiu commands
        - bpf: Fix use after free in subprog's jited symbol removal
        - bpf: Fix use after free in bpf_get_prog_name
        - xsk: Fix registration of Rx-only sockets
        - net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag
        - virt_wifi: fix refcnt leak in module exit routine
        - hwmon: (ina3221) Fix read timeout issue
        - sched/topology: Don't try to build empty sched domains
        - sched/topology: Allow sched_asym_cpucapacity to be disabled
        - mt76: dma: fix buffer unmap with non-linear skbs
        - drm/amd/display: do not synchronize "drr" displays
        - SUNRPC: The RDMA back channel mustn't disappear while requests are
          outstanding
        - efi: libstub/arm: Account for firmware reserved memory at the base of RAM
        - x86, efi: Never relocate kernel below lowest acceptable address
        - arm64: cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo
        - arm64: apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core
        - arm64: Brahma-B53 is SSB and spectre v2 safe
        - arm64: apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core
        - arm64: errata: Update stale comment
        - net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run
    
      * Disco update: upstream stable patchset 2019-11-20 (LP: #1853382)
        - regulator: of: fix suspend-min/max-voltage parsing
        - ASoC: wm8994: Do not register inapplicable controls for WM1811
        - arm64: dts: allwinner: a64: pine64-plus: Add PHY regulator delay
        - arm64: dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay
        - arm64: dts: Fix gpio to pinmux mapping
        - regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone
        - ASoC: rt5682: add NULL handler to set_jack function
        - regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe()
          could be uninitialized
        - ASoC: wm_adsp: Don't generate kcontrols without READ flags
        - ASoc: rockchip: i2s: Fix RPM imbalance
        - ARM: dts: logicpd-torpedo-som: Remove twl_keypad
        - pinctrl: ns2: Fix off by one bugs in ns2_pinmux_enable()
        - ARM: mm: fix alignment handler faults under memory pressure
        - scsi: qla2xxx: fix a potential NULL pointer dereference
        - scsi: scsi_dh_alua: handle RTPG sense code correctly during state
          transitions
        - scsi: sni_53c710: fix compilation error
        - scsi: fix kconfig dependency warning related to 53C700_LE_ON_BE
        - ARM: dts: imx7s: Correct GPT's ipg clock source
        - perf c2c: Fix memory leak in build_cl_output()
        - 8250-men-mcb: fix error checking when get_num_ports returns -ENODEV
        - perf kmem: Fix memory leak in compact_gfp_flags()
        - ARM: davinci: dm365: Fix McBSP dma_slave_map entry
        - drm/amdgpu: fix potential VM faults
        - scsi: target: core: Do not overwrite CDB byte 1
        - tracing: Fix "gfp_t" format for synthetic events
        - ARM: 8926/1: v7m: remove register save to stack before svc
        - of: unittest: fix memory leak in unittest_data_add
        - MIPS: bmips: mark exception vectors as char arrays
        - irqchip/gic-v3-its: Use the exact ITSList for VMOVP
        - i2c: stm32f7: fix first byte to send in slave mode
        - i2c: stm32f7: fix a race in slave mode with arbitration loss irq
        - i2c: stm32f7: remove warning when compiling with W=1
        - cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs
        - nbd: protect cmd->status with cmd->lock
        - nbd: handle racing with error'ed out commands
        - cxgb4: fix panic when attaching to ULD fail
        - dccp: do not leak jiffies on the wire
        - erspan: fix the tun_info options_len check for erspan
        - inet: stop leaking jiffies on the wire
        - net: annotate accesses to sk->sk_incoming_cpu
        - net: annotate lockless accesses to sk->sk_napi_id
        - net: dsa: bcm_sf2: Fix IMP setup for port different than 8
        - net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum
        - net: fix sk_page_frag() recursion from memory reclaim
        - net: hisilicon: Fix ping latency when deal with high throughput
        - net/mlx4_core: Dynamically set guaranteed amount of counters per VF
        - netns: fix GFP flags in rtnl_net_notifyid()
        - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq()
        - selftests: net: reuseport_dualstack: fix uninitalized parameter
        - udp: fix data-race in udp_set_dev_scratch()
        - vxlan: check tun_info options_len properly
        - net: add skb_queue_empty_lockless()
        - udp: use skb_queue_empty_lockless()
        - net: use skb_queue_empty_lockless() in poll() handlers
        - net: use skb_queue_empty_lockless() in busy poll contexts
        - net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
        - ipv4: fix route update on metric change.
        - selftests: fib_tests: add more tests for metric update
        - net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget
        - r8169: fix wrong PHY ID issue with RTL8168dp
        - net/mlx5e: Fix ethtool self test: link speed
        - net: dsa: b53: Do not clear existing mirrored port mask
        - net: bcmgenet: don't set phydev->link from MAC
        - net: phy: bcm7xxx: define soft_reset for 40nm EPHY
        - net: bcmgenet: reset 40nm EPHY on energy detect
        - net: usb: lan78xx: Connect PHY before registering MAC
        - net: dsa: fix switch tree list
        - r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2
        - net/flow_dissector: switch to siphash
        - wireless: Skip directory when generating certificates
        - platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI
          table
        - powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9
        - selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue
        - selftests/powerpc: Fix compile error on tlbie_test due to newer gcc
        - ASoC: pcm3168a: The codec does not support S32_LE
        - arm64: dts: ti: k3-am65-main: Fix gic-its node unit-address
        - usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending
          driver fails
        - regulator: da9062: fix suspend_enable/disable preparation
        - ASoC: topology: Fix a signedness bug in soc_tplg_dapm_widget_create()
        - pinctrl: intel: Allocate IRQ chip dynamic
        - arm64: dts: rockchip: fix Rockpro64 RK808 interrupt line
        - arm64: dts: rockchip: fix RockPro64 vdd-log regulator settings
        - arm64: dts: rockchip: fix RockPro64 sdhci settings
        - ARM: 8908/1: add __always_inline to functions called from __get_user_check()
        - arm64: dts: rockchip: fix RockPro64 sdmmc settings
        - ARM: dts: vf610-zii-scu4-aib: Specify 'i2c-mux-idle-disconnect'
        - arm64: dts: imx8mq: Use correct clock for usdhc's ipg clk
        - drm/amdgpu: fix error handling in amdgpu_bo_list_create
        - ARM: dts: bcm2837-rpi-cm3: Avoid leds-gpio probing issue
        - ALSA: hda: Add Elkhart Lake PCI ID
        - ALSA: hda: Add Tigerlake/Jasperlake PCI ID
        - irqchip/sifive-plic: Skip contexts except supervisor in plic_init()
        - net: rtnetlink: fix a typo fbd -> fdb
        - net/mlx5: Fix flow counter list auto bits struct
        - net: hns3: fix mis-counting IRQ vector numbers issue
        - net: reorder 'struct net' fields to avoid false sharing
        - net: netem: correct the parent's backlog when corrupted packet was dropped
        - CIFS: Fix retry mid list corruption on reconnects
    
      * Disco update: upstream stable patchset 2019-11-18 (LP: #1853067)
        - dm snapshot: introduce account_start_copy() and account_end_copy()
        - dm snapshot: rework COW throttling to fix deadlock
        - Btrfs: fix inode cache block reserve leak on failure to allocate data space
        - btrfs: qgroup: Always free PREALLOC META reserve in
          btrfs_delalloc_release_extents()
        - f2fs: flush quota blocks after turnning it off
        - drm/msm/dpu: handle failures while initializing displays
        - bcache: fix input overflow to writeback_rate_minimum
        - ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
        - staging: mt7621-pinctrl: use pinconf-generic for 'dt_node_to_map' and
          'dt_free_map'
        - HID: Add ASUS T100CHI keyboard dock battery quirks
        - HID: steam: fix boot loop with bluetooth firmware
        - HID: steam: fix deadlock with input devices.
        - usb: dwc3: gadget: early giveback if End Transfer already completed
        - usb: dwc3: gadget: clear DWC3_EP_TRANSFER_STARTED on cmd complete
        - ALSA: usb-audio: Cleanup DSD whitelist
        - usb: handle warm-reset port requests on hub resume
        - rtc: pcf8523: set xtal load capacitance from DT
        - arm64: Add MIDR encoding for HiSilicon Taishan CPUs
        - arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs
        - mlxsw: spectrum: Set LAG port collector only when active
        - scsi: lpfc: Correct localport timeout duration error
        - CIFS: Respect SMB2 hdr preamble size in read responses
        - cifs: add credits from unmatched responses/messages
        - ALSA: hda/realtek - Apply ALC294 hp init also for S4 resume
        - media: vimc: Remove unused but set variables
        - ext4: disallow files with EXT4_JOURNAL_DATA_FL from EXT4_IOC_SWAP_BOOT
        - net: dsa: mv88e6xxx: Release lock while requesting IRQ
        - PCI/PME: Fix possible use-after-free on remove
        - drm/amd/display: fix odm combine pipe reset
        - power: supply: max14656: fix potential use-after-free
        - iio: adc: meson_saradc: Fix memory allocation order
        - iio: fix center temperature of bmc150-accel-core
        - libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature
        - perf tests: Avoid raising SEGV using an obvious NULL dereference
        - perf map: Fix overlapped map handling
        - perf script brstackinsn: Fix recovery from LBR/binary mismatch
        - perf jevents: Fix period for Intel fixed counters
        - perf tools: Propagate get_cpuid() error
        - perf annotate: Propagate perf_env__arch() error
        - perf annotate: Fix the signedness of failure returns
        - perf annotate: Propagate the symbol__annotate() error return
        - perf annotate: Return appropriate error code for allocation failures
        - staging: rtl8188eu: fix null dereference when kzalloc fails
        - RDMA/hfi1: Prevent memory leak in sdma_init
        - RDMA/iwcm: Fix a lock inversion issue
        - HID: hyperv: Use in-place iterator API in the channel callback
        - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request
        - arm64: ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 #1542419
        - tty: serial: owl: Fix the link time qualifier of 'owl_uart_exit()'
        - tty: n_hdlc: fix build on SPARC
        - gpio: max77620: Use correct unit for debounce times
        - fs: cifs: mute -Wunused-const-variable message
        - serial: mctrl_gpio: Check for NULL pointer
        - efi/cper: Fix endianness of PCIe class code
        - efi/x86: Do not clean dummy variable in kexec path
        - MIPS: include: Mark __cmpxchg as __always_inline
        - x86/xen: Return from panic notifier
        - ocfs2: clear zero in unaligned direct IO
        - fs: ocfs2: fix possible null-pointer dereferences in
          ocfs2_xa_prepare_entry()
        - fs: ocfs2: fix a possible null-pointer dereference in
          ocfs2_write_end_nolock()
        - fs: ocfs2: fix a possible null-pointer dereference in
          ocfs2_info_scan_inode_alloc()
        - arm64: armv8_deprecated: Checking return value for memory allocation
        - sched/vtime: Fix guest/system mis-accounting on task switch
        - perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp
        - drm/amdgpu: fix memory leak
        - iio: imu: adis16400: release allocated memory on failure
        - MIPS: include: Mark __xchg as __always_inline
        - MIPS: fw: sni: Fix out of bounds init of o32 stack
        - virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr
        - nbd: fix possible sysfs duplicate warning
        - NFSv4: Fix leak of clp->cl_acceptor string
        - s390/uaccess: avoid (false positive) compiler warnings
        - tracing: Initialize iter->seq after zeroing in tracing_read_pipe()
        - ARM: 8914/1: NOMMU: Fix exc_ret for XIP
        - nbd: verify socket is supported during setup
        - USB: legousbtower: fix a signedness bug in tower_probe()
        - thunderbolt: Use 32-bit writes when writing ring producer/consumer
        - fuse: flush dirty data/metadata before non-truncate setattr
        - fuse: truncate pending writes on O_TRUNC
        - ALSA: bebob: Fix prototype of helper function to return negative value
        - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather
          segments")
        - USB: gadget: Reject endpoints with 0 maxpacket value
        - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
          virt_boundary_mask to avoid SG overflows")
        - USB: ldusb: fix ring-buffer locking
        - USB: ldusb: fix control-message timeout
        - usb: xhci: fix __le32/__le64 accessors in debugfs code
        - USB: serial: whiteheat: fix potential slab corruption
        - USB: serial: whiteheat: fix line-speed endianness
        - scsi: target: cxgbit: Fix cxgbit_fw4_ack()
        - HID: i2c-hid: add Trekstor Primebook C11B to descriptor override
        - HID: Fix assumption that devices have inputs
        - HID: fix error message in hid_open_report()
        - nl80211: fix validation of mesh path nexthop
        - s390/cmm: fix information leak in cmm_timeout_handler()
        - s390/idle: fix cpu idle time calculation
        - arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default
        - dmaengine: qcom: bam_dma: Fix resource leak
        - dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle
        - drm/amdgpu/powerplay/vega10: allow undervolting in p7
        - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid()
        - batman-adv: Avoid free/alloc race when handling OGM buffer
        - llc: fix sk_buff leak in llc_sap_state_process()
        - llc: fix sk_buff leak in llc_conn_service()
        - rxrpc: Fix call ref leak
        - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
        - rxrpc: Fix trace-after-put looking at the put peer record
        - NFC: pn533: fix use-after-free and memleaks
        - bonding: fix potential NULL deref in bond_update_slave_arr
        - net: usb: sr9800: fix uninitialized local variable
        - sch_netem: fix rcu splat in netem_enqueue()
        - ALSA: timer: Simplify error path in snd_timer_open()
        - ALSA: timer: Fix mutex deadlock at releasing card
        - ALSA: usb-audio: DSD auto-detection for Playback Designs
        - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel
        - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface
        - powerpc/powernv: Fix CPU idle to be called with IRQs disabled
        - Revert "ALSA: hda: Flush interrupts on disabling"
        - perf annotate: Fix arch specific ->init() failure errors
        - kselftest: exclude failed TARGETS from runlist
        - tty: serial: rda: Fix the link time qualifier of 'rda_uart_exit()'
        - RDMA/cm: Fix memory leak in cm_add/remove_one
        - sched/fair: Scale bandwidth quota and period without losing quota/period
          ratio precision
        - perf/core: Rework memory accounting in perf_mmap()
        - perf/core: Fix corner case in perf_rotate_context()
        - iio: imu: st_lsm6dsx: fix waitime for st_lsm6dsx i2c controller
        - HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
        - um-ubd: Entrust re-queue to the upper layers
        - ARC: perf: Accommodate big-endian CPU
        - arm64: cpufeature: Enable Qualcomm Falkor/Kryo errata 1003
        - virtio_ring: fix stalls for packed rings
        - rtlwifi: rtl_pci: Fix problem of too small skb->len
        - dmaengine: imx-sdma: fix size check for sdma script_number
        - sched/fair: Fix low cpu usage with high throttling by removing expiration of
          cpu-local slices
        - sched/fair: Fix -Wunused-but-set-variable warnings
    
      * Dell XPS 13 9350/9360 headphone audio hiss (LP: #1654448) // [XPS 13 9360,
        Realtek ALC3246, Black Headphone Out, Front] High noise floor
        (LP: #1845810) // Disco update: upstream stable patchset 2019-11-18
        (LP: #1853067)
        - ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360
    
      * Disco update: upstream stable patchset 2019-11-13 (LP: #1852459)
        - nvme-pci: Fix a race in controller removal
        - scsi: ufs: skip shutdown if hba is not powered
        - scsi: megaraid: disable device when probe failed after enabled device
        - scsi: qla2xxx: Fix unbound sleep in fcport delete path.
        - ARM: OMAP2+: Fix missing reset done flag for am3 and am43
        - ARM: OMAP2+: Fix warnings with broken omap2_set_init_voltage()
        - ieee802154: ca8210: prevent memory leak
        - ARM: dts: am4372: Set memory bandwidth limit for DISPC
        - net: dsa: qca8k: Use up to 7 ports for all operations
        - MIPS: dts: ar9331: fix interrupt-controller size
        - xen/efi: Set nonblocking callbacks
        - nl80211: fix null pointer dereference
        - mac80211: fix txq null pointer dereference
        - netfilter: nft_connlimit: disable bh on garbage collection
        - net: dsa: rtl8366rb: add missing of_node_put after calling
          of_get_child_by_name
        - mips: Loongson: Fix the link time qualifier of 'serial_exit()'
        - net: hisilicon: Fix usage of uninitialized variable in function
          mdio_sc_cfg_reg_write()
        - lib: textsearch: fix escapes in example code
        - namespace: fix namespace.pl script to support relative paths
        - libata/ahci: Fix PCS quirk application
        - Revert "drm/radeon: Fix EEH during kexec"
        - ocfs2: fix panic due to ocfs2_wq is null
        - ipv4: fix race condition between route lookup and invalidation
        - ipv4: Return -ENETUNREACH if we can't create route but saddr is valid
        - net: avoid potential infinite loop in tc_ctl_action()
        - net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3
        - net: bcmgenet: Set phydev->dev_flags only for internal PHYs
        - net: i82596: fix dma_alloc_attr for sni_82596
        - net/ibmvnic: Fix EOI when running in XIVE mode.
        - net: ipv6: fix listify ip6_rcv_finish in case of forwarding
        - net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow
        - sctp: change sctp_prot .no_autobind with true
        - USB: legousbtower: fix memleak on disconnect
        - ALSA: hda/realtek - Add support for ALC711
        - ALSA: hda/realtek - Enable headset mic on Asus MJ401TA
        - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers
        - ALSA: hda - Force runtime PM on Nvidia HDMI codecs
        - usb: udc: lpc32xx: fix bad bit shift operation
        - USB: serial: ti_usb_3410_5052: fix port-close races
        - USB: ldusb: fix memleak on disconnect
        - USB: usblp: fix use-after-free on disconnect
        - USB: ldusb: fix read info leaks
        - MIPS: tlbex: Fix build_restore_pagemask KScratch restore
        - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS
        - scsi: zfcp: fix reaction on bit error threshold notification
        - scsi: sd: Ignore a failure to sync cache due to lack of authorization
        - scsi: core: save/restore command resid for error handling
        - scsi: core: try to get module before removing device
        - scsi: ch: Make it possible to open a ch device multiple times again
        - Input: da9063 - fix capability and drop KEY_SLEEP
        - Input: synaptics-rmi4 - avoid processing unknown IRQs
        - ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting
        - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit()
        - cfg80211: wext: avoid copying malformed SSIDs
        - mac80211: Reject malformed SSID elements
        - drm/ttm: Restore ttm prefaulting
        - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1
        - drivers/base/memory.c: don't access uninitialized memmaps in
          soft_offline_page_store()
        - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c
        - mmc: cqhci: Commit descriptors before setting the doorbell
        - mm/memory-failure.c: don't access uninitialized memmaps in memory_failure()
        - mm/slub: fix a deadlock in show_slab_objects()
        - mm/page_owner: don't access uninitialized memmaps when reading
          /proc/pagetypeinfo
        - hugetlbfs: don't access uninitialized memmaps in pfn_range_valid_gigantic()
        - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if mmaped
          more than once
        - xtensa: drop EXPORT_SYMBOL for outs*/ins*
        - parisc: Fix vmap memory leak in ioremap()/iounmap()
        - EDAC/ghes: Fix Use after free in ghes_edac remove path
        - arm64: Enable workaround for Cavium TX2 erratum 219 when running SMT
        - CIFS: avoid using MID 0xFFFF
        - CIFS: Fix use after free of file info structures
        - perf/aux: Fix AUX output stopping
        - tracing: Fix race in perf_trace_buf initialization
        - dm cache: fix bugs when a GFP_NOWAIT allocation fails
        - x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area
        - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu
        - pinctrl: cherryview: restore Strago DMI workaround for all versions
        - pinctrl: armada-37xx: fix control of pins 32 and up
        - pinctrl: armada-37xx: swap polarity on LED group
        - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group()
        - Btrfs: add missing extents release on file extent cluster relocation error
        - Btrfs: check for the full sync flag while holding the inode lock during
          fsync
        - btrfs: tracepoints: Fix bad entry members of qgroup events
        - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
        - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown
        - xen/netback: fix error path of xenvif_connect_data()
        - PCI: PM: Fix pci_power_up()
        - blk-rq-qos: fix first node deletion of rq_qos_del()
        - RDMA/cxgb4: Do not dma memory off of the stack
        - drm: Clear the fence pointer when writeback job signaled
        - clk: ti: dra7: Fix mcasp8 clock bits
        - ARM: dts: Fix wrong clocks for dra7 mcasp
        - scsi: qla2xxx: Fix N2N link reset
        - scsi: qla2xxx: Fix N2N link up fail
        - ARM: dts: Fix gpio0 flags for am335x-icev2
        - ARM: OMAP2+: Add missing LCDC midlemode for am335x
        - nvme-tcp: fix wrong stop condition in io_work
        - nvme-pci: Save PCI state before putting drive into deepest state
        - nvme: fix an error code in nvme_init_subsystem()
        - nvme-rdma: Fix max_hw_sectors calculation
        - Added QUIRKs for ADATA XPG SX8200 Pro 512GB
        - nvme-rdma: fix possible use-after-free in connect timeout
        - blk-mq: honor IO scheduler for multiqueue devices
        - loop: change queue block size to match when using DIO
        - drm/amdgpu: fix multiple memory leaks in acp_hw_init
        - drm/amd/display: memory leak
        - s390/mm: fix -Wunused-but-set-variable warnings
        - net: phy: fix write to mii-ctrl1000 register
        - Convert filldir[64]() from __put_user() to unsafe_put_user()
        - elf: don't use MAP_FIXED_NOREPLACE for elf executable mappings
        - Make filldir[64]() verify the directory entry filename is valid
        - uaccess: implement a proper unsafe_copy_to_user() and switch filldir over to
          it
        - filldir[64]: remove WARN_ON_ONCE() for bad directory entries
        - rxrpc: Fix possible NULL pointer access in ICMP handling
        - sched: etf: Fix ordering of packets with same txtime
        - net: aquantia: correctly handle macvlan and multicast coexistence
        - net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs
        - net: phy: micrel: Update KSZ87xx PHY name
        - netdevsim: Fix error handling in nsim_fib_init and nsim_fib_exit
        - rxrpc: use rcu protection while reading sk->sk_user_data
        - binder: Don't modify VMA bounds in ->mmap handler
        - drm/amdgpu/vce: fix allocation size in enc ring test
        - drm/amdgpu/vcn: fix allocation size in enc ring test
        - drm/amdgpu/uvd6: fix allocation size in enc ring test (v2)
        - drm/amdgpu/uvd7: fix allocation size in enc ring test (v2)
        - mmc: mxs: fix flags passed to dmaengine_prep_slave_sg
        - mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C
        - mm/memunmap: don't access uninitialized memmap in memunmap_pages()
        - zram: fix race between backing_dev_show and backing_dev_store
        - s390/zcrypt: fix memleak at release
        - fs/dax: Fix pmd vs pte conflict detection
        - x86/hyperv: Make vapic support x2apic mode
        - btrfs: tracepoints: Fix wrong parameter order for qgroup events
        - ceph: just skip unrecognized info in ceph_reply_info_extra
        - opp: of: drop incorrect lockdep_assert_held()
    
      * Colour banding in Lenovo G50-80 laptop display (i915) (LP: #1819968) //
        Disco update: upstream stable patchset 2019-11-13 (LP: #1852459)
        - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
    
     -- Khalid Elmously <email address hidden>  Mon, 02 Dec 2019 14:25:23 -0500
  • linux (5.0.0-37.40) disco; urgency=medium
    
      * disco/linux: 5.0.0-37.40 -proposed tracker (LP: #1852253)
    
      * System hangs at early boot (LP: #1851216)
        - x86/timer: Skip PIT initialization on modern chipsets
    
      * drm/i915: Add support for another CMP-H PCH (LP: #1848491)
        - drm/i915/cml: Add second PCH ID for CMP
    
      * Some EFI systems fail to boot in efi_init() when booted via maas
        (LP: #1851810)
        - efi: efi_get_memory_map -- increase map headroom
    
      * seccomp: fix SECCOMP_USER_NOTIF_FLAG_CONTINUE test (LP: #1849281)
        - SAUCE: seccomp: avoid overflow in implicit constant conversion
        - SAUCE: seccomp: rework define for SECCOMP_USER_NOTIF_FLAG_CONTINUE
        - SAUCE: seccomp: fix SECCOMP_USER_NOTIF_FLAG_CONTINUE test
    
      * dkms artifacts may expire from the pool (LP: #1850958)
        - [Packaging] dkms -- try launchpad librarian for pool downloads
        - [Packaging] dkms -- dkms-build quieten wget verbiage
    
      * update ENA driver to version 2.1.0 (LP: #1850175)
        - net: ena: fix swapped parameters when calling
          ena_com_indirect_table_fill_entry
        - net: ena: fix: Free napi resources when ena_up() fails
        - net: ena: fix incorrect test of supported hash function
        - net: ena: fix return value of ena_com_config_llq_info()
        - net: ena: improve latency by disabling adaptive interrupt moderation by
          default
        - net: ena: fix ena_com_fill_hash_function() implementation
        - net: ena: add handling of llq max tx burst size
        - net: ena: ethtool: add extra properties retrieval via get_priv_flags
        - net: ena: replace free_tx/rx_ids union with single free_ids field in
          ena_ring
        - net: ena: arrange ena_probe() function variables in reverse christmas tree
        - net: ena: add newline at the end of pr_err prints
        - net: ena: documentation: update ena.txt
        - net: ena: allow automatic fallback to polling mode
        - net: ena: add support for changing max_header_size in LLQ mode
        - net: ena: optimise calculations for CQ doorbell
        - net: ena: add good checksum counter
        - net: ena: use dev_info_once instead of static variable
        - net: ena: add MAX_QUEUES_EXT get feature admin command
        - net: ena: enable negotiating larger Rx ring size
        - net: ena: make ethtool show correct current and max queue sizes
        - net: ena: allow queue allocation backoff when low on memory
        - net: ena: add ethtool function for changing io queue sizes
        - net: ena: remove inline keyword from functions in *.c
        - net: ena: update driver version from 2.0.3 to 2.1.0
        - net: ena: Fix bug where ring allocation backoff stopped too late
        - Revert "net: ena: ethtool: add extra properties retrieval via
          get_priv_flags"
        - net: ena: don't wake up tx queue when down
        - net: ena: clean up indentation issue
    
      * Add Intel Comet Lake ethernet support (LP: #1848555)
        - SAUCE: e1000e: Add support for Comet Lake
    
      * Intel Wireless AC 3168 on Eoan complaints FW error in SYNC CMD
        GEO_TX_POWER_LIMIT (LP: #1846016)
        - iwlwifi: exclude GEO SAR support for 3168
    
      * tsc marked unstable after entered PC10 on Intel CoffeeLake (LP: #1840239)
        - SAUCE: x86/intel: Disable HPET on Intel Coffe Lake platforms
        - SAUCE: x86/intel: Disable HPET on Intel Ice Lake platforms
    
      * cloudimg: no iavf/i40evf module so no network available with SR-IOV enabled
        cloud (LP: #1848481)
        - [Packaging] include iavf/i40evf in generic
    
      * High power consumption using 5.0.0-25-generic (LP: #1840835)
        - PCI: Add a helper to check Power Resource Requirements _PR3 existence
        - ALSA: hda: Allow HDA to be runtime suspended when dGPU is not bound to a
          driver
        - PCI: Fix missing inline for pci_pr3_present()
    
      * CML CPUIDs (LP: #1843794)
        - x86/cpu: Add Comet Lake to the Intel CPU models header
    
      * shiftfs: prevent exceeding project quotas (LP: #1849483)
        - SAUCE: shiftfs: drop CAP_SYS_RESOURCE from effective capabilities
    
      * shiftfs: fix fallocate() (LP: #1849482)
        - SAUCE: shiftfs: setup correct s_maxbytes limit
    
      * Bluetooth: hidp: Fix assumptions on the return value of hidp_send_message
        (LP: #1850443)
        - Bluetooth: hidp: Fix assumptions on the return value of hidp_send_message
    
      * [SRU][B/OEM-B/OEM-OSP1/D/E] UBUNTU: SAUCE: add rtl623 codec support and fix
        mic issues (LP: #1850599)
        - SAUCE: ALSA: hda/realtek - Add support for ALC623
        - SAUCE: ALSA: hda/realtek - Fix 2 front mics of codec 0x623
    
      * NFSv4.1: Interrupted connections cause high bandwidth RPC ping-pong between
        client and server (LP: #1828978)
        - NFSv4.1: Avoid false retries when RPC calls are interrupted
    
      * SUNRPC: Use after free when GSSD credentials are invalid causes oops
        (LP: #1842037)
        - SUNRPC: Clean up
        - SUNRPC: Fix a use after free when a server rejects the RPCSEC_GSS credential
    
      * Suppress "hid_field_extract() called with n (192) > 32!" message floods
        (LP: #1850600)
        - HID: core: reformat and reduce hid_printk macros
        - HID: core: Add printk_once variants to hid_warn() etc
        - HID: core: fix dmesg flooding if report field larger than 32bit
    
      * ubuntu-aufs-modified mmap_region() breaks refcounting in overlayfs/shiftfs
        error path (LP: #1850994) // CVE-2019-15794
        - SAUCE: shiftfs: Restore vm_file value when lower fs mmap fails
        - SAUCE: ovl: Restore vm_file value when lower fs mmap fails
    
      * s_iflags overlap prevents unprivileged overlayfs mounts (LP: #1851677)
        - SAUCE: fs: Move SB_I_NOSUID to the top of s_iflags
    
      * root can lift kernel lockdown (LP: #1851380)
        - SAUCE: (efi-lockdown) Really don't allow lifting lockdown from userspace
    
      * Disco update: upstream stable patchset 2019-11-01 (LP: #1850974)
        - panic: ensure preemption is disabled during panic()
        - f2fs: use EINVAL for superblock with invalid magic
        - [Config] updateconfigs for USB_RIO500
        - USB: rio500: Remove Rio 500 kernel driver
        - USB: yurex: Don't retry on unexpected errors
        - USB: yurex: fix NULL-derefs on disconnect
        - USB: usb-skeleton: fix runtime PM after driver unbind
        - USB: usb-skeleton: fix NULL-deref on disconnect
        - xhci: Fix false warning message about wrong bounce buffer write length
        - xhci: Prevent device initiated U1/U2 link pm if exit latency is too long
        - xhci: Check all endpoints for LPM timeout
        - xhci: Fix USB 3.1 capability detection on early xHCI 1.1 spec based hosts
        - usb: xhci: wait for CNR controller not ready bit in xhci resume
        - xhci: Prevent deadlock when xhci adapter breaks during init
        - USB: adutux: fix use-after-free on disconnect
        - USB: adutux: fix NULL-derefs on disconnect
        - USB: adutux: fix use-after-free on release
        - USB: iowarrior: fix use-after-free on disconnect
        - USB: iowarrior: fix use-after-free on release
        - USB: iowarrior: fix use-after-free after driver unbind
        - USB: usblp: fix runtime PM after driver unbind
        - USB: chaoskey: fix use-after-free on release
        - USB: ldusb: fix NULL-derefs on driver unbind
        - serial: uartlite: fix exit path null pointer
        - USB: serial: keyspan: fix NULL-derefs on open() and write()
        - USB: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20
        - USB: serial: option: add Telit FN980 compositions
        - USB: serial: option: add support for Cinterion CLS8 devices
        - USB: serial: fix runtime PM after driver unbind
        - USB: usblcd: fix I/O after disconnect
        - USB: microtek: fix info-leak at probe
        - USB: dummy-hcd: fix power budget for SuperSpeed mode
        - usb: renesas_usbhs: gadget: Do not discard queues in
          usb_ep_set_{halt,wedge}()
        - usb: renesas_usbhs: gadget: Fix usb_ep_set_{halt,wedge}() behavior
        - USB: legousbtower: fix slab info leak at probe
        - USB: legousbtower: fix deadlock on disconnect
        - USB: legousbtower: fix potential NULL-deref on disconnect
        - USB: legousbtower: fix open after failed reset request
        - USB: legousbtower: fix use-after-free on release
        - mei: me: add comet point (lake) LP device ids
        - mei: avoid FW version request on Ibex Peak and earlier
        - gpio: eic: sprd: Fix the incorrect EIC offset when toggling
        - Staging: fbtft: fix memory leak in fbtft_framebuffer_alloc
        - staging: vt6655: Fix memory leak in vt6655_probe
        - iio: adc: hx711: fix bug in sampling of data
        - iio: adc: ad799x: fix probe error handling
        - iio: adc: axp288: Override TS pin bias current for some models
        - iio: light: opt3001: fix mutex unlock race
        - efivar/ssdt: Don't iterate over EFI vars if no SSDT override was specified
        - perf llvm: Don't access out-of-scope array
        - perf inject jit: Fix JIT_CODE_MOVE filename
        - CIFS: Gracefully handle QueryInfo errors during open
        - CIFS: Force revalidate inode when dentry is stale
        - CIFS: Force reval dentry if LOOKUP_REVAL flag is set
        - kernel/sysctl.c: do not override max_threads provided by userspace
        - mm/vmpressure.c: fix a signedness bug in vmpressure_register_event()
        - firmware: google: increment VPD key_len properly
        - gpiolib: don't clear FLAG_IS_OUT when emulating open-drain/open-source
        - iio: adc: stm32-adc: move registers definitions
        - iio: adc: stm32-adc: fix a race when using several adcs with dma and irq
        - cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic
        - btrfs: fix incorrect updating of log root tree
        - btrfs: fix uninitialized ret in ref-verify
        - NFS: Fix O_DIRECT accounting of number of bytes read/written
        - MIPS: Disable Loongson MMI instructions for kernel build
        - MIPS: elf_hwcap: Export userspace ASEs
        - ACPI/PPTT: Add support for ACPI 6.3 thread flag
        - arm64: topology: Use PPTT to determine if PE is a thread
        - Fix the locking in dcache_readdir() and friends
        - media: stkwebcam: fix runtime PM after driver unbind
        - arm64/sve: Fix wrong free for task->thread.sve_state
        - tracing/hwlat: Report total time spent in all NMIs during the sample
        - tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency
        - ftrace: Get a reference counter for the trace_array on filter files
        - tracing: Get trace_array reference for available_tracers files
        - hwmon: Fix HWMON_P_MIN_ALARM mask
        - x86/asm: Fix MWAITX C-state hint value
        - perf/hw_breakpoint: Fix arch_hw_breakpoint use-before-initialization
        - serial: uartps: Fix uartps_major handling
        - usb: typec: tcpm: usb: typec: tcpm: Fix a signedness bug in
          tcpm_fw_get_caps()
        - staging: bcm2835-audio: Fix draining behavior regression
        - staging: rtl8188eu: fix HighestRate check in odm_ARFBRefresh_8188E()
        - iio: accel: adxl372: Fix/remove limitation for FIFO samples
        - iio: accel: adxl372: Fix push to buffers lost samples
        - iio: accel: adxl372: Perform a reset at start up
        - selinux: fix context string corruption in convert_context()
        - mm/z3fold.c: claim page in the beginning of free
        - mm/page_alloc.c: fix a crash in free_pages_prepare()
        - gpio: fix getting nonexclusive gpiods from DT
        - btrfs: fix balance convert to single on 32-bit host CPUs
        - Btrfs: fix memory leak due to concurrent append writes with fiemap
        - RDMA/vmw_pvrdma: Free SRQ only once
        - drm/i915: Whitelist COMMON_SLICE_CHICKEN2
        - mtd: rawnand: au1550nd: Fix au_read_buf16() prototype
    
      * Suspend stopped working from 4.4.0-157 onwards (LP: #1844021) // Disco
        update: upstream stable patchset 2019-11-01 (LP: #1850974)
        - xhci: Increase STS_SAVE timeout in xhci_suspend()
    
      * Disco update: upstream stable patchset 2019-10-31 (LP: #1850870)
        - s390/process: avoid potential reading of freed stack
        - KVM: s390: Test for bad access register and size at the start of S390_MEM_OP
        - s390/topology: avoid firing events before kobjs are created
        - s390/cio: exclude subchannels with no parent from pseudo check
        - KVM: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts
        - KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores
        - KVM: PPC: Book3S HV: Don't lose pending doorbell request on migration on P9
        - KVM: X86: Fix userspace set invalid CR4
        - nbd: fix max number of supported devs
        - PM / devfreq: tegra: Fix kHz to Hz conversion
        - ASoC: Define a set of DAPM pre/post-up events
        - ASoC: sgtl5000: Improve VAG power and mute control
        - powerpc/mce: Fix MCE handling for huge pages
        - powerpc/mce: Schedule work from irq_work
        - powerpc/powernv: Restrict OPAL symbol map to only be readable by root
        - powerpc/powernv/ioda: Fix race in TCE level allocation
        - powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions
        - can: mcp251x: mcp251x_hw_reset(): allow more time after a reset
        - tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file
        - crypto: qat - Silence smp_processor_id() warning
        - crypto: skcipher - Unmap pages after an external error
        - crypto: cavium/zip - Add missing single_release()
        - crypto: caam - fix concurrency issue in givencrypt descriptor
        - crypto: ccree - account for TEE not ready to report
        - crypto: ccree - use the full crypt length value
        - MIPS: Treat Loongson Extensions as ASEs
        - power: supply: sbs-battery: use correct flags field
        - power: supply: sbs-battery: only return health when battery present
        - tracing: Make sure variable reference alias has correct var_ref_idx
        - usercopy: Avoid HIGHMEM pfn warning
        - timer: Read jiffies once when forwarding base clk
        - PCI: vmd: Fix shadow offsets to reflect spec changes
        - watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout
        - perf stat: Fix a segmentation fault when using repeat forever
        - drm/omap: fix max fclk divider for omap36xx
        - drm/msm/dsi: Fix return value check for clk_get_parent
        - drm/nouveau/kms/nv50-: Don't create MSTMs for eDP connectors
        - drm/i915/gvt: update vgpu workload head pointer correctly
        - mmc: sdhci: improve ADMA error reporting
        - mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence
        - Revert "locking/pvqspinlock: Don't wait if vCPU is preempted"
        - xen/xenbus: fix self-deadlock after killing user process
        - ieee802154: atusb: fix use-after-free at disconnect
        - s390/cio: avoid calling strlen on null pointer
        - cfg80211: initialize on-stack chandefs
        - ima: always return negative code for error
        - ima: fix freeing ongoing ahash_request
        - fs: nfs: Fix possible null-pointer dereferences in encode_attrs()
        - 9p: Transport error uninitialized
        - 9p: avoid attaching writeback_fid on mmap with type PRIVATE
        - xen/pci: reserve MCFG areas earlier
        - ceph: fix directories inode i_blkbits initialization
        - ceph: reconnect connection if session hang in opening state
        - watchdog: aspeed: Add support for AST2600
        - netfilter: nf_tables: allow lookups in dynamic sets
        - drm/amdgpu: Fix KFD-related kernel oops on Hawaii
        - drm/amdgpu: Check for valid number of registers to read
        - pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors
        - pwm: stm32-lp: Add check in case requested period cannot be achieved
        - x86/purgatory: Disable the stackleak GCC plugin for the purgatory
        - ntb: point to right memory window index
        - thermal: Fix use-after-free when unregistering thermal zone device
        - thermal_hwmon: Sanitize thermal_zone type
        - libnvdimm/region: Initialize bad block for volatile namespaces
        - fuse: fix memleak in cuse_channel_open
        - libnvdimm/nfit_test: Fix acpi_handle redefinition
        - sched/membarrier: Call sync_core only before usermode for same mm
        - sched/membarrier: Fix private expedited registration check
        - sched/core: Fix migration to invalid CPU in __set_cpus_allowed_ptr()
        - perf build: Add detection of java-11-openjdk-devel package
        - kernel/elfcore.c: include proper prototypes
        - perf unwind: Fix libunwind build failure on i386 systems
        - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs
        - drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed
        - KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the
          VP
        - KVM: nVMX: Fix consistency check on injected exception error code
        - nbd: fix crash when the blksize is zero
        - powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt()
        - powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
        - tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure
        - tick: broadcast-hrtimer: Fix a race in bc_set_next
        - perf tools: Fix segfault in cpu_cache_level__read()
        - perf stat: Reset previous counts on repeat with interval
        - riscv: Avoid interrupts being erroneously enabled in handle_exception()
        - arm64: Add sysfs vulnerability show for spectre-v1
        - arm64: add sysfs vulnerability show for meltdown
        - arm64: enable generic CPU vulnerabilites support
        - arm64: Always enable ssb vulnerability detection
        - arm64: Provide a command line to disable spectre_v2 mitigation
        - arm64: Advertise mitigation of Spectre-v2, or lack thereof
        - arm64: Always enable spectre-v2 vulnerability detection
        - arm64: add sysfs vulnerability show for spectre-v2
        - arm64: add sysfs vulnerability show for speculative store bypass
        - arm64: ssbs: Don't treat CPUs with SSBS as unaffected by SSB
        - arm64: Use firmware to detect CPUs that are not affected by Spectre-v2
        - arm64/speculation: Support 'mitigations=' cmdline option
        - vfs: Fix EOVERFLOW testing in put_compat_statfs64
        - coresight: etm4x: Use explicit barriers on enable/disable
        - staging: erofs: fix an error handling in erofs_readdir()
        - staging: erofs: some compressed cluster should be submitted for corrupted
          images
        - staging: erofs: add two missing erofs_workgroup_put for corrupted images
        - staging: erofs: detect potential multiref due to corrupted images
        - cfg80211: add and use strongly typed element iteration macros
        - cfg80211: Use const more consistently in for_each_element macros
        - nl80211: validate beacon head
        - KVM: s390: fix __insn32_query() inline assembly
        - crypto: caam/qi - fix error handling in ERN handler
        - PCI: vmd: Fix config addressing when using bus offsets
        - drm/atomic: Reject FLIP_ASYNC unconditionally
        - drm/atomic: Take the atomic toys away from X
        - drm/i915: to make vgpu ppgtt notificaiton as atomic operation
        - mac80211: keep BHs disabled while calling drv_tx_wake_queue()
        - mmc: tegra: Implement ->set_dma_mask()
        - mmc: sdhci: Let drivers define their DMA mask
        - libnvdimm/altmap: Track namespace boundaries in altmap
        - DTS: ARM: gta04: introduce legacy spi-cs-high to make display work again
        - xprtrdma: Toggle XPRT_CONGESTED in xprtrdma's slot methods
        - fuse: fix request limit
        - ceph: fetch cap_gen under spinlock in ceph_add_cap
        - perf probe: Fix to clear tev->nargs in clear_probe_trace_event()
        - selftests/seccomp: fix build on older kernels
        - iommu/amd: Fix downgrading default page-sizes in alloc_pte()
        - bpf: Fix bpf_event_output re-entry issue
        - i2c: qcom-geni: Disable DMA processing on the Lenovo Yoga C630
        - mlxsw: spectrum_flower: Fail in case user specifies multiple mirror actions
        - nfp: abm: fix memory leak in nfp_abm_u32_knode_replace
        - Btrfs: fix selftests failure due to uninitialized i_mode in test inodes
        - libnvdimm: prevent nvdimm from requesting key when security is disabled
    
     -- Connor Kuehl <email address hidden>  Wed, 13 Nov 2019 11:35:47 -0800
  • linux (5.0.0-36.39) disco; urgency=medium
    
      * Ubuntu-5.0.0-33.35 introduces KVM regression with old Intel CPUs and Linux
        guests (LP: #1851709)
        - Revert "KVM: x86: Manually calculate reserved bits when loading PDPTRS"
    
      * Incomplete i915 fix for 64-bit x86 kernels (LP: #1852141) // CVE-2019-0155
        - SAUCE: drm/i915/cmdparser: Fix jump whitelist clearing
    
     -- Stefan Bader <email address hidden>  Tue, 12 Nov 2019 10:33:14 +0100
  • linux (5.0.0-35.38) disco; urgency=medium
    
      * [REGRESSION]  md/raid0: cannot assemble multi-zone RAID0 with default_layout
        setting (LP: #1849682)
        - SAUCE: Fix revert "md/raid0: avoid RAID0 data corruption due to layout
          confusion."
    
      * refcount underflow and type confusion in shiftfs (LP: #1850867) // CVE-2019-15793
        - SAUCE: shiftfs: Correct id translation for lower fs operations
        - SAUCE: shiftfs: prevent type confusion
        - SAUCE: shiftfs: Fix refcount underflow in btrfs ioctl handling
    
      * CVE-2018-12207
        - kvm: Convert kvm_lock to a mutex
        - kvm: x86: Do not release the page inside mmu_set_spte()
        - KVM: x86: make FNAME(fetch) and __direct_map more similar
        - KVM: x86: remove now unneeded hugepage gfn adjustment
        - KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON
        - KVM: x86: add tracepoints around __direct_map and FNAME(fetch)
        - kvm: x86, powerpc: do not allow clearing largepages debugfs entry
        - SAUCE: KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
          active
        - SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure
        - SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation
        - SAUCE: kvm: Add helper function for creating VM worker threads
        - SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages
        - SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers
        - SAUCE: kvm: x86: mmu: Apply global mitigations knob to ITLB_MULTIHIT
    
      * CVE-2019-11135
        - KVM: x86: use Intel speculation bugs and features as derived in generic x86
          code
        - x86/msr: Add the IA32_TSX_CTRL MSR
        - x86/cpu: Add a helper function x86_read_arch_cap_msr()
        - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
        - x86/speculation/taa: Add mitigation for TSX Async Abort
        - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
        - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
        - x86/tsx: Add "auto" option to the tsx= cmdline parameter
        - x86/speculation/taa: Add documentation for TSX Async Abort
        - x86/tsx: Add config options to set tsx=on|off|auto
        - SAUCE: x86/speculation/taa: Call tsx_init()
        - [Config] Disable TSX by default when possible
    
      * CVE-2019-0154
        - SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs
        - SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA
    
      * CVE-2019-0155
        - SAUCE: drm/i915: Rename gen7 cmdparser tables
        - SAUCE: drm/i915: Disable Secure Batches for gen6+
        - SAUCE: drm/i915: Remove Master tables from cmdparser
        - SAUCE: drm/i915: Add support for mandatory cmdparsing
        - SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
        - SAUCE: drm/i915: Allow parsing of unsized batches
        - SAUCE: drm/i915: Add gen9 BCS cmdparsing
        - SAUCE: drm/i915/cmdparser: Use explicit goto for error paths
        - SAUCE: drm/i915/cmdparser: Add support for backward jumps
        - SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching
    
    linux (5.0.0-34.36) disco; urgency=medium
    
      * disco/linux: <version to be filled> -proposed tracker (LP: #1850574)
    
      * [REGRESSION]  md/raid0: cannot assemble multi-zone RAID0 with default_layout
        setting (LP: #1849682)
        - Revert "md/raid0: avoid RAID0 data corruption due to layout confusion."
    
    linux (5.0.0-33.35) disco; urgency=medium
    
      * disco/linux: 5.0.0-33.35 -proposed tracker (LP: #1849003)
    
      * Disco update: upstream stable patchset 2019-10-18 (LP: #1848817)
        - tpm: use tpm_try_get_ops() in tpm-sysfs.c.
        - drm/bridge: tc358767: Increase AUX transfer length limit
        - drm/panel: simple: fix AUO g185han01 horizontal blanking
        - video: ssd1307fb: Start page range at page_offset
        - drm/stm: attach gem fence to atomic state
        - drm/panel: check failure cases in the probe func
        - drm/rockchip: Check for fast link training before enabling psr
        - drm/radeon: Fix EEH during kexec
        - gpu: drm: radeon: Fix a possible null-pointer dereference in
          radeon_connector_set_property()
        - PCI: rpaphp: Avoid a sometimes-uninitialized warning
        - ipmi_si: Only schedule continuously in the thread in maintenance mode
        - clk: qoriq: Fix -Wunused-const-variable
        - clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks
        - drm/amd/display: fix issue where 252-255 values are clipped
        - drm/amd/display: reprogram VM config when system resume
        - powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA
          window
        - clk: actions: Don't reference clk_init_data after registration
        - clk: sirf: Don't reference clk_init_data after registration
        - clk: sprd: Don't reference clk_init_data after registration
        - clk: zx296718: Don't reference clk_init_data after registration
        - powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL
        - powerpc/rtas: use device model APIs and serialization during LPM
        - powerpc/futex: Fix warning: 'oldval' may be used uninitialized in this
          function
        - powerpc/pseries/mobility: use cond_resched when updating device tree
        - pinctrl: tegra: Fix write barrier placement in pmx_writel
        - powerpc/eeh: Clear stale EEH_DEV_NO_HANDLER flag
        - vfio_pci: Restore original state on release
        - drm/nouveau/volt: Fix for some cards having 0 maximum voltage
        - pinctrl: amd: disable spurious-firing GPIO IRQs
        - clk: renesas: mstp: Set GENPD_FLAG_ALWAYS_ON for clock domain
        - clk: renesas: cpg-mssr: Set GENPD_FLAG_ALWAYS_ON for clock domain
        - drm/amd/display: support spdif
        - drm/amdgpu/si: fix ASIC tests
        - powerpc/64s/exception: machine check use correct cfar for late handler
        - pstore: fs superblock limits
        - clk: qcom: gcc-sdm845: Use floor ops for sdcc clks
        - powerpc/pseries: correctly track irq state in default idle
        - pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c
        - arm64: fix unreachable code issue with cmpxchg
        - clk: at91: select parent if main oscillator or bypass is enabled
        - powerpc: dump kernel log before carrying out fadump or kdump
        - mbox: qcom: add APCS child device for QCS404
        - clk: sprd: add missing kfree
        - scsi: core: Reduce memory required for SCSI logging
        - dma-buf/sw_sync: Synchronize signal vs syncpt free
        - ext4: fix potential use after free after remounting with noblock_validity
        - MIPS: Ingenic: Disable broken BTB lookup optimization.
        - MIPS: tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean
        - i2c-cht-wc: Fix lockdep warning
        - PCI: tegra: Fix OF node reference leak
        - HID: wacom: Fix several minor compiler warnings
        - livepatch: Nullify obj->mod in klp_module_coming()'s error path
        - ARM: 8898/1: mm: Don't treat faults reported from cache maintenance as
          writes
        - soundwire: intel: fix channel number reported by hardware
        - ARM: 8875/1: Kconfig: default to AEABI w/ Clang
        - rtc: snvs: fix possible race condition
        - rtc: pcf85363/pcf85263: fix regmap error in set_time
        - HID: apple: Fix stuck function keys when using FN
        - PCI: rockchip: Propagate errors for optional regulators
        - PCI: histb: Propagate errors for optional regulators
        - PCI: imx6: Propagate errors for optional regulators
        - PCI: exynos: Propagate errors for optional PHYs
        - security: smack: Fix possible null-pointer dereferences in
          smack_socket_sock_rcv_skb()
        - ARM: 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned
          address
        - fat: work around race with userspace's read via blockdev while mounting
        - pktcdvd: remove warning on attempting to register non-passthrough dev
        - hypfs: Fix error number left in struct pointer member
        - crypto: hisilicon - Fix double free in sec_free_hw_sgl()
        - kbuild: clean compressed initramfs image
        - ocfs2: wait for recovering done after direct unlock request
        - kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K
        - arm64: consider stack randomization for mmap base only when necessary
        - mips: properly account for stack randomization and stack guard gap
        - arm: properly account for stack randomization and stack guard gap
        - arm: use STACK_TOP when computing mmap base address
        - bpf: fix use after free in prog symbol exposure
        - cxgb4:Fix out-of-bounds MSI-X info array access
        - erspan: remove the incorrect mtu limit for erspan
        - hso: fix NULL-deref on tty open
        - ipv6: drop incoming packets having a v4mapped source address
        - ipv6: Handle missing host route in __ipv6_ifa_notify
        - net: ipv4: avoid mixed n_redirects and rate_tokens usage
        - net: qlogic: Fix memory leak in ql_alloc_large_buffers
        - net: Unpublish sk from sk_reuseport_cb before call_rcu
        - nfc: fix memory leak in llcp_sock_bind()
        - qmi_wwan: add support for Cinterion CLS8 devices
        - rxrpc: Fix rxrpc_recvmsg tracepoint
        - sch_dsmark: fix potential NULL deref in dsmark_init()
        - udp: fix gso_segs calculations
        - vsock: Fix a lockdep warning in __vsock_release()
        - net: dsa: rtl8366: Check VLAN ID and not ports
        - udp: only do GSO if # of segs > 1
        - net/rds: Fix error handling in rds_ib_add_one()
        - xen-netfront: do not use ~0U as error return value for xennet_fill_frags()
        - tipc: fix unlimited bundling of small messages
        - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
        - soundwire: Kconfig: fix help format
        - soundwire: fix regmap dependencies and align with other serial links
        - Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set
        - smack: use GFP_NOFS while holding inode_smack::smk_lock
        - NFC: fix attrs checks in netlink interface
        - kexec: bail out upon SIGKILL when allocating memory.
        - 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie
        - drm/vkms: Fix crc worker races
        - drm/vkms: Avoid assigning 0 for possible_crtc
        - drm/amd/display: add monitor patch to add T7 delay
        - drm/tinydrm/Kconfig: drivers: Select BACKLIGHT_CLASS_DEVICE
        - clk: imx8mq: Mark AHB clock as critical
        - drm/amd/display: Fix frames_to_insert math
        - clk: meson: axg-audio: Don't reference clk_init_data after registration
        - powerpc/64s/radix: Fix memory hotplug section page table creation
        - selftests/powerpc: Retry on host facility unavailable
        - powerpc/eeh: Clean up EEH PEs after recovery finishes
        - mailbox: mediatek: cmdq: clear the event in cmdq initial flow
        - clk: Make clk_bulk_get_all() return a valid "id"
        - f2fs: fix to drop meta/node pages during umount
        - MIPS: Don't use bc_false uninitialized in __mm_isBranchInstr
        - PCI: pci-hyperv: Fix build errors on non-SYSFS config
        - PCI: Add pci_info_ratelimited() to ratelimit PCI separately
        - PCI: Use static const struct, not const static struct
        - ARM: 8905/1: Emit __gnu_mcount_nc when using Clang 10.0.0 or newer
        - KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o
          lapic_in_kernel
        - clk: ingenic/jz4740: Fix "pll half" divider not read/written properly
        - clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered
        - ARM: dts: dir685: Drop spi-cpol from the display
        - mm: add dummy can_do_mlock() helper
        - [Config] updateconfigs for SOUNDWIRE
    
      * [CML] New device IDs for CML-U (LP: #1843774)
        - spi-nor: intel-spi: Add support for Intel Comet Lake SPI serial flash
    
      * [CML-U] Comet lake platform need ISH driver support (LP: #1843775)
        - HID: intel-ish-hid: Add Comet Lake PCI device ID
    
      * CVE-2019-17666
        - SAUCE: rtlwifi: rtl8822b: Fix potential overflow on P2P code
        - SAUCE: rtlwifi: Fix potential overflow on P2P code
    
      * md raid0/linear doesn't show error state if an array member is removed and
        allows successful writes (LP: #1847773)
        - md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone
    
      * seccomp: add SECCOMP_USER_NOTIF_FLAG_CONTINUE    (LP: #1847744)
        - SAUCE: seccomp: add SECCOMP_USER_NOTIF_FLAG_CONTINUE
        - SAUCE: seccomp: test SECCOMP_USER_NOTIF_FLAG_CONTINUE
    
      * Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x from yes
        to no (LP: #1848492)
        - [Config] Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x
          from yes to no
    
      * fdatasync performance regression on 5.0 kernels (LP: #1847641)
        - blk-wbt: fix performance regression in wbt scale_up/scale_down
    
      * bcache: Performance degradation when querying priority_stats (LP: #1840043)
        - bcache: add cond_resched() in __bch_cache_cmp()
    
      * Add installer support for iwlmvm adapters (LP: #1848236)
        - d-i: Add iwlmvm to nic-modules
    
      * Check for CPU Measurement sampling (LP: #1847590)
        - s390/cpumsf: Check for CPU Measurement sampling
    
      * Disco update: upstream stable patchset 2019-10-16 (LP: #1848367)
        - arcnet: provide a buffer big enough to actually receive packets
        - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
        - macsec: drop skb sk before calling gro_cells_receive
        - net/phy: fix DP83865 10 Mbps HDX loopback disable function
        - net: qrtr: Stop rx_worker before freeing node
        - net/sched: act_sample: don't push mac header on ip6gre ingress
        - net_sched: add max len check for TCA_KIND
        - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs
        - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC
        - ppp: Fix memory leak in ppp_write
        - sch_netem: fix a divide by zero in tabledist()
        - skge: fix checksum byte order
        - usbnet: ignore endpoints with invalid wMaxPacketSize
        - usbnet: sanity checking of packet sizes and device mtu
        - net: sched: fix possible crash in tcf_action_destroy()
        - tcp: better handle TCP_USER_TIMEOUT in SYN_SENT state
        - net/mlx5: Add device ID of upcoming BlueField-2
        - nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs
        - ALSA: hda: Flush interrupts on disabling
        - regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg
        - ASoC: tlv320aic31xx: suppress error message for EPROBE_DEFER
        - ASoC: sgtl5000: Fix of unmute outputs on probe
        - ASoC: sgtl5000: Fix charge pump source assignment
        - firmware: qcom_scm: Use proper types for dma mappings
        - dmaengine: bcm2835: Print error in case setting DMA mask fails
        - leds: leds-lp5562 allow firmware files up to the maximum length
        - media: dib0700: fix link error for dibx000_i2c_set_speed
        - media: mtk-cir: lower de-glitch counter for rc-mm protocol
        - media: exynos4-is: fix leaked of_node references
        - media: hdpvr: Add device num check and handling
        - media: i2c: ov5640: Check for devm_gpiod_get_optional() error
        - time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint
        - sched/fair: Fix imbalance due to CPU affinity
        - sched/core: Fix CPU controller for !RT_GROUP_SCHED
        - x86/apic: Make apic_pending_intr_clear() more robust
        - sched/deadline: Fix bandwidth accounting at all levels after offline
          migration
        - x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI
          fails
        - x86/apic: Soft disable APIC before initializing it
        - ALSA: hda - Show the fatal CORB/RIRB error more clearly
        - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in
          build_adc_controls()
        - EDAC/mc: Fix grain_bits calculation
        - media: iguanair: add sanity checks
        - base: soc: Export soc_device_register/unregister APIs
        - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid
        - ia64:unwind: fix double free for mod->arch.init_unw_table
        - EDAC/altera: Use the proper type for the IRQ status bits
        - ASoC: rsnd: don't call clk_get_rate() under atomic context
        - arm64/prefetch: fix a -Wtype-limits warning
        - md/raid1: end bio when the device faulty
        - md: don't call spare_active in md_reap_sync_thread if all member devices
          can't work
        - md: don't set In_sync if array is frozen
        - media: media/platform: fsl-viu.c: fix build for MICROBLAZE
        - ACPI / processor: don't print errors for processorIDs == 0xff
        - loop: Add LOOP_SET_DIRECT_IO to compat ioctl
        - EDAC, pnd2: Fix ioremap() size in dnv_rd_reg()
        - efi: cper: print AER info of PCIe fatal error
        - firmware: arm_scmi: Check if platform has released shmem before using
        - sched/fair: Use rq_lock/unlock in online_fair_sched_group
        - idle: Prevent late-arriving interrupts from disrupting offline
        - media: gspca: zero usb_buf on error
        - perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig
        - perf test vfs_getname: Disable ~/.perfconfig to get default output
        - media: mtk-mdp: fix reference count on old device tree
        - media: fdp1: Reduce FCP not found message level to debug
        - media: em28xx: modules workqueue not inited for 2nd device
        - media: rc: imon: Allow iMON RC protocol for ffdc 7e device
        - dmaengine: iop-adma: use correct printk format strings
        - perf record: Support aarch64 random socket_id assignment
        - media: vsp1: fix memory leak of dl on error return path
        - media: i2c: ov5645: Fix power sequence
        - media: omap3isp: Don't set streaming state on random subdevs
        - media: imx: mipi csi-2: Don't fail if initial state times-out
        - net: lpc-enet: fix printk format strings
        - m68k: Prevent some compiler warnings in Coldfire builds
        - ARM: dts: imx7d: cl-som-imx7: make ethernet work again
        - ARM: dts: imx7-colibri: disable HS400
        - media: radio/si470x: kill urb on error
        - media: hdpvr: add terminating 0 at end of string
        - ASoC: uniphier: Fix double reset assersion when transitioning to suspend
          state
        - tools headers: Fixup bitsperlong per arch includes
        - ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK
        - led: triggers: Fix a memory leak bug
        - nbd: add missing config put
        - media: mceusb: fix (eliminate) TX IR signal length limit
        - media: dvb-frontends: use ida for pll number
        - posix-cpu-timers: Sanitize bogus WARNONS
        - media: dvb-core: fix a memory leak bug
        - libperf: Fix alignment trap with xyarray contents in 'perf stat'
        - EDAC/amd64: Recognize DRAM device type ECC capability
        - EDAC/amd64: Decode syndrome before translating address
        - PM / devfreq: passive: Use non-devm notifiers
        - PM / devfreq: exynos-bus: Correct clock enable sequence
        - media: cec-notifier: clear cec_adap in cec_notifier_unregister
        - media: saa7146: add cleanup in hexium_attach()
        - media: cpia2_usb: fix memory leaks
        - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate()
        - perf trace beauty ioctl: Fix off-by-one error in cmd->string table
        - media: ov9650: add a sanity check
        - ASoC: es8316: fix headphone mixer volume table
        - ACPI / CPPC: do not require the _PSD method
        - sched/cpufreq: Align trace event behavior of fast switching
        - x86/apic/vector: Warn when vector space exhaustion breaks affinity
        - arm64: kpti: ensure patched kernel text is fetched from PoU
        - x86/mm/pti: Do not invoke PTI functions when PTI is disabled
        - ASoC: fsl_ssi: Fix clock control issue in master mode
        - x86/mm/pti: Handle unaligned address gracefully in pti_clone_pagetable()
        - nvmet: fix data units read and written counters in SMART log
        - nvme-multipath: fix ana log nsid lookup when nsid is not found
        - ALSA: firewire-motu: add support for MOTU 4pre
        - iommu/amd: Silence warnings under memory pressure
        - libata/ahci: Drop PCS quirk for Denverton and beyond
        - iommu/iova: Avoid false sharing on fq_timer_on
        - libtraceevent: Change users plugin directory
        - ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks
        - ACPI: custom_method: fix memory leaks
        - ACPI / PCI: fix acpi_pci_irq_enable() memory leak
        - closures: fix a race on wakeup from closure_sync
        - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
        - md/raid1: fail run raid1 array when active disk less than one
        - dmaengine: ti: edma: Do not reset reserved paRAM slots
        - kprobes: Prohibit probing on BUG() and WARN() address
        - s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding
        - x86/cpu: Add Tiger Lake to Intel family
        - platform/x86: intel_pmc_core: Do not ioremap RAM
        - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set
        - raid5: don't set STRIPE_HANDLE to stripe which is in batch list
        - mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD
        - mmc: sdhci: Fix incorrect switch to HS mode
        - mmc: core: Add helper function to indicate if SDIO IRQs is enabled
        - mmc: dw_mmc: Re-store SDIO IRQs mask at system resume
        - raid5: don't increment read_errors on EILSEQ return
        - libertas: Add missing sentinel at end of if_usb.c fw_table
        - ALSA: hda - Drop unsol event handler for Intel HDMI codecs
        - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2)
        - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
        - ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93
        - btrfs: extent-tree: Make sure we only allocate extents from block groups
          with the same type
        - media: omap3isp: Set device on omap3isp subdevs
        - PM / devfreq: passive: fix compiler warning
        - iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36
        - ALSA: firewire-tascam: handle error code when getting current source of
          clock
        - ALSA: firewire-tascam: check intermediate state of clock status and retry
        - scsi: scsi_dh_rdac: zero cdb in send_mode_select()
        - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag
        - printk: Do not lose last line in kmsg buffer dump
        - IB/mlx5: Free mpi in mp_slave mode
        - IB/hfi1: Define variables as unsigned long to fix KASAN warning
        - randstruct: Check member structs in is_pure_ops_struct()
        - Revert "ceph: use ceph_evict_inode to cleanup inode's resource"
        - ceph: use ceph_evict_inode to cleanup inode's resource
        - ALSA: hda/realtek - PCI quirk for Medion E4254
        - blk-mq: add callback of .cleanup_rq
        - scsi: implement .cleanup_rq callback
        - powerpc/imc: Dont create debugfs files for cpu-less nodes
        - fuse: fix missing unlock_page in fuse_writepage()
        - parisc: Disable HP HSC-PCI Cards to prevent kernel crash
        - KVM: x86: always stop emulation on page fault
        - KVM: x86: set ctxt->have_exception in x86_decode_insn()
        - KVM: x86: Manually calculate reserved bits when loading PDPTRS
        - media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table
        - media: don't drop front-end reference count for ->detach
        - binfmt_elf: Do not move brk for INTERP-less ET_EXEC
        - ASoC: Intel: NHLT: Fix debug print format
        - ASoC: Intel: Skylake: Use correct function to access iomem space
        - ASoC: Intel: Fix use of potentially uninitialized variable
        - ARM: samsung: Fix system restart on S3C6410
        - ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up
        - arm64: tlb: Ensure we execute an ISB following walk cache invalidation
        - arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328
        - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP
        - regulator: Defer init completion for a while after late_initcall
        - efifb: BGRT: Improve efifb_bgrt_sanity_check
        - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps
        - memcg, oom: don't require __GFP_FS when invoking memcg OOM killer
        - memcg, kmem: do not fail __GFP_NOFAIL charges
        - i40e: check __I40E_VF_DISABLE bit in i40e_sync_filters_subtask
        - block: fix null pointer dereference in blk_mq_rq_timed_out()
        - smb3: allow disabling requesting leases
        - ovl: Fix dereferencing possible ERR_PTR()
        - ovl: filter of trusted xattr results in audit
        - btrfs: fix allocation of free space cache v1 bitmap pages
        - Btrfs: fix use-after-free when using the tree modification log
        - btrfs: Relinquish CPUs in btrfs_compare_trees
        - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space
        - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve
          calls
        - Btrfs: fix race setting up and completing qgroup rescan workers
        - md/raid6: Set R5_ReadError when there is read failure on parity disk
        - md: don't report active array_state until after revalidate_disk() completes.
        - md: only call set_in_sync() when it is expected to succeed.
        - cfg80211: Purge frame registrations on iftype change
        - /dev/mem: Bail out upon SIGKILL.
        - ext4: fix warning inside ext4_convert_unwritten_extents_endio
        - ext4: fix punch hole for inline_data file systems
        - quota: fix wrong condition in is_quota_modification()
        - hwrng: core - don't wait on add_early_randomness()
        - i2c: riic: Clear NACK in tend isr
        - CIFS: fix max ea value size
        - CIFS: Fix oplock handling for SMB 2.1+ protocols
        - md/raid0: avoid RAID0 data corruption due to layout confusion.
        - fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock
        - mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new
          zone
        - drm/amd/display: Restore backlight brightness after system resume
        - selftests: Update fib_tests to handle missing ping6
        - vrf: Do not attempt to create IPv6 mcast rule if IPv6 is disabled
        - net/mlx5e: Fix traffic duplication in ethtool steering
        - media: vivid:add sanity check to avoid divide error and set value to 1 if 0.
        - media: vb2: reorder checks in vb2_poll()
        - media: vivid: work around high stack usage with clang
        - rcu/tree: Call setschedule() gp ktread to SCHED_FIFO outside of atomic
          region
        - arm64: mm: free the initrd reserved memblock in a aligned manner
        - soc: amlogic: meson-clk-measure: protect measure with a mutex
        - RAS: Build debugfs.o only when enabled in Kconfig
        - ASoC: hdac_hda: fix page fault issue by removing race
        - perf tools: Fix paths in include statements
        - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling
        - media: i2c: tda1997x: prevent potential NULL pointer access
        - arm64/efi: Move variable assignments after SECTIONS
        - ARM: xscale: fix multi-cpu compilation
        - kasan/arm64: fix CONFIG_KASAN_SW_TAGS && KASAN_INLINE
        - x86/platform/intel/iosf_mbi Rewrite locking
        - powerpc/Makefile: Always pass --synthetic to nm if supported
        - ACPI / APEI: Release resources if gen_pool_add() fails
        - ARM: at91: move platform-specific asm-offset.h to arch/arm/mach-at91
        - soc: renesas: rmobile-sysc: Set GENPD_FLAG_ALWAYS_ON for always-on domain
        - soc: renesas: Enable ARM_ERRATA_754322 for affected Cortex-A9
        - PM / devfreq: Fix kernel oops on governor module load
        - media: aspeed-video: address a protential usage of an unitialized var
        - ASoC: Intel: Haswell: Adjust machine device private context
        - x86/amd_nb: Add PCI device IDs for family 17h, model 70h
        - hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs
        - block: make rq sector size accessible for block stats
        - mmc: mtk-sd: Re-store SDIO IRQs mask at system resume
        - drm: fix module name in edid_firmware log message
        - zd1211rw: remove false assertion from zd_mac_clear()
        - btrfs: delayed-inode: Kill the BUG_ON() in btrfs_delete_delayed_dir_index()
        - kvm: Nested KVM MMUs need PAE root too
        - ARM: dts: logicpd-torpedo-baseboard: Fix missing video
        - ARM: omap2plus_defconfig: Fix missing video
        - ARM: dts: am3517-evm: Fix missing video
        - rcu/tree: Fix SCHED_FIFO params
        - fuse: fix beyond-end-of-page access in fuse_parse_cache()
        - KVM: x86: Disable posted interrupts for non-standard IRQs delivery modes
        - spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours
        - iommu/arm-smmu-v3: Disable detection of ATS and PRI
        - mt76: round up length on mt76_wr_copy
        - ath10k: fix channel info parsing for non tlv target
        - block: mq-deadline: Fix queue restart handling
        - btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer
        - SUNRPC: Fix buffer handling of GSS MIC without slack
        - ACPI / LPSS: Save/restore LPSS private registers also on Lynxpoint
        - fs: Export generic_fadvise()
        - mm: Handle MADV_WILLNEED through vfs_fadvise()
        - xfs: Fix stale data exposure when readahead races with hole punch
        - ipmi: move message error checking to avoid deadlock
    
      * ELAN469D touch pad not working (LP: #1795292) // Ubuntu won't boot on Dell
        Inspiron 7375 (LP: #1837688) // Disco update: upstream stable patchset
        2019-10-16 (LP: #1848367)
        - iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems
    
      * intel-lpss driver conflicts with write-combining MTRR region (LP: #1845584)
        - SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390 2-in-1
    
      * Fix non-working Realtek USB ethernet after system resume (LP: #1847063)
        - r8152: remove extra action copying ethernet address
        - r8152: Refresh MAC address during USBDEVFS_RESET
        - r8152: Set macpassthru in reset_resume callback
    
      * overlayfs: allow with shiftfs as underlay (LP: #1846272)
        - SAUCE: overlayfs: allow with shiftfs as underlay
    
      * [regression] NoNewPrivileges incompatible with Apparmor (LP: #1844186)
        - SAUCE: apparmor: fix nnp subset test for unconfined
    
      * PM / hibernate: fix potential memory corruption (LP: #1847118)
        - PM / hibernate: memory_bm_find_bit(): Tighten node optimisation
    
      * xHCI on AMD Stoney Ridge cannot detect USB 2.0 or 1.1 devices.
        (LP: #1846470)
        - x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect
    
      * CVE-2019-17056
        - nfc: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-17055
        - mISDN: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-17054
        - appletalk: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-17053
        - ieee802154: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-17052
        - ax25: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-15098
        - ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
    
      * Disco update: upstream stable patchset 2019-10-10 (LP: #1847663)
        - Revert "Bluetooth: validate BLE connection interval updates"
        - net/ibmvnic: free reset work of removed device from queue
        - powerpc/xive: Fix bogus error code returned by OPAL
        - drm/amd/display: readd -msse2 to prevent Clang from emitting libcalls to
          undefined SW FP routines
        - HID: prodikeys: Fix general protection fault during probe
        - HID: sony: Fix memory corruption issue on cleanup.
        - HID: logitech: Fix general protection fault caused by Logitech driver
        - HID: hidraw: Fix invalid read in hidraw_ioctl
        - HID: Add quirk for HP X500 PIXART OEM mouse
        - mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword()
        - crypto: talitos - fix missing break in switch statement
        - CIFS: fix deadlock in cached root handling
        - ASoC: Intel: cht_bsw_max98090_ti: Enable codec clock once and keep it
          enabled
        - ASoC: fsl: Fix of-node refcount unbalance in fsl_ssi_probe_from_dt()
        - ALSA: usb-audio: Add Hiby device family to quirks for native DSD support
        - ALSA: usb-audio: Add DSD support for EVGA NU Audio
        - ALSA: dice: fix wrong packet parameter for Alesis iO26
        - ALSA: hda - Add laptop imic fixup for ASUS M9V laptop
        - ALSA: hda - Apply AMD controller workaround for Raven platform
        - objtool: Clobber user CFLAGS variable
        - irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices
        - f2fs: check all the data segments against all node ones
        - PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it
        - bcache: remove redundant LIST_HEAD(journal) from run_cache_set()
        - initramfs: don't free a non-existent initrd
        - Revert "f2fs: avoid out-of-range memory access"
        - dm zoned: fix invalid memory access
        - net/ibmvnic: Fix missing { in __ibmvnic_reset
        - f2fs: fix to do sanity check on segment bitmap of LFS curseg
        - drm: Flush output polling on shutdown
        - net: don't warn in inet diag when IPV6 is disabled
        - Bluetooth: btrtl: HCI reset on close for Realtek BT chip
        - ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35
        - drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling
        - xfs: don't crash on null attr fork xfs_bmapi_read
        - netfilter: nft_socket: fix erroneous socket assignment
        - Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices
        - net_sched: check cops->tcf_block in tc_bind_tclass()
        - net/rds: An rds_sock is added too early to the hash table
        - net/rds: Check laddr_check before calling it
        - f2fs: use generic EFSBADCRC/EFSCORRUPTED
        - phy: qcom-qmp: Raise qcom_qmp_phy_enable() polling delay
        - drm/amd/display: Allow cursor async updates for framebuffer swaps
        - drm/amd/display: Skip determining update type for async updates
        - drm/amd/display: Don't replace the dc_state for fast updates
        - platform/x86: i2c-multi-instantiate: Derive the device name from parent
        - drm/dp: Add DP_DPCD_QUIRK_NO_SINK_COUNT
        - xfrm: policy: avoid warning splat when merging nodes
    
      * Disco update: upstream stable patchset 2019-10-01 (LP: #1846277)
        - netfilter: nf_flow_table: set default timeout after successful insertion
        - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report
        - Input: elan_i2c - remove Lenovo Legion Y7000 PnpID
        - powerpc/mm/radix: Use the right page size for vmemmap mapping
        - USB: usbcore: Fix slab-out-of-bounds bug during device reset
        - media: tm6000: double free if usb disconnect while streaming
        - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current
        - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit
        - udp: correct reuseport selection with connected sockets
        - xen-netfront: do not assume sk_buff_head list is empty in error handling
        - net_sched: let qdisc_put() accept NULL pointer
        - firmware: google: check if size is valid when decoding VPD data
        - serial: sprd: correct the wrong sequence of arguments
        - tty/serial: atmel: reschedule TX after RX was started
        - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
        - ieee802154: hwsim: Fix error handle path in hwsim_init_module
        - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails
        - ARM: dts: am57xx: Disable voltage switching for SD card
        - ARM: OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss
        - bus: ti-sysc: Fix using configured sysc mask value
        - s390/bpf: fix lcgr instruction encoding
        - ARM: OMAP2+: Fix omap4 errata warning on other SoCs
        - ARM: dts: dra74x: Fix iodelay configuration for mmc3
        - ARM: OMAP1: ams-delta-fiq: Fix missing irq_ack
        - bus: ti-sysc: Simplify cleanup upon failures in sysc_probe()
        - s390/bpf: use 32-bit index for tail calls
        - selftests/bpf: fix "bind{4, 6} deny specific IP & port" on s390
        - tools: bpftool: close prog FD before exit on showing a single program
        - fpga: altera-ps-spi: Fix getting of optional confd gpio
        - netfilter: ebtables: Fix argument order to ADD_COUNTER
        - netfilter: nft_flow_offload: missing netlink attribute policy
        - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info
        - NFSv4: Fix return values for nfs4_file_open()
        - NFSv4: Fix return value in nfs_finish_open()
        - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup
        - Kconfig: Fix the reference to the IDT77105 Phy driver in the description of
          ATM_NICSTAR_USE_IDT77105
        - xdp: unpin xdp umem pages in error path
        - qed: Add cleanup in qed_slowpath_start()
        - ARM: 8874/1: mm: only adjust sections of valid mm structures
        - batman-adv: Only read OGM2 tvlv_len after buffer len check
        - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0
        - r8152: Set memory to all 0xFFs on failed reg reads
        - x86/apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines
        - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check
        - netfilter: nf_conntrack_ftp: Fix debug output
        - NFSv2: Fix eof handling
        - NFSv2: Fix write regression
        - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the
          first symbol
        - cifs: set domainName when a domain-key is used in multiuser
        - cifs: Use kzfree() to zero out the password
        - usb: host: xhci-tegra: Set DMA mask correctly
        - ARM: 8901/1: add a criteria for pfn_valid of arm
        - ibmvnic: Do not process reset during or after device removal
        - sky2: Disable MSI on yet another ASUS boards (P6Xxxx)
        - i2c: designware: Synchronize IRQs when unregistering slave client
        - perf/x86/intel: Restrict period on Nehalem
        - perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops
        - amd-xgbe: Fix error path in xgbe_mod_init()
        - tools/power x86_energy_perf_policy: Fix "uninitialized variable" warnings at
          -O2
        - tools/power x86_energy_perf_policy: Fix argument parsing
        - tools/power turbostat: fix buffer overrun
        - net: aquantia: fix out of memory condition on rx side
        - net: seeq: Fix the function used to release some memory in an error handling
          path
        - dmaengine: ti: dma-crossbar: Fix a memory leak bug
        - dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe()
        - x86/uaccess: Don't leak the AC flags into __get_user() argument evaluation
        - x86/hyper-v: Fix overflow bug in fill_gva_list()
        - keys: Fix missing null pointer check in request_key_auth_describe()
        - iommu/amd: Flush old domains in kdump kernel
        - iommu/amd: Fix race in increase_address_space()
        - ovl: fix regression caused by overlapping layers detection
        - floppy: fix usercopy direction
        - binfmt_elf: move brk out of mmap when doing direct loader exec
        - SUNRPC: Handle connection breakages correctly in call_status()
        - nfs: disable client side deduplication
        - net: aquantia: fix limit of vlan filters
        - net: dsa: Fix load order between DSA drivers and taggers
        - ARM: dts: Fix flags for gpio7
        - bus: ti-sysc: Handle devices with no control registers
        - ARM: dts: Fix incorrect dcan register mapping for am3, am4 and dra7
        - ARM: dts: am335x: Fix UARTs length
        - ARM: dts: Fix incomplete dts data for am3 and am4 mmc
        - selftests/bpf: fix test_cgroup_storage on s390
        - flow_dissector: Fix potential use-after-free on BPF_PROG_DETACH
        - drm/amdgpu: fix dma_fence_wait without reference
        - netfilter: conntrack: make sysctls per-namespace again
        - drm/amd/powerplay: correct Vega20 dpm level related settings
        - libceph: don't call crypto_free_sync_skcipher() on a NULL tfm
        - i2c: iproc: Stop advertising support of SMBUS quick cmd
        - netfilter: nf_flow_table: clear skb tstamp before xmit
        - tools/power turbostat: Fix Haswell Core systems
        - net: aquantia: fix removal of vlan 0
        - net: aquantia: reapply vlan filters on up
        - arm64: dts: renesas: r8a77995: draak: Fix backlight regulator name
        - dmaengine: sprd: Fix the DMA link-list configuration
        - dmaengine: rcar-dmac: Fix DMACHCLR handling if iommu is mapped
        - Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}"
    
     -- Stefan Bader <email address hidden>  Sat, 09 Nov 2019 17:31:21 +0100
  • linux (5.0.0-34.36) disco; urgency=medium
    
      * disco/linux: <version to be filled> -proposed tracker (LP: #1850574)
    
      * [REGRESSION]  md/raid0: cannot assemble multi-zone RAID0 with default_layout
        setting (LP: #1849682)
        - Revert "md/raid0: avoid RAID0 data corruption due to layout confusion."
    
    linux (5.0.0-33.35) disco; urgency=medium
    
      * disco/linux: 5.0.0-33.35 -proposed tracker (LP: #1849003)
    
      * Disco update: upstream stable patchset 2019-10-18 (LP: #1848817)
        - tpm: use tpm_try_get_ops() in tpm-sysfs.c.
        - drm/bridge: tc358767: Increase AUX transfer length limit
        - drm/panel: simple: fix AUO g185han01 horizontal blanking
        - video: ssd1307fb: Start page range at page_offset
        - drm/stm: attach gem fence to atomic state
        - drm/panel: check failure cases in the probe func
        - drm/rockchip: Check for fast link training before enabling psr
        - drm/radeon: Fix EEH during kexec
        - gpu: drm: radeon: Fix a possible null-pointer dereference in
          radeon_connector_set_property()
        - PCI: rpaphp: Avoid a sometimes-uninitialized warning
        - ipmi_si: Only schedule continuously in the thread in maintenance mode
        - clk: qoriq: Fix -Wunused-const-variable
        - clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks
        - drm/amd/display: fix issue where 252-255 values are clipped
        - drm/amd/display: reprogram VM config when system resume
        - powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA
          window
        - clk: actions: Don't reference clk_init_data after registration
        - clk: sirf: Don't reference clk_init_data after registration
        - clk: sprd: Don't reference clk_init_data after registration
        - clk: zx296718: Don't reference clk_init_data after registration
        - powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL
        - powerpc/rtas: use device model APIs and serialization during LPM
        - powerpc/futex: Fix warning: 'oldval' may be used uninitialized in this
          function
        - powerpc/pseries/mobility: use cond_resched when updating device tree
        - pinctrl: tegra: Fix write barrier placement in pmx_writel
        - powerpc/eeh: Clear stale EEH_DEV_NO_HANDLER flag
        - vfio_pci: Restore original state on release
        - drm/nouveau/volt: Fix for some cards having 0 maximum voltage
        - pinctrl: amd: disable spurious-firing GPIO IRQs
        - clk: renesas: mstp: Set GENPD_FLAG_ALWAYS_ON for clock domain
        - clk: renesas: cpg-mssr: Set GENPD_FLAG_ALWAYS_ON for clock domain
        - drm/amd/display: support spdif
        - drm/amdgpu/si: fix ASIC tests
        - powerpc/64s/exception: machine check use correct cfar for late handler
        - pstore: fs superblock limits
        - clk: qcom: gcc-sdm845: Use floor ops for sdcc clks
        - powerpc/pseries: correctly track irq state in default idle
        - pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c
        - arm64: fix unreachable code issue with cmpxchg
        - clk: at91: select parent if main oscillator or bypass is enabled
        - powerpc: dump kernel log before carrying out fadump or kdump
        - mbox: qcom: add APCS child device for QCS404
        - clk: sprd: add missing kfree
        - scsi: core: Reduce memory required for SCSI logging
        - dma-buf/sw_sync: Synchronize signal vs syncpt free
        - ext4: fix potential use after free after remounting with noblock_validity
        - MIPS: Ingenic: Disable broken BTB lookup optimization.
        - MIPS: tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean
        - i2c-cht-wc: Fix lockdep warning
        - PCI: tegra: Fix OF node reference leak
        - HID: wacom: Fix several minor compiler warnings
        - livepatch: Nullify obj->mod in klp_module_coming()'s error path
        - ARM: 8898/1: mm: Don't treat faults reported from cache maintenance as
          writes
        - soundwire: intel: fix channel number reported by hardware
        - ARM: 8875/1: Kconfig: default to AEABI w/ Clang
        - rtc: snvs: fix possible race condition
        - rtc: pcf85363/pcf85263: fix regmap error in set_time
        - HID: apple: Fix stuck function keys when using FN
        - PCI: rockchip: Propagate errors for optional regulators
        - PCI: histb: Propagate errors for optional regulators
        - PCI: imx6: Propagate errors for optional regulators
        - PCI: exynos: Propagate errors for optional PHYs
        - security: smack: Fix possible null-pointer dereferences in
          smack_socket_sock_rcv_skb()
        - ARM: 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned
          address
        - fat: work around race with userspace's read via blockdev while mounting
        - pktcdvd: remove warning on attempting to register non-passthrough dev
        - hypfs: Fix error number left in struct pointer member
        - crypto: hisilicon - Fix double free in sec_free_hw_sgl()
        - kbuild: clean compressed initramfs image
        - ocfs2: wait for recovering done after direct unlock request
        - kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K
        - arm64: consider stack randomization for mmap base only when necessary
        - mips: properly account for stack randomization and stack guard gap
        - arm: properly account for stack randomization and stack guard gap
        - arm: use STACK_TOP when computing mmap base address
        - bpf: fix use after free in prog symbol exposure
        - cxgb4:Fix out-of-bounds MSI-X info array access
        - erspan: remove the incorrect mtu limit for erspan
        - hso: fix NULL-deref on tty open
        - ipv6: drop incoming packets having a v4mapped source address
        - ipv6: Handle missing host route in __ipv6_ifa_notify
        - net: ipv4: avoid mixed n_redirects and rate_tokens usage
        - net: qlogic: Fix memory leak in ql_alloc_large_buffers
        - net: Unpublish sk from sk_reuseport_cb before call_rcu
        - nfc: fix memory leak in llcp_sock_bind()
        - qmi_wwan: add support for Cinterion CLS8 devices
        - rxrpc: Fix rxrpc_recvmsg tracepoint
        - sch_dsmark: fix potential NULL deref in dsmark_init()
        - udp: fix gso_segs calculations
        - vsock: Fix a lockdep warning in __vsock_release()
        - net: dsa: rtl8366: Check VLAN ID and not ports
        - udp: only do GSO if # of segs > 1
        - net/rds: Fix error handling in rds_ib_add_one()
        - xen-netfront: do not use ~0U as error return value for xennet_fill_frags()
        - tipc: fix unlimited bundling of small messages
        - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
        - soundwire: Kconfig: fix help format
        - soundwire: fix regmap dependencies and align with other serial links
        - Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set
        - smack: use GFP_NOFS while holding inode_smack::smk_lock
        - NFC: fix attrs checks in netlink interface
        - kexec: bail out upon SIGKILL when allocating memory.
        - 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie
        - drm/vkms: Fix crc worker races
        - drm/vkms: Avoid assigning 0 for possible_crtc
        - drm/amd/display: add monitor patch to add T7 delay
        - drm/tinydrm/Kconfig: drivers: Select BACKLIGHT_CLASS_DEVICE
        - clk: imx8mq: Mark AHB clock as critical
        - drm/amd/display: Fix frames_to_insert math
        - clk: meson: axg-audio: Don't reference clk_init_data after registration
        - powerpc/64s/radix: Fix memory hotplug section page table creation
        - selftests/powerpc: Retry on host facility unavailable
        - powerpc/eeh: Clean up EEH PEs after recovery finishes
        - mailbox: mediatek: cmdq: clear the event in cmdq initial flow
        - clk: Make clk_bulk_get_all() return a valid "id"
        - f2fs: fix to drop meta/node pages during umount
        - MIPS: Don't use bc_false uninitialized in __mm_isBranchInstr
        - PCI: pci-hyperv: Fix build errors on non-SYSFS config
        - PCI: Add pci_info_ratelimited() to ratelimit PCI separately
        - PCI: Use static const struct, not const static struct
        - ARM: 8905/1: Emit __gnu_mcount_nc when using Clang 10.0.0 or newer
        - KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o
          lapic_in_kernel
        - clk: ingenic/jz4740: Fix "pll half" divider not read/written properly
        - clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered
        - ARM: dts: dir685: Drop spi-cpol from the display
        - mm: add dummy can_do_mlock() helper
        - [Config] updateconfigs for SOUNDWIRE
    
      * [CML] New device IDs for CML-U (LP: #1843774)
        - spi-nor: intel-spi: Add support for Intel Comet Lake SPI serial flash
    
      * [CML-U] Comet lake platform need ISH driver support (LP: #1843775)
        - HID: intel-ish-hid: Add Comet Lake PCI device ID
    
      * CVE-2019-17666
        - SAUCE: rtlwifi: rtl8822b: Fix potential overflow on P2P code
        - SAUCE: rtlwifi: Fix potential overflow on P2P code
    
      * md raid0/linear doesn't show error state if an array member is removed and
        allows successful writes (LP: #1847773)
        - md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone
    
      * seccomp: add SECCOMP_USER_NOTIF_FLAG_CONTINUE    (LP: #1847744)
        - SAUCE: seccomp: add SECCOMP_USER_NOTIF_FLAG_CONTINUE
        - SAUCE: seccomp: test SECCOMP_USER_NOTIF_FLAG_CONTINUE
    
      * Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x from yes
        to no (LP: #1848492)
        - [Config] Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x
          from yes to no
    
      * fdatasync performance regression on 5.0 kernels (LP: #1847641)
        - blk-wbt: fix performance regression in wbt scale_up/scale_down
    
      * bcache: Performance degradation when querying priority_stats (LP: #1840043)
        - bcache: add cond_resched() in __bch_cache_cmp()
    
      * Add installer support for iwlmvm adapters (LP: #1848236)
        - d-i: Add iwlmvm to nic-modules
    
      * Check for CPU Measurement sampling (LP: #1847590)
        - s390/cpumsf: Check for CPU Measurement sampling
    
      * Disco update: upstream stable patchset 2019-10-16 (LP: #1848367)
        - arcnet: provide a buffer big enough to actually receive packets
        - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
        - macsec: drop skb sk before calling gro_cells_receive
        - net/phy: fix DP83865 10 Mbps HDX loopback disable function
        - net: qrtr: Stop rx_worker before freeing node
        - net/sched: act_sample: don't push mac header on ip6gre ingress
        - net_sched: add max len check for TCA_KIND
        - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs
        - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC
        - ppp: Fix memory leak in ppp_write
        - sch_netem: fix a divide by zero in tabledist()
        - skge: fix checksum byte order
        - usbnet: ignore endpoints with invalid wMaxPacketSize
        - usbnet: sanity checking of packet sizes and device mtu
        - net: sched: fix possible crash in tcf_action_destroy()
        - tcp: better handle TCP_USER_TIMEOUT in SYN_SENT state
        - net/mlx5: Add device ID of upcoming BlueField-2
        - nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs
        - ALSA: hda: Flush interrupts on disabling
        - regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg
        - ASoC: tlv320aic31xx: suppress error message for EPROBE_DEFER
        - ASoC: sgtl5000: Fix of unmute outputs on probe
        - ASoC: sgtl5000: Fix charge pump source assignment
        - firmware: qcom_scm: Use proper types for dma mappings
        - dmaengine: bcm2835: Print error in case setting DMA mask fails
        - leds: leds-lp5562 allow firmware files up to the maximum length
        - media: dib0700: fix link error for dibx000_i2c_set_speed
        - media: mtk-cir: lower de-glitch counter for rc-mm protocol
        - media: exynos4-is: fix leaked of_node references
        - media: hdpvr: Add device num check and handling
        - media: i2c: ov5640: Check for devm_gpiod_get_optional() error
        - time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint
        - sched/fair: Fix imbalance due to CPU affinity
        - sched/core: Fix CPU controller for !RT_GROUP_SCHED
        - x86/apic: Make apic_pending_intr_clear() more robust
        - sched/deadline: Fix bandwidth accounting at all levels after offline
          migration
        - x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI
          fails
        - x86/apic: Soft disable APIC before initializing it
        - ALSA: hda - Show the fatal CORB/RIRB error more clearly
        - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in
          build_adc_controls()
        - EDAC/mc: Fix grain_bits calculation
        - media: iguanair: add sanity checks
        - base: soc: Export soc_device_register/unregister APIs
        - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid
        - ia64:unwind: fix double free for mod->arch.init_unw_table
        - EDAC/altera: Use the proper type for the IRQ status bits
        - ASoC: rsnd: don't call clk_get_rate() under atomic context
        - arm64/prefetch: fix a -Wtype-limits warning
        - md/raid1: end bio when the device faulty
        - md: don't call spare_active in md_reap_sync_thread if all member devices
          can't work
        - md: don't set In_sync if array is frozen
        - media: media/platform: fsl-viu.c: fix build for MICROBLAZE
        - ACPI / processor: don't print errors for processorIDs == 0xff
        - loop: Add LOOP_SET_DIRECT_IO to compat ioctl
        - EDAC, pnd2: Fix ioremap() size in dnv_rd_reg()
        - efi: cper: print AER info of PCIe fatal error
        - firmware: arm_scmi: Check if platform has released shmem before using
        - sched/fair: Use rq_lock/unlock in online_fair_sched_group
        - idle: Prevent late-arriving interrupts from disrupting offline
        - media: gspca: zero usb_buf on error
        - perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig
        - perf test vfs_getname: Disable ~/.perfconfig to get default output
        - media: mtk-mdp: fix reference count on old device tree
        - media: fdp1: Reduce FCP not found message level to debug
        - media: em28xx: modules workqueue not inited for 2nd device
        - media: rc: imon: Allow iMON RC protocol for ffdc 7e device
        - dmaengine: iop-adma: use correct printk format strings
        - perf record: Support aarch64 random socket_id assignment
        - media: vsp1: fix memory leak of dl on error return path
        - media: i2c: ov5645: Fix power sequence
        - media: omap3isp: Don't set streaming state on random subdevs
        - media: imx: mipi csi-2: Don't fail if initial state times-out
        - net: lpc-enet: fix printk format strings
        - m68k: Prevent some compiler warnings in Coldfire builds
        - ARM: dts: imx7d: cl-som-imx7: make ethernet work again
        - ARM: dts: imx7-colibri: disable HS400
        - media: radio/si470x: kill urb on error
        - media: hdpvr: add terminating 0 at end of string
        - ASoC: uniphier: Fix double reset assersion when transitioning to suspend
          state
        - tools headers: Fixup bitsperlong per arch includes
        - ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK
        - led: triggers: Fix a memory leak bug
        - nbd: add missing config put
        - media: mceusb: fix (eliminate) TX IR signal length limit
        - media: dvb-frontends: use ida for pll number
        - posix-cpu-timers: Sanitize bogus WARNONS
        - media: dvb-core: fix a memory leak bug
        - libperf: Fix alignment trap with xyarray contents in 'perf stat'
        - EDAC/amd64: Recognize DRAM device type ECC capability
        - EDAC/amd64: Decode syndrome before translating address
        - PM / devfreq: passive: Use non-devm notifiers
        - PM / devfreq: exynos-bus: Correct clock enable sequence
        - media: cec-notifier: clear cec_adap in cec_notifier_unregister
        - media: saa7146: add cleanup in hexium_attach()
        - media: cpia2_usb: fix memory leaks
        - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate()
        - perf trace beauty ioctl: Fix off-by-one error in cmd->string table
        - media: ov9650: add a sanity check
        - ASoC: es8316: fix headphone mixer volume table
        - ACPI / CPPC: do not require the _PSD method
        - sched/cpufreq: Align trace event behavior of fast switching
        - x86/apic/vector: Warn when vector space exhaustion breaks affinity
        - arm64: kpti: ensure patched kernel text is fetched from PoU
        - x86/mm/pti: Do not invoke PTI functions when PTI is disabled
        - ASoC: fsl_ssi: Fix clock control issue in master mode
        - x86/mm/pti: Handle unaligned address gracefully in pti_clone_pagetable()
        - nvmet: fix data units read and written counters in SMART log
        - nvme-multipath: fix ana log nsid lookup when nsid is not found
        - ALSA: firewire-motu: add support for MOTU 4pre
        - iommu/amd: Silence warnings under memory pressure
        - libata/ahci: Drop PCS quirk for Denverton and beyond
        - iommu/iova: Avoid false sharing on fq_timer_on
        - libtraceevent: Change users plugin directory
        - ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks
        - ACPI: custom_method: fix memory leaks
        - ACPI / PCI: fix acpi_pci_irq_enable() memory leak
        - closures: fix a race on wakeup from closure_sync
        - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
        - md/raid1: fail run raid1 array when active disk less than one
        - dmaengine: ti: edma: Do not reset reserved paRAM slots
        - kprobes: Prohibit probing on BUG() and WARN() address
        - s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding
        - x86/cpu: Add Tiger Lake to Intel family
        - platform/x86: intel_pmc_core: Do not ioremap RAM
        - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set
        - raid5: don't set STRIPE_HANDLE to stripe which is in batch list
        - mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD
        - mmc: sdhci: Fix incorrect switch to HS mode
        - mmc: core: Add helper function to indicate if SDIO IRQs is enabled
        - mmc: dw_mmc: Re-store SDIO IRQs mask at system resume
        - raid5: don't increment read_errors on EILSEQ return
        - libertas: Add missing sentinel at end of if_usb.c fw_table
        - ALSA: hda - Drop unsol event handler for Intel HDMI codecs
        - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2)
        - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
        - ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93
        - btrfs: extent-tree: Make sure we only allocate extents from block groups
          with the same type
        - media: omap3isp: Set device on omap3isp subdevs
        - PM / devfreq: passive: fix compiler warning
        - iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36
        - ALSA: firewire-tascam: handle error code when getting current source of
          clock
        - ALSA: firewire-tascam: check intermediate state of clock status and retry
        - scsi: scsi_dh_rdac: zero cdb in send_mode_select()
        - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag
        - printk: Do not lose last line in kmsg buffer dump
        - IB/mlx5: Free mpi in mp_slave mode
        - IB/hfi1: Define variables as unsigned long to fix KASAN warning
        - randstruct: Check member structs in is_pure_ops_struct()
        - Revert "ceph: use ceph_evict_inode to cleanup inode's resource"
        - ceph: use ceph_evict_inode to cleanup inode's resource
        - ALSA: hda/realtek - PCI quirk for Medion E4254
        - blk-mq: add callback of .cleanup_rq
        - scsi: implement .cleanup_rq callback
        - powerpc/imc: Dont create debugfs files for cpu-less nodes
        - fuse: fix missing unlock_page in fuse_writepage()
        - parisc: Disable HP HSC-PCI Cards to prevent kernel crash
        - KVM: x86: always stop emulation on page fault
        - KVM: x86: set ctxt->have_exception in x86_decode_insn()
        - KVM: x86: Manually calculate reserved bits when loading PDPTRS
        - media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table
        - media: don't drop front-end reference count for ->detach
        - binfmt_elf: Do not move brk for INTERP-less ET_EXEC
        - ASoC: Intel: NHLT: Fix debug print format
        - ASoC: Intel: Skylake: Use correct function to access iomem space
        - ASoC: Intel: Fix use of potentially uninitialized variable
        - ARM: samsung: Fix system restart on S3C6410
        - ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up
        - arm64: tlb: Ensure we execute an ISB following walk cache invalidation
        - arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328
        - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP
        - regulator: Defer init completion for a while after late_initcall
        - efifb: BGRT: Improve efifb_bgrt_sanity_check
        - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps
        - memcg, oom: don't require __GFP_FS when invoking memcg OOM killer
        - memcg, kmem: do not fail __GFP_NOFAIL charges
        - i40e: check __I40E_VF_DISABLE bit in i40e_sync_filters_subtask
        - block: fix null pointer dereference in blk_mq_rq_timed_out()
        - smb3: allow disabling requesting leases
        - ovl: Fix dereferencing possible ERR_PTR()
        - ovl: filter of trusted xattr results in audit
        - btrfs: fix allocation of free space cache v1 bitmap pages
        - Btrfs: fix use-after-free when using the tree modification log
        - btrfs: Relinquish CPUs in btrfs_compare_trees
        - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space
        - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve
          calls
        - Btrfs: fix race setting up and completing qgroup rescan workers
        - md/raid6: Set R5_ReadError when there is read failure on parity disk
        - md: don't report active array_state until after revalidate_disk() completes.
        - md: only call set_in_sync() when it is expected to succeed.
        - cfg80211: Purge frame registrations on iftype change
        - /dev/mem: Bail out upon SIGKILL.
        - ext4: fix warning inside ext4_convert_unwritten_extents_endio
        - ext4: fix punch hole for inline_data file systems
        - quota: fix wrong condition in is_quota_modification()
        - hwrng: core - don't wait on add_early_randomness()
        - i2c: riic: Clear NACK in tend isr
        - CIFS: fix max ea value size
        - CIFS: Fix oplock handling for SMB 2.1+ protocols
        - md/raid0: avoid RAID0 data corruption due to layout confusion.
        - fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock
        - mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new
          zone
        - drm/amd/display: Restore backlight brightness after system resume
        - selftests: Update fib_tests to handle missing ping6
        - vrf: Do not attempt to create IPv6 mcast rule if IPv6 is disabled
        - net/mlx5e: Fix traffic duplication in ethtool steering
        - media: vivid:add sanity check to avoid divide error and set value to 1 if 0.
        - media: vb2: reorder checks in vb2_poll()
        - media: vivid: work around high stack usage with clang
        - rcu/tree: Call setschedule() gp ktread to SCHED_FIFO outside of atomic
          region
        - arm64: mm: free the initrd reserved memblock in a aligned manner
        - soc: amlogic: meson-clk-measure: protect measure with a mutex
        - RAS: Build debugfs.o only when enabled in Kconfig
        - ASoC: hdac_hda: fix page fault issue by removing race
        - perf tools: Fix paths in include statements
        - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling
        - media: i2c: tda1997x: prevent potential NULL pointer access
        - arm64/efi: Move variable assignments after SECTIONS
        - ARM: xscale: fix multi-cpu compilation
        - kasan/arm64: fix CONFIG_KASAN_SW_TAGS && KASAN_INLINE
        - x86/platform/intel/iosf_mbi Rewrite locking
        - powerpc/Makefile: Always pass --synthetic to nm if supported
        - ACPI / APEI: Release resources if gen_pool_add() fails
        - ARM: at91: move platform-specific asm-offset.h to arch/arm/mach-at91
        - soc: renesas: rmobile-sysc: Set GENPD_FLAG_ALWAYS_ON for always-on domain
        - soc: renesas: Enable ARM_ERRATA_754322 for affected Cortex-A9
        - PM / devfreq: Fix kernel oops on governor module load
        - media: aspeed-video: address a protential usage of an unitialized var
        - ASoC: Intel: Haswell: Adjust machine device private context
        - x86/amd_nb: Add PCI device IDs for family 17h, model 70h
        - hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs
        - block: make rq sector size accessible for block stats
        - mmc: mtk-sd: Re-store SDIO IRQs mask at system resume
        - drm: fix module name in edid_firmware log message
        - zd1211rw: remove false assertion from zd_mac_clear()
        - btrfs: delayed-inode: Kill the BUG_ON() in btrfs_delete_delayed_dir_index()
        - kvm: Nested KVM MMUs need PAE root too
        - ARM: dts: logicpd-torpedo-baseboard: Fix missing video
        - ARM: omap2plus_defconfig: Fix missing video
        - ARM: dts: am3517-evm: Fix missing video
        - rcu/tree: Fix SCHED_FIFO params
        - fuse: fix beyond-end-of-page access in fuse_parse_cache()
        - KVM: x86: Disable posted interrupts for non-standard IRQs delivery modes
        - spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours
        - iommu/arm-smmu-v3: Disable detection of ATS and PRI
        - mt76: round up length on mt76_wr_copy
        - ath10k: fix channel info parsing for non tlv target
        - block: mq-deadline: Fix queue restart handling
        - btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer
        - SUNRPC: Fix buffer handling of GSS MIC without slack
        - ACPI / LPSS: Save/restore LPSS private registers also on Lynxpoint
        - fs: Export generic_fadvise()
        - mm: Handle MADV_WILLNEED through vfs_fadvise()
        - xfs: Fix stale data exposure when readahead races with hole punch
        - ipmi: move message error checking to avoid deadlock
    
      * ELAN469D touch pad not working (LP: #1795292) // Ubuntu won't boot on Dell
        Inspiron 7375 (LP: #1837688) // Disco update: upstream stable patchset
        2019-10-16 (LP: #1848367)
        - iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems
    
      * intel-lpss driver conflicts with write-combining MTRR region (LP: #1845584)
        - SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390 2-in-1
    
      * Fix non-working Realtek USB ethernet after system resume (LP: #1847063)
        - r8152: remove extra action copying ethernet address
        - r8152: Refresh MAC address during USBDEVFS_RESET
        - r8152: Set macpassthru in reset_resume callback
    
      * overlayfs: allow with shiftfs as underlay (LP: #1846272)
        - SAUCE: overlayfs: allow with shiftfs as underlay
    
      * [regression] NoNewPrivileges incompatible with Apparmor (LP: #1844186)
        - SAUCE: apparmor: fix nnp subset test for unconfined
    
      * PM / hibernate: fix potential memory corruption (LP: #1847118)
        - PM / hibernate: memory_bm_find_bit(): Tighten node optimisation
    
      * xHCI on AMD Stoney Ridge cannot detect USB 2.0 or 1.1 devices.
        (LP: #1846470)
        - x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect
    
      * CVE-2019-17056
        - nfc: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-17055
        - mISDN: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-17054
        - appletalk: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-17053
        - ieee802154: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-17052
        - ax25: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-15098
        - ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
    
      * Disco update: upstream stable patchset 2019-10-10 (LP: #1847663)
        - Revert "Bluetooth: validate BLE connection interval updates"
        - net/ibmvnic: free reset work of removed device from queue
        - powerpc/xive: Fix bogus error code returned by OPAL
        - drm/amd/display: readd -msse2 to prevent Clang from emitting libcalls to
          undefined SW FP routines
        - HID: prodikeys: Fix general protection fault during probe
        - HID: sony: Fix memory corruption issue on cleanup.
        - HID: logitech: Fix general protection fault caused by Logitech driver
        - HID: hidraw: Fix invalid read in hidraw_ioctl
        - HID: Add quirk for HP X500 PIXART OEM mouse
        - mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword()
        - crypto: talitos - fix missing break in switch statement
        - CIFS: fix deadlock in cached root handling
        - ASoC: Intel: cht_bsw_max98090_ti: Enable codec clock once and keep it
          enabled
        - ASoC: fsl: Fix of-node refcount unbalance in fsl_ssi_probe_from_dt()
        - ALSA: usb-audio: Add Hiby device family to quirks for native DSD support
        - ALSA: usb-audio: Add DSD support for EVGA NU Audio
        - ALSA: dice: fix wrong packet parameter for Alesis iO26
        - ALSA: hda - Add laptop imic fixup for ASUS M9V laptop
        - ALSA: hda - Apply AMD controller workaround for Raven platform
        - objtool: Clobber user CFLAGS variable
        - irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices
        - f2fs: check all the data segments against all node ones
        - PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it
        - bcache: remove redundant LIST_HEAD(journal) from run_cache_set()
        - initramfs: don't free a non-existent initrd
        - Revert "f2fs: avoid out-of-range memory access"
        - dm zoned: fix invalid memory access
        - net/ibmvnic: Fix missing { in __ibmvnic_reset
        - f2fs: fix to do sanity check on segment bitmap of LFS curseg
        - drm: Flush output polling on shutdown
        - net: don't warn in inet diag when IPV6 is disabled
        - Bluetooth: btrtl: HCI reset on close for Realtek BT chip
        - ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35
        - drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling
        - xfs: don't crash on null attr fork xfs_bmapi_read
        - netfilter: nft_socket: fix erroneous socket assignment
        - Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices
        - net_sched: check cops->tcf_block in tc_bind_tclass()
        - net/rds: An rds_sock is added too early to the hash table
        - net/rds: Check laddr_check before calling it
        - f2fs: use generic EFSBADCRC/EFSCORRUPTED
        - phy: qcom-qmp: Raise qcom_qmp_phy_enable() polling delay
        - drm/amd/display: Allow cursor async updates for framebuffer swaps
        - drm/amd/display: Skip determining update type for async updates
        - drm/amd/display: Don't replace the dc_state for fast updates
        - platform/x86: i2c-multi-instantiate: Derive the device name from parent
        - drm/dp: Add DP_DPCD_QUIRK_NO_SINK_COUNT
        - xfrm: policy: avoid warning splat when merging nodes
    
      * Disco update: upstream stable patchset 2019-10-01 (LP: #1846277)
        - netfilter: nf_flow_table: set default timeout after successful insertion
        - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report
        - Input: elan_i2c - remove Lenovo Legion Y7000 PnpID
        - powerpc/mm/radix: Use the right page size for vmemmap mapping
        - USB: usbcore: Fix slab-out-of-bounds bug during device reset
        - media: tm6000: double free if usb disconnect while streaming
        - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current
        - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit
        - udp: correct reuseport selection with connected sockets
        - xen-netfront: do not assume sk_buff_head list is empty in error handling
        - net_sched: let qdisc_put() accept NULL pointer
        - firmware: google: check if size is valid when decoding VPD data
        - serial: sprd: correct the wrong sequence of arguments
        - tty/serial: atmel: reschedule TX after RX was started
        - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
        - ieee802154: hwsim: Fix error handle path in hwsim_init_module
        - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails
        - ARM: dts: am57xx: Disable voltage switching for SD card
        - ARM: OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss
        - bus: ti-sysc: Fix using configured sysc mask value
        - s390/bpf: fix lcgr instruction encoding
        - ARM: OMAP2+: Fix omap4 errata warning on other SoCs
        - ARM: dts: dra74x: Fix iodelay configuration for mmc3
        - ARM: OMAP1: ams-delta-fiq: Fix missing irq_ack
        - bus: ti-sysc: Simplify cleanup upon failures in sysc_probe()
        - s390/bpf: use 32-bit index for tail calls
        - selftests/bpf: fix "bind{4, 6} deny specific IP & port" on s390
        - tools: bpftool: close prog FD before exit on showing a single program
        - fpga: altera-ps-spi: Fix getting of optional confd gpio
        - netfilter: ebtables: Fix argument order to ADD_COUNTER
        - netfilter: nft_flow_offload: missing netlink attribute policy
        - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info
        - NFSv4: Fix return values for nfs4_file_open()
        - NFSv4: Fix return value in nfs_finish_open()
        - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup
        - Kconfig: Fix the reference to the IDT77105 Phy driver in the description of
          ATM_NICSTAR_USE_IDT77105
        - xdp: unpin xdp umem pages in error path
        - qed: Add cleanup in qed_slowpath_start()
        - ARM: 8874/1: mm: only adjust sections of valid mm structures
        - batman-adv: Only read OGM2 tvlv_len after buffer len check
        - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0
        - r8152: Set memory to all 0xFFs on failed reg reads
        - x86/apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines
        - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check
        - netfilter: nf_conntrack_ftp: Fix debug output
        - NFSv2: Fix eof handling
        - NFSv2: Fix write regression
        - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the
          first symbol
        - cifs: set domainName when a domain-key is used in multiuser
        - cifs: Use kzfree() to zero out the password
        - usb: host: xhci-tegra: Set DMA mask correctly
        - ARM: 8901/1: add a criteria for pfn_valid of arm
        - ibmvnic: Do not process reset during or after device removal
        - sky2: Disable MSI on yet another ASUS boards (P6Xxxx)
        - i2c: designware: Synchronize IRQs when unregistering slave client
        - perf/x86/intel: Restrict period on Nehalem
        - perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops
        - amd-xgbe: Fix error path in xgbe_mod_init()
        - tools/power x86_energy_perf_policy: Fix "uninitialized variable" warnings at
          -O2
        - tools/power x86_energy_perf_policy: Fix argument parsing
        - tools/power turbostat: fix buffer overrun
        - net: aquantia: fix out of memory condition on rx side
        - net: seeq: Fix the function used to release some memory in an error handling
          path
        - dmaengine: ti: dma-crossbar: Fix a memory leak bug
        - dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe()
        - x86/uaccess: Don't leak the AC flags into __get_user() argument evaluation
        - x86/hyper-v: Fix overflow bug in fill_gva_list()
        - keys: Fix missing null pointer check in request_key_auth_describe()
        - iommu/amd: Flush old domains in kdump kernel
        - iommu/amd: Fix race in increase_address_space()
        - ovl: fix regression caused by overlapping layers detection
        - floppy: fix usercopy direction
        - binfmt_elf: move brk out of mmap when doing direct loader exec
        - SUNRPC: Handle connection breakages correctly in call_status()
        - nfs: disable client side deduplication
        - net: aquantia: fix limit of vlan filters
        - net: dsa: Fix load order between DSA drivers and taggers
        - ARM: dts: Fix flags for gpio7
        - bus: ti-sysc: Handle devices with no control registers
        - ARM: dts: Fix incorrect dcan register mapping for am3, am4 and dra7
        - ARM: dts: am335x: Fix UARTs length
        - ARM: dts: Fix incomplete dts data for am3 and am4 mmc
        - selftests/bpf: fix test_cgroup_storage on s390
        - flow_dissector: Fix potential use-after-free on BPF_PROG_DETACH
        - drm/amdgpu: fix dma_fence_wait without reference
        - netfilter: conntrack: make sysctls per-namespace again
        - drm/amd/powerplay: correct Vega20 dpm level related settings
        - libceph: don't call crypto_free_sync_skcipher() on a NULL tfm
        - i2c: iproc: Stop advertising support of SMBUS quick cmd
        - netfilter: nf_flow_table: clear skb tstamp before xmit
        - tools/power turbostat: Fix Haswell Core systems
        - net: aquantia: fix removal of vlan 0
        - net: aquantia: reapply vlan filters on up
        - arm64: dts: renesas: r8a77995: draak: Fix backlight regulator name
        - dmaengine: sprd: Fix the DMA link-list configuration
        - dmaengine: rcar-dmac: Fix DMACHCLR handling if iommu is mapped
        - Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}"
    
     -- Khalid Elmously <email address hidden>  Wed, 30 Oct 2019 00:57:52 -0400
  • linux (5.0.0-33.35) disco; urgency=medium
    
      * disco/linux: 5.0.0-33.35 -proposed tracker (LP: #1849003)
    
      * Disco update: upstream stable patchset 2019-10-18 (LP: #1848817)
        - tpm: use tpm_try_get_ops() in tpm-sysfs.c.
        - drm/bridge: tc358767: Increase AUX transfer length limit
        - drm/panel: simple: fix AUO g185han01 horizontal blanking
        - video: ssd1307fb: Start page range at page_offset
        - drm/stm: attach gem fence to atomic state
        - drm/panel: check failure cases in the probe func
        - drm/rockchip: Check for fast link training before enabling psr
        - drm/radeon: Fix EEH during kexec
        - gpu: drm: radeon: Fix a possible null-pointer dereference in
          radeon_connector_set_property()
        - PCI: rpaphp: Avoid a sometimes-uninitialized warning
        - ipmi_si: Only schedule continuously in the thread in maintenance mode
        - clk: qoriq: Fix -Wunused-const-variable
        - clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks
        - drm/amd/display: fix issue where 252-255 values are clipped
        - drm/amd/display: reprogram VM config when system resume
        - powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA
          window
        - clk: actions: Don't reference clk_init_data after registration
        - clk: sirf: Don't reference clk_init_data after registration
        - clk: sprd: Don't reference clk_init_data after registration
        - clk: zx296718: Don't reference clk_init_data after registration
        - powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL
        - powerpc/rtas: use device model APIs and serialization during LPM
        - powerpc/futex: Fix warning: 'oldval' may be used uninitialized in this
          function
        - powerpc/pseries/mobility: use cond_resched when updating device tree
        - pinctrl: tegra: Fix write barrier placement in pmx_writel
        - powerpc/eeh: Clear stale EEH_DEV_NO_HANDLER flag
        - vfio_pci: Restore original state on release
        - drm/nouveau/volt: Fix for some cards having 0 maximum voltage
        - pinctrl: amd: disable spurious-firing GPIO IRQs
        - clk: renesas: mstp: Set GENPD_FLAG_ALWAYS_ON for clock domain
        - clk: renesas: cpg-mssr: Set GENPD_FLAG_ALWAYS_ON for clock domain
        - drm/amd/display: support spdif
        - drm/amdgpu/si: fix ASIC tests
        - powerpc/64s/exception: machine check use correct cfar for late handler
        - pstore: fs superblock limits
        - clk: qcom: gcc-sdm845: Use floor ops for sdcc clks
        - powerpc/pseries: correctly track irq state in default idle
        - pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c
        - arm64: fix unreachable code issue with cmpxchg
        - clk: at91: select parent if main oscillator or bypass is enabled
        - powerpc: dump kernel log before carrying out fadump or kdump
        - mbox: qcom: add APCS child device for QCS404
        - clk: sprd: add missing kfree
        - scsi: core: Reduce memory required for SCSI logging
        - dma-buf/sw_sync: Synchronize signal vs syncpt free
        - ext4: fix potential use after free after remounting with noblock_validity
        - MIPS: Ingenic: Disable broken BTB lookup optimization.
        - MIPS: tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean
        - i2c-cht-wc: Fix lockdep warning
        - PCI: tegra: Fix OF node reference leak
        - HID: wacom: Fix several minor compiler warnings
        - livepatch: Nullify obj->mod in klp_module_coming()'s error path
        - ARM: 8898/1: mm: Don't treat faults reported from cache maintenance as
          writes
        - soundwire: intel: fix channel number reported by hardware
        - ARM: 8875/1: Kconfig: default to AEABI w/ Clang
        - rtc: snvs: fix possible race condition
        - rtc: pcf85363/pcf85263: fix regmap error in set_time
        - HID: apple: Fix stuck function keys when using FN
        - PCI: rockchip: Propagate errors for optional regulators
        - PCI: histb: Propagate errors for optional regulators
        - PCI: imx6: Propagate errors for optional regulators
        - PCI: exynos: Propagate errors for optional PHYs
        - security: smack: Fix possible null-pointer dereferences in
          smack_socket_sock_rcv_skb()
        - ARM: 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned
          address
        - fat: work around race with userspace's read via blockdev while mounting
        - pktcdvd: remove warning on attempting to register non-passthrough dev
        - hypfs: Fix error number left in struct pointer member
        - crypto: hisilicon - Fix double free in sec_free_hw_sgl()
        - kbuild: clean compressed initramfs image
        - ocfs2: wait for recovering done after direct unlock request
        - kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K
        - arm64: consider stack randomization for mmap base only when necessary
        - mips: properly account for stack randomization and stack guard gap
        - arm: properly account for stack randomization and stack guard gap
        - arm: use STACK_TOP when computing mmap base address
        - bpf: fix use after free in prog symbol exposure
        - cxgb4:Fix out-of-bounds MSI-X info array access
        - erspan: remove the incorrect mtu limit for erspan
        - hso: fix NULL-deref on tty open
        - ipv6: drop incoming packets having a v4mapped source address
        - ipv6: Handle missing host route in __ipv6_ifa_notify
        - net: ipv4: avoid mixed n_redirects and rate_tokens usage
        - net: qlogic: Fix memory leak in ql_alloc_large_buffers
        - net: Unpublish sk from sk_reuseport_cb before call_rcu
        - nfc: fix memory leak in llcp_sock_bind()
        - qmi_wwan: add support for Cinterion CLS8 devices
        - rxrpc: Fix rxrpc_recvmsg tracepoint
        - sch_dsmark: fix potential NULL deref in dsmark_init()
        - udp: fix gso_segs calculations
        - vsock: Fix a lockdep warning in __vsock_release()
        - net: dsa: rtl8366: Check VLAN ID and not ports
        - udp: only do GSO if # of segs > 1
        - net/rds: Fix error handling in rds_ib_add_one()
        - xen-netfront: do not use ~0U as error return value for xennet_fill_frags()
        - tipc: fix unlimited bundling of small messages
        - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
        - soundwire: Kconfig: fix help format
        - soundwire: fix regmap dependencies and align with other serial links
        - Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set
        - smack: use GFP_NOFS while holding inode_smack::smk_lock
        - NFC: fix attrs checks in netlink interface
        - kexec: bail out upon SIGKILL when allocating memory.
        - 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie
        - drm/vkms: Fix crc worker races
        - drm/vkms: Avoid assigning 0 for possible_crtc
        - drm/amd/display: add monitor patch to add T7 delay
        - drm/tinydrm/Kconfig: drivers: Select BACKLIGHT_CLASS_DEVICE
        - clk: imx8mq: Mark AHB clock as critical
        - drm/amd/display: Fix frames_to_insert math
        - clk: meson: axg-audio: Don't reference clk_init_data after registration
        - powerpc/64s/radix: Fix memory hotplug section page table creation
        - selftests/powerpc: Retry on host facility unavailable
        - powerpc/eeh: Clean up EEH PEs after recovery finishes
        - mailbox: mediatek: cmdq: clear the event in cmdq initial flow
        - clk: Make clk_bulk_get_all() return a valid "id"
        - f2fs: fix to drop meta/node pages during umount
        - MIPS: Don't use bc_false uninitialized in __mm_isBranchInstr
        - PCI: pci-hyperv: Fix build errors on non-SYSFS config
        - PCI: Add pci_info_ratelimited() to ratelimit PCI separately
        - PCI: Use static const struct, not const static struct
        - ARM: 8905/1: Emit __gnu_mcount_nc when using Clang 10.0.0 or newer
        - KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o
          lapic_in_kernel
        - clk: ingenic/jz4740: Fix "pll half" divider not read/written properly
        - clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered
        - ARM: dts: dir685: Drop spi-cpol from the display
        - mm: add dummy can_do_mlock() helper
        - [Config] updateconfigs for SOUNDWIRE
    
      * [CML] New device IDs for CML-U (LP: #1843774)
        - spi-nor: intel-spi: Add support for Intel Comet Lake SPI serial flash
    
      * [CML-U] Comet lake platform need ISH driver support (LP: #1843775)
        - HID: intel-ish-hid: Add Comet Lake PCI device ID
    
      * CVE-2019-17666
        - SAUCE: rtlwifi: rtl8822b: Fix potential overflow on P2P code
        - SAUCE: rtlwifi: Fix potential overflow on P2P code
    
      * md raid0/linear doesn't show error state if an array member is removed and
        allows successful writes (LP: #1847773)
        - md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone
    
      * seccomp: add SECCOMP_USER_NOTIF_FLAG_CONTINUE    (LP: #1847744)
        - SAUCE: seccomp: add SECCOMP_USER_NOTIF_FLAG_CONTINUE
        - SAUCE: seccomp: test SECCOMP_USER_NOTIF_FLAG_CONTINUE
    
      * Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x from yes
        to no (LP: #1848492)
        - [Config] Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x
          from yes to no
    
      * fdatasync performance regression on 5.0 kernels (LP: #1847641)
        - blk-wbt: fix performance regression in wbt scale_up/scale_down
    
      * bcache: Performance degradation when querying priority_stats (LP: #1840043)
        - bcache: add cond_resched() in __bch_cache_cmp()
    
      * Add installer support for iwlmvm adapters (LP: #1848236)
        - d-i: Add iwlmvm to nic-modules
    
      * Check for CPU Measurement sampling (LP: #1847590)
        - s390/cpumsf: Check for CPU Measurement sampling
    
      * Disco update: upstream stable patchset 2019-10-16 (LP: #1848367)
        - arcnet: provide a buffer big enough to actually receive packets
        - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
        - macsec: drop skb sk before calling gro_cells_receive
        - net/phy: fix DP83865 10 Mbps HDX loopback disable function
        - net: qrtr: Stop rx_worker before freeing node
        - net/sched: act_sample: don't push mac header on ip6gre ingress
        - net_sched: add max len check for TCA_KIND
        - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs
        - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC
        - ppp: Fix memory leak in ppp_write
        - sch_netem: fix a divide by zero in tabledist()
        - skge: fix checksum byte order
        - usbnet: ignore endpoints with invalid wMaxPacketSize
        - usbnet: sanity checking of packet sizes and device mtu
        - net: sched: fix possible crash in tcf_action_destroy()
        - tcp: better handle TCP_USER_TIMEOUT in SYN_SENT state
        - net/mlx5: Add device ID of upcoming BlueField-2
        - nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs
        - ALSA: hda: Flush interrupts on disabling
        - regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg
        - ASoC: tlv320aic31xx: suppress error message for EPROBE_DEFER
        - ASoC: sgtl5000: Fix of unmute outputs on probe
        - ASoC: sgtl5000: Fix charge pump source assignment
        - firmware: qcom_scm: Use proper types for dma mappings
        - dmaengine: bcm2835: Print error in case setting DMA mask fails
        - leds: leds-lp5562 allow firmware files up to the maximum length
        - media: dib0700: fix link error for dibx000_i2c_set_speed
        - media: mtk-cir: lower de-glitch counter for rc-mm protocol
        - media: exynos4-is: fix leaked of_node references
        - media: hdpvr: Add device num check and handling
        - media: i2c: ov5640: Check for devm_gpiod_get_optional() error
        - time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint
        - sched/fair: Fix imbalance due to CPU affinity
        - sched/core: Fix CPU controller for !RT_GROUP_SCHED
        - x86/apic: Make apic_pending_intr_clear() more robust
        - sched/deadline: Fix bandwidth accounting at all levels after offline
          migration
        - x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI
          fails
        - x86/apic: Soft disable APIC before initializing it
        - ALSA: hda - Show the fatal CORB/RIRB error more clearly
        - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in
          build_adc_controls()
        - EDAC/mc: Fix grain_bits calculation
        - media: iguanair: add sanity checks
        - base: soc: Export soc_device_register/unregister APIs
        - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid
        - ia64:unwind: fix double free for mod->arch.init_unw_table
        - EDAC/altera: Use the proper type for the IRQ status bits
        - ASoC: rsnd: don't call clk_get_rate() under atomic context
        - arm64/prefetch: fix a -Wtype-limits warning
        - md/raid1: end bio when the device faulty
        - md: don't call spare_active in md_reap_sync_thread if all member devices
          can't work
        - md: don't set In_sync if array is frozen
        - media: media/platform: fsl-viu.c: fix build for MICROBLAZE
        - ACPI / processor: don't print errors for processorIDs == 0xff
        - loop: Add LOOP_SET_DIRECT_IO to compat ioctl
        - EDAC, pnd2: Fix ioremap() size in dnv_rd_reg()
        - efi: cper: print AER info of PCIe fatal error
        - firmware: arm_scmi: Check if platform has released shmem before using
        - sched/fair: Use rq_lock/unlock in online_fair_sched_group
        - idle: Prevent late-arriving interrupts from disrupting offline
        - media: gspca: zero usb_buf on error
        - perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig
        - perf test vfs_getname: Disable ~/.perfconfig to get default output
        - media: mtk-mdp: fix reference count on old device tree
        - media: fdp1: Reduce FCP not found message level to debug
        - media: em28xx: modules workqueue not inited for 2nd device
        - media: rc: imon: Allow iMON RC protocol for ffdc 7e device
        - dmaengine: iop-adma: use correct printk format strings
        - perf record: Support aarch64 random socket_id assignment
        - media: vsp1: fix memory leak of dl on error return path
        - media: i2c: ov5645: Fix power sequence
        - media: omap3isp: Don't set streaming state on random subdevs
        - media: imx: mipi csi-2: Don't fail if initial state times-out
        - net: lpc-enet: fix printk format strings
        - m68k: Prevent some compiler warnings in Coldfire builds
        - ARM: dts: imx7d: cl-som-imx7: make ethernet work again
        - ARM: dts: imx7-colibri: disable HS400
        - media: radio/si470x: kill urb on error
        - media: hdpvr: add terminating 0 at end of string
        - ASoC: uniphier: Fix double reset assersion when transitioning to suspend
          state
        - tools headers: Fixup bitsperlong per arch includes
        - ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK
        - led: triggers: Fix a memory leak bug
        - nbd: add missing config put
        - media: mceusb: fix (eliminate) TX IR signal length limit
        - media: dvb-frontends: use ida for pll number
        - posix-cpu-timers: Sanitize bogus WARNONS
        - media: dvb-core: fix a memory leak bug
        - libperf: Fix alignment trap with xyarray contents in 'perf stat'
        - EDAC/amd64: Recognize DRAM device type ECC capability
        - EDAC/amd64: Decode syndrome before translating address
        - PM / devfreq: passive: Use non-devm notifiers
        - PM / devfreq: exynos-bus: Correct clock enable sequence
        - media: cec-notifier: clear cec_adap in cec_notifier_unregister
        - media: saa7146: add cleanup in hexium_attach()
        - media: cpia2_usb: fix memory leaks
        - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate()
        - perf trace beauty ioctl: Fix off-by-one error in cmd->string table
        - media: ov9650: add a sanity check
        - ASoC: es8316: fix headphone mixer volume table
        - ACPI / CPPC: do not require the _PSD method
        - sched/cpufreq: Align trace event behavior of fast switching
        - x86/apic/vector: Warn when vector space exhaustion breaks affinity
        - arm64: kpti: ensure patched kernel text is fetched from PoU
        - x86/mm/pti: Do not invoke PTI functions when PTI is disabled
        - ASoC: fsl_ssi: Fix clock control issue in master mode
        - x86/mm/pti: Handle unaligned address gracefully in pti_clone_pagetable()
        - nvmet: fix data units read and written counters in SMART log
        - nvme-multipath: fix ana log nsid lookup when nsid is not found
        - ALSA: firewire-motu: add support for MOTU 4pre
        - iommu/amd: Silence warnings under memory pressure
        - libata/ahci: Drop PCS quirk for Denverton and beyond
        - iommu/iova: Avoid false sharing on fq_timer_on
        - libtraceevent: Change users plugin directory
        - ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks
        - ACPI: custom_method: fix memory leaks
        - ACPI / PCI: fix acpi_pci_irq_enable() memory leak
        - closures: fix a race on wakeup from closure_sync
        - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
        - md/raid1: fail run raid1 array when active disk less than one
        - dmaengine: ti: edma: Do not reset reserved paRAM slots
        - kprobes: Prohibit probing on BUG() and WARN() address
        - s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding
        - x86/cpu: Add Tiger Lake to Intel family
        - platform/x86: intel_pmc_core: Do not ioremap RAM
        - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set
        - raid5: don't set STRIPE_HANDLE to stripe which is in batch list
        - mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD
        - mmc: sdhci: Fix incorrect switch to HS mode
        - mmc: core: Add helper function to indicate if SDIO IRQs is enabled
        - mmc: dw_mmc: Re-store SDIO IRQs mask at system resume
        - raid5: don't increment read_errors on EILSEQ return
        - libertas: Add missing sentinel at end of if_usb.c fw_table
        - ALSA: hda - Drop unsol event handler for Intel HDMI codecs
        - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2)
        - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
        - ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93
        - btrfs: extent-tree: Make sure we only allocate extents from block groups
          with the same type
        - media: omap3isp: Set device on omap3isp subdevs
        - PM / devfreq: passive: fix compiler warning
        - iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36
        - ALSA: firewire-tascam: handle error code when getting current source of
          clock
        - ALSA: firewire-tascam: check intermediate state of clock status and retry
        - scsi: scsi_dh_rdac: zero cdb in send_mode_select()
        - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag
        - printk: Do not lose last line in kmsg buffer dump
        - IB/mlx5: Free mpi in mp_slave mode
        - IB/hfi1: Define variables as unsigned long to fix KASAN warning
        - randstruct: Check member structs in is_pure_ops_struct()
        - Revert "ceph: use ceph_evict_inode to cleanup inode's resource"
        - ceph: use ceph_evict_inode to cleanup inode's resource
        - ALSA: hda/realtek - PCI quirk for Medion E4254
        - blk-mq: add callback of .cleanup_rq
        - scsi: implement .cleanup_rq callback
        - powerpc/imc: Dont create debugfs files for cpu-less nodes
        - fuse: fix missing unlock_page in fuse_writepage()
        - parisc: Disable HP HSC-PCI Cards to prevent kernel crash
        - KVM: x86: always stop emulation on page fault
        - KVM: x86: set ctxt->have_exception in x86_decode_insn()
        - KVM: x86: Manually calculate reserved bits when loading PDPTRS
        - media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table
        - media: don't drop front-end reference count for ->detach
        - binfmt_elf: Do not move brk for INTERP-less ET_EXEC
        - ASoC: Intel: NHLT: Fix debug print format
        - ASoC: Intel: Skylake: Use correct function to access iomem space
        - ASoC: Intel: Fix use of potentially uninitialized variable
        - ARM: samsung: Fix system restart on S3C6410
        - ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up
        - arm64: tlb: Ensure we execute an ISB following walk cache invalidation
        - arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328
        - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP
        - regulator: Defer init completion for a while after late_initcall
        - efifb: BGRT: Improve efifb_bgrt_sanity_check
        - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps
        - memcg, oom: don't require __GFP_FS when invoking memcg OOM killer
        - memcg, kmem: do not fail __GFP_NOFAIL charges
        - i40e: check __I40E_VF_DISABLE bit in i40e_sync_filters_subtask
        - block: fix null pointer dereference in blk_mq_rq_timed_out()
        - smb3: allow disabling requesting leases
        - ovl: Fix dereferencing possible ERR_PTR()
        - ovl: filter of trusted xattr results in audit
        - btrfs: fix allocation of free space cache v1 bitmap pages
        - Btrfs: fix use-after-free when using the tree modification log
        - btrfs: Relinquish CPUs in btrfs_compare_trees
        - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space
        - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve
          calls
        - Btrfs: fix race setting up and completing qgroup rescan workers
        - md/raid6: Set R5_ReadError when there is read failure on parity disk
        - md: don't report active array_state until after revalidate_disk() completes.
        - md: only call set_in_sync() when it is expected to succeed.
        - cfg80211: Purge frame registrations on iftype change
        - /dev/mem: Bail out upon SIGKILL.
        - ext4: fix warning inside ext4_convert_unwritten_extents_endio
        - ext4: fix punch hole for inline_data file systems
        - quota: fix wrong condition in is_quota_modification()
        - hwrng: core - don't wait on add_early_randomness()
        - i2c: riic: Clear NACK in tend isr
        - CIFS: fix max ea value size
        - CIFS: Fix oplock handling for SMB 2.1+ protocols
        - md/raid0: avoid RAID0 data corruption due to layout confusion.
        - fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock
        - mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new
          zone
        - drm/amd/display: Restore backlight brightness after system resume
        - selftests: Update fib_tests to handle missing ping6
        - vrf: Do not attempt to create IPv6 mcast rule if IPv6 is disabled
        - net/mlx5e: Fix traffic duplication in ethtool steering
        - media: vivid:add sanity check to avoid divide error and set value to 1 if 0.
        - media: vb2: reorder checks in vb2_poll()
        - media: vivid: work around high stack usage with clang
        - rcu/tree: Call setschedule() gp ktread to SCHED_FIFO outside of atomic
          region
        - arm64: mm: free the initrd reserved memblock in a aligned manner
        - soc: amlogic: meson-clk-measure: protect measure with a mutex
        - RAS: Build debugfs.o only when enabled in Kconfig
        - ASoC: hdac_hda: fix page fault issue by removing race
        - perf tools: Fix paths in include statements
        - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling
        - media: i2c: tda1997x: prevent potential NULL pointer access
        - arm64/efi: Move variable assignments after SECTIONS
        - ARM: xscale: fix multi-cpu compilation
        - kasan/arm64: fix CONFIG_KASAN_SW_TAGS && KASAN_INLINE
        - x86/platform/intel/iosf_mbi Rewrite locking
        - powerpc/Makefile: Always pass --synthetic to nm if supported
        - ACPI / APEI: Release resources if gen_pool_add() fails
        - ARM: at91: move platform-specific asm-offset.h to arch/arm/mach-at91
        - soc: renesas: rmobile-sysc: Set GENPD_FLAG_ALWAYS_ON for always-on domain
        - soc: renesas: Enable ARM_ERRATA_754322 for affected Cortex-A9
        - PM / devfreq: Fix kernel oops on governor module load
        - media: aspeed-video: address a protential usage of an unitialized var
        - ASoC: Intel: Haswell: Adjust machine device private context
        - x86/amd_nb: Add PCI device IDs for family 17h, model 70h
        - hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs
        - block: make rq sector size accessible for block stats
        - mmc: mtk-sd: Re-store SDIO IRQs mask at system resume
        - drm: fix module name in edid_firmware log message
        - zd1211rw: remove false assertion from zd_mac_clear()
        - btrfs: delayed-inode: Kill the BUG_ON() in btrfs_delete_delayed_dir_index()
        - kvm: Nested KVM MMUs need PAE root too
        - ARM: dts: logicpd-torpedo-baseboard: Fix missing video
        - ARM: omap2plus_defconfig: Fix missing video
        - ARM: dts: am3517-evm: Fix missing video
        - rcu/tree: Fix SCHED_FIFO params
        - fuse: fix beyond-end-of-page access in fuse_parse_cache()
        - KVM: x86: Disable posted interrupts for non-standard IRQs delivery modes
        - spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours
        - iommu/arm-smmu-v3: Disable detection of ATS and PRI
        - mt76: round up length on mt76_wr_copy
        - ath10k: fix channel info parsing for non tlv target
        - block: mq-deadline: Fix queue restart handling
        - btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer
        - SUNRPC: Fix buffer handling of GSS MIC without slack
        - ACPI / LPSS: Save/restore LPSS private registers also on Lynxpoint
        - fs: Export generic_fadvise()
        - mm: Handle MADV_WILLNEED through vfs_fadvise()
        - xfs: Fix stale data exposure when readahead races with hole punch
        - ipmi: move message error checking to avoid deadlock
    
      * ELAN469D touch pad not working (LP: #1795292) // Ubuntu won't boot on Dell
        Inspiron 7375 (LP: #1837688) // Disco update: upstream stable patchset
        2019-10-16 (LP: #1848367)
        - iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems
    
      * intel-lpss driver conflicts with write-combining MTRR region (LP: #1845584)
        - SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390 2-in-1
    
      * Fix non-working Realtek USB ethernet after system resume (LP: #1847063)
        - r8152: remove extra action copying ethernet address
        - r8152: Refresh MAC address during USBDEVFS_RESET
        - r8152: Set macpassthru in reset_resume callback
    
      * overlayfs: allow with shiftfs as underlay (LP: #1846272)
        - SAUCE: overlayfs: allow with shiftfs as underlay
    
      * [regression] NoNewPrivileges incompatible with Apparmor (LP: #1844186)
        - SAUCE: apparmor: fix nnp subset test for unconfined
    
      * PM / hibernate: fix potential memory corruption (LP: #1847118)
        - PM / hibernate: memory_bm_find_bit(): Tighten node optimisation
    
      * xHCI on AMD Stoney Ridge cannot detect USB 2.0 or 1.1 devices.
        (LP: #1846470)
        - x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect
    
      * CVE-2019-17056
        - nfc: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-17055
        - mISDN: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-17054
        - appletalk: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-17053
        - ieee802154: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-17052
        - ax25: enforce CAP_NET_RAW for raw sockets
    
      * CVE-2019-15098
        - ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
    
      * Disco update: upstream stable patchset 2019-10-10 (LP: #1847663)
        - Revert "Bluetooth: validate BLE connection interval updates"
        - net/ibmvnic: free reset work of removed device from queue
        - powerpc/xive: Fix bogus error code returned by OPAL
        - drm/amd/display: readd -msse2 to prevent Clang from emitting libcalls to
          undefined SW FP routines
        - HID: prodikeys: Fix general protection fault during probe
        - HID: sony: Fix memory corruption issue on cleanup.
        - HID: logitech: Fix general protection fault caused by Logitech driver
        - HID: hidraw: Fix invalid read in hidraw_ioctl
        - HID: Add quirk for HP X500 PIXART OEM mouse
        - mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword()
        - crypto: talitos - fix missing break in switch statement
        - CIFS: fix deadlock in cached root handling
        - ASoC: Intel: cht_bsw_max98090_ti: Enable codec clock once and keep it
          enabled
        - ASoC: fsl: Fix of-node refcount unbalance in fsl_ssi_probe_from_dt()
        - ALSA: usb-audio: Add Hiby device family to quirks for native DSD support
        - ALSA: usb-audio: Add DSD support for EVGA NU Audio
        - ALSA: dice: fix wrong packet parameter for Alesis iO26
        - ALSA: hda - Add laptop imic fixup for ASUS M9V laptop
        - ALSA: hda - Apply AMD controller workaround for Raven platform
        - objtool: Clobber user CFLAGS variable
        - irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices
        - f2fs: check all the data segments against all node ones
        - PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it
        - bcache: remove redundant LIST_HEAD(journal) from run_cache_set()
        - initramfs: don't free a non-existent initrd
        - Revert "f2fs: avoid out-of-range memory access"
        - dm zoned: fix invalid memory access
        - net/ibmvnic: Fix missing { in __ibmvnic_reset
        - f2fs: fix to do sanity check on segment bitmap of LFS curseg
        - drm: Flush output polling on shutdown
        - net: don't warn in inet diag when IPV6 is disabled
        - Bluetooth: btrtl: HCI reset on close for Realtek BT chip
        - ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35
        - drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling
        - xfs: don't crash on null attr fork xfs_bmapi_read
        - netfilter: nft_socket: fix erroneous socket assignment
        - Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices
        - net_sched: check cops->tcf_block in tc_bind_tclass()
        - net/rds: An rds_sock is added too early to the hash table
        - net/rds: Check laddr_check before calling it
        - f2fs: use generic EFSBADCRC/EFSCORRUPTED
        - phy: qcom-qmp: Raise qcom_qmp_phy_enable() polling delay
        - drm/amd/display: Allow cursor async updates for framebuffer swaps
        - drm/amd/display: Skip determining update type for async updates
        - drm/amd/display: Don't replace the dc_state for fast updates
        - platform/x86: i2c-multi-instantiate: Derive the device name from parent
        - drm/dp: Add DP_DPCD_QUIRK_NO_SINK_COUNT
        - xfrm: policy: avoid warning splat when merging nodes
    
      * Disco update: upstream stable patchset 2019-10-01 (LP: #1846277)
        - netfilter: nf_flow_table: set default timeout after successful insertion
        - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report
        - Input: elan_i2c - remove Lenovo Legion Y7000 PnpID
        - powerpc/mm/radix: Use the right page size for vmemmap mapping
        - USB: usbcore: Fix slab-out-of-bounds bug during device reset
        - media: tm6000: double free if usb disconnect while streaming
        - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current
        - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit
        - udp: correct reuseport selection with connected sockets
        - xen-netfront: do not assume sk_buff_head list is empty in error handling
        - net_sched: let qdisc_put() accept NULL pointer
        - firmware: google: check if size is valid when decoding VPD data
        - serial: sprd: correct the wrong sequence of arguments
        - tty/serial: atmel: reschedule TX after RX was started
        - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
        - ieee802154: hwsim: Fix error handle path in hwsim_init_module
        - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails
        - ARM: dts: am57xx: Disable voltage switching for SD card
        - ARM: OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss
        - bus: ti-sysc: Fix using configured sysc mask value
        - s390/bpf: fix lcgr instruction encoding
        - ARM: OMAP2+: Fix omap4 errata warning on other SoCs
        - ARM: dts: dra74x: Fix iodelay configuration for mmc3
        - ARM: OMAP1: ams-delta-fiq: Fix missing irq_ack
        - bus: ti-sysc: Simplify cleanup upon failures in sysc_probe()
        - s390/bpf: use 32-bit index for tail calls
        - selftests/bpf: fix "bind{4, 6} deny specific IP & port" on s390
        - tools: bpftool: close prog FD before exit on showing a single program
        - fpga: altera-ps-spi: Fix getting of optional confd gpio
        - netfilter: ebtables: Fix argument order to ADD_COUNTER
        - netfilter: nft_flow_offload: missing netlink attribute policy
        - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info
        - NFSv4: Fix return values for nfs4_file_open()
        - NFSv4: Fix return value in nfs_finish_open()
        - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup
        - Kconfig: Fix the reference to the IDT77105 Phy driver in the description of
          ATM_NICSTAR_USE_IDT77105
        - xdp: unpin xdp umem pages in error path
        - qed: Add cleanup in qed_slowpath_start()
        - ARM: 8874/1: mm: only adjust sections of valid mm structures
        - batman-adv: Only read OGM2 tvlv_len after buffer len check
        - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0
        - r8152: Set memory to all 0xFFs on failed reg reads
        - x86/apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines
        - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check
        - netfilter: nf_conntrack_ftp: Fix debug output
        - NFSv2: Fix eof handling
        - NFSv2: Fix write regression
        - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the
          first symbol
        - cifs: set domainName when a domain-key is used in multiuser
        - cifs: Use kzfree() to zero out the password
        - usb: host: xhci-tegra: Set DMA mask correctly
        - ARM: 8901/1: add a criteria for pfn_valid of arm
        - ibmvnic: Do not process reset during or after device removal
        - sky2: Disable MSI on yet another ASUS boards (P6Xxxx)
        - i2c: designware: Synchronize IRQs when unregistering slave client
        - perf/x86/intel: Restrict period on Nehalem
        - perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops
        - amd-xgbe: Fix error path in xgbe_mod_init()
        - tools/power x86_energy_perf_policy: Fix "uninitialized variable" warnings at
          -O2
        - tools/power x86_energy_perf_policy: Fix argument parsing
        - tools/power turbostat: fix buffer overrun
        - net: aquantia: fix out of memory condition on rx side
        - net: seeq: Fix the function used to release some memory in an error handling
          path
        - dmaengine: ti: dma-crossbar: Fix a memory leak bug
        - dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe()
        - x86/uaccess: Don't leak the AC flags into __get_user() argument evaluation
        - x86/hyper-v: Fix overflow bug in fill_gva_list()
        - keys: Fix missing null pointer check in request_key_auth_describe()
        - iommu/amd: Flush old domains in kdump kernel
        - iommu/amd: Fix race in increase_address_space()
        - ovl: fix regression caused by overlapping layers detection
        - floppy: fix usercopy direction
        - binfmt_elf: move brk out of mmap when doing direct loader exec
        - SUNRPC: Handle connection breakages correctly in call_status()
        - nfs: disable client side deduplication
        - net: aquantia: fix limit of vlan filters
        - net: dsa: Fix load order between DSA drivers and taggers
        - ARM: dts: Fix flags for gpio7
        - bus: ti-sysc: Handle devices with no control registers
        - ARM: dts: Fix incorrect dcan register mapping for am3, am4 and dra7
        - ARM: dts: am335x: Fix UARTs length
        - ARM: dts: Fix incomplete dts data for am3 and am4 mmc
        - selftests/bpf: fix test_cgroup_storage on s390
        - flow_dissector: Fix potential use-after-free on BPF_PROG_DETACH
        - drm/amdgpu: fix dma_fence_wait without reference
        - netfilter: conntrack: make sysctls per-namespace again
        - drm/amd/powerplay: correct Vega20 dpm level related settings
        - libceph: don't call crypto_free_sync_skcipher() on a NULL tfm
        - i2c: iproc: Stop advertising support of SMBUS quick cmd
        - netfilter: nf_flow_table: clear skb tstamp before xmit
        - tools/power turbostat: Fix Haswell Core systems
        - net: aquantia: fix removal of vlan 0
        - net: aquantia: reapply vlan filters on up
        - arm64: dts: renesas: r8a77995: draak: Fix backlight regulator name
        - dmaengine: sprd: Fix the DMA link-list configuration
        - dmaengine: rcar-dmac: Fix DMACHCLR handling if iommu is mapped
        - Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}"
    
     -- Connor Kuehl <email address hidden>  Mon, 21 Oct 2019 11:31:51 -0700
  • linux (5.0.0-32.34) disco; urgency=medium
    
      * disco/linux: 5.0.0-32.34 -proposed tracker (LP: #1846097)
    
      * CVE-2019-14814 // CVE-2019-14815 // CVE-2019-14816
        - mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings
    
      * CVE-2019-15505
        - media: technisat-usb2: break out of loop at end of buffer
    
      * CVE-2019-2181
        - binder: check for overflow when alloc for security context
    
      * Support Hi1620 zip hw accelerator (LP: #1845355)
        - [Config] Enable HiSilicon QM/ZIP as modules
        - crypto: hisilicon - add queue management driver for HiSilicon QM module
        - crypto: hisilicon - add hardware SGL support
        - crypto: hisilicon - add HiSilicon ZIP accelerator support
        - crypto: hisilicon - add SRIOV support for ZIP
        - Documentation: Add debugfs doc for hisi_zip
        - crypto: hisilicon - add debugfs for ZIP and QM
        - MAINTAINERS: add maintainer for HiSilicon QM and ZIP controller driver
        - crypto: hisilicon - fix kbuild warnings
        - crypto: hisilicon - add dependency for CRYPTO_DEV_HISI_ZIP
        - crypto: hisilicon - init curr_sgl_dma to fix compile warning
        - crypto: hisilicon - add missing single_release
        - crypto: hisilicon - fix error handle in hisi_zip_create_req_q
        - crypto: hisilicon - Fix warning on printing %p with dma_addr_t
        - crypto: hisilicon - Fix return value check in hisi_zip_acompress()
        - crypto: hisilicon - avoid unused function warning
    
      * xfrm interface: several kernel panic (LP: #1836261)
        - xfrm interface: fix memory leak on creation
        - xfrm interface: avoid corruption on changelink
        - xfrm interface: ifname may be wrong in logs
        - xfrm interface: fix list corruption for x-netns
        - xfrm interface: fix management of phydev
    
      * shiftfs: drop entries from cache on unlink (LP: #1841977)
        - SAUCE: shiftfs: fix buggy unlink logic
    
      * shiftfs: mark kmem_cache as reclaimable (LP: #1842059)
        - SAUCE: shiftfs: mark slab objects SLAB_RECLAIM_ACCOUNT
    
      *  Suspend to RAM(S3) does not wake up for latest megaraid and mpt3sas
        adapters(SAS3.5 onwards) (LP: #1838751)
        - PCI: Restore Resizable BAR size bits correctly for 1MB BARs
    
      * No sound inputs from the external microphone and headset on a Dell machine
        (LP: #1842265)
        - ALSA: hda - Expand pin_match function to match upcoming new tbls
        - ALSA: hda - Define a fallback_pin_fixup_tbl for alc269 family
    
      * Add -fcf-protection=none when using retpoline flags (LP: #1843291)
        - SAUCE: kbuild: add -fcf-protection=none when using retpoline flags
    
      * Disco update: upstream stable patchset 2019-09-25 (LP: #1845390)
        - bridge/mdb: remove wrong use of NLM_F_MULTI
        - cdc_ether: fix rndis support for Mediatek based smartphones
        - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()'
        - isdn/capi: check message length in capi_write()
        - ixgbe: Fix secpath usage for IPsec TX offload.
        - net: Fix null de-reference of device refcount
        - net: gso: Fix skb_segment splat when splitting gso_size mangled skb having
          linear-headed frag_list
        - net: phylink: Fix flow control resolution
        - net: sched: fix reordering issues
        - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
        - sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()'
        - sctp: use transport pf_retrans in sctp_do_8_2_transport_strike
        - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR
        - tipc: add NULL pointer check before calling kfree_rcu
        - tun: fix use-after-free when register netdev failed
        - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist
        - gpio: fix line flag validation in linehandle_create
        - Btrfs: fix assertion failure during fsync and use of stale transaction
        - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us
        - genirq: Prevent NULL pointer dereference in resend_irqs()
        - KVM: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it
          as target for memset()
        - KVM: s390: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl
        - KVM: x86: work around leak of uninitialized stack contents
        - KVM: nVMX: handle page fault in vmread
        - x86/purgatory: Change compiler flags from -mcmodel=kernel to -mcmodel=large
          to fix kexec relocation errors
        - powerpc: Add barrier_nospec to raw_copy_in_user()
        - drm/meson: Add support for XBGR8888 & ABGR8888 formats
        - clk: rockchip: Don't yell about bad mmc phases when getting
        - mtd: rawnand: mtk: Fix wrongly assigned OOB buffer pointer issue
        - PCI: Always allow probing with driver_override
        - gpio: fix line flag validation in lineevent_create
        - ubifs: Correctly use tnc_next() in search_dh_cookie()
        - driver core: Fix use-after-free and double free on glue directory
        - crypto: talitos - check AES key size
        - crypto: talitos - fix CTR alg blocksize
        - crypto: talitos - check data blocksize in ablkcipher.
        - crypto: talitos - fix ECB algs ivsize
        - crypto: talitos - Do not modify req->cryptlen on decryption.
        - crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking.
        - firmware: ti_sci: Always request response from firmware
        - drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC
        - drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto
        - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"
        - iio: adc: stm32-dfsdm: fix data type
        - modules: fix BUG when load module with rodata=n
        - modules: fix compile error if don't have strict module rwx
        - platform/x86: pmc_atom: Add CB4063 Beckhoff Automation board to
          critclk_systems DMI table
        - rsi: fix a double free bug in rsi_91x_deinit()
        - x86/build: Add -Wnoaddress-of-packed-member to REALMODE_CFLAGS, to silence
          GCC9 build warning
        - ixgbevf: Fix secpath usage for IPsec Tx offload
        - net: fixed_phy: Add forward declaration for struct gpio_desc;
        - net: sock_map, fix missing ulp check in sock hash case
        - Revert "mmc: bcm2835: Terminate timeout work synchronously"
        - mmc: tmio: Fixup runtime PM management during probe
        - mmc: tmio: Fixup runtime PM management during remove
        - drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+
        - ixgbe: fix double clean of Tx descriptors with xdp
        - mt76: mt76x0e: disable 5GHz band for MT7630E
        - x86/ima: check EFI SetupMode too
        - kvm: nVMX: Remove unnecessary sync_roots from handle_invept
        - KVM: SVM: Fix detection of AMD Errata 1096
    
      * Disco update: upstream stable patchset 2019-09-19 (LP: #1844722)
        - ALSA: hda - Fix potential endless loop at applying quirks
        - ALSA: hda/realtek - Fix overridden device-specific initialization
        - ALSA: hda/realtek - Add quirk for HP Pavilion 15
        - ALSA: hda/realtek - Enable internal speaker & headset mic of ASUS UX431FL
        - ALSA: hda/realtek - Fix the problem of two front mics on a ThinkCentre
        - sched/fair: Don't assign runtime for throttled cfs_rq
        - drm/vmwgfx: Fix double free in vmw_recv_msg()
        - vhost/test: fix build for vhost test
        - vhost/test: fix build for vhost test - again
        - batman-adv: fix uninit-value in batadv_netlink_get_ifindex()
        - batman-adv: Only read OGM tvlv_len after buffer len check
        - timekeeping: Use proper ktime_add when adding nsecs in coarse offset
        - selftests: fib_rule_tests: use pre-defined DEV_ADDR
        - powerpc/64: mark start_here_multiplatform as __ref
        - media: stm32-dcmi: fix irq = 0 case
        - scripts/decode_stacktrace: match basepath using shell prefix operator, not
          regex
        - nvme-fc: use separate work queue to avoid warning
        - modules: always page-align module section allocations
        - kernel/module: Fix mem leak in module_add_modinfo_attrs
        - drm/vblank: Allow dynamic per-crtc max_vblank_count
        - mfd: Kconfig: Fix I2C_DESIGNWARE_PLATFORM dependencies
        - tpm: Fix some name collisions with drivers/char/tpm.h
        - drm/nouveau: Don't WARN_ON VCPI allocation failures
        - drm: add __user attribute to ptr_to_compat()
        - drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set
        - drm/i915: Sanity check mmap length against object size
        - arm64: dts: stratix10: add the sysmgr-syscon property from the gmac's
        - kvm: mmu: Fix overflow on kvm mmu page limit calculation
        - KVM: x86: Always use 32-bit SMRAM save state for 32-bit kernels
        - media: i2c: tda1997x: select V4L2_FWNODE
        - ext4: protect journal inode's blocks using block_validity
        - ARM: dts: qcom: ipq4019: Fix MSI IRQ type
        - dt-bindings: mmc: Add supports-cqe property
        - dt-bindings: mmc: Add disable-cqe-dcmd property.
        - dm mpath: fix missing call of path selector type->end_io
        - mmc: sdhci-pci: Add support for Intel CML
        - PCI: dwc: Use devm_pci_alloc_host_bridge() to simplify code
        - cifs: smbd: take an array of reqeusts when sending upper layer data
        - drm/amdkfd: Add missing Polaris10 ID
        - kvm: Check irqchip mode before assign irqfd
        - Btrfs: fix race between block group removal and block group allocation
        - cifs: add spinlock for the openFileList to cifsInodeInfo
        - ceph: use ceph_evict_inode to cleanup inode's resource
        - KVM: x86: optimize check for valid PAT value
        - KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value
        - btrfs: correctly validate compression type
        - dm thin metadata: check if in fail_io mode when setting needs_check
        - bcache: only clear BTREE_NODE_dirty bit when it is set
        - bcache: add comments for mutex_lock(&b->write_lock)
        - bcache: fix race in btree_flush_write()
        - drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV
        - virtio/s390: fix race on airq_areas[]
        - ext4: don't perform block validity checks on the journal inode
        - ext4: fix block validity checks for journal inodes using indirect blocks
        - ext4: unsigned int compared against zero
        - PCI: Reset both NVIDIA GPU and HDA in ThinkPad P50 workaround
        - gpio: pca953x: correct type of reg_direction
        - gpio: pca953x: use pca953x_read_regs instead of regmap_bulk_read
        - drm/nouveau/sec2/gp102: add missing MODULE_FIRMWAREs
        - powerpc/64e: Drop stale call to smp_processor_id() which hangs SMP startup
        - drm/i915: Disable SAMPLER_STATE prefetching on all Gen11 steppings.
        - mmc: sdhci-sprd: Fix the incorrect soft reset operation when runtime
          resuming
        - usb: chipidea: imx: add imx7ulp support
        - usb: chipidea: imx: fix EPROBE_DEFER support during driver probe
    
      * Disco update: upstream stable patchset 2019-09-11 (LP: #1843622)
        - dmaengine: ste_dma40: fix unneeded variable warning
        - nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns
        - afs: Fix the CB.ProbeUuid service handler to reply correctly
        - afs: Fix loop index mixup in afs_deliver_vl_get_entry_by_name_u()
        - fs: afs: Fix a possible null-pointer dereference in afs_put_read()
        - afs: Only update d_fsdata if different in afs_d_revalidate()
        - nvmet-loop: Flush nvme_delete_wq when removing the port
        - nvme: fix a possible deadlock when passthru commands sent to a multipath
          device
        - nvme-pci: Fix async probe remove race
        - soundwire: cadence_master: fix register definition for SLAVE_STATE
        - soundwire: cadence_master: fix definitions for INTSTAT0/1
        - auxdisplay: panel: need to delete scan_timer when misc_register fails in
          panel_attach
        - dmaengine: stm32-mdma: Fix a possible null-pointer dereference in
          stm32_mdma_irq_handler()
        - omap-dma/omap_vout_vrfb: fix off-by-one fi value
        - iommu/dma: Handle SG length overflow better
        - usb: gadget: composite: Clear "suspended" on reset/disconnect
        - usb: gadget: mass_storage: Fix races between fsg_disable and fsg_set_alt
        - xen/blkback: fix memory leaks
        - arm64: cpufeature: Don't treat granule sizes as strict
        - i2c: rcar: avoid race when unregistering slave client
        - i2c: emev2: avoid race when unregistering slave client
        - drm/ast: Fixed reboot test may cause system hanged
        - usb: host: fotg2: restart hcd after port reset
        - tools: hv: fixed Python pep8/flake8 warnings for lsvmbus
        - tools: hv: fix KVP and VSS daemons exit code
        - watchdog: bcm2835_wdt: Fix module autoload
        - drm/bridge: tfp410: fix memleak in get_modes()
        - scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value
        - drm/tilcdc: Register cpufreq notifier after we have initialized crtc
        - net/tls: swap sk_write_space on close
        - net: tls, fix sk_write_space NULL write when tx disabled
        - ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set
        - ipv6: Default fib6_type to RTN_UNICAST when not set
        - net/smc: make sure EPOLLOUT is raised
        - tcp: make sure EPOLLOUT wont be missed
        - ipv4/icmp: fix rt dst dev null pointer dereference
        - mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n
        - ALSA: usb-audio: Check mixer unit bitmap yet more strictly
        - ALSA: line6: Fix memory leak at line6_init_pcm() error path
        - ALSA: hda - Fixes inverted Conexant GPIO mic mute led
        - ALSA: seq: Fix potential concurrent access to the deleted pool
        - ALSA: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate()
        - ALSA: usb-audio: Add implicit fb quirk for Behringer UFX1604
        - kvm: x86: skip populating logical dest map if apic is not sw enabled
        - KVM: x86: Don't update RIP or do single-step on faulting emulation
        - uprobes/x86: Fix detection of 32-bit user mode
        - x86/apic: Do not initialize LDR and DFR for bigsmp
        - ftrace: Fix NULL pointer dereference in t_probe_next()
        - ftrace: Check for successful allocation of hash
        - ftrace: Check for empty hash and comment the race with registering probes
        - usb-storage: Add new JMS567 revision to unusual_devs
        - USB: cdc-wdm: fix race between write and disconnect due to flag abuse
        - usb: hcd: use managed device resources
        - usb: chipidea: udc: don't do hardware access if gadget has stopped
        - usb: host: ohci: fix a race condition between shutdown and irq
        - usb: host: xhci: rcar: Fix typo in compatible string matching
        - USB: storage: ums-realtek: Update module parameter description for
          auto_delink_en
        - mei: me: add Tiger Lake point LP device ID
        - mmc: sdhci-of-at91: add quirk for broken HS200
        - mmc: core: Fix init of SD cards reporting an invalid VDD range
        - stm class: Fix a double free of stm_source_device
        - intel_th: pci: Add support for another Lewisburg PCH
        - intel_th: pci: Add Tiger Lake support
        - typec: tcpm: fix a typo in the comparison of pdo_max_voltage
        - fsi: scom: Don't abort operations for minor errors
        - lib: logic_pio: Fix RCU usage
        - lib: logic_pio: Avoid possible overlap for unregistering regions
        - lib: logic_pio: Add logic_pio_unregister_range()
        - drm/amdgpu: Add APTX quirk for Dell Latitude 5495
        - drm/i915: Don't deballoon unused ggtt drm_mm_node in linux guest
        - drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe()
        - bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-
          free
        - bus: hisi_lpc: Add .remove method to avoid driver unbind crash
        - VMCI: Release resource if the work is already queued
        - crypto: ccp - Ignore unconfigured CCP device on suspend/resume
        - Revert "cfg80211: fix processing world regdomain when non modular"
        - mac80211: fix possible sta leak
        - mac80211: Don't memset RXCB prior to PAE intercept
        - mac80211: Correctly set noencrypt for PAE frames
        - KVM: PPC: Book3S HV: Avoid lockdep debugging in TCE realmode handlers
        - KVM: PPC: Book3S: Fix incorrect guest-to-user-translation error handling
        - KVM: arm/arm64: vgic: Fix potential deadlock when ap_list is long
        - KVM: arm/arm64: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI
        - NFS: Clean up list moves of struct nfs_page
        - NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend()
        - NFS: Pass error information to the pgio error cleanup routine
        - NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0
        - i2c: piix4: Fix port selection for AMD Family 16h Model 30h
        - x86/ptrace: fix up botched merge of spectrev1 fix
        - mt76: mt76x0u: do not reset radio on resume
        - Revert "ASoC: Fail card instantiation if DAI format setup fails"
        - nvmet: Fix use-after-free bug when a port is removed
        - nvmet-file: fix nvmet_file_flush() always returning an error
        - nvme-rdma: fix possible use-after-free in connect error flow
        - nvme: fix controller removal race with scan work
        - IB/mlx5: Fix implicit MR release flow
        - dma-direct: don't truncate dma_required_mask to bus addressing capabilities
        - riscv: fix flush_tlb_range() end address for flush_tlb_page()
        - drm/scheduler: use job count instead of peek
        - locking/rwsem: Add missing ACQUIRE to read_slowpath exit when queue is empty
        - lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop
        - selftests/bpf: install files test_xdp_vlan.sh
        - ALSA: hda/ca0132 - Add new SBZ quirk
        - KVM: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when
          kvm_intel.nested is disabled
        - x86/mm/cpa: Prevent large page split when ftrace flips RW on kernel text
        - usbtmc: more sanity checking for packet size
        - mmc: sdhci-cadence: enable v4_mode to fix ADMA 64-bit addressing
        - mmc: sdhci-sprd: fixed incorrect clock divider
        - mmc: sdhci-sprd: add SDHCI_QUIRK2_PRESET_VALUE_BROKEN
        - mms: sdhci-sprd: add SDHCI_QUIRK_BROKEN_CARD_DETECTION
        - mmc: sdhci-sprd: clear the UHS-I modes read from registers
        - mmc: sdhci-sprd: Implement the get_max_timeout_count() interface
        - mmc: sdhci-sprd: add get_ro hook function
        - drm/i915/dp: Fix DSC enable code to use cpu_transcoder instead of
          encoder->type
        - hsr: implement dellink to clean up resources
        - hsr: fix a NULL pointer deref in hsr_dev_xmit()
        - hsr: switch ->dellink() to ->ndo_uninit()
        - Revert "Input: elantech - enable SMBus on new (2018+) systems"
        - mld: fix memory leak in mld_del_delrec()
        - net: fix skb use after free in netpoll
        - net: sched: act_sample: fix psample group handling on overwrite
        - net_sched: fix a NULL pointer deref in ipt action
        - net: stmmac: dwmac-rk: Don't fail if phy regulator is absent
        - tcp: inherit timestamp on mtu probe
        - tcp: remove empty skb from write queue in error cases
        - x86/boot: Preserve boot_params.secure_boot from sanitizing
        - spi: bcm2835aux: unifying code between polling and interrupt driven code
        - spi: bcm2835aux: remove dangerous uncontrolled read of fifo
        - spi: bcm2835aux: fix corruptions for longer spi transfers
        - net: tundra: tsi108: use spin_lock_irqsave instead of spin_lock_irq in IRQ
          context
        - netfilter: nf_tables: use-after-free in failing rule with bound set
        - tools: bpftool: fix error message (prog -> object)
        - hv_netvsc: Fix a warning of suspicious RCU usage
        - net: tc35815: Explicitly check NET_IP_ALIGN is not zero in tc35815_rx
        - Bluetooth: btqca: Add a short delay before downloading the NVM
        - ibmveth: Convert multicast list size for little-endian system
        - gpio: Fix build error of function redefinition
        - netfilter: nft_flow_offload: skip tcp rst and fin packets
        - drm/mediatek: use correct device to import PRIME buffers
        - drm/mediatek: set DMA max segment size
        - scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure
        - scsi: target: tcmu: avoid use-after-free after command timeout
        - cxgb4: fix a memory leak bug
        - liquidio: add cleanup in octeon_setup_iq()
        - net: myri10ge: fix memory leaks
        - lan78xx: Fix memory leaks
        - vfs: fix page locking deadlocks when deduping files
        - cx82310_eth: fix a memory leak bug
        - net: kalmia: fix memory leaks
        - ibmvnic: Unmap DMA address of TX descriptor buffers after use
        - net: cavium: fix driver name
        - wimax/i2400m: fix a memory leak bug
        - ravb: Fix use-after-free ravb_tstamp_skb
        - kprobes: Fix potential deadlock in kprobe_optimizer()
        - HID: cp2112: prevent sleeping function called from invalid context
        - x86/boot/compressed/64: Fix boot on machines with broken E820 table
        - Input: hyperv-keyboard: Use in-place iterator API in the channel callback
        - Tools: hv: kvp: eliminate 'may be used uninitialized' warning
        - nvme-multipath: fix possible I/O hang when paths are updated
        - IB/mlx4: Fix memory leaks
        - infiniband: hfi1: fix a memory leak bug
        - infiniband: hfi1: fix memory leaks
        - selftests: kvm: fix state save/load on processors without XSAVE
        - selftests/kvm: make platform_info_test pass on AMD
        - ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr()
        - ceph: fix buffer free while holding i_ceph_lock in
          __ceph_build_xattrs_blob()
        - ceph: fix buffer free while holding i_ceph_lock in fill_inode()
        - KVM: arm/arm64: Only skip MMIO insn once
        - afs: Fix leak in afs_lookup_cell_rcu()
        - KVM: arm/arm64: VGIC: Properly initialise private IRQ affinity
        - x86/boot/compressed/64: Fix missing initialization in
          find_trampoline_placement()
        - libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer
        - Revert "r8152: napi hangup fix after disconnect"
        - r8152: remove calling netif_napi_del
        - batman-adv: Fix netlink dumping of all mcast_flags buckets
        - libbpf: fix erroneous multi-closing of BTF FD
        - libbpf: set BTF FD for prog only when there is supported .BTF.ext data
        - netfilter: nf_flow_table: fix offload for flows that are subject to xfrm
        - clk: samsung: Change signature of exynos5_subcmus_init() function
        - clk: samsung: exynos5800: Move MAU subsystem clocks to MAU sub-CMU
        - clk: samsung: exynos542x: Move MSCL subsystem clocks to its sub-CMU
        - netfilter: nf_flow_table: conntrack picks up expired flows
        - netfilter: nf_flow_table: teardown flow timeout race
        - ixgbe: fix possible deadlock in ixgbe_service_task()
        - nvme: Fix cntlid validation when not using NVMEoF
        - RDMA/cma: fix null-ptr-deref Read in cma_cleanup
        - RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message
        - gpio: Fix irqchip initialization order
    
      * New ID in ums-realtek module breaks cardreader (LP: #1838886) // Disco
        update: upstream stable patchset 2019-09-11 (LP: #1843622)
        - USB: storage: ums-realtek: Whitelist auto-delink support
    
      * ipv4: enable route flushing in network namespaces (LP: #1836912)
        - ipv4: enable route flushing in network namespaces
    
      * Enhanced Hardware Support - Finalize Naming (LP: #1842774)
        - s390: add support for IBM z15 machines
    
      * CVE-2019-16714
        - net/rds: Fix info leak in rds6_inc_info_copy()
    
      * CVE-2019-14821
        - KVM: coalesced_mmio: add bounds checking
    
     -- Khalid Elmously <email address hidden>  Mon, 30 Sep 2019 23:52:23 -0400
  • linux (5.0.0-31.33) disco; urgency=medium
    
      * disco/linux: 5.0.0-31.33 -proposed tracker (LP: #1846026)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] update helper scripts
    
      * /proc/self/maps paths missing on live session (was vlc won't start; eoan
        19.10 & bionic 18.04 ubuntu/lubuntu/kubuntu/xubuntu/ubuntu-mate dailies)
        (LP: #1842382)
        - SAUCE: Revert "UBUNTU: SAUCE: shiftfs: enable overlayfs on shiftfs"
    
    linux (5.0.0-30.32) disco; urgency=medium
    
      * disco/linux: 5.0.0-30.32 -proposed tracker (LP: #1844362)
    
      * Disco update: upstream stable patchset 2019-08-20 (LP: #1840846)
        - Revert "e1000e: fix cyclic resets at link up with active tx"
        - e1000e: start network tx queue only when link is up
        - Input: synaptics - enable SMBUS on T480 thinkpad trackpad
        - nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
        - drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT
        - firmware: improve LSM/IMA security behaviour
        - irqchip/gic-v3-its: Fix command queue pointer comparison bug
        - clk: ti: clkctrl: Fix returning uninitialized data
        - efi/bgrt: Drop BGRT status field reserved bits check
        - perf/core: Fix perf_sample_regs_user() mm check
        - ARM: dts: gemini Fix up DNS-313 compatible string
        - ARM: omap2: remove incorrect __init annotation
        - afs: Fix uninitialised spinlock afs_volume::cb_break_lock
        - x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz
        - be2net: fix link failure after ethtool offline test
        - ppp: mppe: Add softdep to arc4
        - sis900: fix TX completion
        - ARM: dts: imx6ul: fix PWM[1-4] interrupts
        - pinctrl: mcp23s08: Fix add_data and irqchip_add_nested call order
        - dm table: don't copy from a NULL pointer in realloc_argv()
        - dm verity: use message limit for data block corruption message
        - x86/boot/64: Fix crash if kernel image crosses page table boundary
        - x86/boot/64: Add missing fixup_pointer() for next_early_pgt access
        - HID: chicony: add another quirk for PixArt mouse
        - pinctrl: mediatek: Ignore interrupts that are wake only during resume
        - cpu/hotplug: Fix out-of-bounds read when setting fail state
        - pinctrl: mediatek: Update cur_mask in mask/mask ops
        - linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL
        - genirq: Delay deactivation in free_irq()
        - genirq: Fix misleading synchronize_irq() documentation
        - genirq: Add optional hardware synchronization for shutdown
        - x86/ioapic: Implement irq_get_irqchip_state() callback
        - x86/irq: Handle spurious interrupt after shutdown gracefully
        - x86/irq: Seperate unused system vectors from spurious entry again
        - ARC: hide unused function unw_hdr_alloc
        - s390: fix stfle zero padding
        - s390/qdio: (re-)initialize tiqdio list entries
        - s390/qdio: don't touch the dsci in tiqdio_add_input_queues()
        - crypto: talitos - move struct talitos_edesc into talitos.h
        - crypto: talitos - fix hash on SEC1.
        - crypto/NX: Set receive window credits to max number of CRBs in RxFIFO
        - drm/udl: introduce a macro to convert dev to udl.
        - drm/udl: move to embedding drm device inside udl device.
        - x86/entry/32: Fix ENDPROC of common_spurious
        - irqchip/irq-csky-mpintc: Support auto irq deliver to all cpus
        - arm64: dts: ls1028a: Fix CPU idle fail.
        - selftests/powerpc: Add test of fork with mapping above 512TB
        - x86/efi: fix a -Wtype-limits compilation warning
        - pinctrl: ocelot: fix gpio direction for pins after 31
        - pinctrl: ocelot: fix pinmuxing for pins after 31
        - mm/oom_kill.c: fix uninitialized oc->constraint
        - fork,memcg: alloc_thread_stack_node needs to set tsk->stack
        - MIPS: ath79: fix ar933x uart parity mode
        - MIPS: fix build on non-linux hosts
        - arm64/efi: Mark __efistub_stext_offset as an absolute symbol explicitly
        - scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported
        - dmaengine: imx-sdma: fix use-after-free on probe error path
        - wil6210: fix potential out-of-bounds read
        - ath10k: Do not send probe response template for mesh
        - ath9k: Check for errors when reading SREV register
        - ath6kl: add some bounds checking
        - ath10k: add peer id check in ath10k_peer_find_by_id
        - wil6210: fix spurious interrupts in 3-msi
        - ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
        - regmap: debugfs: Fix memory leak in regmap_debugfs_init
        - batman-adv: fix for leaked TVLV handler.
        - media: dvb: usb: fix use after free in dvb_usb_device_exit
        - media: spi: IR LED: add missing of table registration
        - crypto: talitos - fix skcipher failure due to wrong output IV
        - media: ov7740: avoid invalid framesize setting
        - media: marvell-ccic: fix DMA s/g desc number calculation
        - media: vpss: fix a potential NULL pointer dereference
        - media: media_device_enum_links32: clean a reserved field
        - net: stmmac: dwmac1000: Clear unused address entries
        - net: stmmac: dwmac4/5: Clear unused address entries
        - qed: Set the doorbell address correctly
        - signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
        - af_key: fix leaks in key_pol_get_resp and dump_sp.
        - xfrm: Fix xfrm sel prefix length validation
        - fscrypt: clean up some BUG_ON()s in block encryption/decryption
        - perf annotate TUI browser: Do not use member from variable within its own
          initialization
        - media: mc-device.c: don't memset __user pointer contents
        - media: saa7164: fix remove_proc_entry warning
        - media: staging: media: davinci_vpfe: - Fix for memory leak if decoder
          initialization fails.
        - net: phy: Check against net_device being NULL
        - crypto: talitos - properly handle split ICV.
        - crypto: talitos - Align SEC1 accesses to 32 bits boundaries.
        - tua6100: Avoid build warnings.
        - batman-adv: Fix duplicated OGMs on NETDEV_UP
        - locking/lockdep: Fix merging of hlocks with non-zero references
        - media: wl128x: Fix some error handling in fm_v4l2_init_video_device()
        - cpupower : frequency-set -r option misses the last cpu in related cpu list
        - arm64: mm: make CONFIG_ZONE_DMA32 configurable
        - perf jvmti: Address gcc string overflow warning for strncpy()
        - net: stmmac: dwmac4: fix flow control issue
        - net: stmmac: modify default value of tx-frames
        - crypto: inside-secure - do not rely on the hardware last bit for result
          descriptors
        - net: fec: Do not use netdev messages too early
        - net: axienet: Fix race condition causing TX hang
        - s390/qdio: handle PENDING state for QEBSM devices
        - RAS/CEC: Fix pfn insertion
        - net: sfp: add mutex to prevent concurrent state checks
        - ipset: Fix memory accounting for hash types on resize
        - perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode
        - perf test 6: Fix missing kvm module load for s390
        - perf report: Fix OOM error in TUI mode on s390
        - irqchip/meson-gpio: Add support for Meson-G12A SoC
        - media: uvcvideo: Fix access to uninitialized fields on probe error
        - media: fdp1: Support M3N and E3 platforms
        - iommu: Fix a leak in iommu_insert_resv_region
        - gpio: omap: fix lack of irqstatus_raw0 for OMAP4
        - gpio: omap: ensure irq is enabled before wakeup
        - regmap: fix bulk writes on paged registers
        - bpf: silence warning messages in core
        - media: s5p-mfc: fix reading min scratch buffer size on MFC v6/v7
        - selinux: fix empty write to keycreate file
        - x86/cpu: Add Ice Lake NNPI to Intel family
        - ASoC: meson: axg-tdm: fix sample clock inversion
        - rcu: Force inlining of rcu_read_lock()
        - x86/cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS
        - qed: iWARP - Fix tc for MPA ll2 connection
        - block: null_blk: fix race condition for null_del_dev
        - blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership
          arbitration
        - xfrm: fix sa selector validation
        - sched/core: Add __sched tag for io_schedule()
        - sched/fair: Fix "runnable_avg_yN_inv" not used warnings
        - perf/x86/intel/uncore: Handle invalid event coding for free-running counter
        - x86/atomic: Fix smp_mb__{before,after}_atomic()
        - perf evsel: Make perf_evsel__name() accept a NULL argument
        - vhost_net: disable zerocopy by default
        - ipoib: correcly show a VF hardware address
        - x86/cacheinfo: Fix a -Wtype-limits warning
        - blk-iolatency: only account submitted bios
        - ACPICA: Clear status of GPEs on first direct enable
        - EDAC/sysfs: Fix memory leak when creating a csrow object
        - nvme: fix possible io failures when removing multipathed ns
        - nvme-pci: properly report state change failure in nvme_reset_work
        - nvme-pci: set the errno on ctrl state change error
        - lightnvm: pblk: fix freeing of merged pages
        - arm64: Do not enable IRQs for ct_user_exit
        - ipsec: select crypto ciphers for xfrm_algo
        - ipvs: defer hook registration to avoid leaks
        - media: s5p-mfc: Make additional clocks optional
        - media: i2c: fix warning same module names
        - [Config] rename module adv7511
        - ntp: Limit TAI-UTC offset
        - timer_list: Guard procfs specific code
        - acpi/arm64: ignore 5.1 FADTs that are reported as 5.0
        - media: coda: fix mpeg2 sequence number handling
        - media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP
        - media: coda: increment sequence offset for the last returned frame
        - media: vimc: cap: check v4l2_fill_pixfmt return value
        - media: hdpvr: fix locking and a missing msleep
        - net: stmmac: sun8i: force select external PHY when no internal one
        - rtlwifi: rtl8192cu: fix error handle when usb probe failed
        - mt7601u: do not schedule rx_tasklet when the device has been disconnected
        - x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c
        - mt7601u: fix possible memory leak when the device is disconnected
        - ipvs: fix tinfo memory leak in start_sync_thread
        - ath10k: add missing error handling
        - ath10k: fix PCIE device wake up failed
        - perf tools: Increase MAX_NR_CPUS and MAX_CACHES
        - ASoC: Intel: hdac_hdmi: Set ops to NULL on remove
        - libata: don't request sense data on !ZAC ATA devices
        - clocksource/drivers/exynos_mct: Increase priority over ARM arch timer
        - xsk: Properly terminate assignment in xskq_produce_flush_desc
        - rslib: Fix decoding of shortened codes
        - rslib: Fix handling of of caller provided syndrome
        - ixgbe: Check DDM existence in transceiver before access
        - crypto: serpent - mark __serpent_setkey_sbox noinline
        - crypto: asymmetric_keys - select CRYPTO_HASH where needed
        - wil6210: drop old event after wmi_call timeout
        - EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
        - bcache: check CACHE_SET_IO_DISABLE in allocator code
        - bcache: check CACHE_SET_IO_DISABLE bit in bch_journal()
        - bcache: acquire bch_register_lock later in cached_dev_free()
        - bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
        - bcache: fix potential deadlock in cached_def_free()
        - net: hns3: fix a -Wformat-nonliteral compile warning
        - net: hns3: add some error checking in hclge_tm module
        - ath10k: destroy sdio workqueue while remove sdio module
        - net: mvpp2: prs: Don't override the sign bit in SRAM parser shift
        - igb: clear out skb->tstamp after reading the txtime
        - iwlwifi: mvm: Drop large non sta frames
        - bpf: fix uapi bpf_prog_info fields alignment
        - perf stat: Make metric event lookup more robust
        - perf stat: Fix group lookup for metric group
        - net: usb: asix: init MAC address buffers
        - rxrpc: Fix oops in tracepoint
        - bpf, libbpf, smatch: Fix potential NULL pointer dereference
        - selftests: bpf: fix inlines in test_lwt_seg6local
        - bonding: validate ip header before check IPPROTO_IGMP
        - gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
        - tools: bpftool: Fix json dump crash on powerpc
        - Bluetooth: hci_bcsp: Fix memory leak in rx_skb
        - Bluetooth: Add new 13d3:3491 QCA_ROME device
        - Bluetooth: Add new 13d3:3501 QCA_ROME device
        - Bluetooth: 6lowpan: search for destination address in all peers
        - perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64
        - Bluetooth: Check state in l2cap_disconnect_rsp
        - gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable()
        - Bluetooth: validate BLE connection interval updates
        - gtp: fix suspicious RCU usage
        - gtp: fix Illegal context switch in RCU read-side critical section.
        - gtp: fix use-after-free in gtp_encap_destroy()
        - gtp: fix use-after-free in gtp_newlink()
        - net: mvmdio: defer probe of orion-mdio if a clock is not ready
        - iavf: fix dereference of null rx_buffer pointer
        - floppy: fix out-of-bounds read in next_valid_format
        - floppy: fix invalid pointer dereference in drive_name
        - xen: let alloc_xenballooned_pages() fail if not enough memory free
        - scsi: NCR5380: Always re-enable reselection interrupt
        - Revert "scsi: ncr5380: Increase register polling limit"
        - scsi: core: Fix race on creating sense cache
        - scsi: megaraid_sas: Fix calculation of target ID
        - scsi: mac_scsi: Increase PIO/PDMA transfer length threshold
        - scsi: mac_scsi: Fix pseudo DMA implementation, take 2
        - crypto: ghash - fix unaligned memory access in ghash_setkey()
        - crypto: ccp - Validate the the error value used to index error messages
        - crypto: arm64/sha1-ce - correct digest for empty data in finup
        - crypto: arm64/sha2-ce - correct digest for empty data in finup
        - crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
        - crypto: crypto4xx - fix AES CTR blocksize value
        - crypto: crypto4xx - fix blocksize for cfb and ofb
        - crypto: crypto4xx - block ciphers should only accept complete blocks
        - crypto: ccp - memset structure fields to zero before reuse
        - crypto: ccp/gcm - use const time tag comparison.
        - crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe
        - bcache: Revert "bcache: fix high CPU occupancy during journal"
        - bcache: Revert "bcache: free heap cache_set->flush_btree in
          bch_journal_free"
        - bcache: ignore read-ahead request failure on backing device
        - bcache: fix mistaken sysfs entry for io_error counter
        - bcache: destroy dc->writeback_write_wq if failed to create
          dc->writeback_thread
        - Input: gtco - bounds check collection indent level
        - Input: synaptics - whitelist Lenovo T580 SMBus intertouch
        - regulator: s2mps11: Fix buck7 and buck8 wrong voltages
        - arm64: tegra: Update Jetson TX1 GPU regulator timings
        - iwlwifi: pcie: don't service an interrupt that was masked
        - iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X
        - iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill
        - iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices
        - NFSv4: Handle the special Linux file open access mode
        - pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error
        - pNFS: Fix a typo in pnfs_update_layout
        - pnfs: Fix a problem where we gratuitously start doing I/O through the MDS
        - lib/scatterlist: Fix mapping iterator when sg->offset is greater than
          PAGE_SIZE
        - ASoC: dapm: Adapt for debugfs API change
        - raid5-cache: Need to do start() part job after adding journal device
        - ALSA: seq: Break too long mutex context in the write loop
        - ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform
        - media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
        - media: coda: Remove unbalanced and unneeded mutex unlock
        - media: videobuf2-core: Prevent size alignment wrapping buffer size to 0
        - media: videobuf2-dma-sg: Prevent size from overflowing
        - KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed
        - arm64: tegra: Fix AGIC register range
        - fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys
          inodes.
        - kconfig: fix missing choice values in auto.conf
        - drm/nouveau/i2c: Enable i2c pads & busses during preinit
        - padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
        - dm zoned: fix zone state management race
        - xen/events: fix binding user event channels to cpus
        - 9p/xen: Add cleanup path in p9_trans_xen_init
        - 9p/virtio: Add cleanup path in p9_virtio_init
        - x86/boot: Fix memory leak in default_get_smp_config()
        - perf/x86/intel: Fix spurious NMI on fixed counter
        - perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs
        - perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs
        - drm/edid: parse CEA blocks embedded in DisplayID
        - intel_th: pci: Add Ice Lake NNPI support
        - PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
        - PCI: Do not poll for PME if the device is in D3cold
        - PCI: qcom: Ensure that PERST is asserted for at least 100 ms
        - Btrfs: fix data loss after inode eviction, renaming it, and fsync it
        - Btrfs: fix fsync not persisting dentry deletions due to inode evictions
        - Btrfs: add missing inode version, ctime and mtime updates when punching hole
        - IB/mlx5: Report correctly tag matching rendezvous capability
        - HID: wacom: generic: only switch the mode on devices with LEDs
        - HID: wacom: generic: Correct pad syncing
        - HID: wacom: correct touch resolution x/y typo
        - libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
        - coda: pass the host file in vma->vm_file on mmap
        - include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT
          architectures
        - xfs: don't overflow xattr listent buffer
        - xfs: rename m_inotbt_nores to m_finobt_nores
        - xfs: don't ever put nlink > 0 inodes on the unlinked list
        - xfs: reserve blocks for ifree transaction during log recovery
        - xfs: fix reporting supported extra file attributes for statx()
        - xfs: serialize unaligned dio writes against all other dio writes
        - xfs: abort unaligned nowait directio early
        - gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM
        - crypto: caam - limit output IV to CBC to work around CTR mode DMA issue
        - parisc: Ensure userspace privilege for ptraced processes in regset functions
        - parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1
        - powerpc/32s: fix suspend/resume when IBATs 4-7 are used
        - powerpc/watchpoint: Restore NV GPRs while returning from exception
        - powerpc/powernv/npu: Fix reference leak
        - powerpc/pseries: Fix oops in hotplug memory notifier
        - mmc: sdhci-msm: fix mutex while in spinlock
        - eCryptfs: fix a couple type promotion bugs
        - mtd: rawnand: mtk: Correct low level time calculation of r/w cycle
        - mtd: spinand: read returns badly if the last page has bitflips
        - intel_th: msu: Fix single mode with disabled IOMMU
        - Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
        - usb: Handle USB3 remote wakeup for LPM enabled devices correctly
        - blk-throttle: fix zero wait time for iops throttled group
        - blk-iolatency: clear use_delay when io.latency is set to zero
        - blkcg: update blkcg_print_stat() to handle larger outputs
        - net: mvmdio: allow up to four clocks to be specified for orion-mdio
        - dt-bindings: allow up to four clocks for orion-mdio
        - dm bufio: fix deadlock with loop device
        - ath10k: Check tx_stats before use it
        - ath10k: fix incorrect multicast/broadcast rate setting
        - spi: rockchip: turn down tx dma bursts
        - ath10k: Fix encoding for protected management frames
        - media: v4l2-core: fix use-after-free error
        - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
        - locking/lockdep: Fix OOO unlock when hlocks need merging
        - media: aspeed: change irq to threaded irq
        - gpio: omap: Fix lost edge wake-up interrupts
        - media: davinci: vpif_capture: fix memory leak in vpif_probe()
        - perf/x86/intel: Disable check_msr for real HW
        - integrity: Fix __integrity_init_keyring() section mismatch
        - iavf: allow null RX descriptors
        - ASoC: rsnd: fixup mod ID calculation in rsnd_ctu_probe_
        - bpf: fix callees pruning callers
        - net: netsec: initialize tx ring on ndo_open
        - EDAC/sysfs: Drop device references properly
        - nvme-pci: adjust irq max_vector using num_possible_cpus()
        - media: mt9m111: fix fw-node refactoring
        - ASoC: soc-core: call snd_soc_unbind_card() under mutex_lock;
        - ath10k: fix fw crash by moving chip reset after napi disabled
        - netfilter: ctnetlink: Fix regression in conntrack entry deletion
        - bpf: fix BPF_ALU32 | BPF_ARSH on BE arches
        - gpio: Fix return value mismatch of function gpiod_get_from_of_node()
        - ath9k: correctly handle short radar pulses
        - ath10k: Fix memory leak in qmi
        - net: hns3: add Asym Pause support to fix autoneg problem
        - iwlwifi: dbg: fix debug monitor stop and restart delays
        - bnxt_en: Disable bus master during PCI shutdown and driver unload.
        - bnxt_en: Fix statistics context reservation logic for RDMA driver.
        - perf stat: Fix metrics with --no-merge
        - perf stat: Don't merge events in the same PMU
        - net: hns3: enable broadcast promisc mode when initializing VF
        - Bluetooth: hidp: NUL terminate a string in the compat ioctl
        - xdp: fix race on generic receive path
        - net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue
        - blk-iolatency: fix STS_AGAIN handling
        - scsi: NCR5380: Handle PDMA failure reliably
        - scsi: sd_zbc: Fix compilation warning
        - scsi: zfcp: fix request object use-after-free in send path causing seqno
          errors
        - scsi: zfcp: fix request object use-after-free in send path causing wrong
          traces
        - cifs: fix crash in smb2_compound_op()/smb2_set_next_command()
        - cifs: Properly handle auto disabling of serverino option
        - regulator: s2mps11: Fix ERR_PTR dereference on GPIO lookup failure
        - iwlwifi: mvm: delay GTK setting in FW in AP mode
        - iwlwifi: mvm: clear rfkill_safe_init_done when we start the firmware
        - opp: Don't use IS_ERR on invalid supplies
        - ASoC: core: Adapt for debugfs API change
        - ceph: fix end offset in truncate_inode_pages_range call
        - KVM: nVMX: Always sync GUEST_BNDCFGS when it comes from vmcs01
        - KVM: VMX: Fix handling of #MC that occurs during VM-Entry
        - KVM: VMX: check CPUID before allowing read/write of IA32_XSS
        - KVM: PPC: Book3S HV: Signed extend decrementer value if not using large
          decrementer
        - KVM: PPC: Book3S HV: Clear pending decrementer exceptions on nested guest
          entry
        - KVM: PPC: Book3S HV: Fix CR0 setting in TM emulation
        - signal/usb: Replace kill_pid_info_as_cred with kill_pid_usb_asyncio
        - signal: Correct namespace fixups of si_pid and si_uid
        - i3c: fix i2c and i3c scl rate by bus mode
        - ARM: dts: gemini: Set DIR-685 SPI CS as active low
        - rt2x00usb: fix rx queue hang
        - block: Allow mapping of vmalloc-ed buffers
        - block: Fix potential overflow in blk_report_zones()
        - RDMA/srp: Accept again source addresses that do not have a port number
        - mm/nvdimm: add is_ioremap_addr and use that to check ioremap address
        - resource: fix locking in find_next_iomem_res()
        - powerpc/powernv: Fix stale iommu table base after VFIO
        - dax: Fix missed wakeup with PMD faults
        - pstore: Fix double-free in pstore_mkfile() failure path
        - [Config] rename module adv7511
    
      * ACPI support for the ARMv8.2 Statistical Profiling Extension (LP: #1841490)
        - ACPICA: ACPI 6.3: MADT: add support for statistical profiling in GICC
        - ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags
        - ACPI/PPTT: Modify node flag detection to find last IDENTICAL
        - ACPI/PPTT: Add function to return ACPI 6.3 Identical tokens
        - arm_pmu: acpi: spe: Add initial MADT/SPE probing
        - perf: arm_spe: Enable ACPI/Platform automatic module loading
    
      * Backport support for software count cache flush Spectre v2 mitigation. (CVE)
        (required for POWER9 DD2.3) (LP: #1822870) // QEMU -  count cache flush
        Spectre v2 mitigation (CVE) (required for POWER9 DD2.3) (LP: #1832622)
        - KVM: PPC: Book3S: Add count cache flush parameters to kvmppc_get_cpu_char()
    
      * Additional regression in CMA allocation rework (LP: #1841483)
        - dma-direct: fix zone selection after an unaddressable CMA allocation
    
      * [SRU][B-OEM-OSP1/D/E] reduce s2idle power consumption when BIOS uses shared
        power resources (LP: #1840882)
        - PCI / ACPI: Use cached ACPI device state to get PCI device power state
        - ACPI / PM: Introduce concept of a _PR0 dependent device
        - PCI / ACPI: Add _PR0 dependent devices
    
      * ipv6: fix neighbour resolution with raw socket (LP: #1834465)
        - ipv6: constify rt6_nexthop()
        - ipv6: fix neighbour resolution with raw socket
    
      * realtek r8822be kernel module fails after update to linux kernel-headers
        5.0.0-21 (LP: #1838133)
        - build_bug.h: add wrapper for _Static_assert
        - lib/vsprintf.c: move sizeof(struct printf_spec) next to its definition
        - linux/fs.h: move member alignment check next to definition of struct
          filename
        - rtw88: add license for Makefile
        - rtw88: fix subscript above array bounds compiler warning
        - rtw88: fix unassigned rssi_level in rtw_sta_info
        - rtw88: avoid circular locking between local->iflist_mtx and rtwdev->mutex
        - rtw88: Make some symbols static
        - rtw88: pci: use ieee80211_ac_numbers instead of 0-3
        - rtw88: pci: check if queue mapping exceeds size of ac_to_hwq
        - rtw88: more descriptions about LPS
        - rtw88: add fast xmit support
        - rtw88: add support for random mac scan
        - rtw88: add beacon function setting
        - rtw88: 8822c: add rf write protection when switching channel
        - rtw88: 8822c: update channel and bandwidth BB setting
        - rtw88: 8822c: disable rx clock gating before counter reset
        - rtw88: 8822c: use more accurate ofdm fa counting
        - rtw88: power on again if it was already on
        - rtw88: restore DACK results to save time
        - rtw88: rsvd page should go though management queue
        - rtw88: fix typo rtw_writ16_set
        - rtw88: resolve order of tx power setting routines
        - rtw88: do not use (void *) as argument
        - rtw88: unify prefixes for tx power setting routine
        - rtw88: remove unused variable
        - rtw88: fix incorrect tx power limit at 5G
        - rtw88: choose the lowest as world-wide power limit
        - rtw88: correct power limit selection
        - rtw88: update tx power limit table to RF v20
        - rtw88: remove all RTW_MAX_POWER_INDEX macro
        - rtw88: refine flow to get tx power index
        - rtw88: Fix misuse of GENMASK macro
        - rtw88: pci: Rearrange the memory usage for skb in RX ISR
        - rtw88: pci: Use DMA sync instead of remapping in RX ISR
        - rtw88: debug: dump tx power indexes in use
        - rtw88: use txpwr_lmt_cfg_pair struct, not arrays
        - rtw88: pci: remove set but not used variable 'ip_sel'
        - rtw88: allow c2h operation in irq context
        - rtw88: enclose c2h cmd handle with mutex
        - rtw88: add BT co-existence support
        - SAUCE: rtw88: pci: enable MSI interrupt
    
      * Disco update: upstream stable patchset 2019-08-30 (LP: #1842128)
        - selftests/bpf: fix sendmsg6_prog on s390
        - net: mvpp2: Don't check for 3 consecutive Idle frames for 10G links
        - selftests: forwarding: gre_multipath: Enable IPv4 forwarding
        - selftests: forwarding: gre_multipath: Fix flower filters
        - can: mcp251x: add error check when wq alloc failed
        - can: gw: Fix error path of cgw_module_init
        - ASoC: rockchip: Fix mono capture
        - mac80211_hwsim: Fix possible null-pointer dereferences in
          hwsim_dump_radio_nl()
        - netfilter: ipset: Actually allow destination MAC address for hash:ip,mac
          sets too
        - netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and
          hash:ip,mac sets
        - rxrpc: Fix potential deadlock
        - rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet
        - net: phy: phy_led_triggers: Fix a possible null-pointer dereference in
          phy_led_trigger_change_speed()
        - NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts
        - HID: quirks: Set the INCREMENT_USAGE_ON_DUPLICATE quirk on Saitek X52
        - drm/rockchip: Suspend DP late
        - SMB3: Fix potential memory leak when processing compound chain
        - s390: put _stext and _etext into .text section
        - net: stmmac: Fix issues when number of Queues >= 4
        - net: stmmac: tc: Do not return a fragment entry
        - block, bfq: handle NULL return value by bfq_init_rq()
        - KVM: arm64: Don't write junk to sysregs on reset
        - KVM: arm: Don't write junk to CP15 registers on reset
        - clk: socfpga: stratix10: fix rate caclulationg for cnt_clks
        - ceph: clear page dirty before invalidate page
        - Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE
        - dm integrity: fix a crash due to BUG_ON in __journal_read_write()
        - dm raid: add missing cleanup in raid_ctr()
        - xfs: don't trip over uninitialized buffer on extent read of corrupted inode
        - xfs: always rejoin held resources during defer roll
        - rxrpc: Fix local endpoint refcounting
        - rxrpc: Fix read-after-free in rxrpc_queue_local()
        - rxrpc: Fix local endpoint replacement
        - rxrpc: Fix local refcounting
        - regulator: axp20x: fix DCDCA and DCDCD for AXP806
        - regulator: axp20x: fix DCDC5 and DCDC6 for AXP803
        - HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT
        - MIPS: kernel: only use i8253 clocksource with periodic clockevent
        - mips: fix cacheinfo
        - netfilter: ebtables: fix a memory leak bug in compat
        - ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks
        - spi: pxa2xx: Balance runtime PM enable/disable on error
        - bpf: sockmap, sock_map_delete needs to use xchg
        - bpf: sockmap, synchronize_rcu before free'ing map
        - bpf: sockmap, only create entry if ulp is not already enabled
        - ASoC: dapm: fix a memory leak bug
        - bonding: Force slave speed check after link state recovery for 802.3ad
        - can: dev: call netif_carrier_off() in register_candev()
        - ASoC: Fail card instantiation if DAI format setup fails
        - st21nfca_connectivity_event_received: null check the allocation
        - st_nci_hci_connectivity_event_received: null check the allocation
        - {nl,mac}80211: fix interface combinations on crypto controlled devices
        - ASoC: ti: davinci-mcasp: Fix clk PDIR handling for i2s master mode
        - ASoC: ti: davinci-mcasp: Correct slot_width posed constraint
        - net: usb: qmi_wwan: Add the BroadMobi BM818 card
        - qed: RDMA - Fix the hw_ver returned in device attributes
        - isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in
          start_isoc_chain()
        - net: stmmac: manage errors returned by of_get_mac_address()
        - netfilter: ipset: Fix rename concurrency with listing
        - nvmem: Use the same permissions for eeprom as for nvmem
        - iwlwifi: mvm: avoid races in rate init and rate perform
        - iwlwifi: dbg_ini: move iwl_dbg_tlv_load_bin out of debug override ifdef
        - iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
        - iwlwifi: fix locking in delayed GTK setting
        - iwlwifi: mvm: send LQ command always ASYNC
        - isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack
        - perf bench numa: Fix cpu0 binding
        - spi: pxa2xx: Add support for Intel Comet Lake
        - spi: pxa2xx: Add support for Intel Tiger Lake
        - can: sja1000: force the string buffer NULL-terminated
        - can: peak_usb: force the string buffer NULL-terminated
        - net/ethernet/qlogic/qed: force the string buffer NULL-terminated
        - NFSv4: Fix a credential refcount leak in nfs41_check_delegation_stateid
        - NFSv4: When recovering state fails with EAGAIN, retry the same recovery
        - NFSv4.1: Fix open stateid recovery
        - NFSv4.1: Only reap expired delegations
        - NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim()
        - HID: input: fix a4tech horizontal wheel custom usage
        - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL
        - sched/deadline: Fix double accounting of rq/running bw in push & pull
        - s390/mm: fix dump_pagetables top level page table walking
        - ata: rb532_cf: Fix unused variable warning in rb532_pata_driver_probe
        - net: cxgb3_main: Fix a resource leak in a error path in 'init_one()'
        - drm/amdgpu: pin the csb buffer on hw init for gfx v8
        - net: hisilicon: make hip04_tx_reclaim non-reentrant
        - net: hisilicon: fix hip04-xmit never return TX_BUSY
        - net: hisilicon: Fix dma_map_single failed on arm64
        - NFSv4: Ensure state recovery handles ETIMEDOUT correctly
        - libata: have ata_scsi_rw_xlat() fail invalid passthrough requests
        - libata: add SG safety checks in SFF pio transfers
        - x86/lib/cpu: Address missing prototypes warning
        - drm/vmwgfx: fix memory leak when too many retries have occurred
        - block: aoe: Fix kernel crash due to atomic sleep when exiting
        - perf ftrace: Fix failure to set cpumask when only one cpu is present
        - perf cpumap: Fix writing to illegal memory in handling cpumap mask
        - perf pmu-events: Fix missing "cpu_clk_unhalted.core" event
        - selftests: kvm: Adding config fragments
        - HID: wacom: correct misreported EKR ring values
        - HID: wacom: Correct distance scale for 2nd-gen Intuos devices
        - Revert "dm bufio: fix deadlock with loop device"
        - ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply
        - libceph: fix PG split vs OSD (re)connect race
        - drm/nouveau: Don't retry infinitely when receiving no data on i2c over AUX
        - gpiolib: never report open-drain/source lines as 'input' to user-space
        - userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx
        - x86/retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386
        - x86/apic: Handle missing global clockevent gracefully
        - x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h
        - x86/boot: Save fields explicitly, zero out everything else
        - x86/boot: Fix boot regression caused by bootparam sanitizing
        - dm kcopyd: always complete failed jobs
        - dm btree: fix order of block initialization in btree_split_beneath
        - dm space map metadata: fix missing store of apply_bops() return value
        - dm table: fix invalid memory accesses with too high sector number
        - dm zoned: improve error handling in reclaim
        - dm zoned: improve error handling in i/o map code
        - dm zoned: properly handle backing device failure
        - genirq: Properly pair kobject_del() with kobject_add()
        - mm, page_alloc: move_freepages should not examine struct page of reserved
          memory
        - mm, page_owner: handle THP splits correctly
        - mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely
        - mm/zsmalloc.c: fix race condition in zs_destroy_pool
        - mm/kasan: fix false positive invalid-free reports with
          CONFIG_KASAN_SW_TAGS=y
        - xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT
        - dm zoned: fix potential NULL dereference in dmz_do_reclaim()
        - powerpc: Allow flush_(inval_)dcache_range to work across ranges >4GB
    
      * Disco update: upstream stable patchset 2019-08-29 (LP: #1841994)
        - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
        - gcc-9: don't warn about uninitialized variable
        - driver core: Establish order of operations for device_add and device_del via
          bitflag
        - drivers/base: Introduce kill_device()
        - libnvdimm/bus: Prevent duplicate device_unregister() calls
        - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant
        - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock
        - HID: wacom: fix bit shift for Cintiq Companion 2
        - HID: Add quirk for HP X1200 PIXART OEM mouse
        - atm: iphase: Fix Spectre v1 vulnerability
        - bnx2x: Disable multi-cos feature.
        - ife: error out when nla attributes are empty
        - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6
        - ip6_tunnel: fix possible use-after-free on xmit
        - ipip: validate header length in ipip_tunnel_xmit
        - mlxsw: spectrum: Fix error path in mlxsw_sp_module_init()
        - mvpp2: fix panic on module removal
        - mvpp2: refactor MTU change code
        - net: bridge: delete local fdb on device init failure
        - net: bridge: mcast: don't delete permanent entries when fast leave is
          enabled
        - net: fix ifindex collision during namespace removal
        - net/mlx5e: always initialize frag->last_in_page
        - net/mlx5: Use reversed order when unregister devices
        - net: phylink: Fix flow control for fixed-link
        - net: qualcomm: rmnet: Fix incorrect UL checksum offload logic
        - net: sched: Fix a possible null-pointer dereference in dequeue_func()
        - net sched: update vlan action for batched events operations
        - net: sched: use temporary variable for actions indexes
        - net/smc: do not schedule tx_work in SMC_CLOSED state
        - NFC: nfcmrvl: fix gpio-handling regression
        - ocelot: Cancel delayed work before wq destruction
        - tipc: compat: allow tipc commands without arguments
        - tun: mark small packets as owned by the tap sock
        - net/mlx5: Fix modify_cq_in alignment
        - net/mlx5e: Prevent encap flow counter update async to user query
        - r8169: don't use MSI before RTL8168d
        - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
        - cgroup: Call cgroup_release() before __exit_signal()
        - cgroup: Implement css_task_iter_skip()
        - cgroup: Include dying leaders with live threads in PROCS iterations
        - cgroup: css_task_iter_skip()'d iterators must be advanced before accessed
        - cgroup: Fix css_task_iter_advance_css_set() cset skip condition
        - spi: bcm2835: Fix 3-wire mode if DMA is enabled
        - ALSA: usb-audio: Sanity checks for each pipe and EP types
        - ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
        - drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case
        - net: phylink: don't start and stop SGMII PHYs in SFP modules twice
        - net: phy: mscc: initialize stats array
        - bpf: fix XDP vlan selftests test_xdp_vlan.sh
        - selftests/bpf: add wrapper scripts for test_xdp_vlan.sh
        - selftests/bpf: reduce time to execute test_xdp_vlan.sh
        - net: fix bpf_xdp_adjust_head regression for generic-XDP
        - hv_sock: Fix hang when a connection is closed
        - iio: cros_ec_accel_legacy: Fix incorrect channel setting
        - iio: adc: max9611: Fix misuse of GENMASK macro
        - staging: gasket: apex: fix copy-paste typo
        - staging: android: ion: Bail out upon SIGKILL when allocating memory.
        - crypto: ccp - Fix oops by properly managing allocated structures
        - crypto: ccp - Add support for valid authsize values less than 16
        - crypto: ccp - Ignore tag length when decrypting GCM ciphertext
        - usb: usbfs: fix double-free of usb memory upon submiturb error
        - usb: iowarrior: fix deadlock on disconnect
        - sound: fix a memory leak bug
        - mmc: cavium: Set the correct dma max segment size for mmc_host
        - mmc: cavium: Add the missing dma unmap when the dma has finished.
        - loop: set PF_MEMALLOC_NOIO for the worker thread
        - Input: usbtouchscreen - initialize PM mutex before using it
        - Input: elantech - enable SMBus on new (2018+) systems
        - Input: synaptics - enable RMI mode for HP Spectre X360
        - perf annotate: Fix s390 gap between kernel end and module start
        - perf db-export: Fix thread__exec_comm()
        - perf record: Fix module size on s390
        - x86/purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS
        - gfs2: gfs2_walk_metadata fix
        - usb: host: xhci-rcar: Fix timeout in xhci_suspend()
        - usb: yurex: Fix use-after-free in yurex_delete
        - usb: typec: tcpm: free log buf memory when remove debug file
        - usb: typec: tcpm: remove tcpm dir if no children
        - usb: typec: tcpm: Add NULL check before dereferencing config
        - usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests
        - can: rcar_canfd: fix possible IRQ storm on high load
        - can: peak_usb: fix potential double kfree_skb()
        - netfilter: nfnetlink: avoid deadlock due to synchronous request_module
        - vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn
        - netfilter: Fix rpfilter dropping vrf packets by mistake
        - netfilter: conntrack: always store window size un-scaled
        - netfilter: nft_hash: fix symhash with modulus one
        - scripts/sphinx-pre-install: fix script for RHEL/CentOS
        - drm/amd/display: Wait for backlight programming completion in set backlight
          level
        - drm/amd/display: use encoder's engine id to find matched free audio device
        - drm/amd/display: Fix dc_create failure handling and 666 color depths
        - drm/amd/display: Only enable audio if speaker allocation exists
        - drm/amd/display: Increase size of audios array
        - iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND
        - nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN
        - mac80211: don't warn about CW params when not using them
        - allocate_flower_entry: should check for null deref
        - hwmon: (nct6775) Fix register address and added missed tolerance for nct6106
        - drm: silence variable 'conn' set but not used
        - cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init()
        - s390/qdio: add sanity checks to the fast-requeue path
        - ALSA: compress: Fix regression on compressed capture streams
        - ALSA: compress: Prevent bypasses of set_params
        - ALSA: compress: Don't allow paritial drain operations on capture streams
        - ALSA: compress: Be more restrictive about when a drain is allowed
        - perf tools: Fix proper buffer size for feature processing
        - perf probe: Avoid calling freeing routine multiple times for same pointer
        - drbd: dynamically allocate shash descriptor
        - ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id()
        - ARM: davinci: fix sleep.S build error on ARMv4
        - ARM: dts: bcm: bcm47094: add missing #cells for mdio-bus-mux
        - scsi: megaraid_sas: fix panic on loading firmware crashdump
        - scsi: ibmvfc: fix WARN_ON during event pool release
        - scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG
        - test_firmware: fix a memory leak bug
        - tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop
        - perf/core: Fix creating kernel counters for PMUs that override event->cpu
        - s390/dma: provide proper ARCH_ZONE_DMA_BITS value
        - HID: sony: Fix race condition between rumble and device remove.
        - x86/purgatory: Do not use __builtin_memcpy and __builtin_memset
        - ALSA: usb-audio: fix a memory leak bug
        - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
        - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
        - hwmon: (nct7802) Fix wrong detection of in4 presence
        - drm/i915: Fix wrong escape clock divisor init for GLK
        - ALSA: firewire: fix a memory leak bug
        - ALSA: hiface: fix multiple memory leak bugs
        - ALSA: hda - Don't override global PCM hw info flag
        - ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457)
        - mac80211: don't WARN on short WMM parameters from AP
        - dax: dax_layout_busy_page() should not unmap cow pages
        - SMB3: Fix deadlock in validate negotiate hits reconnect
        - smb3: send CAP_DFS capability during session setup
        - NFSv4: Fix an Oops in nfs4_do_setattr
        - KVM: Fix leak vCPU's VMCS value into other pCPU
        - mwifiex: fix 802.11n/WPA detection
        - iwlwifi: don't unmap as page memory that was mapped as single
        - iwlwifi: mvm: fix an out-of-bound access
        - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41
        - iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support
        - iio: adc: gyroadc: fix uninitialized return code
        - staging: wilc1000: flush the workqueue before deinit the host
        - can: flexcan: fix stop mode acknowledgment
        - can: flexcan: fix an use-after-free in flexcan_setup_stop_mode()
        - powerpc: fix off by one in max_zone_pfn initialization for ZONE_DMA
        - scripts/sphinx-pre-install: don't use LaTeX with CentOS 7
        - rq-qos: don't reset has_sleepers on spurious wakeups
        - rq-qos: set ourself TASK_UNINTERRUPTIBLE after we schedule
        - rq-qos: use a mb for got_token
        - drm/amd/display: Clock does not lower in Updateplanes
        - drm/amd/display: fix DMCU hang when going into Modern Standby
        - drm/amd/display: allocate 4 ddc engines for RV2
        - mac80211: fix possible memory leak in ieee80211_assign_beacon
        - hwmon: (occ) Fix division by zero issue
        - ARM: dts: imx6ul: fix clock frequency property name of I2C buses
        - powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails
        - arm64: Force SSBS on context switch
        - arm64: entry: SP Alignment Fault doesn't write to FAR_EL1
        - drm/msm/dpu: Correct dpu encoder spinlock initialization
        - perf script: Fix off by one in brstackinsn IPC computation
        - perf stat: Fix segfault for event group in repeat mode
        - nvme: ignore subnqn for ADATA SX6000LNP
        - nvme: fix memory leak caused by incorrect subsystem free
        - perf/x86: Apply more accurate check on hypervisor platform
        - gen_compile_commands: lower the entry count threshold
        - NFSv4: Fix delegation state recovery
        - NFSv4: Check the return value of update_open_stateid()
        - KVM: arm/arm64: Sync ICH_VMCR_EL2 back when about to block
        - iwlwifi: mvm: fix a use-after-free bug in iwl_mvm_tx_tso_segment
        - sh: kernel: hw_breakpoint: Fix missing break in switch statement
        - seq_file: fix problem when seeking mid-record
        - mm/hmm: fix bad subpage pointer in try_to_unmap_one
        - mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and
          MPOL_MF_STRICT were specified
        - mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind
        - mm/memcontrol.c: fix use after free in mem_cgroup_iter()
        - mm/usercopy: use memory range to be accessed for wraparound check
        - cpufreq: schedutil: Don't skip freq update when limits change
        - xtensa: add missing isync to the cpu_reset TLB code
        - ALSA: hda/realtek - Add quirk for HP Envy x360
        - ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term
        - ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit
        - ALSA: hda - Apply workaround for another AMD chip 1022:1487
        - ALSA: hda - Fix a memory leak bug
        - HID: holtek: test for sanity of intfdata
        - HID: hiddev: avoid opening a disconnected device
        - HID: hiddev: do cleanup in failure of opening a device
        - Input: kbtab - sanity check for endpoint type
        - Input: iforce - add sanity checks
        - net: usb: pegasus: fix improper read if get_registers() fail
        - netfilter: ebtables: also count base chain policies
        - riscv: Make __fstate_clean() work correctly.
        - clk: at91: generated: Truncate divisor to GENERATED_MAX_DIV + 1
        - clk: sprd: Select REGMAP_MMIO to avoid compile errors
        - clk: renesas: cpg-mssr: Fix reset control race condition
        - xen/pciback: remove set but not used variable 'old_state'
        - irqchip/gic-v3-its: Free unused vpt_page when alloc vpe table fail
        - irqchip/irq-imx-gpcv2: Forward irq type to parent
        - perf header: Fix divide by zero error if f_header.attr_size==0
        - perf header: Fix use of unitialized value warning
        - libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
        - drm/bridge: lvds-encoder: Fix build error while CONFIG_DRM_KMS_HELPER=m
        - Btrfs: fix deadlock between fiemap and transaction commits
        - scsi: hpsa: correct scsi command status issue after reset
        - scsi: qla2xxx: Fix possible fcport null-pointer dereferences
        - drm/amdgpu: fix a potential information leaking bug
        - ata: libahci: do not complain in case of deferred probe
        - kbuild: modpost: handle KBUILD_EXTRA_SYMBOLS only for external modules
        - kbuild: Check for unknown options with cc-option usage in Kconfig and clang
        - arm64/efi: fix variable 'si' set but not used
        - arm64: unwind: Prohibit probing on return_address()
        - arm64/mm: fix variable 'pud' set but not used
        - IB/core: Add mitigation for Spectre V1
        - IB/mlx5: Fix MR registration flow to use UMR properly
        - IB/mad: Fix use-after-free in ib mad completion handling
        - drm: msm: Fix add_gpu_components
        - drm/exynos: fix missing decrement of retry counter
        - Revert "kmemleak: allow to coexist with fault injection"
        - ocfs2: remove set but not used variable 'last_hash'
        - asm-generic: fix -Wtype-limits compiler warnings
        - arm64: KVM: regmap: Fix unexpected switch fall-through
        - staging: comedi: dt3000: Fix signed integer overflow 'divider * base'
        - staging: comedi: dt3000: Fix rounding up of timer divisor
        - iio: adc: max9611: Fix temperature reading in probe
        - USB: core: Fix races in character device registration and deregistraion
        - usb: gadget: udc: renesas_usb3: Fix sysfs interface of "role"
        - usb: cdc-acm: make sure a refcount is taken early enough
        - USB: CDC: fix sanity checks in CDC union parser
        - USB: serial: option: add D-Link DWM-222 device ID
        - USB: serial: option: Add support for ZTE MF871A
        - USB: serial: option: add the BroadMobi BM818 card
        - USB: serial: option: Add Motorola modem UARTs
        - arm64: ftrace: Ensure module ftrace trampoline is coherent with I-side
        - netfilter: conntrack: Use consistent ct id hash calculation
        - Input: psmouse - fix build error of multiple definition
        - bnx2x: Fix VF's VLAN reconfiguration in reload.
        - bonding: Add vlan tx offload to hw_enc_features
        - net: dsa: Check existence of .port_mdb_add callback before calling it
        - net/mlx4_en: fix a memory leak bug
        - net/packet: fix race in tpacket_snd()
        - sctp: fix memleak in sctp_send_reset_streams
        - sctp: fix the transport error_count check
        - team: Add vlan tx offload to hw_enc_features
        - tipc: initialise addr_trail_end when setting node addresses
        - xen/netback: Reset nr_frags before freeing skb
        - net/mlx5e: Only support tx/rx pause setting for port owner
        - net/mlx5e: Use flow keys dissector to parse packets for ARFS
        - mm/z3fold.c: fix z3fold_destroy_pool() ordering
        - mm, vmscan: do not special-case slab reclaim when watermarks are boosted
        - drm/amdgpu: fix gfx9 soft recovery
        - riscv: Correct the initialized flow of FP register
        - blk-mq: move cancel of requeue_work to the front of blk_exit_queue
        - IB/mlx5: Replace kfree with kvfree
        - dma-mapping: check pfn validity in dma_common_{mmap,get_sgtable}
        - f2fs: fix to read source block before invalidating it
        - tools perf beauty: Fix usbdevfs_ioctl table generator to handle _IOC()
        - ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
        - drm/bridge: tc358764: Fix build error
        - tracing: Fix header include guards in trace event headers
        - drm/amdkfd: Fix byte align on VegaM
        - RDMA/restrack: Track driver QP types in resource tracker
        - RDMA/mlx5: Release locks during notifier unregister
        - arm64: kprobes: Recover pstate.D in single-step exception handler
        - arm64: Make debug exception handlers visible from RCU
        - page flags: prioritize kasan bits over last-cpuid
        - bnxt_en: Fix VNIC clearing logic for 57500 chips.
        - bnxt_en: Improve RX doorbell sequence.
        - bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
        - bnxt_en: Suppress HWRM errors for HWRM_NVM_GET_VARIABLE command
        - bnxt_en: Use correct src_fid to determine direction of the flow
        - bnxt_en: Fix to include flow direction in L2 key
        - net sched: update skbedit action for batched events operations
        - tc-testing: updated skbedit action tests with batch create/delete
    
      * Disco update: upstream stable patchset 2019-08-27 (LP: #1841681)
        - hv_sock: Add support for delayed close
        - vsock: correct removal of socket from the list
        - ISDN: hfcsusb: checking idx of ep configuration
        - media: au0828: fix null dereference in error path
        - ath10k: Change the warning message string
        - media: cpia2_usb: first wake up, then free in disconnect
        - media: pvrusb2: use a different format for warnings
        - NFS: Cleanup if nfs_match_client is interrupted
        - media: radio-raremono: change devm_k*alloc to k*alloc
        - Bluetooth: hci_uart: check for missing tty operations
        - sched/fair: Don't free p->numa_faults with concurrent readers
        - sched/fair: Use RCU accessors consistently for ->numa_group
        - /proc/<pid>/cmdline: remove all the special cases
        - /proc/<pid>/cmdline: add back the setproctitle() special case
        - drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
        - Fix allyesconfig output.
        - ceph: hold i_ceph_lock when removing caps for freeing inode
        - ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
        - xfrm: policy: fix bydst hlist corruption on hash rebuild
        - nvme: fix multipath crash when ANA is deactivated
        - ARM: riscpc: fix DMA
        - ARM: dts: rockchip: Make rk3288-veyron-minnie run at hs200
        - ARM: dts: rockchip: Make rk3288-veyron-mickey's emmc work again
        - ARM: dts: rockchip: Mark that the rk3288 timer might stop in suspend
        - ftrace: Enable trampoline when rec count returns back to one
        - dmaengine: tegra-apb: Error out if DMA_PREP_INTERRUPT flag is unset
        - arm64: dts: rockchip: fix isp iommu clocks and power domain
        - kernel/module.c: Only return -EEXIST for modules that have finished loading
        - firmware/psci: psci_checker: Park kthreads before stopping them
        - MIPS: lantiq: Fix bitfield masking
        - dmaengine: rcar-dmac: Reject zero-length slave DMA requests
        - clk: tegra210: fix PLLU and PLLU_OUT1
        - fs/adfs: super: fix use-after-free bug
        - clk: sprd: Add check for return value of sprd_clk_regmap_init()
        - btrfs: fix minimum number of chunk errors for DUP
        - btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit()
        - cifs: Fix a race condition with cifs_echo_request
        - ceph: fix improper use of smp_mb__before_atomic()
        - ceph: return -ERANGE if virtual xattr value didn't fit in buffer
        - ACPI: blacklist: fix clang warning for unused DMI table
        - scsi: zfcp: fix GCC compiler warning emitted with -Wmaybe-uninitialized
        - perf version: Fix segfault due to missing OPT_END()
        - x86: kvm: avoid constant-conversion warning
        - ACPI: fix false-positive -Wuninitialized warning
        - be2net: Signal that the device cannot transmit during reconfiguration
        - x86/apic: Silence -Wtype-limits compiler warnings
        - x86: math-emu: Hide clang warnings for 16-bit overflow
        - mm/cma.c: fail if fixed declaration can't be honored
        - lib/test_overflow.c: avoid tainting the kernel and fix wrap size
        - lib/test_string.c: avoid masking memset16/32/64 failures
        - coda: add error handling for fget
        - coda: fix build using bare-metal toolchain
        - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
          headers
        - drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings
        - ipc/mqueue.c: only perform resource calculation if user valid
        - xen/pv: Fix a boot up hang revealed by int3 self test
        - x86/kvm: Don't call kvm_spurious_fault() from .fixup
        - x86/paravirt: Fix callee-saved function ELF sizes
        - x86, boot: Remove multiple copy of static function sanitize_boot_params()
        - drm/nouveau: fix memory leak in nouveau_conn_reset()
        - kconfig: Clear "written" flag to avoid data loss
        - kbuild: initialize CLANG_FLAGS correctly in the top Makefile
        - Btrfs: fix incremental send failure after deduplication
        - Btrfs: fix race leading to fs corruption after transaction abort
        - mmc: dw_mmc: Fix occasional hang after tuning on eMMC
        - mmc: meson-mx-sdio: Fix misuse of GENMASK macro
        - gpiolib: fix incorrect IRQ requesting of an active-low lineevent
        - IB/hfi1: Fix Spectre v1 vulnerability
        - mtd: rawnand: micron: handle on-die "ECC-off" devices correctly
        - selinux: fix memory leak in policydb_init()
        - ALSA: hda: Fix 1-minute detection delay when i915 module is not available
        - mm: vmscan: check if mem cgroup is disabled or not before calling memcg slab
          shrinker
        - s390/dasd: fix endless loop after read unit address configuration
        - cgroup: kselftest: relax fs_spec checks
        - parisc: Fix build of compressed kernel even with debug enabled
        - drivers/perf: arm_pmu: Fix failure path in PM notifier
        - arm64: compat: Allow single-byte watchpoints on all addresses
        - arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
        - nbd: replace kill_bdev() with __invalidate_device() again
        - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
        - IB/mlx5: Fix unreg_umr to ignore the mkey state
        - IB/mlx5: Use direct mkey destroy command upon UMR unreg failure
        - IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache
        - IB/mlx5: Fix clean_mr() to work in the expected order
        - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
        - IB/hfi1: Check for error on call to alloc_rsm_map_table
        - drm/i915/gvt: fix incorrect cache entry for guest page mapping
        - eeprom: at24: make spd world-readable again
        - gcc-9: properly declare the {pv,hv}clock_page storage
        - scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
        - Documentation: Add swapgs description to the Spectre v1 documentation
        - arm64: dts: marvell: mcbin: enlarge PCI memory window
        - PCI: OF: Initialize dev->fwnode appropriately
        - arm64: qcom: qcs404: Add reset-cells to GCC node
        - swiotlb: fix phys_addr_t overflow warning
        - arm64: dts: rockchip: Fix USB3 Type-C on rk3399-sapphire
        - btrfs: Flush before reflinking any extent to prevent NOCOW write falling
          back to COW without data reservation
        - virtio-mmio: add error check for platform_get_irq
        - cifs: fix crash in cifs_dfs_do_automount
        - KVM: nVMX: Ignore segment base for VMX memory operand when segment not FS or
          GS
        - bpf: fix BTF verifier size resolution logic
        - mm/slab_common.c: work around clang bug #42570
        - mm/ioremap: check virtual address alignment while creating huge mappings
        - nds32: fix asm/syscall.h
        - mm/hotplug: make remove_memory() interface usable
        - crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL
        - bpf: Disable GCC -fgcse optimization for ___bpf_prog_run()
        - kbuild: modpost: include .*.cmd files only when targets exist
        - dax: Fix missed wakeup in put_unlocked_entry()
        - fgraph: Remove redundant ftrace_graph_notrace_addr() test
        - mmc: host: sdhci-sprd: Fix the missing pm_runtime_put_noidle()
        - mmc: mmc_spi: Enable stable writes
        - gpiolib: Preserve desc->flags when setting state
        - gpio: don't WARN() on NULL descs if gpiolib is disabled
        - i2c: at91: disable TXRDY interrupt after sending data
        - i2c: at91: fix clk_offset for sama5d2
        - mm: migrate: fix reference check race between __find_get_block() and
          migration
        - mm/migrate.c: initialize pud_entry in migrate_vma()
        - parisc: Add archclean Makefile target
        - parisc: Strip debug info from kernel before creating compressed vmlinuz
        - RDMA/bnxt_re: Honor vlan_id in GID entry comparison
        - drm/i915/perf: fix ICL perf register offsets
    
      * Disco update: upstream stable patchset 2019-08-22 (LP: #1841121)
        - hvsock: fix epollout hang from race condition
        - drm/panel: simple: Fix panel_simple_dsi_probe
        - iio: adc: stm32-dfsdm: manage the get_irq error case
        - iio: adc: stm32-dfsdm: missing error case during probe
        - staging: vt6656: use meaningful error code during buffer allocation
        - usb: core: hub: Disable hub-initiated U1/U2
        - tty: max310x: Fix invalid baudrate divisors calculator
        - pinctrl: rockchip: fix leaked of_node references
        - tty: serial: cpm_uart - fix init when SMC is relocated
        - drm/amd/display: Fill prescale_params->scale for RGB565
        - drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE
        - drm/amd/display: Disable ABM before destroy ABM struct
        - drm/amdkfd: Fix a potential memory leak
        - drm/amdkfd: Fix sdma queue map issue
        - drm/edid: Fix a missing-check bug in drm_load_edid_firmware()
        - PCI: Return error if cannot probe VF
        - drm/bridge: tc358767: read display_props in get_modes()
        - drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz
        - gpu: host1x: Increase maximum DMA segment size
        - drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry
        - drm/crc-debugfs: Also sprinkle irqrestore over early exits
        - memstick: Fix error cleanup path of memstick_init
        - tty/serial: digicolor: Fix digicolor-usart already registered warning
        - tty: serial: msm_serial: avoid system lockup condition
        - serial: 8250: Fix TX interrupt handling condition
        - drm/amd/display: Always allocate initial connector state state
        - drm/virtio: Add memory barriers for capset cache.
        - phy: renesas: rcar-gen2: Fix memory leak at error paths
        - drm/amd/display: fix compilation error
        - powerpc/pseries/mobility: prevent cpu hotplug during DT update
        - drm/rockchip: Properly adjust to a true clock in adjusted_mode
        - serial: imx: fix locking in set_termios()
        - tty: serial_core: Set port active bit in uart_port_activate
        - usb: gadget: Zero ffs_io_data
        - mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width
        - powerpc/pci/of: Fix OF flags parsing for 64bit BARs
        - drm/msm: Depopulate platform on probe failure
        - serial: mctrl_gpio: Check if GPIO property exisits before requesting it
        - PCI: sysfs: Ignore lockdep for remove attribute
        - i2c: stm32f7: fix the get_irq error cases
        - kbuild: Add -Werror=unknown-warning-option to CLANG_FLAGS
        - genksyms: Teach parser about 128-bit built-in types
        - PCI: xilinx-nwl: Fix Multi MSI data programming
        - iio: iio-utils: Fix possible incorrect mask calculation
        - powerpc/cacheflush: fix variable set but not used
        - powerpc/xmon: Fix disabling tracing while in xmon
        - recordmcount: Fix spurious mcount entries on powerpc
        - mfd: madera: Add missing of table registration
        - mfd: core: Set fwnode for created devices
        - mfd: arizona: Fix undefined behavior
        - mfd: hi655x-pmic: Fix missing return value check for
          devm_regmap_init_mmio_clk
        - mm/swap: fix release_pages() when releasing devmap pages
        - um: Silence lockdep complaint about mmap_sem
        - powerpc/4xx/uic: clear pending interrupt after irq type/pol change
        - RDMA/i40iw: Set queue pair state when being queried
        - serial: sh-sci: Terminate TX DMA during buffer flushing
        - serial: sh-sci: Fix TX DMA buffer flushing and workqueue races
        - IB/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE
        - powerpc/mm: Handle page table allocation failures
        - IB/ipoib: Add child to parent list only if device initialized
        - arm64: assembler: Switch ESB-instruction with a vanilla nop if
          !ARM64_HAS_RAS
        - PCI: mobiveil: Fix PCI base address in MEM/IO outbound windows
        - PCI: mobiveil: Fix the Class Code field
        - kallsyms: exclude kasan local symbols on s390
        - PCI: mobiveil: Initialize Primary/Secondary/Subordinate bus numbers
        - PCI: mobiveil: Use the 1st inbound window for MEM inbound transactions
        - perf test mmap-thread-lookup: Initialize variable to suppress memory
          sanitizer warning
        - perf stat: Fix use-after-freed pointer detected by the smatch tool
        - perf top: Fix potential NULL pointer dereference detected by the smatch tool
        - perf session: Fix potential NULL pointer dereference found by the smatch
          tool
        - perf annotate: Fix dereferencing freed memory found by the smatch tool
        - perf hists browser: Fix potential NULL pointer dereference found by the
          smatch tool
        - RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM
        - PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB
        - powerpc/boot: add {get, put}_unaligned_be32 to xz_config.h
        - block: init flush rq ref count to 1
        - f2fs: avoid out-of-range memory access
        - mailbox: handle failed named mailbox channel request
        - dlm: check if workqueues are NULL before flushing/destroying
        - powerpc/eeh: Handle hugepages in ioremap space
        - block/bio-integrity: fix a memory leak bug
        - sh: prevent warnings when using iounmap
        - mm/kmemleak.c: fix check for softirq context
        - 9p: pass the correct prototype to read_cache_page
        - mm/gup.c: mark undo_dev_pagemap as __maybe_unused
        - mm/gup.c: remove some BUG_ONs from get_gate_page()
        - memcg, fsnotify: no oom-kill for remote memcg charging
        - mm/mmu_notifier: use hlist_add_head_rcu()
        - proc: use down_read_killable mmap_sem for /proc/pid/smaps_rollup
        - proc: use down_read_killable mmap_sem for /proc/pid/pagemap
        - proc: use down_read_killable mmap_sem for /proc/pid/clear_refs
        - proc: use down_read_killable mmap_sem for /proc/pid/map_files
        - cxgb4: reduce kernel stack usage in cudbg_collect_mem_region()
        - proc: use down_read_killable mmap_sem for /proc/pid/maps
        - locking/lockdep: Fix lock used or unused stats error
        - mm: use down_read_killable for locking mmap_sem in access_remote_vm
        - locking/lockdep: Hide unused 'class' variable
        - usb: wusbcore: fix unbalanced get/put cluster_id
        - usb: pci-quirks: Correct AMD PLL quirk detection
        - btrfs: inode: Don't compress if NODATASUM or NODATACOW set
        - x86/sysfb_efi: Add quirks for some devices with swapped width and height
        - x86/speculation/mds: Apply more accurate check on hypervisor platform
        - binder: prevent transactions to context manager from its own process.
        - fpga-manager: altera-ps-spi: Fix build error
        - mei: me: add mule creek canyon (EHL) device ids
        - hpet: Fix division by zero in hpet_time_div()
        - ALSA: ac97: Fix double free of ac97_codec_device
        - powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask()
        - libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl()
        - access: avoid the RCU grace period for the temporary subjective credentials
        - regulator: 88pm800: fix warning same module names
        - media: drivers: media: coda: fix warning same module names
        - btrfs: shut up bogus -Wmaybe-uninitialized warning
        - drm/virtio: set seqno for dma-fence
        - ipmi_si: fix unexpected driver unregister warning
        - drm/bochs: Fix connector leak during driver unload
        - drm/msm/a6xx: Check for ERR or NULL before iounmap
        - ipmi:ssif: Only unregister the platform driver if it was registered
        - ipmi_ssif: fix unexpected driver unregister warning
        - drm/amd/display: Disable cursor when offscreen in negative direction
        - drm/amdgpu: Reserve shared fence for eviction fence
        - f2fs: fix to avoid deadloop if data_flush is on
        - tools: PCI: Fix broken pcitest compilation
        - drm/amd/display: Increase Backlight Gain Step Size
        - f2fs: Fix accounting for unusable blocks
        - f2fs: Lower threshold for disable_cp_again
        - drm/vkms: Forward timer right after drm_crtc_handle_vblank
        - i2c: nvidia-gpu: resume ccgx i2c client
        - PCI: endpoint: Allocate enough space for fixed size BAR
        - dma-remap: Avoid de-referencing NULL atomic_pool
        - platform/x86: asus-wmi: Increase input buffer size of WMI methods
        - iio: adxl372: fix iio_triggered_buffer_{pre,post}enable positions
        - serial: uartps: Use the same dynamic major number for all ports
        - kvm: vmx: fix limit checking in get_vmx_mem_address()
        - KVM: nVMX: Intercept VMWRITEs to GUEST_{CS,SS}_AR_BYTES
        - kvm: vmx: segment limit check: use access length
        - powerpc/rtas: retry when cpu offline races with suspend/migration
        - fixdep: check return value of printf() and putchar()
        - KVM: nVMX: Stash L1's CR3 in vmcs01.GUEST_CR3 on nested entry w/o EPT
        - perf trace: Fix potential NULL pointer dereference found by the smatch tool
        - perf map: Fix potential NULL pointer dereference found by smatch tool
        - perf intel-bts: Fix potential NULL pointer dereference found by the smatch
          tool
        - RDMA/core: Fix race when resolving IP address
        - nvme-pci: check for NULL return from pci_alloc_p2pmem()
        - nvme-pci: limit max_hw_sectors based on the DMA max mapping size
        - nvme-tcp: don't use sendpage for SLAB pages
        - nvme-tcp: set the STABLE_WRITES flag when data digests are enabled
        - powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
        - nvme: fix NULL deref for fabrics options
        - mm/mincore.c: fix race between swapoff and mincore
        - mm, swap: fix race between swapoff and some swap operations
        - usb-storage: Add a limitation for blk_queue_max_hw_sectors()
        - KVM: PPC: Book3S HV: Always save guest pmu for guest capable of nesting
        - KVM: PPC: Book3S HV: Save and restore guest visible PSSCR bits on pseries
        - selinux: check sidtab limit before adding a new entry
        - x86/stacktrace: Prevent access_ok() warnings in arch_stack_walk_user()
        - eeprom: make older eeprom drivers select NVMEM_SYSFS
        - drm/panel: Add support for Armadeus ST0700 Adapt
        - ALSA: hda - Fix intermittent CORB/RIRB stall on Intel chips
        - powerpc/mm: Limit rma_size to 1TB when running without HV mode
        - powerpc/pmu: Set pmcregs_in_use in paca when running as LPAR
        - iommu/vt-d: Don't queue_iova() if there is no flush queue
        - iommu/iova: Remove stale cached32_node
        - iommu/iova: Fix compilation error with !CONFIG_IOMMU_IOVA
        - libnvdimm/region: Register badblocks before namespaces
    
      * Line 6 POD HD500 driver fault (LP: #1790595) // Disco update: upstream
        stable patchset 2019-08-22 (LP: #1841121)
        - ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1
    
      * Disco update: upstream stable patchset 2019-08-21 (LP: #1840961)
        - bnx2x: Prevent load reordering in tx completion processing
        - caif-hsi: fix possible deadlock in cfhsi_exit_module()
        - hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback()
        - igmp: fix memory leak in igmpv3_del_delrec()
        - ipv4: don't set IPv6 only flags to IPv4 addresses
        - ipv6: rt6_check should return NULL if 'from' is NULL
        - ipv6: Unlink sibling route in case of failure
        - net: bcmgenet: use promisc for unsupported filters
        - net: dsa: mv88e6xxx: wait after reset deactivation
        - net: make skb_dst_force return true when dst is refcounted
        - net: neigh: fix multiple neigh timer scheduling
        - net: openvswitch: fix csum updates for MPLS actions
        - net: phy: sfp: hwmon: Fix scaling of RX power
        - net: stmmac: Re-work the queue selection for TSO packets
        - nfc: fix potential illegal memory access
        - r8169: fix issue with confused RX unit after PHY power-down on RTL8411b
        - rxrpc: Fix send on a connected, but unbound socket
        - sctp: fix error handling on stream scheduler initialization
        - sky2: Disable MSI on ASUS P6T
        - tcp: be more careful in tcp_fragment()
        - tcp: fix tcp_set_congestion_control() use from bpf hook
        - tcp: Reset bytes_acked and bytes_received when disconnecting
        - vrf: make sure skb->data contains ip header to make routing
        - net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn
        - macsec: fix use-after-free of skb during RX
        - macsec: fix checksumming after decryption
        - netrom: fix a memory leak in nr_rx_frame()
        - netrom: hold sock when setting skb->destructor
        - net_sched: unset TCQ_F_CAN_BYPASS when adding filters
        - net/tls: make sure offload also gets the keys wiped
        - sctp: not bind the socket in sctp_connect
        - net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
        - net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
        - net: bridge: don't cache ether dest pointer on input
        - net: bridge: stp: don't cache eth dest pointer before skb pull
        - dma-buf: balance refcount inbalance
        - dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc
        - gpio: davinci: silence error prints in case of EPROBE_DEFER
        - MIPS: lb60: Fix pin mappings
        - perf/core: Fix exclusive events' grouping
        - perf/core: Fix race between close() and fork()
        - ext4: don't allow any modifications to an immutable file
        - ext4: enforce the immutable flag on open files
        - mm: add filemap_fdatawait_range_keep_errors()
        - jbd2: introduce jbd2_inode dirty range scoping
        - ext4: use jbd2_inode dirty range scoping
        - ext4: allow directory holes
        - KVM: nVMX: do not use dangling shadow VMCS after guest reset
        - KVM: nVMX: Clear pending KVM_REQ_GET_VMCS12_PAGES when leaving nested
        - mm: vmscan: scan anonymous pages on file refaults
        - net: sched: verify that q!=NULL before setting q->flags
        - selftests: txring_overwrite: fix incorrect test of mmap() return value
        - net/tls: reject offload of TLS 1.3
        - net/mlx5e: Rx, Fix checksum calculation for new hardware
        - gpiolib: of: fix a memory leak in of_gpio_flags_quirks()
        - sd_zbc: Fix report zones buffer allocation
        - block: Limit zone array allocation size
        - bnxt_en: Fix VNIC accounting when enabling aRFS on 57500 chips.
        - mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed
        - mlxsw: spectrum: Do not process learned records with a dummy FID
        - Revert "kvm: x86: Use task structs fpu field for user"
    
      * Disco update: upstream stable patchset 2019-08-19 (LP: #1840718)
        - Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
        - Bluetooth: Fix regression with minimum encryption key size alignment
        - Bluetooth: Fix faulty expression for minimum encryption key size check
        - netfilter: nf_flow_table: ignore DF bit setting
        - netfilter: nft_flow_offload: set liberal tracking mode for tcp
        - netfilter: nft_flow_offload: don't offload when sequence numbers need
          adjustment
        - netfilter: nft_flow_offload: IPCB is only valid for ipv4 family
        - ASoC : cs4265 : readable register too low
        - ASoC: ak4458: add return value for ak4458_probe
        - ASoC: soc-pcm: BE dai needs prepare when pause release after resume
        - ASoC: ak4458: rstn_control - return a non-zero on error only
        - spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
        - drm/mediatek: fix unbind functions
        - drm/mediatek: unbind components in mtk_drm_unbind()
        - drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver
        - drm/mediatek: clear num_pipes when unbind driver
        - drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable()
        - ASoC: max98090: remove 24-bit format support if RJ is 0
        - ASoC: sun4i-i2s: Fix sun8i tx channel offset mask
        - ASoC: sun4i-i2s: Add offset to RX channel select
        - x86/CPU: Add more Icelake model numbers
        - usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i]
        - usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC
        - ALSA: hdac: fix memory release for SST and SOF drivers
        - SoC: rt274: Fix internal jack assignment in set_jack callback
        - scsi: hpsa: correct ioaccel2 chaining
        - drm: panel-orientation-quirks: Add quirk for GPD pocket2
        - drm: panel-orientation-quirks: Add quirk for GPD MicroPC
        - platform/x86: intel-vbtn: Report switch events when event wakes device
        - platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device
          registration
        - platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow
        - i2c: pca-platform: Fix GPIO lookup code
        - cpuset: restore sanity to cpuset_cpus_allowed_fallback()
        - scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE
        - mm/mlock.c: change count_mm_mlocked_page_nr return type
        - tracing: avoid build warning with HAVE_NOP_MCOUNT
        - module: Fix livepatch/ftrace module text permissions race
        - ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper()
        - crypto: user - prevent operating on larval algorithms
        - crypto: cryptd - Fix skcipher instance memory leak
        - ALSA: seq: fix incorrect order of dest_client/dest_ports arguments
        - ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages
        - ALSA: line6: Fix write on zero-sized buffer
        - ALSA: usb-audio: fix sign unintended sign extension on left shifts
        - ALSA: hda/realtek: Add quirks for several Clevo notebook barebones
        - ALSA: hda/realtek - Change front mic location for Lenovo M710q
        - lib/mpi: Fix karactx leak in mpi_powm
        - fs/userfaultfd.c: disable irqs for fault_pending and event locks
        - tracing/snapshot: Resize spare buffer if size changed
        - ARM: dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node
        - arm64: kaslr: keep modules inside module region when KASAN is enabled
        - drm/amd/powerplay: use hardware fan control if no powerplay fan table
        - drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
        - drm/etnaviv: add missing failure path to destroy suballoc
        - drm/imx: notify drm core before sending event during crtc disable
        - drm/imx: only send event on crtc disable if kept disabled
        - ftrace/x86: Remove possible deadlock between register_kprobe() and
          ftrace_run_update_code()
        - mm/vmscan.c: prevent useless kswapd loops
        - btrfs: Ensure replaced device doesn't have pending chunk allocation
        - tty: rocket: fix incorrect forward declaration of 'rp_init()'
        - net/smc: move unhash before release of clcsock
        - media: s5p-mfc: fix incorrect bus assignment in virtual child device
        - drm/fb-helper: generic: Don't take module ref for fbcon
        - f2fs: don't access node/meta inode mapping after iput
        - ALSA: hda: Initialize power_state field properly
        - ip6: fix skb leak in ip6frag_expire_frag_queue()
        - net: IP defrag: encapsulate rbtree defrag code into callable functions
        - net: IP6 defrag: use rbtrees for IPv6 defrag
        - net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
        - netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
        - sc16is7xx: move label 'err_spi' to correct section
        - netfilter: ipv6: nf_defrag: accept duplicate fragments again
        - KVM: x86: degrade WARN to pr_warn_ratelimited
        - KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC
        - nfsd: Fix overflow causing non-working mounts on 1 TB machines
        - svcrdma: Ignore source port when computing DRC hash
        - MIPS: Fix bounds check virt_addr_valid
        - MIPS: Add missing EHB in mtc0 -> mfc0 sequence.
        - MIPS: have "plain" make calls build dtbs for selected platforms
        - dmaengine: qcom: bam_dma: Fix completed descriptors count
        - dmaengine: imx-sdma: remove BD_INTR for channel0
        - signal: remove the wrong signal_pending() check in restore_user_sigmask()
        - idr: Fix idr_get_next race with idr_remove
        - ASoC: core: lock client_mutex while removing link components
        - iommu/vt-d: Set the right field for Page Walk Snoop
        - HID: a4tech: fix horizontal scrolling
        - ASoC: hda: fix unbalanced codec dev refcount for HDA_DEV_ASOC
        - gpio: pca953x: hack to fix 24 bit gpio expanders
        - ASoC: Intel: sst: fix kmalloc call with wrong flags
        - arm64: tlbflush: Ensure start/end of address range are aligned to stride
        - dax: Fix xarray entry association for mixed mappings
        - swap_readpage(): avoid blk_wake_io_task() if !synchronous
        - drm/virtio: move drm_connector_update_edid_property() call
        - s390/mm: fix pxd_bad with folded page tables
        - dmaengine: jz4780: Fix an endian bug in IRQ handler
        - scsi: target/iblock: Fix overrun in WRITE SAME emulation
        - crypto: talitos - rename alternative AEAD algos.
        - soc: brcmstb: Fix error path for unsupported CPUs
        - soc: bcm: brcmstb: biuctrl: Register writes require a barrier
        - samples, bpf: fix to change the buffer size for read()
        - samples, bpf: suppress compiler warning
        - mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he()
        - bpf: sockmap, fix use after free from sleep in psock backlog workqueue
        - soundwire: stream: fix out of boundary access on port properties
        - staging:iio:ad7150: fix threshold mode config bit
        - mac80211: mesh: fix RCU warning
        - mac80211: free peer keys before vif down in mesh
        - iwlwifi: Fix double-free problems in iwl_req_fw_callback()
        - soundwire: intel: set dai min and max channels correctly
        - dt-bindings: can: mcp251x: add mcp25625 support
        - can: mcp251x: add support for mcp25625
        - can: m_can: implement errata "Needless activation of MRAF irq"
        - can: af_can: Fix error path of can_init()
        - ibmvnic: Do not close unopened driver during reset
        - ibmvnic: Refresh device multicast list after reset
        - ibmvnic: Fix unchecked return codes of memory allocations
        - ARM: dts: am335x phytec boards: Fix cd-gpios active level
        - s390/boot: disable address-of-packed-member warning
        - drm/vmwgfx: Honor the sg list segment size limitation
        - drm/vmwgfx: fix a warning due to missing dma_parms
        - riscv: Fix udelay in RV32.
        - Input: imx_keypad - make sure keyboard can always wake up system
        - KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
        - mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed
        - ARM: davinci: da850-evm: call regulator_has_full_constraints()
        - ARM: davinci: da8xx: specify dma_coherent_mask for lcdc
        - mac80211: only warn once on chanctx_conf being NULL
        - mac80211: do not start any work during reconfigure flow
        - bpf, devmap: Fix premature entry free on destroying map
        - bpf, devmap: Add missing bulk queue free
        - bpf, devmap: Add missing RCU read lock on flush
        - bpf, x64: fix stack layout of JITed bpf code
        - qmi_wwan: add support for QMAP padding in the RX path
        - qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode
        - qmi_wwan: extend permitted QMAP mux_id value range
        - mmc: core: complete HS400 before checking status
        - md: fix for divide error in status_resync
        - bnx2x: Check if transceiver implements DDM before access
        - drm: return -EFAULT if copy_to_user() fails
        - ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
        - net: lio_core: fix potential sign-extension overflow on large shift
        - scsi: qedi: Check targetname while finding boot target information
        - quota: fix a problem about transfer quota
        - net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge()
        - NFS4: Only set creation opendata if O_CREAT
        - net :sunrpc :clnt :Fix xps refcount imbalance on the error path
        - fscrypt: don't set policy for a dead directory
        - udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
        - media: stv0297: fix frequency range limit
        - ALSA: usb-audio: Fix parse of UAC2 Extension Units
        - ALSA: hda/realtek - Headphone Mic can't record after S3
        - block, bfq: NULL out the bic when it's no longer valid
        - perf pmu: Fix uncore PMU alias list for ARM64
        - x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
        - x86/tls: Fix possible spectre-v1 in do_get_thread_area()
        - Documentation: Add section about CPU vulnerabilities for Spectre
        - Documentation/admin: Remove the vsyscall=native documentation
        - mwifiex: Abort at too short BSS descriptor element
        - mwifiex: Don't abort on small, spec-compliant vendor IEs
        - USB: serial: ftdi_sio: add ID for isodebug v1
        - USB: serial: option: add support for GosunCn ME3630 RNDIS mode
        - Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
        - p54usb: Fix race between disconnect and firmware loading
        - usb: gadget: ether: Fix race between gether_disconnect and rx_submit
        - usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset()
        - usb: renesas_usbhs: add a workaround for a race condition of workqueue
        - drivers/usb/typec/tps6598x.c: fix portinfo width
        - drivers/usb/typec/tps6598x.c: fix 4CC cmd write
        - staging: comedi: dt282x: fix a null pointer deref on interrupt
        - staging: comedi: amplc_pci230: fix null pointer deref on interrupt
        - HID: Add another Primax PIXART OEM mouse quirk
        - lkdtm: support llvm-objcopy
        - binder: fix memory leak in error path
        - carl9170: fix misuse of device driver API
        - VMCI: Fix integer overflow in VMCI handle arrays
        - staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work
        - staging: bcm2835-camera: Replace spinlock protecting context_map with mutex
        - staging: bcm2835-camera: Ensure all buffers are returned on disable
        - staging: bcm2835-camera: Remove check of the number of buffers supplied
        - staging: bcm2835-camera: Handle empty EOS buffers whilst streaming
        - staging: rtl8712: reduce stack usage, again
        - crypto: lrw - use correct alignmask
        - bpf: sockmap, restore sk_write_space when psock gets dropped
        - ARM: dts: Drop bogus CLKSEL for timer12 on dra7
        - iwlwifi: fix load in rfkill flow for unified firmware
        - tools: bpftool: Fix JSON output when lookup fails
        - soundwire: stream: fix bad unlock balance
        - can: flexcan: Remove unneeded registration message
        - RISC-V: defconfig: enable clocks, serial console
        - xdp: check device pointer before clearing
        - KVM: nVMX: use correct clean fields when copying from eVMCS
        - gpu: ipu-v3: image-convert: Fix input bytesperline width/height align
        - gpu: ipu-v3: image-convert: Fix input bytesperline for packed formats
        - gpu: ipu-v3: image-convert: Fix image downsize coefficients
        - cfg80211: util: fix bit count off by one
        - cfg80211: report measurement start TSF correctly
        - IB/hfi1: Create inline to get extended headers
        - IB/hfi1: Wakeup QPs orphaned on wait list after flush
        - IB/hfi1: Handle wakeup of orphaned QPs for pio
        - IB/hfi1: Handle port down properly in pio
        - powerpc: enable a 30-bit ZONE_DMA for 32-bit pmac
        - tpm: Actually fail on TPM errors during "get random"
        - tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations
        - perf intel-pt: Fix itrace defaults for perf script
        - perf auxtrace: Fix itrace defaults for perf script
        - perf intel-pt: Fix itrace defaults for perf script intel-pt documentation
        - perf header: Assign proper ff->ph in perf_event__synthesize_features()
        - usb: gadget: f_fs: data_len used before properly set
        - staging: wilc1000: fix error path cleanup in wilc_wlan_initialize()
        - staging: mt7621-pci: fix PCIE_FTS_NUM_LO macro
        - iio: adc: stm32-adc: add missing vdda-supply
        - staging: vchiq_2835_arm: revert "quit using custom down_interruptible()"
        - staging: vchiq: revert "switch to wait_for_completion_killable"
        - staging: vchiq: make wait events interruptible
    
      * Touchpad not detecting in Linux (LP: #1825718) // Disco update: upstream
        stable patchset 2019-08-19 (LP: #1840718)
        - HID: i2c-hid: add iBall Aer3 to descriptor override
    
      * Disco update: upstream stable patchset 2019-08-16 (LP: #1840521)
        - arm64: Don't unconditionally add -Wno-psabi to KBUILD_CFLAGS
        - Revert "x86/uaccess, ftrace: Fix ftrace_likely_update() vs. SMAP"
        - qmi_wwan: Fix out-of-bounds read
        - fs/proc/array.c: allow reporting eip/esp for all coredumping threads
        - mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask
        - fs/binfmt_flat.c: make load_flat_shared_library() work
        - clk: socfpga: stratix10: fix divider entry for the emac clocks
        - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails
        - mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on
          !PageHuge
        - dm log writes: make sure super sector log updates are written in order
        - scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()
        - x86/speculation: Allow guests to use SSBD even if host does not
        - x86/microcode: Fix the microcode load on CPU hotplug for real
        - x86/resctrl: Prevent possible overrun during bitmap operations
        - NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O
        - cpu/speculation: Warn on unsupported mitigations= parameter
        - irqchip/mips-gic: Use the correct local interrupt map registers
        - af_packet: Block execution of tasks waiting for transmit to complete in
          AF_PACKET
        - bonding: Always enable vlan tx offload
        - ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop
        - net/packet: fix memory leak in packet_set_ring()
        - net: remove duplicate fetch in sock_getsockopt
        - net: stmmac: fixed new system time seconds value calculation
        - net: stmmac: set IC bit when transmitting frames with HW timestamp
        - sctp: change to hold sk after auth shkey is created successfully
        - team: Always enable vlan tx offload
        - tipc: change to use register_pernet_device
        - tipc: check msg->req data len in tipc_nl_compat_bearer_disable
        - tun: wake up waitqueues after IFF_UP is set
        - bpf: simplify definition of BPF_FIB_LOOKUP related flags
        - bpf: lpm_trie: check left child of last leftmost node for NULL
        - bpf: fix nested bpf tracepoints with per-cpu data
        - bpf: fix unconnected udp hooks
        - bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro
        - bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err
        - arm64: futex: Avoid copying out uninitialised stack in failed cmpxchg()
        - bpf, arm64: use more scalable stadd over ldxr / stxr loop in xadd
        - futex: Update comments and docs about return values of arch futex code
        - RDMA: Directly cast the sockaddr union to sockaddr
        - tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
        - arm64: insn: Fix ldadd instruction encoding
        - clk: tegra210: Fix default rates for HDA clocks
        - mm, swap: fix THP swap out
        - mm: fix page cache convergence regression
        - efi/memreserve: deal with memreserve entries in unmapped memory
        - net: aquantia: fix vlans not working over bridged network
    
      * Disco update: upstream stable patchset 2019-08-15 (LP: #1840373)
        - tracing: Silence GCC 9 array bounds warning
        - gcc-9: silence 'address-of-packed-member' warning
        - ovl: support the FS_IOC_FS[SG]ETXATTR ioctls
        - ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls
        - ovl: make i_ino consistent with st_ino in more cases
        - ovl: detect overlapping layers
        - ovl: don't fail with disconnected lower NFS
        - ovl: fix bogus -Wmaybe-unitialized warning
        - mmc: sdhci: sdhci-pci-o2micro: Correctly set bus width when tuning
        - mmc: core: API to temporarily disable retuning for SDIO CRC errors
        - mmc: core: Add sdio_retune_hold_now() and sdio_retune_release()
        - mmc: core: Prevent processing SDIO IRQs when the card is suspended
        - scsi: ufs: Avoid runtime suspend possibly being blocked forever
        - usb: chipidea: udc: workaround for endpoint conflict issue
        - xhci: detect USB 3.2 capable host controllers correctly
        - usb: xhci: Don't try to recover an endpoint if port is in error state.
        - IB/hfi1: Validate fault injection opcode user input
        - IB/hfi1: Silence txreq allocation warnings
        - iio: temperature: mlx90632 Relax the compatibility check
        - Input: synaptics - enable SMBus on ThinkPad E480 and E580
        - Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD
        - Input: silead - add MSSL0017 to acpi_device_id
        - apparmor: enforce nullbyte at end of tag string
        - brcmfmac: sdio: Disable auto-tuning around commands expected to fail
        - brcmfmac: sdio: Don't tune while the card is off
        - ARC: fix build warnings
        - dmaengine: dw-axi-dmac: fix null dereference when pointer first is null
        - dmaengine: sprd: Fix block length overflow
        - ARC: [plat-hsdk]: Add missing multicast filter bins number to GMAC node
        - ARC: [plat-hsdk]: Add missing FIFO size entry in GMAC node
        - fpga: dfl: afu: Pass the correct device to dma_mapping_error()
        - fpga: dfl: Add lockdep classes for pdata->lock
        - parport: Fix mem leak in parport_register_dev_model
        - parisc: Fix compiler warnings in float emulation code
        - IB/rdmavt: Fix alloc_qpn() WARN_ON()
        - IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
        - IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value
        - IB/hfi1: Validate page aligned for a given virtual address
        - MIPS: uprobes: remove set but not used variable 'epc'
        - xtensa: Fix section mismatch between memblock_reserve and mem_reserve
        - kselftest/cgroup: fix unexpected testing failure on test_memcontrol
        - kselftest/cgroup: fix unexpected testing failure on test_core
        - kselftest/cgroup: fix incorrect test_core skip
        - selftests: vm: install test_vmalloc.sh for run_vmtests
        - net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0
        - mdesc: fix a missing-check bug in get_vdev_port_node_info()
        - sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD
        - net: ethernet: mediatek: Use hw_feature to judge if HWLRO is supported
        - net: ethernet: mediatek: Use NET_IP_ALIGN to judge if HW RX_2BYTE_OFFSET is
          enabled
        - drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times
        - drm/arm/hdlcd: Actually validate CRTC modes
        - drm/arm/hdlcd: Allow a bit of clock tolerance
        - nvmet: fix data_len to 0 for bdev-backed write_zeroes
        - scripts/checkstack.pl: Fix arm64 wrong or unknown architecture
        - scsi: ufs: Check that space was properly alloced in copy_query_response
        - scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous()
        - net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set
        - s390/qeth: fix VLAN attribute in bridge_hostnotify udev event
        - hwmon: (core) add thermal sensors only if dev->of_node is present
        - hwmon: (pmbus/core) Treat parameters as paged if on multiple pages
        - arm64: Silence gcc warnings about arch ABI drift
        - nvme: Fix u32 overflow in the number of namespace list calculation
        - btrfs: start readahead also in seed devices
        - can: xilinx_can: use correct bittiming_const for CAN FD core
        - can: flexcan: fix timeout when set small bitrate
        - can: purge socket error queue on sock destruct
        - riscv: mm: synchronize MMU after pte change
        - powerpc/bpf: use unsigned division instruction for 64-bit operations
        - ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX
        - ARM: dts: dra76x: Update MMC2_HS200_MANUAL1 iodelay values
        - ARM: dts: am57xx-idk: Remove support for voltage switching for SD card
        - arm64/sve: <uapi/asm/ptrace.h> should not depend on <uapi/linux/prctl.h>
        - arm64: ssbd: explicitly depend on <linux/prctl.h>
        - drm/vmwgfx: Use the backdoor port if the HB port is not available
        - staging: erofs: add requirements field in superblock
        - SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write
        - cfg80211: fix memory leak of wiphy device name
        - mac80211: drop robust management frames from unknown TA
        - {nl,mac}80211: allow 4addr AP operation on crypto controlled devices
        - mac80211: handle deauthentication/disassociation from TDLS peer
        - nl80211: fix station_info pertid memory leak
        - mac80211: Do not use stack memory with scatterlist for GMAC
        - x86/resctrl: Don't stop walking closids when a locksetup group is found
        - mmc: sdhi: disallow HS400 for M3-W ES1.2, RZ/G2M, and V3H
        - mmc: mediatek: fix SDIO IRQ interrupt handle flow
        - mmc: mediatek: fix SDIO IRQ detection issue
        - cifs: fix GlobalMid_Lock bug in cifs_reconnect
        - IB/hfi1: Close PSM sdma_progress sleep window
        - IB/hfi1: Avoid hardlockup with flushlist_lock
        - IB/hfi1: Correct tid qp rcd to match verbs context
        - iio: imu: st_lsm6dsx: fix PM support for st_lsm6dsx i2c controller
        - apparmor: reset pos on failure to unpack for various functions
        - Revert "brcmfmac: disable command decode in sdio_aos"
        - lkdtm/usercopy: Moves the KERNEL_DS test to non-canonical
        - dmaengine: jz4780: Fix transfers being ACKed too soon
        - dmaengine: mediatek-cqdma: sleeping in atomic context
        - dmaengine: sprd: Fix the possible crash when getting descriptor status
        - dmaengine: sprd: Add validation of current descriptor in irq handler
        - dmaengine: sprd: Fix the incorrect start for 2-stage destination channels
        - dmaengine: sprd: Fix the right place to configure 2-stage transfer
        - fpga: stratix10-soc: fix use-after-free on s10_init()
        - crypto: hmac - fix memory leak in hmac_init_tfm()
        - userfaultfd: selftest: fix compiler warning
        - selftests: set sysctl bc_forwarding properly in router_broadcast.sh
        - kbuild: tar-pkg: enable communication with jobserver
        - net: phylink: avoid reducing support mask
        - udmabuf: actually unmap the scatterlist
        - s390/qeth: handle limited IPv4 broadcast in L3 TX path
        - s390/qeth: check dst entry before use
        - ARM: mvebu_v7_defconfig: fix Ethernet on Clearfog
        - KVM: x86/mmu: Allocate PAE root array when using SVM's 32-bit NPT
        - binder: fix possible UAF when freeing buffer
        - x86/vdso: Prevent segfaults due to hoisted vclock reads
    
      * VIMC module not available (CONFIG_VIDEO_VIMC not set) (LP: #1831482)
        - [Config] Enable VIMC module
    
      * reboot will introduce an alarm 'beep ...' during BIOS phase (LP: #1840395)
        - ALSA: hda - Let all conexant codec enter D3 when rebooting
        - ALSA: hda - Add a generic reboot_notify
    
      * Include Sunix serial/parallel driver (LP: #1826716)
        - serial: 8250_pci: Add support for Sunix serial boards
        - parport: parport_serial: Add support for Sunix Multi I/O boards
    
      * Intel HDMI audio print "Unable to sync register" errors (LP: #1840394)
        - ALSA: hda - Don't resume forcibly i915 HDMI/DP codec
    
      * UBUNTU: SAUCE: shiftfs: pass correct point down (LP: #1837231)
        - SAUCE: shiftfs: pass correct point down
    
      * shiftfs: add O_DIRECT support (LP: #1837223)
        - SAUCE: shiftfs: add O_DIRECT support
    
      * p54usb module in linux-modules-extra-5.0.0-23-generic does not work
        (LP: #1839693)
        - p54: fix crash during initialization
    
      * Goodix touchpad may drop first input event (LP: #1840075)
        - Revert "UBUNTU: SAUCE: i2c: designware: add Inpiron/Vostro 7590 into i2c
          quirk"
        - Revert "UBUNTU: SAUCE: i2c: designware: Add disable runtime pm quirk"
        - mfd: intel-lpss: Remove D3cold delay
    
      * NULL pointer dereference when Inserting the VIMC module (LP: #1840028)
        - media: vimc: fix component match compare
    
      * Fix touchpad IRQ storm after S3 (LP: #1841396)
        - pinctrl: intel: remap the pin number to gpio offset for irq enabled pin
    
      * [SRU][B/OEM-B/OEM-OSP1/D] UBUNTU: SAUCE: enable middle button for one more
        ThinkPad (LP: #1841722)
        - SAUCE: Input: elantech - enable middle button for one more ThinkPad
    
      * Disco update: upstream stable patchset 2019-08-13 (LP: #1840076)
        - [Config] updateconfigs for CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT
        - drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3)
        - nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled
        - HID: multitouch: handle faulty Elo touch device
        - HID: wacom: Don't set tool type until we're in range
        - HID: wacom: Don't report anything prior to the tool entering range
        - HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact
        - HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth
        - HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary
        - ALSA: oxfw: allow PCM capture for Stanton SCS.1m
        - ALSA: hda/realtek - Update headset mode for ALC256
        - ALSA: firewire-motu: fix destruction of data for isochronous resources
        - libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
        - mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
        - fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
        - mm/vmscan.c: fix trying to reclaim unevictable LRU page
        - signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
        - ptrace: restore smp_rmb() in __ptrace_may_access()
        - iommu/arm-smmu: Avoid constant zero in TLBI writes
        - i2c: acorn: fix i2c warning
        - bcache: fix stack corruption by PRECEDING_KEY()
        - cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
        - ASoC: cs42xx8: Add regcache mask dirty
        - ASoC: fsl_asrc: Fix the issue about unsupported rate
        - drm/i915/sdvo: Implement proper HDMI audio support for SDVO
        - x86/uaccess, kcov: Disable stack protector
        - ALSA: seq: Protect in-kernel ioctl calls with mutex
        - ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
        - Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
        - s390/kasan: fix strncpy_from_user kasan checks
        - Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
        - f2fs: fix to avoid accessing xattr across the boundary
        - scsi: qedi: remove memset/memcpy to nfunc and use func instead
        - scsi: qedi: remove set but not used variables 'cdev' and 'udev'
        - scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show
        - scsi: lpfc: add check for loss of ndlp when sending RRQ
        - arm64/mm: Inhibit huge-vmap with ptdump
        - nvme: fix srcu locking on error return in nvme_get_ns_from_disk
        - nvme: remove the ifdef around nvme_nvm_ioctl
        - nvme: merge nvme_ns_ioctl into nvme_ioctl
        - nvme: release namespace SRCU protection before performing controller ioctls
        - nvme: fix memory leak for power latency tolerance
        - platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI
          table
        - platform/x86: pmc_atom: Add several Beckhoff Automation boards to
          critclk_systems DMI table
        - scsi: bnx2fc: fix incorrect cast to u64 on shift operation
        - libnvdimm: Fix compilation warnings with W=1
        - selftests/timers: Add missing fflush(stdout) calls
        - tracing: Prevent hist_field_var_ref() from accessing NULL tracing_map_elts
        - usbnet: ipheth: fix racing condition
        - KVM: arm/arm64: Move cc/it checks under hyp's Makefile to avoid
          instrumentation
        - KVM: x86/pmu: mask the result of rdpmc according to the width of the
          counters
        - KVM: x86/pmu: do not mask the value that is written to fixed PMUs
        - KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
        - tools/kvm_stat: fix fields filter for child events
        - drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an
          invalid read
        - drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
        - usb: dwc2: Fix DMA cache alignment issues
        - usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression)
        - USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
        - USB: serial: pl2303: add Allied Telesis VT-Kit3
        - USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
        - USB: serial: option: add Telit 0x1260 and 0x1261 compositions
        - timekeeping: Repair ktime_get_coarse*() granularity
        - RAS/CEC: Convert the timer callback to a workqueue
        - RAS/CEC: Fix binary search function
        - x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback
        - x86/kasan: Fix boot with 5-level paging and KASAN
        - x86/mm/KASLR: Compute the size of the vmemmap section properly
        - x86/resctrl: Prevent NULL pointer dereference when local MBM is disabled
        - drm/edid: abstract override/firmware EDID retrieval
        - drm: add fallback override/firmware EDID modes workaround
        - HID: input: make sure the wheel high resolution multiplier is set
        - HID: input: fix assignment of .value
        - Revert "HID: Increase maximum report size allowed by hid_field_extract()"
        - selinux: fix a missing-check bug in selinux_add_mnt_opt( )
        - selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts()
        - media: dvb: warning about dvb frequency limits produces too much noise
        - drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc
        - drm/i915/dsi: Use a fuzzy check for burst mode clock check
        - drm/i915: Fix per-pixel alpha with CCS
        - drm/i915/dmc: protect against reading random memory
        - drivers/perf: arm_spe: Don't error on high-order pages for aux buf
        - bpf: sockmap, only stop/flush strp if it was enabled at some point
        - bpf: sockmap remove duplicate queue free
        - bpf: sockmap fix msg->sg.size account on ingress skb
        - scsi: qla2xxx: Add cleanup for PCI EEH recovery
        - scsi: lpfc: resolve lockdep warnings
        - arm64: Print physical address of page table base in show_pte()
        - net: macb: fix error format in dev_err()
        - bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0
        - tools/bpftool: move set_max_rlimit() before __bpf_object__open_xattr()
        - nvme-pci: Fix controller freeze wait disabling
        - scsi: myrs: Fix uninitialized variable
        - nvme-pci: use blk-mq mapping for unmanaged irqs
        - KVM: nVMX: really fix the size checks on KVM_SET_NESTED_STATE
        - KVM: selftests: Fix a condition in test_hv_cpuid()
        - kvm: vmx: Fix -Wmissing-prototypes warnings
        - KVM: LAPIC: Fix lapic_timer_advance_ns parameter overflow
        - KVM: x86: do not spam dmesg with VMCS/VMCB dumps
        - kvm: selftests: aarch64: dirty_log_test: fix unaligned memslot size
        - kvm: selftests: aarch64: fix default vm mode
        - tracing/uprobe: Fix NULL pointer dereference in trace_uprobe_create()
        - powerpc: Fix kexec failure on book3s/32
        - powerpc/64s: Fix THP PMD collapse serialisation
        - ax25: fix inconsistent lock state in ax25_destroy_timer
        - be2net: Fix number of Rx queues used for flow hashing
        - hv_netvsc: Set probe mode to sync
        - ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
        - lapb: fixed leak of control-blocks.
        - neigh: fix use-after-free read in pneigh_get_next
        - net: dsa: rtl8366: Fix up VLAN filtering
        - net: openvswitch: do not free vport if register_netdevice() is failed.
        - sctp: Free cookie before we memdup a new one
        - sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg
        - tipc: purge deferredq list for each grp member in tipc_group_delete
        - vsock/virtio: set SOCK_DONE on peer shutdown
        - net/mlx5: Avoid reloading already removed devices
        - net: mvpp2: prs: Fix parser range for VID filtering
        - net: mvpp2: prs: Use the correct helpers when removing all VID filters
        - Staging: vc04_services: Fix a couple error codes
        - perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints
        - netfilter: nf_queue: fix reinject verdict handling
        - ipvs: Fix use-after-free in ip_vs_in
        - selftests: netfilter: missing error check when setting up veth interface
        - clk: ti: clkctrl: Fix clkdm_clk handling
        - powerpc/powernv: Return for invalid IMC domain
        - usb: xhci: Fix a potential null pointer dereference in
          xhci_debugfs_create_endpoint()
        - mISDN: make sure device name is NUL terminated
        - x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor
        - perf/ring_buffer: Fix exposing a temporarily decreased data_head
        - perf/ring_buffer: Add ordering to rb->nest increment
        - perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data
        - gpio: fix gpio-adp5588 build errors
        - net: stmmac: update rx tail pointer register to fix rx dma hang issue.
        - net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()
        - ACPI/PCI: PM: Add missing wakeup.flags.valid checks
        - drm/etnaviv: lock MMU while dumping core
        - net: aquantia: tx clean budget logic error
        - net: aquantia: fix LRO with FCS error
        - i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
        - ALSA: hda - Force polling mode on CNL for fixing codec communication
        - configfs: Fix use-after-free when accessing sd->s_dentry
        - perf data: Fix 'strncat may truncate' build failure with recent gcc
        - perf namespace: Protect reading thread's namespace
        - perf record: Fix s390 missing module symbol and warning for non-root users
        - ia64: fix build errors by exporting paddr_to_nid()
        - xen/pvcalls: Remove set but not used variable
        - xenbus: Avoid deadlock during suspend due to open transactions
        - KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list
        - KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu
        - arm64: fix syscall_fn_t type
        - arm64: use the correct function type in SYSCALL_DEFINE0
        - arm64: use the correct function type for __arm64_sys_ni_syscall
        - net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs
        - net: phylink: ensure consistent phy interface mode
        - net: phy: dp83867: Set up RGMII TX delay
        - scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
        - scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask
        - scsi: scsi_dh_alua: Fix possible null-ptr-deref
        - mlxsw: spectrum: Prevent force of 56G
        - ocfs2: fix error path kobject memory leak
        - coredump: fix race condition between collapse_huge_page() and core dumping
        - Abort file_remove_privs() for non-reg. files
        - net: tls, correctly account for copied bytes with multiple sk_msgs
        - vxlan: Don't assume linear buffers in error handler
        - geneve: Don't assume linear buffers in error handler
        - net/mlx5: Update pci error handler entries and command translation
        - mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead
        - net/mlx5e: Add ndo_set_feature for uplink representor
        - mlxsw: spectrum_flower: Fix TOS matching
        - net/mlx5e: Support tagged tunnel over bond
        - net: correct udp zerocopy refcnt also when zerocopy only on append
        - net/mlx5e: Avoid detaching non-existing netdev under switchdev mode
        - staging: erofs: set sb->s_root to NULL when failing from __getname()
        - staging: wilc1000: Fix some double unlock bugs in wilc_wlan_cleanup()
        - pinctrl: intel: Clear interrupt status in mask/unmask callback
        - netfilter: nf_tables: fix oops during rule dump
        - netfilter: nft_fib: Fix existence check support
        - net: stmmac: dwmac-mediatek: modify csr_clk value to fix mdio read/write
          fail
        - dpaa2-eth: Fix potential spectre issue
        - dpaa2-eth: Use PTR_ERR_OR_ZERO where appropriate
        - dpaa_eth: use only online CPU portals
        - dfs_cache: fix a wrong use of kfree in flush_cache_ent()
        - KVM: PPC: Book3S HV: Use new mutex to synchronize MMU setup
        - blk-mq: Fix memory leak in error handling
        - mm: mmu_gather: remove __tlb_reset_range() for force flush
        - nvme-tcp: rename function to have nvme_tcp prefix
        - nvme-tcp: fix possible null deref on a timed out io queue connect
        - nvme-tcp: fix queue mapping when queue count is limited
    
      * Disco update: upstream stable patchset 2019-08-12 (LP: #1839887)
        - selftests/tls: test for lowat overshoot with multiple records
        - selftests/tls: add test for sleeping even though there is data
        - sparc64: Fix regression in non-hypervisor TLB flush xcall
        - include/linux/bitops.h: sanitize rotate primitives
        - xhci: update bounce buffer with correct sg num
        - xhci: Use %zu for printing size_t type
        - xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
        - usb: xhci: avoid null pointer deref when bos field is NULL
        - usbip: usbip_host: fix BUG: sleeping function called from invalid context
        - usbip: usbip_host: fix stub_dev lock context imbalance regression
        - USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
        - USB: sisusbvga: fix oops in error path of sisusb_probe
        - USB: Add LPM quirk for Surface Dock GigE adapter
        - USB: rio500: refuse more than one device at a time
        - USB: rio500: fix memory leak in close after disconnect
        - media: usb: siano: Fix general protection fault in smsusb
        - media: usb: siano: Fix false-positive "uninitialized variable" warning
        - media: smsusb: better handle optional alignment
        - brcmfmac: fix NULL pointer derefence during USB disconnect
        - scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
        - scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
        - tracing: Avoid memory leak in predicate_parse()
        - Btrfs: fix wrong ctime and mtime of a directory after log replay
        - Btrfs: fix race updating log root item during fsync
        - Btrfs: fix fsync not persisting changed attributes of a directory
        - Btrfs: incremental send, fix file corruption when no-holes feature is
          enabled
        - iio: dac: ds4422/ds4424 fix chip verification
        - iio: adc: ti-ads8688: fix timestamp is not updated in buffer
        - s390/crypto: fix possible sleep during spinlock aquired
        - KVM: PPC: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts
        - powerpc/perf: Fix MMCRA corruption by bhrb_filter
        - ALSA: line6: Assure canceling delayed work at disconnection
        - ALSA: hda/realtek - Set default power save node to 0
        - KVM: s390: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID
        - drm/nouveau/i2c: Disable i2c bus access after ->fini()
        - i2c: mlxcpld: Fix wrong initialization order in probe
        - i2c: synquacer: fix synquacer_i2c_doxfer() return value
        - tty: serial: msm_serial: Fix XON/XOFF
        - tty: max310x: Fix external crystal register setup
        - memcg: make it work on sparse non-0-node systems
        - kernel/signal.c: trace_signal_deliver when signal_group_exit
        - arm64: Fix the arm64_personality() syscall wrapper redirection
        - docs: Fix conf.py for Sphinx 2.0
        - doc: Cope with the deprecation of AutoReporter
        - doc: Cope with Sphinx logging deprecations
        - ima: show rules with IMA_INMASK correctly
        - evm: check hash algorithm passed to init_desc()
        - vt/fbcon: deinitialize resources in visual_init() after failed memory
          allocation
        - serial: sh-sci: disable DMA for uart_console
        - staging: vc04_services: prevent integer overflow in create_pagelist()
        - staging: wlan-ng: fix adapter initialization failure
        - cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case
        - CIFS: cifs_read_allocate_pages: don't iterate through whole page array on
          ENOMEM
        - Revert "lockd: Show pid of lockd for remote locks"
        - gcc-plugins: Fix build failures under Darwin host
        - drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using
          get_pages()
        - drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set
        - drm/sun4i: Fix sun8i HDMI PHY clock initialization
        - drm/sun4i: Fix sun8i HDMI PHY configuration for > 148.5 MHz
        - drm/rockchip: shutdown drm subsystem on shutdown
        - drm/lease: Make sure implicit planes are leased
        - Revert "x86/build: Move _etext to actual end of .text"
        - scsi: lpfc: Fix backport of faf5a744f4f8 ("scsi: lpfc: avoid uninitialized
          variable warning")
        - KVM: PPC: Book3S HV: Fix lockdep warning when entering guest on POWER9
        - KVM: PPC: Book3S HV: Restore SPRG3 in kvmhv_p9_guest_entry()
        - powerpc/kexec: Fix loading of kernel + initramfs with kexec_file_load()
        - kasan: initialize tag to 0xff in __kasan_kmalloc
        - signal/arm64: Use force_sig not force_sig_fault for SIGKILL
        - x86/ima: Check EFI_RUNTIME_SERVICES before using
        - ima: fix wrong signed policy requirement when not appraising
        - drm/vmwgfx: Fix user space handle equal to zero
        - drm/vmwgfx: Fix compat mode shader operation
        - drm/atomic: Wire file_priv through for property changes
        - drm: Expose "FB_DAMAGE_CLIPS" property to atomic aware user-space only
        - drm/cma-helper: Fix drm_gem_cma_free_object()
        - ethtool: fix potential userspace buffer overflow
        - Fix memory leak in sctp_process_init
        - ipv4: not do cache for local delivery if bc_forwarding is enabled
        - ipv6: fix the check before getting the cookie in rt6_get_cookie
        - neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
        - net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set
        - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
        - net: mvpp2: Use strscpy to handle stat strings
        - net: rds: fix memory leak in rds_ib_flush_mr_pool
        - net: sfp: read eeprom in maximum 16 byte increments
        - net/tls: replace the sleeping lock around RX resync with a bit lock
        - packet: unconditionally free po->rollover
        - pktgen: do not sleep with the thread lock held.
        - Revert "fib_rules: return 0 directly if an exactly same rule exists when
          NLM_F_EXCL not supplied"
        - ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
        - ipv6: fix EFAULT on sendto with icmpv6 and hdrincl
        - mtd: spinand: macronix: Fix ECC Status Read
        - rcu: locking and unlocking need to always be at least barriers
        - parisc: Use implicit space register selection for loading the coherence
          index of I/O pdirs
        - NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter
        - NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled
        - fuse: fallocate: fix return with locked inode
        - pstore: Set tfm to NULL on free_buf_for_compression
        - pstore/ram: Run without kernel crash dump region
        - x86/power: Fix 'nosmt' vs hibernation triple fault during resume
        - i2c: xiic: Add max_read_len quirk
        - s390/mm: fix address space detection in exception handling
        - xen-blkfront: switch kcalloc to kvcalloc for large array allocation
        - MIPS: Bounds check virt_addr_valid
        - MIPS: pistachio: Build uImage.gz by default
        - Revert "MIPS: perf: ath79: Fix perfcount IRQ assignment"
        - genwqe: Prevent an integer overflow in the ioctl
        - test_firmware: Use correct snprintf() limit
        - drm/gma500/cdv: Check vbt config bits when detecting lvds panels
        - drm/msm: fix fb references in async update
        - drm: add non-desktop quirk for Valve HMDs
        - drm: add non-desktop quirks to Sensics and OSVR headsets.
        - drm/amdgpu/psp: move psp version specific function pointers to early_init
        - drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in
        - drm/i915: Fix I915_EXEC_RING_MASK
        - drm/i915/fbc: disable framebuffer compression on GeminiLake
        - drm/i915: Maintain consistent documentation subsection ordering
        - drm: don't block fb changes for async plane updates
        - drm/i915/gvt: Initialize intel_gvt_gtt_entry in stack
        - TTY: serial_core, add ->install
        - ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
        - udp: only choose unbound UDP socket for multicast when not in a VRF
        - neighbor: Reset gc_entries counter if new entry is released before insert
        - cls_matchall: avoid panic when receiving a packet before filter set
        - ipmr_base: Do not reset index in mr_table_dump
        - ARC: mm: SIGSEGV userspace trying to access kernel virtual memory
        - parisc: Fix crash due alternative coding for NP iopdir_fdc bit
        - SUNRPC fix regression in umount of a secure mount
        - fuse: fix copy_file_range() in the writeback case
        - memstick: mspro_block: Fix an error code in mspro_block_issue_req()
        - mmc: tmio: fix SCC error handling to avoid false positive CRC error
        - mmc: sdhci_am654: Fix SLOTTYPE write
        - nvme-rdma: fix queue mapping when queue count is limited
        - drm/vc4: fix fb references in async update
        - drm: Fix timestamp docs for variable refresh properties.
        - drm/amd/display: Add ASICREV_IS_PICASSO
        - drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2)
        - drm/amd: fix fb references in async update
        - rapidio: fix a NULL pointer dereference when create_workqueue() fails
        - fs/fat/file.c: issue flush after the writeback of FAT
        - sysctl: return -EINVAL if val violates minmax
        - ipc: prevent lockup on alloc_msg and free_msg
        - drm/pl111: Initialize clock spinlock early
        - ARM: prevent tracing IPI_CPU_BACKTRACE
        - mm/hmm: select mmu notifier when selecting HMM
        - hugetlbfs: on restore reserve error path retain subpool reservation
        - mem-hotplug: fix node spanned pages when we have a node with only
          ZONE_MOVABLE
        - mm/cma.c: fix crash on CMA allocation if bitmap allocation fails
        - initramfs: free initrd memory if opening /initrd.image fails
        - mm/cma.c: fix the bitmap status to show failed allocation reason
        - mm: page_mkclean vs MADV_DONTNEED race
        - mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
        - mm/slab.c: fix an infinite loop in leaks_show()
        - kernel/sys.c: prctl: fix false positive in validate_prctl_map()
        - thermal: rcar_gen3_thermal: disable interrupt in .remove
        - drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER
        - mfd: tps65912-spi: Add missing of table registration
        - mfd: intel-lpss: Set the device in reset state when init
        - drm/nouveau/disp/dp: respect sink limits when selecting failsafe link
          configuration
        - mfd: twl6040: Fix device init errors for ACCCTL register
        - perf/x86/intel: Allow PEBS multi-entry in watermark mode
        - drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when
          encoders change
        - drm/bridge: adv7511: Fix low refresh rate selection
        - objtool: Don't use ignore flag for fake jumps
        - drm/nouveau/kms/gv100-: fix spurious window immediate interlocks
        - bpf: fix undefined behavior in narrow load handling
        - EDAC/mpc85xx: Prevent building as a module
        - pwm: meson: Use the spin-lock only to protect register modifications
        - mailbox: stm32-ipcc: check invalid irq
        - ntp: Allow TAI-UTC offset to be set to zero
        - f2fs: fix to avoid panic in do_recover_data()
        - f2fs: fix to avoid panic in f2fs_inplace_write_data()
        - f2fs: fix to avoid panic in f2fs_remove_inode_page()
        - f2fs: fix to do sanity check on free nid
        - f2fs: fix to clear dirty inode in error path of f2fs_iget()
        - f2fs: fix to avoid panic in dec_valid_block_count()
        - f2fs: fix to use inline space only if inline_xattr is enable
        - f2fs: fix to do sanity check on valid block count of segment
        - f2fs: fix to do checksum even if inode page is uptodate
        - percpu: remove spurious lock dependency between percpu and sched
        - configfs: fix possible use-after-free in configfs_register_group
        - uml: fix a boot splat wrt use of cpu_all_mask
        - PCI: dwc: Free MSI in dw_pcie_host_init() error path
        - PCI: dwc: Free MSI IRQ page in dw_pcie_free_msi()
        - mmc: mmci: Prevent polling for busy detection in IRQ context
        - netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast
        - netfilter: nf_conntrack_h323: restore boundary check correctness
        - mips: Make sure dt memory regions are valid
        - netfilter: nf_tables: fix base chain stat rcu_dereference usage
        - watchdog: imx2_wdt: Fix set_timeout for big timeout values
        - watchdog: fix compile time error of pretimeout governors
        - blk-mq: move cancel of requeue_work into blk_mq_release
        - iommu/vt-d: Set intel_iommu_gfx_mapped correctly
        - misc: pci_endpoint_test: Fix test_reg_bar to be updated in pci_endpoint_test
        - PCI: designware-ep: Use aligned ATU window for raising MSI interrupts
        - nvme-pci: unquiesce admin queue on shutdown
        - nvme-pci: shutdown on timeout during deletion
        - netfilter: nf_flow_table: check ttl value in flow offload data path
        - netfilter: nf_flow_table: fix netdev refcnt leak
        - ALSA: hda - Register irq handler after the chip initialization
        - nvmem: core: fix read buffer in place
        - nvmem: sunxi_sid: Support SID on A83T and H5
        - fuse: retrieve: cap requested size to negotiated max_write
        - nfsd: allow fh_want_write to be called twice
        - nfsd: avoid uninitialized variable warning
        - vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING"
        - switchtec: Fix unintended mask of MRPC event
        - net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending
        - x86/PCI: Fix PCI IRQ routing table memory leak
        - i40e: Queues are reserved despite "Invalid argument" error
        - platform/chrome: cros_ec_proto: check for NULL transfer function
        - PCI: keystone: Prevent ARM32 specific code to be compiled for ARM64
        - soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
        - clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
        - soc: rockchip: Set the proper PWM for rk3288
        - ARM: dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
        - ARM: dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
        - ARM: dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
        - ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
        - ARM: dts: imx6sll: Specify IMX6SLL_CLK_IPG as "ipg" clock to SDMA
        - ARM: dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA
        - ARM: dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA
        - ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
        - ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
        - PCI: rpadlpar: Fix leaked device_node references in add/remove paths
        - drm/amd/display: Use plane->color_space for dpp if specified
        - ARM: OMAP2+: pm33xx-core: Do not Turn OFF CEFUSE as PPA may be using it
        - platform/x86: intel_pmc_ipc: adding error handling
        - power: supply: max14656: fix potential use-before-alloc
        - PCI: rcar: Fix a potential NULL pointer dereference
        - PCI: rcar: Fix 64bit MSI message address handling
        - scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags
        - video: hgafb: fix potential NULL pointer dereference
        - video: imsttfb: fix potential NULL pointer dereferences
        - block, bfq: increase idling for weight-raised queues
        - PCI: xilinx: Check for __get_free_pages() failure
        - gpio: gpio-omap: add check for off wake capable gpios
        - ice: Add missing case in print_link_msg for printing flow control
        - dmaengine: idma64: Use actual device for DMA transfers
        - pwm: tiehrpwm: Update shadow register for disabling PWMs
        - ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on
          Arndale Octa
        - pwm: Fix deadlock warning when removing PWM device
        - ARM: exynos: Fix undefined instruction during Exynos5422 resume
        - usb: typec: fusb302: Check vconn is off when we start toggling
        - soc: renesas: Identify R-Car M3-W ES1.3
        - gpio: vf610: Do not share irq_chip
        - percpu: do not search past bitmap when allocating an area
        - ovl: check the capability before cred overridden
        - ovl: support stacked SEEK_HOLE/SEEK_DATA
        - ALSA: seq: Cover unsubscribe_port() in list_mutex
        - media: rockchip/vpu: Fix/re-order probe-error/remove path
        - media: rockchip/vpu: Add missing dont_use_autosuspend() calls
        - drm/msm: correct attempted NULL pointer dereference in debugfs
        - mm/memory_hotplug: release memory resource after arch_remove_memory()
        - mm/memory_hotplug.c: fix the wrong usage of N_HIGH_MEMORY
        - drm/nouveau: fix duplication of nv50_head_atom struct
        - f2fs: fix error path of recovery
        - f2fs: fix to avoid panic in dec_valid_node_count()
        - f2fs: fix to avoid deadloop in foreground GC
        - f2fs: fix to retrieve inline xattr space
        - media: atmel: atmel-isc: fix asd memory allocation
        - vfio-pci/nvlink2: Fix potential VMA leak
        - powerpc/pseries: Track LMB nid instead of using device tree
        - arm64: defconfig: Update UFSHCD for Hi3660 soc
        - iommu/vt-d: Don't request page request irq under dmar_global_lock
        - soc/tegra: pmc: Remove reset sysfs entries on error
        - power: supply: cpcap-battery: Fix signed counter sample register
        - PCI: keystone: Invoke phy_reset() API before enabling PHY
        - iommu/vt-d: Flush IOTLB for untrusted device in time
        - arm64: dts: imx8mq: Mark iomuxc_gpr as i.MX6Q compatible
        - pinctrl: pinctrl-intel: move gpio suspend/resume to noirq phase
        - f2fs: fix potential recursive call when enabling data_flush
        - arm64: dts: qcom: qcs404: Fix regulator supply names
        - gpio: gpio-omap: limit errata 1.101 handling to wkup domain gpios only
        - media: v4l2-ctrl: v4l2_ctrl_request_setup returns with error upon failure
        - batman-adv: Adjust name for batadv_dat_send_data
        - ice: Enable LAN_EN for the right recipes
        - ice: Do not set LB_EN for prune switch rules
        - media: v4l2-fwnode: Defaults may not override endpoint configuration in
          firmware
        - ARM: shmobile: porter: enable R-Car Gen2 regulator quirk
    
     -- Khalid Elmously <email address hidden>  Mon, 30 Sep 2019 14:30:53 -0400
  • linux (5.0.0-30.32) disco; urgency=medium
    
      * disco/linux: 5.0.0-30.32 -proposed tracker (LP: #1844362)
    
      * Disco update: upstream stable patchset 2019-08-20 (LP: #1840846)
        - Revert "e1000e: fix cyclic resets at link up with active tx"
        - e1000e: start network tx queue only when link is up
        - Input: synaptics - enable SMBUS on T480 thinkpad trackpad
        - nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
        - drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT
        - firmware: improve LSM/IMA security behaviour
        - irqchip/gic-v3-its: Fix command queue pointer comparison bug
        - clk: ti: clkctrl: Fix returning uninitialized data
        - efi/bgrt: Drop BGRT status field reserved bits check
        - perf/core: Fix perf_sample_regs_user() mm check
        - ARM: dts: gemini Fix up DNS-313 compatible string
        - ARM: omap2: remove incorrect __init annotation
        - afs: Fix uninitialised spinlock afs_volume::cb_break_lock
        - x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz
        - be2net: fix link failure after ethtool offline test
        - ppp: mppe: Add softdep to arc4
        - sis900: fix TX completion
        - ARM: dts: imx6ul: fix PWM[1-4] interrupts
        - pinctrl: mcp23s08: Fix add_data and irqchip_add_nested call order
        - dm table: don't copy from a NULL pointer in realloc_argv()
        - dm verity: use message limit for data block corruption message
        - x86/boot/64: Fix crash if kernel image crosses page table boundary
        - x86/boot/64: Add missing fixup_pointer() for next_early_pgt access
        - HID: chicony: add another quirk for PixArt mouse
        - pinctrl: mediatek: Ignore interrupts that are wake only during resume
        - cpu/hotplug: Fix out-of-bounds read when setting fail state
        - pinctrl: mediatek: Update cur_mask in mask/mask ops
        - linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL
        - genirq: Delay deactivation in free_irq()
        - genirq: Fix misleading synchronize_irq() documentation
        - genirq: Add optional hardware synchronization for shutdown
        - x86/ioapic: Implement irq_get_irqchip_state() callback
        - x86/irq: Handle spurious interrupt after shutdown gracefully
        - x86/irq: Seperate unused system vectors from spurious entry again
        - ARC: hide unused function unw_hdr_alloc
        - s390: fix stfle zero padding
        - s390/qdio: (re-)initialize tiqdio list entries
        - s390/qdio: don't touch the dsci in tiqdio_add_input_queues()
        - crypto: talitos - move struct talitos_edesc into talitos.h
        - crypto: talitos - fix hash on SEC1.
        - crypto/NX: Set receive window credits to max number of CRBs in RxFIFO
        - drm/udl: introduce a macro to convert dev to udl.
        - drm/udl: move to embedding drm device inside udl device.
        - x86/entry/32: Fix ENDPROC of common_spurious
        - irqchip/irq-csky-mpintc: Support auto irq deliver to all cpus
        - arm64: dts: ls1028a: Fix CPU idle fail.
        - selftests/powerpc: Add test of fork with mapping above 512TB
        - x86/efi: fix a -Wtype-limits compilation warning
        - pinctrl: ocelot: fix gpio direction for pins after 31
        - pinctrl: ocelot: fix pinmuxing for pins after 31
        - mm/oom_kill.c: fix uninitialized oc->constraint
        - fork,memcg: alloc_thread_stack_node needs to set tsk->stack
        - MIPS: ath79: fix ar933x uart parity mode
        - MIPS: fix build on non-linux hosts
        - arm64/efi: Mark __efistub_stext_offset as an absolute symbol explicitly
        - scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported
        - dmaengine: imx-sdma: fix use-after-free on probe error path
        - wil6210: fix potential out-of-bounds read
        - ath10k: Do not send probe response template for mesh
        - ath9k: Check for errors when reading SREV register
        - ath6kl: add some bounds checking
        - ath10k: add peer id check in ath10k_peer_find_by_id
        - wil6210: fix spurious interrupts in 3-msi
        - ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
        - regmap: debugfs: Fix memory leak in regmap_debugfs_init
        - batman-adv: fix for leaked TVLV handler.
        - media: dvb: usb: fix use after free in dvb_usb_device_exit
        - media: spi: IR LED: add missing of table registration
        - crypto: talitos - fix skcipher failure due to wrong output IV
        - media: ov7740: avoid invalid framesize setting
        - media: marvell-ccic: fix DMA s/g desc number calculation
        - media: vpss: fix a potential NULL pointer dereference
        - media: media_device_enum_links32: clean a reserved field
        - net: stmmac: dwmac1000: Clear unused address entries
        - net: stmmac: dwmac4/5: Clear unused address entries
        - qed: Set the doorbell address correctly
        - signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
        - af_key: fix leaks in key_pol_get_resp and dump_sp.
        - xfrm: Fix xfrm sel prefix length validation
        - fscrypt: clean up some BUG_ON()s in block encryption/decryption
        - perf annotate TUI browser: Do not use member from variable within its own
          initialization
        - media: mc-device.c: don't memset __user pointer contents
        - media: saa7164: fix remove_proc_entry warning
        - media: staging: media: davinci_vpfe: - Fix for memory leak if decoder
          initialization fails.
        - net: phy: Check against net_device being NULL
        - crypto: talitos - properly handle split ICV.
        - crypto: talitos - Align SEC1 accesses to 32 bits boundaries.
        - tua6100: Avoid build warnings.
        - batman-adv: Fix duplicated OGMs on NETDEV_UP
        - locking/lockdep: Fix merging of hlocks with non-zero references
        - media: wl128x: Fix some error handling in fm_v4l2_init_video_device()
        - cpupower : frequency-set -r option misses the last cpu in related cpu list
        - arm64: mm: make CONFIG_ZONE_DMA32 configurable
        - perf jvmti: Address gcc string overflow warning for strncpy()
        - net: stmmac: dwmac4: fix flow control issue
        - net: stmmac: modify default value of tx-frames
        - crypto: inside-secure - do not rely on the hardware last bit for result
          descriptors
        - net: fec: Do not use netdev messages too early
        - net: axienet: Fix race condition causing TX hang
        - s390/qdio: handle PENDING state for QEBSM devices
        - RAS/CEC: Fix pfn insertion
        - net: sfp: add mutex to prevent concurrent state checks
        - ipset: Fix memory accounting for hash types on resize
        - perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode
        - perf test 6: Fix missing kvm module load for s390
        - perf report: Fix OOM error in TUI mode on s390
        - irqchip/meson-gpio: Add support for Meson-G12A SoC
        - media: uvcvideo: Fix access to uninitialized fields on probe error
        - media: fdp1: Support M3N and E3 platforms
        - iommu: Fix a leak in iommu_insert_resv_region
        - gpio: omap: fix lack of irqstatus_raw0 for OMAP4
        - gpio: omap: ensure irq is enabled before wakeup
        - regmap: fix bulk writes on paged registers
        - bpf: silence warning messages in core
        - media: s5p-mfc: fix reading min scratch buffer size on MFC v6/v7
        - selinux: fix empty write to keycreate file
        - x86/cpu: Add Ice Lake NNPI to Intel family
        - ASoC: meson: axg-tdm: fix sample clock inversion
        - rcu: Force inlining of rcu_read_lock()
        - x86/cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS
        - qed: iWARP - Fix tc for MPA ll2 connection
        - block: null_blk: fix race condition for null_del_dev
        - blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership
          arbitration
        - xfrm: fix sa selector validation
        - sched/core: Add __sched tag for io_schedule()
        - sched/fair: Fix "runnable_avg_yN_inv" not used warnings
        - perf/x86/intel/uncore: Handle invalid event coding for free-running counter
        - x86/atomic: Fix smp_mb__{before,after}_atomic()
        - perf evsel: Make perf_evsel__name() accept a NULL argument
        - vhost_net: disable zerocopy by default
        - ipoib: correcly show a VF hardware address
        - x86/cacheinfo: Fix a -Wtype-limits warning
        - blk-iolatency: only account submitted bios
        - ACPICA: Clear status of GPEs on first direct enable
        - EDAC/sysfs: Fix memory leak when creating a csrow object
        - nvme: fix possible io failures when removing multipathed ns
        - nvme-pci: properly report state change failure in nvme_reset_work
        - nvme-pci: set the errno on ctrl state change error
        - lightnvm: pblk: fix freeing of merged pages
        - arm64: Do not enable IRQs for ct_user_exit
        - ipsec: select crypto ciphers for xfrm_algo
        - ipvs: defer hook registration to avoid leaks
        - media: s5p-mfc: Make additional clocks optional
        - media: i2c: fix warning same module names
        - [Config] rename module adv7511
        - ntp: Limit TAI-UTC offset
        - timer_list: Guard procfs specific code
        - acpi/arm64: ignore 5.1 FADTs that are reported as 5.0
        - media: coda: fix mpeg2 sequence number handling
        - media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP
        - media: coda: increment sequence offset for the last returned frame
        - media: vimc: cap: check v4l2_fill_pixfmt return value
        - media: hdpvr: fix locking and a missing msleep
        - net: stmmac: sun8i: force select external PHY when no internal one
        - rtlwifi: rtl8192cu: fix error handle when usb probe failed
        - mt7601u: do not schedule rx_tasklet when the device has been disconnected
        - x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c
        - mt7601u: fix possible memory leak when the device is disconnected
        - ipvs: fix tinfo memory leak in start_sync_thread
        - ath10k: add missing error handling
        - ath10k: fix PCIE device wake up failed
        - perf tools: Increase MAX_NR_CPUS and MAX_CACHES
        - ASoC: Intel: hdac_hdmi: Set ops to NULL on remove
        - libata: don't request sense data on !ZAC ATA devices
        - clocksource/drivers/exynos_mct: Increase priority over ARM arch timer
        - xsk: Properly terminate assignment in xskq_produce_flush_desc
        - rslib: Fix decoding of shortened codes
        - rslib: Fix handling of of caller provided syndrome
        - ixgbe: Check DDM existence in transceiver before access
        - crypto: serpent - mark __serpent_setkey_sbox noinline
        - crypto: asymmetric_keys - select CRYPTO_HASH where needed
        - wil6210: drop old event after wmi_call timeout
        - EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
        - bcache: check CACHE_SET_IO_DISABLE in allocator code
        - bcache: check CACHE_SET_IO_DISABLE bit in bch_journal()
        - bcache: acquire bch_register_lock later in cached_dev_free()
        - bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
        - bcache: fix potential deadlock in cached_def_free()
        - net: hns3: fix a -Wformat-nonliteral compile warning
        - net: hns3: add some error checking in hclge_tm module
        - ath10k: destroy sdio workqueue while remove sdio module
        - net: mvpp2: prs: Don't override the sign bit in SRAM parser shift
        - igb: clear out skb->tstamp after reading the txtime
        - iwlwifi: mvm: Drop large non sta frames
        - bpf: fix uapi bpf_prog_info fields alignment
        - perf stat: Make metric event lookup more robust
        - perf stat: Fix group lookup for metric group
        - net: usb: asix: init MAC address buffers
        - rxrpc: Fix oops in tracepoint
        - bpf, libbpf, smatch: Fix potential NULL pointer dereference
        - selftests: bpf: fix inlines in test_lwt_seg6local
        - bonding: validate ip header before check IPPROTO_IGMP
        - gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
        - tools: bpftool: Fix json dump crash on powerpc
        - Bluetooth: hci_bcsp: Fix memory leak in rx_skb
        - Bluetooth: Add new 13d3:3491 QCA_ROME device
        - Bluetooth: Add new 13d3:3501 QCA_ROME device
        - Bluetooth: 6lowpan: search for destination address in all peers
        - perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64
        - Bluetooth: Check state in l2cap_disconnect_rsp
        - gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable()
        - Bluetooth: validate BLE connection interval updates
        - gtp: fix suspicious RCU usage
        - gtp: fix Illegal context switch in RCU read-side critical section.
        - gtp: fix use-after-free in gtp_encap_destroy()
        - gtp: fix use-after-free in gtp_newlink()
        - net: mvmdio: defer probe of orion-mdio if a clock is not ready
        - iavf: fix dereference of null rx_buffer pointer
        - floppy: fix out-of-bounds read in next_valid_format
        - floppy: fix invalid pointer dereference in drive_name
        - xen: let alloc_xenballooned_pages() fail if not enough memory free
        - scsi: NCR5380: Always re-enable reselection interrupt
        - Revert "scsi: ncr5380: Increase register polling limit"
        - scsi: core: Fix race on creating sense cache
        - scsi: megaraid_sas: Fix calculation of target ID
        - scsi: mac_scsi: Increase PIO/PDMA transfer length threshold
        - scsi: mac_scsi: Fix pseudo DMA implementation, take 2
        - crypto: ghash - fix unaligned memory access in ghash_setkey()
        - crypto: ccp - Validate the the error value used to index error messages
        - crypto: arm64/sha1-ce - correct digest for empty data in finup
        - crypto: arm64/sha2-ce - correct digest for empty data in finup
        - crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
        - crypto: crypto4xx - fix AES CTR blocksize value
        - crypto: crypto4xx - fix blocksize for cfb and ofb
        - crypto: crypto4xx - block ciphers should only accept complete blocks
        - crypto: ccp - memset structure fields to zero before reuse
        - crypto: ccp/gcm - use const time tag comparison.
        - crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe
        - bcache: Revert "bcache: fix high CPU occupancy during journal"
        - bcache: Revert "bcache: free heap cache_set->flush_btree in
          bch_journal_free"
        - bcache: ignore read-ahead request failure on backing device
        - bcache: fix mistaken sysfs entry for io_error counter
        - bcache: destroy dc->writeback_write_wq if failed to create
          dc->writeback_thread
        - Input: gtco - bounds check collection indent level
        - Input: synaptics - whitelist Lenovo T580 SMBus intertouch
        - regulator: s2mps11: Fix buck7 and buck8 wrong voltages
        - arm64: tegra: Update Jetson TX1 GPU regulator timings
        - iwlwifi: pcie: don't service an interrupt that was masked
        - iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X
        - iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill
        - iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices
        - NFSv4: Handle the special Linux file open access mode
        - pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error
        - pNFS: Fix a typo in pnfs_update_layout
        - pnfs: Fix a problem where we gratuitously start doing I/O through the MDS
        - lib/scatterlist: Fix mapping iterator when sg->offset is greater than
          PAGE_SIZE
        - ASoC: dapm: Adapt for debugfs API change
        - raid5-cache: Need to do start() part job after adding journal device
        - ALSA: seq: Break too long mutex context in the write loop
        - ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform
        - media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
        - media: coda: Remove unbalanced and unneeded mutex unlock
        - media: videobuf2-core: Prevent size alignment wrapping buffer size to 0
        - media: videobuf2-dma-sg: Prevent size from overflowing
        - KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed
        - arm64: tegra: Fix AGIC register range
        - fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys
          inodes.
        - kconfig: fix missing choice values in auto.conf
        - drm/nouveau/i2c: Enable i2c pads & busses during preinit
        - padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
        - dm zoned: fix zone state management race
        - xen/events: fix binding user event channels to cpus
        - 9p/xen: Add cleanup path in p9_trans_xen_init
        - 9p/virtio: Add cleanup path in p9_virtio_init
        - x86/boot: Fix memory leak in default_get_smp_config()
        - perf/x86/intel: Fix spurious NMI on fixed counter
        - perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs
        - perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs
        - drm/edid: parse CEA blocks embedded in DisplayID
        - intel_th: pci: Add Ice Lake NNPI support
        - PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
        - PCI: Do not poll for PME if the device is in D3cold
        - PCI: qcom: Ensure that PERST is asserted for at least 100 ms
        - Btrfs: fix data loss after inode eviction, renaming it, and fsync it
        - Btrfs: fix fsync not persisting dentry deletions due to inode evictions
        - Btrfs: add missing inode version, ctime and mtime updates when punching hole
        - IB/mlx5: Report correctly tag matching rendezvous capability
        - HID: wacom: generic: only switch the mode on devices with LEDs
        - HID: wacom: generic: Correct pad syncing
        - HID: wacom: correct touch resolution x/y typo
        - libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
        - coda: pass the host file in vma->vm_file on mmap
        - include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT
          architectures
        - xfs: don't overflow xattr listent buffer
        - xfs: rename m_inotbt_nores to m_finobt_nores
        - xfs: don't ever put nlink > 0 inodes on the unlinked list
        - xfs: reserve blocks for ifree transaction during log recovery
        - xfs: fix reporting supported extra file attributes for statx()
        - xfs: serialize unaligned dio writes against all other dio writes
        - xfs: abort unaligned nowait directio early
        - gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM
        - crypto: caam - limit output IV to CBC to work around CTR mode DMA issue
        - parisc: Ensure userspace privilege for ptraced processes in regset functions
        - parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1
        - powerpc/32s: fix suspend/resume when IBATs 4-7 are used
        - powerpc/watchpoint: Restore NV GPRs while returning from exception
        - powerpc/powernv/npu: Fix reference leak
        - powerpc/pseries: Fix oops in hotplug memory notifier
        - mmc: sdhci-msm: fix mutex while in spinlock
        - eCryptfs: fix a couple type promotion bugs
        - mtd: rawnand: mtk: Correct low level time calculation of r/w cycle
        - mtd: spinand: read returns badly if the last page has bitflips
        - intel_th: msu: Fix single mode with disabled IOMMU
        - Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
        - usb: Handle USB3 remote wakeup for LPM enabled devices correctly
        - blk-throttle: fix zero wait time for iops throttled group
        - blk-iolatency: clear use_delay when io.latency is set to zero
        - blkcg: update blkcg_print_stat() to handle larger outputs
        - net: mvmdio: allow up to four clocks to be specified for orion-mdio
        - dt-bindings: allow up to four clocks for orion-mdio
        - dm bufio: fix deadlock with loop device
        - ath10k: Check tx_stats before use it
        - ath10k: fix incorrect multicast/broadcast rate setting
        - spi: rockchip: turn down tx dma bursts
        - ath10k: Fix encoding for protected management frames
        - media: v4l2-core: fix use-after-free error
        - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
        - locking/lockdep: Fix OOO unlock when hlocks need merging
        - media: aspeed: change irq to threaded irq
        - gpio: omap: Fix lost edge wake-up interrupts
        - media: davinci: vpif_capture: fix memory leak in vpif_probe()
        - perf/x86/intel: Disable check_msr for real HW
        - integrity: Fix __integrity_init_keyring() section mismatch
        - iavf: allow null RX descriptors
        - ASoC: rsnd: fixup mod ID calculation in rsnd_ctu_probe_
        - bpf: fix callees pruning callers
        - net: netsec: initialize tx ring on ndo_open
        - EDAC/sysfs: Drop device references properly
        - nvme-pci: adjust irq max_vector using num_possible_cpus()
        - media: mt9m111: fix fw-node refactoring
        - ASoC: soc-core: call snd_soc_unbind_card() under mutex_lock;
        - ath10k: fix fw crash by moving chip reset after napi disabled
        - netfilter: ctnetlink: Fix regression in conntrack entry deletion
        - bpf: fix BPF_ALU32 | BPF_ARSH on BE arches
        - gpio: Fix return value mismatch of function gpiod_get_from_of_node()
        - ath9k: correctly handle short radar pulses
        - ath10k: Fix memory leak in qmi
        - net: hns3: add Asym Pause support to fix autoneg problem
        - iwlwifi: dbg: fix debug monitor stop and restart delays
        - bnxt_en: Disable bus master during PCI shutdown and driver unload.
        - bnxt_en: Fix statistics context reservation logic for RDMA driver.
        - perf stat: Fix metrics with --no-merge
        - perf stat: Don't merge events in the same PMU
        - net: hns3: enable broadcast promisc mode when initializing VF
        - Bluetooth: hidp: NUL terminate a string in the compat ioctl
        - xdp: fix race on generic receive path
        - net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue
        - blk-iolatency: fix STS_AGAIN handling
        - scsi: NCR5380: Handle PDMA failure reliably
        - scsi: sd_zbc: Fix compilation warning
        - scsi: zfcp: fix request object use-after-free in send path causing seqno
          errors
        - scsi: zfcp: fix request object use-after-free in send path causing wrong
          traces
        - cifs: fix crash in smb2_compound_op()/smb2_set_next_command()
        - cifs: Properly handle auto disabling of serverino option
        - regulator: s2mps11: Fix ERR_PTR dereference on GPIO lookup failure
        - iwlwifi: mvm: delay GTK setting in FW in AP mode
        - iwlwifi: mvm: clear rfkill_safe_init_done when we start the firmware
        - opp: Don't use IS_ERR on invalid supplies
        - ASoC: core: Adapt for debugfs API change
        - ceph: fix end offset in truncate_inode_pages_range call
        - KVM: nVMX: Always sync GUEST_BNDCFGS when it comes from vmcs01
        - KVM: VMX: Fix handling of #MC that occurs during VM-Entry
        - KVM: VMX: check CPUID before allowing read/write of IA32_XSS
        - KVM: PPC: Book3S HV: Signed extend decrementer value if not using large
          decrementer
        - KVM: PPC: Book3S HV: Clear pending decrementer exceptions on nested guest
          entry
        - KVM: PPC: Book3S HV: Fix CR0 setting in TM emulation
        - signal/usb: Replace kill_pid_info_as_cred with kill_pid_usb_asyncio
        - signal: Correct namespace fixups of si_pid and si_uid
        - i3c: fix i2c and i3c scl rate by bus mode
        - ARM: dts: gemini: Set DIR-685 SPI CS as active low
        - rt2x00usb: fix rx queue hang
        - block: Allow mapping of vmalloc-ed buffers
        - block: Fix potential overflow in blk_report_zones()
        - RDMA/srp: Accept again source addresses that do not have a port number
        - mm/nvdimm: add is_ioremap_addr and use that to check ioremap address
        - resource: fix locking in find_next_iomem_res()
        - powerpc/powernv: Fix stale iommu table base after VFIO
        - dax: Fix missed wakeup with PMD faults
        - pstore: Fix double-free in pstore_mkfile() failure path
        - [Config] rename module adv7511
    
      * ACPI support for the ARMv8.2 Statistical Profiling Extension (LP: #1841490)
        - ACPICA: ACPI 6.3: MADT: add support for statistical profiling in GICC
        - ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags
        - ACPI/PPTT: Modify node flag detection to find last IDENTICAL
        - ACPI/PPTT: Add function to return ACPI 6.3 Identical tokens
        - arm_pmu: acpi: spe: Add initial MADT/SPE probing
        - perf: arm_spe: Enable ACPI/Platform automatic module loading
    
      * Backport support for software count cache flush Spectre v2 mitigation. (CVE)
        (required for POWER9 DD2.3) (LP: #1822870) // QEMU -  count cache flush
        Spectre v2 mitigation (CVE) (required for POWER9 DD2.3) (LP: #1832622)
        - KVM: PPC: Book3S: Add count cache flush parameters to kvmppc_get_cpu_char()
    
      * Additional regression in CMA allocation rework (LP: #1841483)
        - dma-direct: fix zone selection after an unaddressable CMA allocation
    
      * [SRU][B-OEM-OSP1/D/E] reduce s2idle power consumption when BIOS uses shared
        power resources (LP: #1840882)
        - PCI / ACPI: Use cached ACPI device state to get PCI device power state
        - ACPI / PM: Introduce concept of a _PR0 dependent device
        - PCI / ACPI: Add _PR0 dependent devices
    
      * ipv6: fix neighbour resolution with raw socket (LP: #1834465)
        - ipv6: constify rt6_nexthop()
        - ipv6: fix neighbour resolution with raw socket
    
      * realtek r8822be kernel module fails after update to linux kernel-headers
        5.0.0-21 (LP: #1838133)
        - build_bug.h: add wrapper for _Static_assert
        - lib/vsprintf.c: move sizeof(struct printf_spec) next to its definition
        - linux/fs.h: move member alignment check next to definition of struct
          filename
        - rtw88: add license for Makefile
        - rtw88: fix subscript above array bounds compiler warning
        - rtw88: fix unassigned rssi_level in rtw_sta_info
        - rtw88: avoid circular locking between local->iflist_mtx and rtwdev->mutex
        - rtw88: Make some symbols static
        - rtw88: pci: use ieee80211_ac_numbers instead of 0-3
        - rtw88: pci: check if queue mapping exceeds size of ac_to_hwq
        - rtw88: more descriptions about LPS
        - rtw88: add fast xmit support
        - rtw88: add support for random mac scan
        - rtw88: add beacon function setting
        - rtw88: 8822c: add rf write protection when switching channel
        - rtw88: 8822c: update channel and bandwidth BB setting
        - rtw88: 8822c: disable rx clock gating before counter reset
        - rtw88: 8822c: use more accurate ofdm fa counting
        - rtw88: power on again if it was already on
        - rtw88: restore DACK results to save time
        - rtw88: rsvd page should go though management queue
        - rtw88: fix typo rtw_writ16_set
        - rtw88: resolve order of tx power setting routines
        - rtw88: do not use (void *) as argument
        - rtw88: unify prefixes for tx power setting routine
        - rtw88: remove unused variable
        - rtw88: fix incorrect tx power limit at 5G
        - rtw88: choose the lowest as world-wide power limit
        - rtw88: correct power limit selection
        - rtw88: update tx power limit table to RF v20
        - rtw88: remove all RTW_MAX_POWER_INDEX macro
        - rtw88: refine flow to get tx power index
        - rtw88: Fix misuse of GENMASK macro
        - rtw88: pci: Rearrange the memory usage for skb in RX ISR
        - rtw88: pci: Use DMA sync instead of remapping in RX ISR
        - rtw88: debug: dump tx power indexes in use
        - rtw88: use txpwr_lmt_cfg_pair struct, not arrays
        - rtw88: pci: remove set but not used variable 'ip_sel'
        - rtw88: allow c2h operation in irq context
        - rtw88: enclose c2h cmd handle with mutex
        - rtw88: add BT co-existence support
        - SAUCE: rtw88: pci: enable MSI interrupt
    
      * Disco update: upstream stable patchset 2019-08-30 (LP: #1842128)
        - selftests/bpf: fix sendmsg6_prog on s390
        - net: mvpp2: Don't check for 3 consecutive Idle frames for 10G links
        - selftests: forwarding: gre_multipath: Enable IPv4 forwarding
        - selftests: forwarding: gre_multipath: Fix flower filters
        - can: mcp251x: add error check when wq alloc failed
        - can: gw: Fix error path of cgw_module_init
        - ASoC: rockchip: Fix mono capture
        - mac80211_hwsim: Fix possible null-pointer dereferences in
          hwsim_dump_radio_nl()
        - netfilter: ipset: Actually allow destination MAC address for hash:ip,mac
          sets too
        - netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and
          hash:ip,mac sets
        - rxrpc: Fix potential deadlock
        - rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet
        - net: phy: phy_led_triggers: Fix a possible null-pointer dereference in
          phy_led_trigger_change_speed()
        - NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts
        - HID: quirks: Set the INCREMENT_USAGE_ON_DUPLICATE quirk on Saitek X52
        - drm/rockchip: Suspend DP late
        - SMB3: Fix potential memory leak when processing compound chain
        - s390: put _stext and _etext into .text section
        - net: stmmac: Fix issues when number of Queues >= 4
        - net: stmmac: tc: Do not return a fragment entry
        - block, bfq: handle NULL return value by bfq_init_rq()
        - KVM: arm64: Don't write junk to sysregs on reset
        - KVM: arm: Don't write junk to CP15 registers on reset
        - clk: socfpga: stratix10: fix rate caclulationg for cnt_clks
        - ceph: clear page dirty before invalidate page
        - Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE
        - dm integrity: fix a crash due to BUG_ON in __journal_read_write()
        - dm raid: add missing cleanup in raid_ctr()
        - xfs: don't trip over uninitialized buffer on extent read of corrupted inode
        - xfs: always rejoin held resources during defer roll
        - rxrpc: Fix local endpoint refcounting
        - rxrpc: Fix read-after-free in rxrpc_queue_local()
        - rxrpc: Fix local endpoint replacement
        - rxrpc: Fix local refcounting
        - regulator: axp20x: fix DCDCA and DCDCD for AXP806
        - regulator: axp20x: fix DCDC5 and DCDC6 for AXP803
        - HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT
        - MIPS: kernel: only use i8253 clocksource with periodic clockevent
        - mips: fix cacheinfo
        - netfilter: ebtables: fix a memory leak bug in compat
        - ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks
        - spi: pxa2xx: Balance runtime PM enable/disable on error
        - bpf: sockmap, sock_map_delete needs to use xchg
        - bpf: sockmap, synchronize_rcu before free'ing map
        - bpf: sockmap, only create entry if ulp is not already enabled
        - ASoC: dapm: fix a memory leak bug
        - bonding: Force slave speed check after link state recovery for 802.3ad
        - can: dev: call netif_carrier_off() in register_candev()
        - ASoC: Fail card instantiation if DAI format setup fails
        - st21nfca_connectivity_event_received: null check the allocation
        - st_nci_hci_connectivity_event_received: null check the allocation
        - {nl,mac}80211: fix interface combinations on crypto controlled devices
        - ASoC: ti: davinci-mcasp: Fix clk PDIR handling for i2s master mode
        - ASoC: ti: davinci-mcasp: Correct slot_width posed constraint
        - net: usb: qmi_wwan: Add the BroadMobi BM818 card
        - qed: RDMA - Fix the hw_ver returned in device attributes
        - isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in
          start_isoc_chain()
        - net: stmmac: manage errors returned by of_get_mac_address()
        - netfilter: ipset: Fix rename concurrency with listing
        - nvmem: Use the same permissions for eeprom as for nvmem
        - iwlwifi: mvm: avoid races in rate init and rate perform
        - iwlwifi: dbg_ini: move iwl_dbg_tlv_load_bin out of debug override ifdef
        - iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
        - iwlwifi: fix locking in delayed GTK setting
        - iwlwifi: mvm: send LQ command always ASYNC
        - isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack
        - perf bench numa: Fix cpu0 binding
        - spi: pxa2xx: Add support for Intel Comet Lake
        - spi: pxa2xx: Add support for Intel Tiger Lake
        - can: sja1000: force the string buffer NULL-terminated
        - can: peak_usb: force the string buffer NULL-terminated
        - net/ethernet/qlogic/qed: force the string buffer NULL-terminated
        - NFSv4: Fix a credential refcount leak in nfs41_check_delegation_stateid
        - NFSv4: When recovering state fails with EAGAIN, retry the same recovery
        - NFSv4.1: Fix open stateid recovery
        - NFSv4.1: Only reap expired delegations
        - NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim()
        - HID: input: fix a4tech horizontal wheel custom usage
        - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL
        - sched/deadline: Fix double accounting of rq/running bw in push & pull
        - s390/mm: fix dump_pagetables top level page table walking
        - ata: rb532_cf: Fix unused variable warning in rb532_pata_driver_probe
        - net: cxgb3_main: Fix a resource leak in a error path in 'init_one()'
        - drm/amdgpu: pin the csb buffer on hw init for gfx v8
        - net: hisilicon: make hip04_tx_reclaim non-reentrant
        - net: hisilicon: fix hip04-xmit never return TX_BUSY
        - net: hisilicon: Fix dma_map_single failed on arm64
        - NFSv4: Ensure state recovery handles ETIMEDOUT correctly
        - libata: have ata_scsi_rw_xlat() fail invalid passthrough requests
        - libata: add SG safety checks in SFF pio transfers
        - x86/lib/cpu: Address missing prototypes warning
        - drm/vmwgfx: fix memory leak when too many retries have occurred
        - block: aoe: Fix kernel crash due to atomic sleep when exiting
        - perf ftrace: Fix failure to set cpumask when only one cpu is present
        - perf cpumap: Fix writing to illegal memory in handling cpumap mask
        - perf pmu-events: Fix missing "cpu_clk_unhalted.core" event
        - selftests: kvm: Adding config fragments
        - HID: wacom: correct misreported EKR ring values
        - HID: wacom: Correct distance scale for 2nd-gen Intuos devices
        - Revert "dm bufio: fix deadlock with loop device"
        - ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply
        - libceph: fix PG split vs OSD (re)connect race
        - drm/nouveau: Don't retry infinitely when receiving no data on i2c over AUX
        - gpiolib: never report open-drain/source lines as 'input' to user-space
        - userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx
        - x86/retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386
        - x86/apic: Handle missing global clockevent gracefully
        - x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h
        - x86/boot: Save fields explicitly, zero out everything else
        - x86/boot: Fix boot regression caused by bootparam sanitizing
        - dm kcopyd: always complete failed jobs
        - dm btree: fix order of block initialization in btree_split_beneath
        - dm space map metadata: fix missing store of apply_bops() return value
        - dm table: fix invalid memory accesses with too high sector number
        - dm zoned: improve error handling in reclaim
        - dm zoned: improve error handling in i/o map code
        - dm zoned: properly handle backing device failure
        - genirq: Properly pair kobject_del() with kobject_add()
        - mm, page_alloc: move_freepages should not examine struct page of reserved
          memory
        - mm, page_owner: handle THP splits correctly
        - mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely
        - mm/zsmalloc.c: fix race condition in zs_destroy_pool
        - mm/kasan: fix false positive invalid-free reports with
          CONFIG_KASAN_SW_TAGS=y
        - xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT
        - dm zoned: fix potential NULL dereference in dmz_do_reclaim()
        - powerpc: Allow flush_(inval_)dcache_range to work across ranges >4GB
    
      * Disco update: upstream stable patchset 2019-08-29 (LP: #1841994)
        - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
        - gcc-9: don't warn about uninitialized variable
        - driver core: Establish order of operations for device_add and device_del via
          bitflag
        - drivers/base: Introduce kill_device()
        - libnvdimm/bus: Prevent duplicate device_unregister() calls
        - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant
        - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock
        - HID: wacom: fix bit shift for Cintiq Companion 2
        - HID: Add quirk for HP X1200 PIXART OEM mouse
        - atm: iphase: Fix Spectre v1 vulnerability
        - bnx2x: Disable multi-cos feature.
        - ife: error out when nla attributes are empty
        - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6
        - ip6_tunnel: fix possible use-after-free on xmit
        - ipip: validate header length in ipip_tunnel_xmit
        - mlxsw: spectrum: Fix error path in mlxsw_sp_module_init()
        - mvpp2: fix panic on module removal
        - mvpp2: refactor MTU change code
        - net: bridge: delete local fdb on device init failure
        - net: bridge: mcast: don't delete permanent entries when fast leave is
          enabled
        - net: fix ifindex collision during namespace removal
        - net/mlx5e: always initialize frag->last_in_page
        - net/mlx5: Use reversed order when unregister devices
        - net: phylink: Fix flow control for fixed-link
        - net: qualcomm: rmnet: Fix incorrect UL checksum offload logic
        - net: sched: Fix a possible null-pointer dereference in dequeue_func()
        - net sched: update vlan action for batched events operations
        - net: sched: use temporary variable for actions indexes
        - net/smc: do not schedule tx_work in SMC_CLOSED state
        - NFC: nfcmrvl: fix gpio-handling regression
        - ocelot: Cancel delayed work before wq destruction
        - tipc: compat: allow tipc commands without arguments
        - tun: mark small packets as owned by the tap sock
        - net/mlx5: Fix modify_cq_in alignment
        - net/mlx5e: Prevent encap flow counter update async to user query
        - r8169: don't use MSI before RTL8168d
        - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
        - cgroup: Call cgroup_release() before __exit_signal()
        - cgroup: Implement css_task_iter_skip()
        - cgroup: Include dying leaders with live threads in PROCS iterations
        - cgroup: css_task_iter_skip()'d iterators must be advanced before accessed
        - cgroup: Fix css_task_iter_advance_css_set() cset skip condition
        - spi: bcm2835: Fix 3-wire mode if DMA is enabled
        - ALSA: usb-audio: Sanity checks for each pipe and EP types
        - ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
        - drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case
        - net: phylink: don't start and stop SGMII PHYs in SFP modules twice
        - net: phy: mscc: initialize stats array
        - bpf: fix XDP vlan selftests test_xdp_vlan.sh
        - selftests/bpf: add wrapper scripts for test_xdp_vlan.sh
        - selftests/bpf: reduce time to execute test_xdp_vlan.sh
        - net: fix bpf_xdp_adjust_head regression for generic-XDP
        - hv_sock: Fix hang when a connection is closed
        - iio: cros_ec_accel_legacy: Fix incorrect channel setting
        - iio: adc: max9611: Fix misuse of GENMASK macro
        - staging: gasket: apex: fix copy-paste typo
        - staging: android: ion: Bail out upon SIGKILL when allocating memory.
        - crypto: ccp - Fix oops by properly managing allocated structures
        - crypto: ccp - Add support for valid authsize values less than 16
        - crypto: ccp - Ignore tag length when decrypting GCM ciphertext
        - usb: usbfs: fix double-free of usb memory upon submiturb error
        - usb: iowarrior: fix deadlock on disconnect
        - sound: fix a memory leak bug
        - mmc: cavium: Set the correct dma max segment size for mmc_host
        - mmc: cavium: Add the missing dma unmap when the dma has finished.
        - loop: set PF_MEMALLOC_NOIO for the worker thread
        - Input: usbtouchscreen - initialize PM mutex before using it
        - Input: elantech - enable SMBus on new (2018+) systems
        - Input: synaptics - enable RMI mode for HP Spectre X360
        - perf annotate: Fix s390 gap between kernel end and module start
        - perf db-export: Fix thread__exec_comm()
        - perf record: Fix module size on s390
        - x86/purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS
        - gfs2: gfs2_walk_metadata fix
        - usb: host: xhci-rcar: Fix timeout in xhci_suspend()
        - usb: yurex: Fix use-after-free in yurex_delete
        - usb: typec: tcpm: free log buf memory when remove debug file
        - usb: typec: tcpm: remove tcpm dir if no children
        - usb: typec: tcpm: Add NULL check before dereferencing config
        - usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests
        - can: rcar_canfd: fix possible IRQ storm on high load
        - can: peak_usb: fix potential double kfree_skb()
        - netfilter: nfnetlink: avoid deadlock due to synchronous request_module
        - vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn
        - netfilter: Fix rpfilter dropping vrf packets by mistake
        - netfilter: conntrack: always store window size un-scaled
        - netfilter: nft_hash: fix symhash with modulus one
        - scripts/sphinx-pre-install: fix script for RHEL/CentOS
        - drm/amd/display: Wait for backlight programming completion in set backlight
          level
        - drm/amd/display: use encoder's engine id to find matched free audio device
        - drm/amd/display: Fix dc_create failure handling and 666 color depths
        - drm/amd/display: Only enable audio if speaker allocation exists
        - drm/amd/display: Increase size of audios array
        - iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND
        - nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN
        - mac80211: don't warn about CW params when not using them
        - allocate_flower_entry: should check for null deref
        - hwmon: (nct6775) Fix register address and added missed tolerance for nct6106
        - drm: silence variable 'conn' set but not used
        - cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init()
        - s390/qdio: add sanity checks to the fast-requeue path
        - ALSA: compress: Fix regression on compressed capture streams
        - ALSA: compress: Prevent bypasses of set_params
        - ALSA: compress: Don't allow paritial drain operations on capture streams
        - ALSA: compress: Be more restrictive about when a drain is allowed
        - perf tools: Fix proper buffer size for feature processing
        - perf probe: Avoid calling freeing routine multiple times for same pointer
        - drbd: dynamically allocate shash descriptor
        - ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id()
        - ARM: davinci: fix sleep.S build error on ARMv4
        - ARM: dts: bcm: bcm47094: add missing #cells for mdio-bus-mux
        - scsi: megaraid_sas: fix panic on loading firmware crashdump
        - scsi: ibmvfc: fix WARN_ON during event pool release
        - scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG
        - test_firmware: fix a memory leak bug
        - tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop
        - perf/core: Fix creating kernel counters for PMUs that override event->cpu
        - s390/dma: provide proper ARCH_ZONE_DMA_BITS value
        - HID: sony: Fix race condition between rumble and device remove.
        - x86/purgatory: Do not use __builtin_memcpy and __builtin_memset
        - ALSA: usb-audio: fix a memory leak bug
        - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
        - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
        - hwmon: (nct7802) Fix wrong detection of in4 presence
        - drm/i915: Fix wrong escape clock divisor init for GLK
        - ALSA: firewire: fix a memory leak bug
        - ALSA: hiface: fix multiple memory leak bugs
        - ALSA: hda - Don't override global PCM hw info flag
        - ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457)
        - mac80211: don't WARN on short WMM parameters from AP
        - dax: dax_layout_busy_page() should not unmap cow pages
        - SMB3: Fix deadlock in validate negotiate hits reconnect
        - smb3: send CAP_DFS capability during session setup
        - NFSv4: Fix an Oops in nfs4_do_setattr
        - KVM: Fix leak vCPU's VMCS value into other pCPU
        - mwifiex: fix 802.11n/WPA detection
        - iwlwifi: don't unmap as page memory that was mapped as single
        - iwlwifi: mvm: fix an out-of-bound access
        - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41
        - iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support
        - iio: adc: gyroadc: fix uninitialized return code
        - staging: wilc1000: flush the workqueue before deinit the host
        - can: flexcan: fix stop mode acknowledgment
        - can: flexcan: fix an use-after-free in flexcan_setup_stop_mode()
        - powerpc: fix off by one in max_zone_pfn initialization for ZONE_DMA
        - scripts/sphinx-pre-install: don't use LaTeX with CentOS 7
        - rq-qos: don't reset has_sleepers on spurious wakeups
        - rq-qos: set ourself TASK_UNINTERRUPTIBLE after we schedule
        - rq-qos: use a mb for got_token
        - drm/amd/display: Clock does not lower in Updateplanes
        - drm/amd/display: fix DMCU hang when going into Modern Standby
        - drm/amd/display: allocate 4 ddc engines for RV2
        - mac80211: fix possible memory leak in ieee80211_assign_beacon
        - hwmon: (occ) Fix division by zero issue
        - ARM: dts: imx6ul: fix clock frequency property name of I2C buses
        - powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails
        - arm64: Force SSBS on context switch
        - arm64: entry: SP Alignment Fault doesn't write to FAR_EL1
        - drm/msm/dpu: Correct dpu encoder spinlock initialization
        - perf script: Fix off by one in brstackinsn IPC computation
        - perf stat: Fix segfault for event group in repeat mode
        - nvme: ignore subnqn for ADATA SX6000LNP
        - nvme: fix memory leak caused by incorrect subsystem free
        - perf/x86: Apply more accurate check on hypervisor platform
        - gen_compile_commands: lower the entry count threshold
        - NFSv4: Fix delegation state recovery
        - NFSv4: Check the return value of update_open_stateid()
        - KVM: arm/arm64: Sync ICH_VMCR_EL2 back when about to block
        - iwlwifi: mvm: fix a use-after-free bug in iwl_mvm_tx_tso_segment
        - sh: kernel: hw_breakpoint: Fix missing break in switch statement
        - seq_file: fix problem when seeking mid-record
        - mm/hmm: fix bad subpage pointer in try_to_unmap_one
        - mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and
          MPOL_MF_STRICT were specified
        - mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind
        - mm/memcontrol.c: fix use after free in mem_cgroup_iter()
        - mm/usercopy: use memory range to be accessed for wraparound check
        - cpufreq: schedutil: Don't skip freq update when limits change
        - xtensa: add missing isync to the cpu_reset TLB code
        - ALSA: hda/realtek - Add quirk for HP Envy x360
        - ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term
        - ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit
        - ALSA: hda - Apply workaround for another AMD chip 1022:1487
        - ALSA: hda - Fix a memory leak bug
        - HID: holtek: test for sanity of intfdata
        - HID: hiddev: avoid opening a disconnected device
        - HID: hiddev: do cleanup in failure of opening a device
        - Input: kbtab - sanity check for endpoint type
        - Input: iforce - add sanity checks
        - net: usb: pegasus: fix improper read if get_registers() fail
        - netfilter: ebtables: also count base chain policies
        - riscv: Make __fstate_clean() work correctly.
        - clk: at91: generated: Truncate divisor to GENERATED_MAX_DIV + 1
        - clk: sprd: Select REGMAP_MMIO to avoid compile errors
        - clk: renesas: cpg-mssr: Fix reset control race condition
        - xen/pciback: remove set but not used variable 'old_state'
        - irqchip/gic-v3-its: Free unused vpt_page when alloc vpe table fail
        - irqchip/irq-imx-gpcv2: Forward irq type to parent
        - perf header: Fix divide by zero error if f_header.attr_size==0
        - perf header: Fix use of unitialized value warning
        - libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
        - drm/bridge: lvds-encoder: Fix build error while CONFIG_DRM_KMS_HELPER=m
        - Btrfs: fix deadlock between fiemap and transaction commits
        - scsi: hpsa: correct scsi command status issue after reset
        - scsi: qla2xxx: Fix possible fcport null-pointer dereferences
        - drm/amdgpu: fix a potential information leaking bug
        - ata: libahci: do not complain in case of deferred probe
        - kbuild: modpost: handle KBUILD_EXTRA_SYMBOLS only for external modules
        - kbuild: Check for unknown options with cc-option usage in Kconfig and clang
        - arm64/efi: fix variable 'si' set but not used
        - arm64: unwind: Prohibit probing on return_address()
        - arm64/mm: fix variable 'pud' set but not used
        - IB/core: Add mitigation for Spectre V1
        - IB/mlx5: Fix MR registration flow to use UMR properly
        - IB/mad: Fix use-after-free in ib mad completion handling
        - drm: msm: Fix add_gpu_components
        - drm/exynos: fix missing decrement of retry counter
        - Revert "kmemleak: allow to coexist with fault injection"
        - ocfs2: remove set but not used variable 'last_hash'
        - asm-generic: fix -Wtype-limits compiler warnings
        - arm64: KVM: regmap: Fix unexpected switch fall-through
        - staging: comedi: dt3000: Fix signed integer overflow 'divider * base'
        - staging: comedi: dt3000: Fix rounding up of timer divisor
        - iio: adc: max9611: Fix temperature reading in probe
        - USB: core: Fix races in character device registration and deregistraion
        - usb: gadget: udc: renesas_usb3: Fix sysfs interface of "role"
        - usb: cdc-acm: make sure a refcount is taken early enough
        - USB: CDC: fix sanity checks in CDC union parser
        - USB: serial: option: add D-Link DWM-222 device ID
        - USB: serial: option: Add support for ZTE MF871A
        - USB: serial: option: add the BroadMobi BM818 card
        - USB: serial: option: Add Motorola modem UARTs
        - arm64: ftrace: Ensure module ftrace trampoline is coherent with I-side
        - netfilter: conntrack: Use consistent ct id hash calculation
        - Input: psmouse - fix build error of multiple definition
        - bnx2x: Fix VF's VLAN reconfiguration in reload.
        - bonding: Add vlan tx offload to hw_enc_features
        - net: dsa: Check existence of .port_mdb_add callback before calling it
        - net/mlx4_en: fix a memory leak bug
        - net/packet: fix race in tpacket_snd()
        - sctp: fix memleak in sctp_send_reset_streams
        - sctp: fix the transport error_count check
        - team: Add vlan tx offload to hw_enc_features
        - tipc: initialise addr_trail_end when setting node addresses
        - xen/netback: Reset nr_frags before freeing skb
        - net/mlx5e: Only support tx/rx pause setting for port owner
        - net/mlx5e: Use flow keys dissector to parse packets for ARFS
        - mm/z3fold.c: fix z3fold_destroy_pool() ordering
        - mm, vmscan: do not special-case slab reclaim when watermarks are boosted
        - drm/amdgpu: fix gfx9 soft recovery
        - riscv: Correct the initialized flow of FP register
        - blk-mq: move cancel of requeue_work to the front of blk_exit_queue
        - IB/mlx5: Replace kfree with kvfree
        - dma-mapping: check pfn validity in dma_common_{mmap,get_sgtable}
        - f2fs: fix to read source block before invalidating it
        - tools perf beauty: Fix usbdevfs_ioctl table generator to handle _IOC()
        - ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
        - drm/bridge: tc358764: Fix build error
        - tracing: Fix header include guards in trace event headers
        - drm/amdkfd: Fix byte align on VegaM
        - RDMA/restrack: Track driver QP types in resource tracker
        - RDMA/mlx5: Release locks during notifier unregister
        - arm64: kprobes: Recover pstate.D in single-step exception handler
        - arm64: Make debug exception handlers visible from RCU
        - page flags: prioritize kasan bits over last-cpuid
        - bnxt_en: Fix VNIC clearing logic for 57500 chips.
        - bnxt_en: Improve RX doorbell sequence.
        - bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
        - bnxt_en: Suppress HWRM errors for HWRM_NVM_GET_VARIABLE command
        - bnxt_en: Use correct src_fid to determine direction of the flow
        - bnxt_en: Fix to include flow direction in L2 key
        - net sched: update skbedit action for batched events operations
        - tc-testing: updated skbedit action tests with batch create/delete
    
      * Disco update: upstream stable patchset 2019-08-27 (LP: #1841681)
        - hv_sock: Add support for delayed close
        - vsock: correct removal of socket from the list
        - ISDN: hfcsusb: checking idx of ep configuration
        - media: au0828: fix null dereference in error path
        - ath10k: Change the warning message string
        - media: cpia2_usb: first wake up, then free in disconnect
        - media: pvrusb2: use a different format for warnings
        - NFS: Cleanup if nfs_match_client is interrupted
        - media: radio-raremono: change devm_k*alloc to k*alloc
        - Bluetooth: hci_uart: check for missing tty operations
        - sched/fair: Don't free p->numa_faults with concurrent readers
        - sched/fair: Use RCU accessors consistently for ->numa_group
        - /proc/<pid>/cmdline: remove all the special cases
        - /proc/<pid>/cmdline: add back the setproctitle() special case
        - drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
        - Fix allyesconfig output.
        - ceph: hold i_ceph_lock when removing caps for freeing inode
        - ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
        - xfrm: policy: fix bydst hlist corruption on hash rebuild
        - nvme: fix multipath crash when ANA is deactivated
        - ARM: riscpc: fix DMA
        - ARM: dts: rockchip: Make rk3288-veyron-minnie run at hs200
        - ARM: dts: rockchip: Make rk3288-veyron-mickey's emmc work again
        - ARM: dts: rockchip: Mark that the rk3288 timer might stop in suspend
        - ftrace: Enable trampoline when rec count returns back to one
        - dmaengine: tegra-apb: Error out if DMA_PREP_INTERRUPT flag is unset
        - arm64: dts: rockchip: fix isp iommu clocks and power domain
        - kernel/module.c: Only return -EEXIST for modules that have finished loading
        - firmware/psci: psci_checker: Park kthreads before stopping them
        - MIPS: lantiq: Fix bitfield masking
        - dmaengine: rcar-dmac: Reject zero-length slave DMA requests
        - clk: tegra210: fix PLLU and PLLU_OUT1
        - fs/adfs: super: fix use-after-free bug
        - clk: sprd: Add check for return value of sprd_clk_regmap_init()
        - btrfs: fix minimum number of chunk errors for DUP
        - btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit()
        - cifs: Fix a race condition with cifs_echo_request
        - ceph: fix improper use of smp_mb__before_atomic()
        - ceph: return -ERANGE if virtual xattr value didn't fit in buffer
        - ACPI: blacklist: fix clang warning for unused DMI table
        - scsi: zfcp: fix GCC compiler warning emitted with -Wmaybe-uninitialized
        - perf version: Fix segfault due to missing OPT_END()
        - x86: kvm: avoid constant-conversion warning
        - ACPI: fix false-positive -Wuninitialized warning
        - be2net: Signal that the device cannot transmit during reconfiguration
        - x86/apic: Silence -Wtype-limits compiler warnings
        - x86: math-emu: Hide clang warnings for 16-bit overflow
        - mm/cma.c: fail if fixed declaration can't be honored
        - lib/test_overflow.c: avoid tainting the kernel and fix wrap size
        - lib/test_string.c: avoid masking memset16/32/64 failures
        - coda: add error handling for fget
        - coda: fix build using bare-metal toolchain
        - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
          headers
        - drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings
        - ipc/mqueue.c: only perform resource calculation if user valid
        - xen/pv: Fix a boot up hang revealed by int3 self test
        - x86/kvm: Don't call kvm_spurious_fault() from .fixup
        - x86/paravirt: Fix callee-saved function ELF sizes
        - x86, boot: Remove multiple copy of static function sanitize_boot_params()
        - drm/nouveau: fix memory leak in nouveau_conn_reset()
        - kconfig: Clear "written" flag to avoid data loss
        - kbuild: initialize CLANG_FLAGS correctly in the top Makefile
        - Btrfs: fix incremental send failure after deduplication
        - Btrfs: fix race leading to fs corruption after transaction abort
        - mmc: dw_mmc: Fix occasional hang after tuning on eMMC
        - mmc: meson-mx-sdio: Fix misuse of GENMASK macro
        - gpiolib: fix incorrect IRQ requesting of an active-low lineevent
        - IB/hfi1: Fix Spectre v1 vulnerability
        - mtd: rawnand: micron: handle on-die "ECC-off" devices correctly
        - selinux: fix memory leak in policydb_init()
        - ALSA: hda: Fix 1-minute detection delay when i915 module is not available
        - mm: vmscan: check if mem cgroup is disabled or not before calling memcg slab
          shrinker
        - s390/dasd: fix endless loop after read unit address configuration
        - cgroup: kselftest: relax fs_spec checks
        - parisc: Fix build of compressed kernel even with debug enabled
        - drivers/perf: arm_pmu: Fix failure path in PM notifier
        - arm64: compat: Allow single-byte watchpoints on all addresses
        - arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
        - nbd: replace kill_bdev() with __invalidate_device() again
        - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
        - IB/mlx5: Fix unreg_umr to ignore the mkey state
        - IB/mlx5: Use direct mkey destroy command upon UMR unreg failure
        - IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache
        - IB/mlx5: Fix clean_mr() to work in the expected order
        - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
        - IB/hfi1: Check for error on call to alloc_rsm_map_table
        - drm/i915/gvt: fix incorrect cache entry for guest page mapping
        - eeprom: at24: make spd world-readable again
        - gcc-9: properly declare the {pv,hv}clock_page storage
        - scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
        - Documentation: Add swapgs description to the Spectre v1 documentation
        - arm64: dts: marvell: mcbin: enlarge PCI memory window
        - PCI: OF: Initialize dev->fwnode appropriately
        - arm64: qcom: qcs404: Add reset-cells to GCC node
        - swiotlb: fix phys_addr_t overflow warning
        - arm64: dts: rockchip: Fix USB3 Type-C on rk3399-sapphire
        - btrfs: Flush before reflinking any extent to prevent NOCOW write falling
          back to COW without data reservation
        - virtio-mmio: add error check for platform_get_irq
        - cifs: fix crash in cifs_dfs_do_automount
        - KVM: nVMX: Ignore segment base for VMX memory operand when segment not FS or
          GS
        - bpf: fix BTF verifier size resolution logic
        - mm/slab_common.c: work around clang bug #42570
        - mm/ioremap: check virtual address alignment while creating huge mappings
        - nds32: fix asm/syscall.h
        - mm/hotplug: make remove_memory() interface usable
        - crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL
        - bpf: Disable GCC -fgcse optimization for ___bpf_prog_run()
        - kbuild: modpost: include .*.cmd files only when targets exist
        - dax: Fix missed wakeup in put_unlocked_entry()
        - fgraph: Remove redundant ftrace_graph_notrace_addr() test
        - mmc: host: sdhci-sprd: Fix the missing pm_runtime_put_noidle()
        - mmc: mmc_spi: Enable stable writes
        - gpiolib: Preserve desc->flags when setting state
        - gpio: don't WARN() on NULL descs if gpiolib is disabled
        - i2c: at91: disable TXRDY interrupt after sending data
        - i2c: at91: fix clk_offset for sama5d2
        - mm: migrate: fix reference check race between __find_get_block() and
          migration
        - mm/migrate.c: initialize pud_entry in migrate_vma()
        - parisc: Add archclean Makefile target
        - parisc: Strip debug info from kernel before creating compressed vmlinuz
        - RDMA/bnxt_re: Honor vlan_id in GID entry comparison
        - drm/i915/perf: fix ICL perf register offsets
    
      * Disco update: upstream stable patchset 2019-08-22 (LP: #1841121)
        - hvsock: fix epollout hang from race condition
        - drm/panel: simple: Fix panel_simple_dsi_probe
        - iio: adc: stm32-dfsdm: manage the get_irq error case
        - iio: adc: stm32-dfsdm: missing error case during probe
        - staging: vt6656: use meaningful error code during buffer allocation
        - usb: core: hub: Disable hub-initiated U1/U2
        - tty: max310x: Fix invalid baudrate divisors calculator
        - pinctrl: rockchip: fix leaked of_node references
        - tty: serial: cpm_uart - fix init when SMC is relocated
        - drm/amd/display: Fill prescale_params->scale for RGB565
        - drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE
        - drm/amd/display: Disable ABM before destroy ABM struct
        - drm/amdkfd: Fix a potential memory leak
        - drm/amdkfd: Fix sdma queue map issue
        - drm/edid: Fix a missing-check bug in drm_load_edid_firmware()
        - PCI: Return error if cannot probe VF
        - drm/bridge: tc358767: read display_props in get_modes()
        - drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz
        - gpu: host1x: Increase maximum DMA segment size
        - drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry
        - drm/crc-debugfs: Also sprinkle irqrestore over early exits
        - memstick: Fix error cleanup path of memstick_init
        - tty/serial: digicolor: Fix digicolor-usart already registered warning
        - tty: serial: msm_serial: avoid system lockup condition
        - serial: 8250: Fix TX interrupt handling condition
        - drm/amd/display: Always allocate initial connector state state
        - drm/virtio: Add memory barriers for capset cache.
        - phy: renesas: rcar-gen2: Fix memory leak at error paths
        - drm/amd/display: fix compilation error
        - powerpc/pseries/mobility: prevent cpu hotplug during DT update
        - drm/rockchip: Properly adjust to a true clock in adjusted_mode
        - serial: imx: fix locking in set_termios()
        - tty: serial_core: Set port active bit in uart_port_activate
        - usb: gadget: Zero ffs_io_data
        - mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width
        - powerpc/pci/of: Fix OF flags parsing for 64bit BARs
        - drm/msm: Depopulate platform on probe failure
        - serial: mctrl_gpio: Check if GPIO property exisits before requesting it
        - PCI: sysfs: Ignore lockdep for remove attribute
        - i2c: stm32f7: fix the get_irq error cases
        - kbuild: Add -Werror=unknown-warning-option to CLANG_FLAGS
        - genksyms: Teach parser about 128-bit built-in types
        - PCI: xilinx-nwl: Fix Multi MSI data programming
        - iio: iio-utils: Fix possible incorrect mask calculation
        - powerpc/cacheflush: fix variable set but not used
        - powerpc/xmon: Fix disabling tracing while in xmon
        - recordmcount: Fix spurious mcount entries on powerpc
        - mfd: madera: Add missing of table registration
        - mfd: core: Set fwnode for created devices
        - mfd: arizona: Fix undefined behavior
        - mfd: hi655x-pmic: Fix missing return value check for
          devm_regmap_init_mmio_clk
        - mm/swap: fix release_pages() when releasing devmap pages
        - um: Silence lockdep complaint about mmap_sem
        - powerpc/4xx/uic: clear pending interrupt after irq type/pol change
        - RDMA/i40iw: Set queue pair state when being queried
        - serial: sh-sci: Terminate TX DMA during buffer flushing
        - serial: sh-sci: Fix TX DMA buffer flushing and workqueue races
        - IB/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE
        - powerpc/mm: Handle page table allocation failures
        - IB/ipoib: Add child to parent list only if device initialized
        - arm64: assembler: Switch ESB-instruction with a vanilla nop if
          !ARM64_HAS_RAS
        - PCI: mobiveil: Fix PCI base address in MEM/IO outbound windows
        - PCI: mobiveil: Fix the Class Code field
        - kallsyms: exclude kasan local symbols on s390
        - PCI: mobiveil: Initialize Primary/Secondary/Subordinate bus numbers
        - PCI: mobiveil: Use the 1st inbound window for MEM inbound transactions
        - perf test mmap-thread-lookup: Initialize variable to suppress memory
          sanitizer warning
        - perf stat: Fix use-after-freed pointer detected by the smatch tool
        - perf top: Fix potential NULL pointer dereference detected by the smatch tool
        - perf session: Fix potential NULL pointer dereference found by the smatch
          tool
        - perf annotate: Fix dereferencing freed memory found by the smatch tool
        - perf hists browser: Fix potential NULL pointer dereference found by the
          smatch tool
        - RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM
        - PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB
        - powerpc/boot: add {get, put}_unaligned_be32 to xz_config.h
        - block: init flush rq ref count to 1
        - f2fs: avoid out-of-range memory access
        - mailbox: handle failed named mailbox channel request
        - dlm: check if workqueues are NULL before flushing/destroying
        - powerpc/eeh: Handle hugepages in ioremap space
        - block/bio-integrity: fix a memory leak bug
        - sh: prevent warnings when using iounmap
        - mm/kmemleak.c: fix check for softirq context
        - 9p: pass the correct prototype to read_cache_page
        - mm/gup.c: mark undo_dev_pagemap as __maybe_unused
        - mm/gup.c: remove some BUG_ONs from get_gate_page()
        - memcg, fsnotify: no oom-kill for remote memcg charging
        - mm/mmu_notifier: use hlist_add_head_rcu()
        - proc: use down_read_killable mmap_sem for /proc/pid/smaps_rollup
        - proc: use down_read_killable mmap_sem for /proc/pid/pagemap
        - proc: use down_read_killable mmap_sem for /proc/pid/clear_refs
        - proc: use down_read_killable mmap_sem for /proc/pid/map_files
        - cxgb4: reduce kernel stack usage in cudbg_collect_mem_region()
        - proc: use down_read_killable mmap_sem for /proc/pid/maps
        - locking/lockdep: Fix lock used or unused stats error
        - mm: use down_read_killable for locking mmap_sem in access_remote_vm
        - locking/lockdep: Hide unused 'class' variable
        - usb: wusbcore: fix unbalanced get/put cluster_id
        - usb: pci-quirks: Correct AMD PLL quirk detection
        - btrfs: inode: Don't compress if NODATASUM or NODATACOW set
        - x86/sysfb_efi: Add quirks for some devices with swapped width and height
        - x86/speculation/mds: Apply more accurate check on hypervisor platform
        - binder: prevent transactions to context manager from its own process.
        - fpga-manager: altera-ps-spi: Fix build error
        - mei: me: add mule creek canyon (EHL) device ids
        - hpet: Fix division by zero in hpet_time_div()
        - ALSA: ac97: Fix double free of ac97_codec_device
        - powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask()
        - libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl()
        - access: avoid the RCU grace period for the temporary subjective credentials
        - regulator: 88pm800: fix warning same module names
        - media: drivers: media: coda: fix warning same module names
        - btrfs: shut up bogus -Wmaybe-uninitialized warning
        - drm/virtio: set seqno for dma-fence
        - ipmi_si: fix unexpected driver unregister warning
        - drm/bochs: Fix connector leak during driver unload
        - drm/msm/a6xx: Check for ERR or NULL before iounmap
        - ipmi:ssif: Only unregister the platform driver if it was registered
        - ipmi_ssif: fix unexpected driver unregister warning
        - drm/amd/display: Disable cursor when offscreen in negative direction
        - drm/amdgpu: Reserve shared fence for eviction fence
        - f2fs: fix to avoid deadloop if data_flush is on
        - tools: PCI: Fix broken pcitest compilation
        - drm/amd/display: Increase Backlight Gain Step Size
        - f2fs: Fix accounting for unusable blocks
        - f2fs: Lower threshold for disable_cp_again
        - drm/vkms: Forward timer right after drm_crtc_handle_vblank
        - i2c: nvidia-gpu: resume ccgx i2c client
        - PCI: endpoint: Allocate enough space for fixed size BAR
        - dma-remap: Avoid de-referencing NULL atomic_pool
        - platform/x86: asus-wmi: Increase input buffer size of WMI methods
        - iio: adxl372: fix iio_triggered_buffer_{pre,post}enable positions
        - serial: uartps: Use the same dynamic major number for all ports
        - kvm: vmx: fix limit checking in get_vmx_mem_address()
        - KVM: nVMX: Intercept VMWRITEs to GUEST_{CS,SS}_AR_BYTES
        - kvm: vmx: segment limit check: use access length
        - powerpc/rtas: retry when cpu offline races with suspend/migration
        - fixdep: check return value of printf() and putchar()
        - KVM: nVMX: Stash L1's CR3 in vmcs01.GUEST_CR3 on nested entry w/o EPT
        - perf trace: Fix potential NULL pointer dereference found by the smatch tool
        - perf map: Fix potential NULL pointer dereference found by smatch tool
        - perf intel-bts: Fix potential NULL pointer dereference found by the smatch
          tool
        - RDMA/core: Fix race when resolving IP address
        - nvme-pci: check for NULL return from pci_alloc_p2pmem()
        - nvme-pci: limit max_hw_sectors based on the DMA max mapping size
        - nvme-tcp: don't use sendpage for SLAB pages
        - nvme-tcp: set the STABLE_WRITES flag when data digests are enabled
        - powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
        - nvme: fix NULL deref for fabrics options
        - mm/mincore.c: fix race between swapoff and mincore
        - mm, swap: fix race between swapoff and some swap operations
        - usb-storage: Add a limitation for blk_queue_max_hw_sectors()
        - KVM: PPC: Book3S HV: Always save guest pmu for guest capable of nesting
        - KVM: PPC: Book3S HV: Save and restore guest visible PSSCR bits on pseries
        - selinux: check sidtab limit before adding a new entry
        - x86/stacktrace: Prevent access_ok() warnings in arch_stack_walk_user()
        - eeprom: make older eeprom drivers select NVMEM_SYSFS
        - drm/panel: Add support for Armadeus ST0700 Adapt
        - ALSA: hda - Fix intermittent CORB/RIRB stall on Intel chips
        - powerpc/mm: Limit rma_size to 1TB when running without HV mode
        - powerpc/pmu: Set pmcregs_in_use in paca when running as LPAR
        - iommu/vt-d: Don't queue_iova() if there is no flush queue
        - iommu/iova: Remove stale cached32_node
        - iommu/iova: Fix compilation error with !CONFIG_IOMMU_IOVA
        - libnvdimm/region: Register badblocks before namespaces
    
      * Line 6 POD HD500 driver fault (LP: #1790595) // Disco update: upstream
        stable patchset 2019-08-22 (LP: #1841121)
        - ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1
    
      * Disco update: upstream stable patchset 2019-08-21 (LP: #1840961)
        - bnx2x: Prevent load reordering in tx completion processing
        - caif-hsi: fix possible deadlock in cfhsi_exit_module()
        - hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback()
        - igmp: fix memory leak in igmpv3_del_delrec()
        - ipv4: don't set IPv6 only flags to IPv4 addresses
        - ipv6: rt6_check should return NULL if 'from' is NULL
        - ipv6: Unlink sibling route in case of failure
        - net: bcmgenet: use promisc for unsupported filters
        - net: dsa: mv88e6xxx: wait after reset deactivation
        - net: make skb_dst_force return true when dst is refcounted
        - net: neigh: fix multiple neigh timer scheduling
        - net: openvswitch: fix csum updates for MPLS actions
        - net: phy: sfp: hwmon: Fix scaling of RX power
        - net: stmmac: Re-work the queue selection for TSO packets
        - nfc: fix potential illegal memory access
        - r8169: fix issue with confused RX unit after PHY power-down on RTL8411b
        - rxrpc: Fix send on a connected, but unbound socket
        - sctp: fix error handling on stream scheduler initialization
        - sky2: Disable MSI on ASUS P6T
        - tcp: be more careful in tcp_fragment()
        - tcp: fix tcp_set_congestion_control() use from bpf hook
        - tcp: Reset bytes_acked and bytes_received when disconnecting
        - vrf: make sure skb->data contains ip header to make routing
        - net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn
        - macsec: fix use-after-free of skb during RX
        - macsec: fix checksumming after decryption
        - netrom: fix a memory leak in nr_rx_frame()
        - netrom: hold sock when setting skb->destructor
        - net_sched: unset TCQ_F_CAN_BYPASS when adding filters
        - net/tls: make sure offload also gets the keys wiped
        - sctp: not bind the socket in sctp_connect
        - net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
        - net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
        - net: bridge: don't cache ether dest pointer on input
        - net: bridge: stp: don't cache eth dest pointer before skb pull
        - dma-buf: balance refcount inbalance
        - dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc
        - gpio: davinci: silence error prints in case of EPROBE_DEFER
        - MIPS: lb60: Fix pin mappings
        - perf/core: Fix exclusive events' grouping
        - perf/core: Fix race between close() and fork()
        - ext4: don't allow any modifications to an immutable file
        - ext4: enforce the immutable flag on open files
        - mm: add filemap_fdatawait_range_keep_errors()
        - jbd2: introduce jbd2_inode dirty range scoping
        - ext4: use jbd2_inode dirty range scoping
        - ext4: allow directory holes
        - KVM: nVMX: do not use dangling shadow VMCS after guest reset
        - KVM: nVMX: Clear pending KVM_REQ_GET_VMCS12_PAGES when leaving nested
        - mm: vmscan: scan anonymous pages on file refaults
        - net: sched: verify that q!=NULL before setting q->flags
        - selftests: txring_overwrite: fix incorrect test of mmap() return value
        - net/tls: reject offload of TLS 1.3
        - net/mlx5e: Rx, Fix checksum calculation for new hardware
        - gpiolib: of: fix a memory leak in of_gpio_flags_quirks()
        - sd_zbc: Fix report zones buffer allocation
        - block: Limit zone array allocation size
        - bnxt_en: Fix VNIC accounting when enabling aRFS on 57500 chips.
        - mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed
        - mlxsw: spectrum: Do not process learned records with a dummy FID
        - Revert "kvm: x86: Use task structs fpu field for user"
    
      * Disco update: upstream stable patchset 2019-08-19 (LP: #1840718)
        - Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
        - Bluetooth: Fix regression with minimum encryption key size alignment
        - Bluetooth: Fix faulty expression for minimum encryption key size check
        - netfilter: nf_flow_table: ignore DF bit setting
        - netfilter: nft_flow_offload: set liberal tracking mode for tcp
        - netfilter: nft_flow_offload: don't offload when sequence numbers need
          adjustment
        - netfilter: nft_flow_offload: IPCB is only valid for ipv4 family
        - ASoC : cs4265 : readable register too low
        - ASoC: ak4458: add return value for ak4458_probe
        - ASoC: soc-pcm: BE dai needs prepare when pause release after resume
        - ASoC: ak4458: rstn_control - return a non-zero on error only
        - spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
        - drm/mediatek: fix unbind functions
        - drm/mediatek: unbind components in mtk_drm_unbind()
        - drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver
        - drm/mediatek: clear num_pipes when unbind driver
        - drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable()
        - ASoC: max98090: remove 24-bit format support if RJ is 0
        - ASoC: sun4i-i2s: Fix sun8i tx channel offset mask
        - ASoC: sun4i-i2s: Add offset to RX channel select
        - x86/CPU: Add more Icelake model numbers
        - usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i]
        - usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC
        - ALSA: hdac: fix memory release for SST and SOF drivers
        - SoC: rt274: Fix internal jack assignment in set_jack callback
        - scsi: hpsa: correct ioaccel2 chaining
        - drm: panel-orientation-quirks: Add quirk for GPD pocket2
        - drm: panel-orientation-quirks: Add quirk for GPD MicroPC
        - platform/x86: intel-vbtn: Report switch events when event wakes device
        - platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device
          registration
        - platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow
        - i2c: pca-platform: Fix GPIO lookup code
        - cpuset: restore sanity to cpuset_cpus_allowed_fallback()
        - scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE
        - mm/mlock.c: change count_mm_mlocked_page_nr return type
        - tracing: avoid build warning with HAVE_NOP_MCOUNT
        - module: Fix livepatch/ftrace module text permissions race
        - ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper()
        - crypto: user - prevent operating on larval algorithms
        - crypto: cryptd - Fix skcipher instance memory leak
        - ALSA: seq: fix incorrect order of dest_client/dest_ports arguments
        - ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages
        - ALSA: line6: Fix write on zero-sized buffer
        - ALSA: usb-audio: fix sign unintended sign extension on left shifts
        - ALSA: hda/realtek: Add quirks for several Clevo notebook barebones
        - ALSA: hda/realtek - Change front mic location for Lenovo M710q
        - lib/mpi: Fix karactx leak in mpi_powm
        - fs/userfaultfd.c: disable irqs for fault_pending and event locks
        - tracing/snapshot: Resize spare buffer if size changed
        - ARM: dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node
        - arm64: kaslr: keep modules inside module region when KASAN is enabled
        - drm/amd/powerplay: use hardware fan control if no powerplay fan table
        - drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
        - drm/etnaviv: add missing failure path to destroy suballoc
        - drm/imx: notify drm core before sending event during crtc disable
        - drm/imx: only send event on crtc disable if kept disabled
        - ftrace/x86: Remove possible deadlock between register_kprobe() and
          ftrace_run_update_code()
        - mm/vmscan.c: prevent useless kswapd loops
        - btrfs: Ensure replaced device doesn't have pending chunk allocation
        - tty: rocket: fix incorrect forward declaration of 'rp_init()'
        - net/smc: move unhash before release of clcsock
        - media: s5p-mfc: fix incorrect bus assignment in virtual child device
        - drm/fb-helper: generic: Don't take module ref for fbcon
        - f2fs: don't access node/meta inode mapping after iput
        - ALSA: hda: Initialize power_state field properly
        - ip6: fix skb leak in ip6frag_expire_frag_queue()
        - net: IP defrag: encapsulate rbtree defrag code into callable functions
        - net: IP6 defrag: use rbtrees for IPv6 defrag
        - net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
        - netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
        - sc16is7xx: move label 'err_spi' to correct section
        - netfilter: ipv6: nf_defrag: accept duplicate fragments again
        - KVM: x86: degrade WARN to pr_warn_ratelimited
        - KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC
        - nfsd: Fix overflow causing non-working mounts on 1 TB machines
        - svcrdma: Ignore source port when computing DRC hash
        - MIPS: Fix bounds check virt_addr_valid
        - MIPS: Add missing EHB in mtc0 -> mfc0 sequence.
        - MIPS: have "plain" make calls build dtbs for selected platforms
        - dmaengine: qcom: bam_dma: Fix completed descriptors count
        - dmaengine: imx-sdma: remove BD_INTR for channel0
        - signal: remove the wrong signal_pending() check in restore_user_sigmask()
        - idr: Fix idr_get_next race with idr_remove
        - ASoC: core: lock client_mutex while removing link components
        - iommu/vt-d: Set the right field for Page Walk Snoop
        - HID: a4tech: fix horizontal scrolling
        - ASoC: hda: fix unbalanced codec dev refcount for HDA_DEV_ASOC
        - gpio: pca953x: hack to fix 24 bit gpio expanders
        - ASoC: Intel: sst: fix kmalloc call with wrong flags
        - arm64: tlbflush: Ensure start/end of address range are aligned to stride
        - dax: Fix xarray entry association for mixed mappings
        - swap_readpage(): avoid blk_wake_io_task() if !synchronous
        - drm/virtio: move drm_connector_update_edid_property() call
        - s390/mm: fix pxd_bad with folded page tables
        - dmaengine: jz4780: Fix an endian bug in IRQ handler
        - scsi: target/iblock: Fix overrun in WRITE SAME emulation
        - crypto: talitos - rename alternative AEAD algos.
        - soc: brcmstb: Fix error path for unsupported CPUs
        - soc: bcm: brcmstb: biuctrl: Register writes require a barrier
        - samples, bpf: fix to change the buffer size for read()
        - samples, bpf: suppress compiler warning
        - mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he()
        - bpf: sockmap, fix use after free from sleep in psock backlog workqueue
        - soundwire: stream: fix out of boundary access on port properties
        - staging:iio:ad7150: fix threshold mode config bit
        - mac80211: mesh: fix RCU warning
        - mac80211: free peer keys before vif down in mesh
        - iwlwifi: Fix double-free problems in iwl_req_fw_callback()
        - soundwire: intel: set dai min and max channels correctly
        - dt-bindings: can: mcp251x: add mcp25625 support
        - can: mcp251x: add support for mcp25625
        - can: m_can: implement errata "Needless activation of MRAF irq"
        - can: af_can: Fix error path of can_init()
        - ibmvnic: Do not close unopened driver during reset
        - ibmvnic: Refresh device multicast list after reset
        - ibmvnic: Fix unchecked return codes of memory allocations
        - ARM: dts: am335x phytec boards: Fix cd-gpios active level
        - s390/boot: disable address-of-packed-member warning
        - drm/vmwgfx: Honor the sg list segment size limitation
        - drm/vmwgfx: fix a warning due to missing dma_parms
        - riscv: Fix udelay in RV32.
        - Input: imx_keypad - make sure keyboard can always wake up system
        - KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
        - mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed
        - ARM: davinci: da850-evm: call regulator_has_full_constraints()
        - ARM: davinci: da8xx: specify dma_coherent_mask for lcdc
        - mac80211: only warn once on chanctx_conf being NULL
        - mac80211: do not start any work during reconfigure flow
        - bpf, devmap: Fix premature entry free on destroying map
        - bpf, devmap: Add missing bulk queue free
        - bpf, devmap: Add missing RCU read lock on flush
        - bpf, x64: fix stack layout of JITed bpf code
        - qmi_wwan: add support for QMAP padding in the RX path
        - qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode
        - qmi_wwan: extend permitted QMAP mux_id value range
        - mmc: core: complete HS400 before checking status
        - md: fix for divide error in status_resync
        - bnx2x: Check if transceiver implements DDM before access
        - drm: return -EFAULT if copy_to_user() fails
        - ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
        - net: lio_core: fix potential sign-extension overflow on large shift
        - scsi: qedi: Check targetname while finding boot target information
        - quota: fix a problem about transfer quota
        - net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge()
        - NFS4: Only set creation opendata if O_CREAT
        - net :sunrpc :clnt :Fix xps refcount imbalance on the error path
        - fscrypt: don't set policy for a dead directory
        - udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
        - media: stv0297: fix frequency range limit
        - ALSA: usb-audio: Fix parse of UAC2 Extension Units
        - ALSA: hda/realtek - Headphone Mic can't record after S3
        - block, bfq: NULL out the bic when it's no longer valid
        - perf pmu: Fix uncore PMU alias list for ARM64
        - x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
        - x86/tls: Fix possible spectre-v1 in do_get_thread_area()
        - Documentation: Add section about CPU vulnerabilities for Spectre
        - Documentation/admin: Remove the vsyscall=native documentation
        - mwifiex: Abort at too short BSS descriptor element
        - mwifiex: Don't abort on small, spec-compliant vendor IEs
        - USB: serial: ftdi_sio: add ID for isodebug v1
        - USB: serial: option: add support for GosunCn ME3630 RNDIS mode
        - Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
        - p54usb: Fix race between disconnect and firmware loading
        - usb: gadget: ether: Fix race between gether_disconnect and rx_submit
        - usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset()
        - usb: renesas_usbhs: add a workaround for a race condition of workqueue
        - drivers/usb/typec/tps6598x.c: fix portinfo width
        - drivers/usb/typec/tps6598x.c: fix 4CC cmd write
        - staging: comedi: dt282x: fix a null pointer deref on interrupt
        - staging: comedi: amplc_pci230: fix null pointer deref on interrupt
        - HID: Add another Primax PIXART OEM mouse quirk
        - lkdtm: support llvm-objcopy
        - binder: fix memory leak in error path
        - carl9170: fix misuse of device driver API
        - VMCI: Fix integer overflow in VMCI handle arrays
        - staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work
        - staging: bcm2835-camera: Replace spinlock protecting context_map with mutex
        - staging: bcm2835-camera: Ensure all buffers are returned on disable
        - staging: bcm2835-camera: Remove check of the number of buffers supplied
        - staging: bcm2835-camera: Handle empty EOS buffers whilst streaming
        - staging: rtl8712: reduce stack usage, again
        - crypto: lrw - use correct alignmask
        - bpf: sockmap, restore sk_write_space when psock gets dropped
        - ARM: dts: Drop bogus CLKSEL for timer12 on dra7
        - iwlwifi: fix load in rfkill flow for unified firmware
        - tools: bpftool: Fix JSON output when lookup fails
        - soundwire: stream: fix bad unlock balance
        - can: flexcan: Remove unneeded registration message
        - RISC-V: defconfig: enable clocks, serial console
        - xdp: check device pointer before clearing
        - KVM: nVMX: use correct clean fields when copying from eVMCS
        - gpu: ipu-v3: image-convert: Fix input bytesperline width/height align
        - gpu: ipu-v3: image-convert: Fix input bytesperline for packed formats
        - gpu: ipu-v3: image-convert: Fix image downsize coefficients
        - cfg80211: util: fix bit count off by one
        - cfg80211: report measurement start TSF correctly
        - IB/hfi1: Create inline to get extended headers
        - IB/hfi1: Wakeup QPs orphaned on wait list after flush
        - IB/hfi1: Handle wakeup of orphaned QPs for pio
        - IB/hfi1: Handle port down properly in pio
        - powerpc: enable a 30-bit ZONE_DMA for 32-bit pmac
        - tpm: Actually fail on TPM errors during "get random"
        - tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations
        - perf intel-pt: Fix itrace defaults for perf script
        - perf auxtrace: Fix itrace defaults for perf script
        - perf intel-pt: Fix itrace defaults for perf script intel-pt documentation
        - perf header: Assign proper ff->ph in perf_event__synthesize_features()
        - usb: gadget: f_fs: data_len used before properly set
        - staging: wilc1000: fix error path cleanup in wilc_wlan_initialize()
        - staging: mt7621-pci: fix PCIE_FTS_NUM_LO macro
        - iio: adc: stm32-adc: add missing vdda-supply
        - staging: vchiq_2835_arm: revert "quit using custom down_interruptible()"
        - staging: vchiq: revert "switch to wait_for_completion_killable"
        - staging: vchiq: make wait events interruptible
    
      * Touchpad not detecting in Linux (LP: #1825718) // Disco update: upstream
        stable patchset 2019-08-19 (LP: #1840718)
        - HID: i2c-hid: add iBall Aer3 to descriptor override
    
      * Disco update: upstream stable patchset 2019-08-16 (LP: #1840521)
        - arm64: Don't unconditionally add -Wno-psabi to KBUILD_CFLAGS
        - Revert "x86/uaccess, ftrace: Fix ftrace_likely_update() vs. SMAP"
        - qmi_wwan: Fix out-of-bounds read
        - fs/proc/array.c: allow reporting eip/esp for all coredumping threads
        - mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask
        - fs/binfmt_flat.c: make load_flat_shared_library() work
        - clk: socfpga: stratix10: fix divider entry for the emac clocks
        - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails
        - mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on
          !PageHuge
        - dm log writes: make sure super sector log updates are written in order
        - scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()
        - x86/speculation: Allow guests to use SSBD even if host does not
        - x86/microcode: Fix the microcode load on CPU hotplug for real
        - x86/resctrl: Prevent possible overrun during bitmap operations
        - NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O
        - cpu/speculation: Warn on unsupported mitigations= parameter
        - irqchip/mips-gic: Use the correct local interrupt map registers
        - af_packet: Block execution of tasks waiting for transmit to complete in
          AF_PACKET
        - bonding: Always enable vlan tx offload
        - ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop
        - net/packet: fix memory leak in packet_set_ring()
        - net: remove duplicate fetch in sock_getsockopt
        - net: stmmac: fixed new system time seconds value calculation
        - net: stmmac: set IC bit when transmitting frames with HW timestamp
        - sctp: change to hold sk after auth shkey is created successfully
        - team: Always enable vlan tx offload
        - tipc: change to use register_pernet_device
        - tipc: check msg->req data len in tipc_nl_compat_bearer_disable
        - tun: wake up waitqueues after IFF_UP is set
        - bpf: simplify definition of BPF_FIB_LOOKUP related flags
        - bpf: lpm_trie: check left child of last leftmost node for NULL
        - bpf: fix nested bpf tracepoints with per-cpu data
        - bpf: fix unconnected udp hooks
        - bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro
        - bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err
        - arm64: futex: Avoid copying out uninitialised stack in failed cmpxchg()
        - bpf, arm64: use more scalable stadd over ldxr / stxr loop in xadd
        - futex: Update comments and docs about return values of arch futex code
        - RDMA: Directly cast the sockaddr union to sockaddr
        - tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
        - arm64: insn: Fix ldadd instruction encoding
        - clk: tegra210: Fix default rates for HDA clocks
        - mm, swap: fix THP swap out
        - mm: fix page cache convergence regression
        - efi/memreserve: deal with memreserve entries in unmapped memory
        - net: aquantia: fix vlans not working over bridged network
    
      * Disco update: upstream stable patchset 2019-08-15 (LP: #1840373)
        - tracing: Silence GCC 9 array bounds warning
        - gcc-9: silence 'address-of-packed-member' warning
        - ovl: support the FS_IOC_FS[SG]ETXATTR ioctls
        - ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls
        - ovl: make i_ino consistent with st_ino in more cases
        - ovl: detect overlapping layers
        - ovl: don't fail with disconnected lower NFS
        - ovl: fix bogus -Wmaybe-unitialized warning
        - mmc: sdhci: sdhci-pci-o2micro: Correctly set bus width when tuning
        - mmc: core: API to temporarily disable retuning for SDIO CRC errors
        - mmc: core: Add sdio_retune_hold_now() and sdio_retune_release()
        - mmc: core: Prevent processing SDIO IRQs when the card is suspended
        - scsi: ufs: Avoid runtime suspend possibly being blocked forever
        - usb: chipidea: udc: workaround for endpoint conflict issue
        - xhci: detect USB 3.2 capable host controllers correctly
        - usb: xhci: Don't try to recover an endpoint if port is in error state.
        - IB/hfi1: Validate fault injection opcode user input
        - IB/hfi1: Silence txreq allocation warnings
        - iio: temperature: mlx90632 Relax the compatibility check
        - Input: synaptics - enable SMBus on ThinkPad E480 and E580
        - Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD
        - Input: silead - add MSSL0017 to acpi_device_id
        - apparmor: enforce nullbyte at end of tag string
        - brcmfmac: sdio: Disable auto-tuning around commands expected to fail
        - brcmfmac: sdio: Don't tune while the card is off
        - ARC: fix build warnings
        - dmaengine: dw-axi-dmac: fix null dereference when pointer first is null
        - dmaengine: sprd: Fix block length overflow
        - ARC: [plat-hsdk]: Add missing multicast filter bins number to GMAC node
        - ARC: [plat-hsdk]: Add missing FIFO size entry in GMAC node
        - fpga: dfl: afu: Pass the correct device to dma_mapping_error()
        - fpga: dfl: Add lockdep classes for pdata->lock
        - parport: Fix mem leak in parport_register_dev_model
        - parisc: Fix compiler warnings in float emulation code
        - IB/rdmavt: Fix alloc_qpn() WARN_ON()
        - IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
        - IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value
        - IB/hfi1: Validate page aligned for a given virtual address
        - MIPS: uprobes: remove set but not used variable 'epc'
        - xtensa: Fix section mismatch between memblock_reserve and mem_reserve
        - kselftest/cgroup: fix unexpected testing failure on test_memcontrol
        - kselftest/cgroup: fix unexpected testing failure on test_core
        - kselftest/cgroup: fix incorrect test_core skip
        - selftests: vm: install test_vmalloc.sh for run_vmtests
        - net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0
        - mdesc: fix a missing-check bug in get_vdev_port_node_info()
        - sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD
        - net: ethernet: mediatek: Use hw_feature to judge if HWLRO is supported
        - net: ethernet: mediatek: Use NET_IP_ALIGN to judge if HW RX_2BYTE_OFFSET is
          enabled
        - drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times
        - drm/arm/hdlcd: Actually validate CRTC modes
        - drm/arm/hdlcd: Allow a bit of clock tolerance
        - nvmet: fix data_len to 0 for bdev-backed write_zeroes
        - scripts/checkstack.pl: Fix arm64 wrong or unknown architecture
        - scsi: ufs: Check that space was properly alloced in copy_query_response
        - scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous()
        - net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set
        - s390/qeth: fix VLAN attribute in bridge_hostnotify udev event
        - hwmon: (core) add thermal sensors only if dev->of_node is present
        - hwmon: (pmbus/core) Treat parameters as paged if on multiple pages
        - arm64: Silence gcc warnings about arch ABI drift
        - nvme: Fix u32 overflow in the number of namespace list calculation
        - btrfs: start readahead also in seed devices
        - can: xilinx_can: use correct bittiming_const for CAN FD core
        - can: flexcan: fix timeout when set small bitrate
        - can: purge socket error queue on sock destruct
        - riscv: mm: synchronize MMU after pte change
        - powerpc/bpf: use unsigned division instruction for 64-bit operations
        - ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX
        - ARM: dts: dra76x: Update MMC2_HS200_MANUAL1 iodelay values
        - ARM: dts: am57xx-idk: Remove support for voltage switching for SD card
        - arm64/sve: <uapi/asm/ptrace.h> should not depend on <uapi/linux/prctl.h>
        - arm64: ssbd: explicitly depend on <linux/prctl.h>
        - drm/vmwgfx: Use the backdoor port if the HB port is not available
        - staging: erofs: add requirements field in superblock
        - SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write
        - cfg80211: fix memory leak of wiphy device name
        - mac80211: drop robust management frames from unknown TA
        - {nl,mac}80211: allow 4addr AP operation on crypto controlled devices
        - mac80211: handle deauthentication/disassociation from TDLS peer
        - nl80211: fix station_info pertid memory leak
        - mac80211: Do not use stack memory with scatterlist for GMAC
        - x86/resctrl: Don't stop walking closids when a locksetup group is found
        - mmc: sdhi: disallow HS400 for M3-W ES1.2, RZ/G2M, and V3H
        - mmc: mediatek: fix SDIO IRQ interrupt handle flow
        - mmc: mediatek: fix SDIO IRQ detection issue
        - cifs: fix GlobalMid_Lock bug in cifs_reconnect
        - IB/hfi1: Close PSM sdma_progress sleep window
        - IB/hfi1: Avoid hardlockup with flushlist_lock
        - IB/hfi1: Correct tid qp rcd to match verbs context
        - iio: imu: st_lsm6dsx: fix PM support for st_lsm6dsx i2c controller
        - apparmor: reset pos on failure to unpack for various functions
        - Revert "brcmfmac: disable command decode in sdio_aos"
        - lkdtm/usercopy: Moves the KERNEL_DS test to non-canonical
        - dmaengine: jz4780: Fix transfers being ACKed too soon
        - dmaengine: mediatek-cqdma: sleeping in atomic context
        - dmaengine: sprd: Fix the possible crash when getting descriptor status
        - dmaengine: sprd: Add validation of current descriptor in irq handler
        - dmaengine: sprd: Fix the incorrect start for 2-stage destination channels
        - dmaengine: sprd: Fix the right place to configure 2-stage transfer
        - fpga: stratix10-soc: fix use-after-free on s10_init()
        - crypto: hmac - fix memory leak in hmac_init_tfm()
        - userfaultfd: selftest: fix compiler warning
        - selftests: set sysctl bc_forwarding properly in router_broadcast.sh
        - kbuild: tar-pkg: enable communication with jobserver
        - net: phylink: avoid reducing support mask
        - udmabuf: actually unmap the scatterlist
        - s390/qeth: handle limited IPv4 broadcast in L3 TX path
        - s390/qeth: check dst entry before use
        - ARM: mvebu_v7_defconfig: fix Ethernet on Clearfog
        - KVM: x86/mmu: Allocate PAE root array when using SVM's 32-bit NPT
        - binder: fix possible UAF when freeing buffer
        - x86/vdso: Prevent segfaults due to hoisted vclock reads
    
      * VIMC module not available (CONFIG_VIDEO_VIMC not set) (LP: #1831482)
        - [Config] Enable VIMC module
    
      * reboot will introduce an alarm 'beep ...' during BIOS phase (LP: #1840395)
        - ALSA: hda - Let all conexant codec enter D3 when rebooting
        - ALSA: hda - Add a generic reboot_notify
    
      * Include Sunix serial/parallel driver (LP: #1826716)
        - serial: 8250_pci: Add support for Sunix serial boards
        - parport: parport_serial: Add support for Sunix Multi I/O boards
    
      * Intel HDMI audio print "Unable to sync register" errors (LP: #1840394)
        - ALSA: hda - Don't resume forcibly i915 HDMI/DP codec
    
      * UBUNTU: SAUCE: shiftfs: pass correct point down (LP: #1837231)
        - SAUCE: shiftfs: pass correct point down
    
      * shiftfs: add O_DIRECT support (LP: #1837223)
        - SAUCE: shiftfs: add O_DIRECT support
    
      * p54usb module in linux-modules-extra-5.0.0-23-generic does not work
        (LP: #1839693)
        - p54: fix crash during initialization
    
      * Goodix touchpad may drop first input event (LP: #1840075)
        - Revert "UBUNTU: SAUCE: i2c: designware: add Inpiron/Vostro 7590 into i2c
          quirk"
        - Revert "UBUNTU: SAUCE: i2c: designware: Add disable runtime pm quirk"
        - mfd: intel-lpss: Remove D3cold delay
    
      * NULL pointer dereference when Inserting the VIMC module (LP: #1840028)
        - media: vimc: fix component match compare
    
      * Fix touchpad IRQ storm after S3 (LP: #1841396)
        - pinctrl: intel: remap the pin number to gpio offset for irq enabled pin
    
      * [SRU][B/OEM-B/OEM-OSP1/D] UBUNTU: SAUCE: enable middle button for one more
        ThinkPad (LP: #1841722)
        - SAUCE: Input: elantech - enable middle button for one more ThinkPad
    
      * Disco update: upstream stable patchset 2019-08-13 (LP: #1840076)
        - [Config] updateconfigs for CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT
        - drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3)
        - nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled
        - HID: multitouch: handle faulty Elo touch device
        - HID: wacom: Don't set tool type until we're in range
        - HID: wacom: Don't report anything prior to the tool entering range
        - HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact
        - HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth
        - HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary
        - ALSA: oxfw: allow PCM capture for Stanton SCS.1m
        - ALSA: hda/realtek - Update headset mode for ALC256
        - ALSA: firewire-motu: fix destruction of data for isochronous resources
        - libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
        - mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
        - fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
        - mm/vmscan.c: fix trying to reclaim unevictable LRU page
        - signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
        - ptrace: restore smp_rmb() in __ptrace_may_access()
        - iommu/arm-smmu: Avoid constant zero in TLBI writes
        - i2c: acorn: fix i2c warning
        - bcache: fix stack corruption by PRECEDING_KEY()
        - cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
        - ASoC: cs42xx8: Add regcache mask dirty
        - ASoC: fsl_asrc: Fix the issue about unsupported rate
        - drm/i915/sdvo: Implement proper HDMI audio support for SDVO
        - x86/uaccess, kcov: Disable stack protector
        - ALSA: seq: Protect in-kernel ioctl calls with mutex
        - ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
        - Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
        - s390/kasan: fix strncpy_from_user kasan checks
        - Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
        - f2fs: fix to avoid accessing xattr across the boundary
        - scsi: qedi: remove memset/memcpy to nfunc and use func instead
        - scsi: qedi: remove set but not used variables 'cdev' and 'udev'
        - scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show
        - scsi: lpfc: add check for loss of ndlp when sending RRQ
        - arm64/mm: Inhibit huge-vmap with ptdump
        - nvme: fix srcu locking on error return in nvme_get_ns_from_disk
        - nvme: remove the ifdef around nvme_nvm_ioctl
        - nvme: merge nvme_ns_ioctl into nvme_ioctl
        - nvme: release namespace SRCU protection before performing controller ioctls
        - nvme: fix memory leak for power latency tolerance
        - platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI
          table
        - platform/x86: pmc_atom: Add several Beckhoff Automation boards to
          critclk_systems DMI table
        - scsi: bnx2fc: fix incorrect cast to u64 on shift operation
        - libnvdimm: Fix compilation warnings with W=1
        - selftests/timers: Add missing fflush(stdout) calls
        - tracing: Prevent hist_field_var_ref() from accessing NULL tracing_map_elts
        - usbnet: ipheth: fix racing condition
        - KVM: arm/arm64: Move cc/it checks under hyp's Makefile to avoid
          instrumentation
        - KVM: x86/pmu: mask the result of rdpmc according to the width of the
          counters
        - KVM: x86/pmu: do not mask the value that is written to fixed PMUs
        - KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
        - tools/kvm_stat: fix fields filter for child events
        - drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an
          invalid read
        - drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
        - usb: dwc2: Fix DMA cache alignment issues
        - usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression)
        - USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
        - USB: serial: pl2303: add Allied Telesis VT-Kit3
        - USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
        - USB: serial: option: add Telit 0x1260 and 0x1261 compositions
        - timekeeping: Repair ktime_get_coarse*() granularity
        - RAS/CEC: Convert the timer callback to a workqueue
        - RAS/CEC: Fix binary search function
        - x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback
        - x86/kasan: Fix boot with 5-level paging and KASAN
        - x86/mm/KASLR: Compute the size of the vmemmap section properly
        - x86/resctrl: Prevent NULL pointer dereference when local MBM is disabled
        - drm/edid: abstract override/firmware EDID retrieval
        - drm: add fallback override/firmware EDID modes workaround
        - HID: input: make sure the wheel high resolution multiplier is set
        - HID: input: fix assignment of .value
        - Revert "HID: Increase maximum report size allowed by hid_field_extract()"
        - selinux: fix a missing-check bug in selinux_add_mnt_opt( )
        - selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts()
        - media: dvb: warning about dvb frequency limits produces too much noise
        - drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc
        - drm/i915/dsi: Use a fuzzy check for burst mode clock check
        - drm/i915: Fix per-pixel alpha with CCS
        - drm/i915/dmc: protect against reading random memory
        - drivers/perf: arm_spe: Don't error on high-order pages for aux buf
        - bpf: sockmap, only stop/flush strp if it was enabled at some point
        - bpf: sockmap remove duplicate queue free
        - bpf: sockmap fix msg->sg.size account on ingress skb
        - scsi: qla2xxx: Add cleanup for PCI EEH recovery
        - scsi: lpfc: resolve lockdep warnings
        - arm64: Print physical address of page table base in show_pte()
        - net: macb: fix error format in dev_err()
        - bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0
        - tools/bpftool: move set_max_rlimit() before __bpf_object__open_xattr()
        - nvme-pci: Fix controller freeze wait disabling
        - scsi: myrs: Fix uninitialized variable
        - nvme-pci: use blk-mq mapping for unmanaged irqs
        - KVM: nVMX: really fix the size checks on KVM_SET_NESTED_STATE
        - KVM: selftests: Fix a condition in test_hv_cpuid()
        - kvm: vmx: Fix -Wmissing-prototypes warnings
        - KVM: LAPIC: Fix lapic_timer_advance_ns parameter overflow
        - KVM: x86: do not spam dmesg with VMCS/VMCB dumps
        - kvm: selftests: aarch64: dirty_log_test: fix unaligned memslot size
        - kvm: selftests: aarch64: fix default vm mode
        - tracing/uprobe: Fix NULL pointer dereference in trace_uprobe_create()
        - powerpc: Fix kexec failure on book3s/32
        - powerpc/64s: Fix THP PMD collapse serialisation
        - ax25: fix inconsistent lock state in ax25_destroy_timer
        - be2net: Fix number of Rx queues used for flow hashing
        - hv_netvsc: Set probe mode to sync
        - ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
        - lapb: fixed leak of control-blocks.
        - neigh: fix use-after-free read in pneigh_get_next
        - net: dsa: rtl8366: Fix up VLAN filtering
        - net: openvswitch: do not free vport if register_netdevice() is failed.
        - sctp: Free cookie before we memdup a new one
        - sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg
        - tipc: purge deferredq list for each grp member in tipc_group_delete
        - vsock/virtio: set SOCK_DONE on peer shutdown
        - net/mlx5: Avoid reloading already removed devices
        - net: mvpp2: prs: Fix parser range for VID filtering
        - net: mvpp2: prs: Use the correct helpers when removing all VID filters
        - Staging: vc04_services: Fix a couple error codes
        - perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints
        - netfilter: nf_queue: fix reinject verdict handling
        - ipvs: Fix use-after-free in ip_vs_in
        - selftests: netfilter: missing error check when setting up veth interface
        - clk: ti: clkctrl: Fix clkdm_clk handling
        - powerpc/powernv: Return for invalid IMC domain
        - usb: xhci: Fix a potential null pointer dereference in
          xhci_debugfs_create_endpoint()
        - mISDN: make sure device name is NUL terminated
        - x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor
        - perf/ring_buffer: Fix exposing a temporarily decreased data_head
        - perf/ring_buffer: Add ordering to rb->nest increment
        - perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data
        - gpio: fix gpio-adp5588 build errors
        - net: stmmac: update rx tail pointer register to fix rx dma hang issue.
        - net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()
        - ACPI/PCI: PM: Add missing wakeup.flags.valid checks
        - drm/etnaviv: lock MMU while dumping core
        - net: aquantia: tx clean budget logic error
        - net: aquantia: fix LRO with FCS error
        - i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
        - ALSA: hda - Force polling mode on CNL for fixing codec communication
        - configfs: Fix use-after-free when accessing sd->s_dentry
        - perf data: Fix 'strncat may truncate' build failure with recent gcc
        - perf namespace: Protect reading thread's namespace
        - perf record: Fix s390 missing module symbol and warning for non-root users
        - ia64: fix build errors by exporting paddr_to_nid()
        - xen/pvcalls: Remove set but not used variable
        - xenbus: Avoid deadlock during suspend due to open transactions
        - KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list
        - KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu
        - arm64: fix syscall_fn_t type
        - arm64: use the correct function type in SYSCALL_DEFINE0
        - arm64: use the correct function type for __arm64_sys_ni_syscall
        - net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs
        - net: phylink: ensure consistent phy interface mode
        - net: phy: dp83867: Set up RGMII TX delay
        - scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
        - scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask
        - scsi: scsi_dh_alua: Fix possible null-ptr-deref
        - mlxsw: spectrum: Prevent force of 56G
        - ocfs2: fix error path kobject memory leak
        - coredump: fix race condition between collapse_huge_page() and core dumping
        - Abort file_remove_privs() for non-reg. files
        - net: tls, correctly account for copied bytes with multiple sk_msgs
        - vxlan: Don't assume linear buffers in error handler
        - geneve: Don't assume linear buffers in error handler
        - net/mlx5: Update pci error handler entries and command translation
        - mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead
        - net/mlx5e: Add ndo_set_feature for uplink representor
        - mlxsw: spectrum_flower: Fix TOS matching
        - net/mlx5e: Support tagged tunnel over bond
        - net: correct udp zerocopy refcnt also when zerocopy only on append
        - net/mlx5e: Avoid detaching non-existing netdev under switchdev mode
        - staging: erofs: set sb->s_root to NULL when failing from __getname()
        - staging: wilc1000: Fix some double unlock bugs in wilc_wlan_cleanup()
        - pinctrl: intel: Clear interrupt status in mask/unmask callback
        - netfilter: nf_tables: fix oops during rule dump
        - netfilter: nft_fib: Fix existence check support
        - net: stmmac: dwmac-mediatek: modify csr_clk value to fix mdio read/write
          fail
        - dpaa2-eth: Fix potential spectre issue
        - dpaa2-eth: Use PTR_ERR_OR_ZERO where appropriate
        - dpaa_eth: use only online CPU portals
        - dfs_cache: fix a wrong use of kfree in flush_cache_ent()
        - KVM: PPC: Book3S HV: Use new mutex to synchronize MMU setup
        - blk-mq: Fix memory leak in error handling
        - mm: mmu_gather: remove __tlb_reset_range() for force flush
        - nvme-tcp: rename function to have nvme_tcp prefix
        - nvme-tcp: fix possible null deref on a timed out io queue connect
        - nvme-tcp: fix queue mapping when queue count is limited
    
      * Disco update: upstream stable patchset 2019-08-12 (LP: #1839887)
        - selftests/tls: test for lowat overshoot with multiple records
        - selftests/tls: add test for sleeping even though there is data
        - sparc64: Fix regression in non-hypervisor TLB flush xcall
        - include/linux/bitops.h: sanitize rotate primitives
        - xhci: update bounce buffer with correct sg num
        - xhci: Use %zu for printing size_t type
        - xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
        - usb: xhci: avoid null pointer deref when bos field is NULL
        - usbip: usbip_host: fix BUG: sleeping function called from invalid context
        - usbip: usbip_host: fix stub_dev lock context imbalance regression
        - USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
        - USB: sisusbvga: fix oops in error path of sisusb_probe
        - USB: Add LPM quirk for Surface Dock GigE adapter
        - USB: rio500: refuse more than one device at a time
        - USB: rio500: fix memory leak in close after disconnect
        - media: usb: siano: Fix general protection fault in smsusb
        - media: usb: siano: Fix false-positive "uninitialized variable" warning
        - media: smsusb: better handle optional alignment
        - brcmfmac: fix NULL pointer derefence during USB disconnect
        - scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
        - scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
        - tracing: Avoid memory leak in predicate_parse()
        - Btrfs: fix wrong ctime and mtime of a directory after log replay
        - Btrfs: fix race updating log root item during fsync
        - Btrfs: fix fsync not persisting changed attributes of a directory
        - Btrfs: incremental send, fix file corruption when no-holes feature is
          enabled
        - iio: dac: ds4422/ds4424 fix chip verification
        - iio: adc: ti-ads8688: fix timestamp is not updated in buffer
        - s390/crypto: fix possible sleep during spinlock aquired
        - KVM: PPC: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts
        - powerpc/perf: Fix MMCRA corruption by bhrb_filter
        - ALSA: line6: Assure canceling delayed work at disconnection
        - ALSA: hda/realtek - Set default power save node to 0
        - KVM: s390: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID
        - drm/nouveau/i2c: Disable i2c bus access after ->fini()
        - i2c: mlxcpld: Fix wrong initialization order in probe
        - i2c: synquacer: fix synquacer_i2c_doxfer() return value
        - tty: serial: msm_serial: Fix XON/XOFF
        - tty: max310x: Fix external crystal register setup
        - memcg: make it work on sparse non-0-node systems
        - kernel/signal.c: trace_signal_deliver when signal_group_exit
        - arm64: Fix the arm64_personality() syscall wrapper redirection
        - docs: Fix conf.py for Sphinx 2.0
        - doc: Cope with the deprecation of AutoReporter
        - doc: Cope with Sphinx logging deprecations
        - ima: show rules with IMA_INMASK correctly
        - evm: check hash algorithm passed to init_desc()
        - vt/fbcon: deinitialize resources in visual_init() after failed memory
          allocation
        - serial: sh-sci: disable DMA for uart_console
        - staging: vc04_services: prevent integer overflow in create_pagelist()
        - staging: wlan-ng: fix adapter initialization failure
        - cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case
        - CIFS: cifs_read_allocate_pages: don't iterate through whole page array on
          ENOMEM
        - Revert "lockd: Show pid of lockd for remote locks"
        - gcc-plugins: Fix build failures under Darwin host
        - drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using
          get_pages()
        - drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set
        - drm/sun4i: Fix sun8i HDMI PHY clock initialization
        - drm/sun4i: Fix sun8i HDMI PHY configuration for > 148.5 MHz
        - drm/rockchip: shutdown drm subsystem on shutdown
        - drm/lease: Make sure implicit planes are leased
        - Revert "x86/build: Move _etext to actual end of .text"
        - scsi: lpfc: Fix backport of faf5a744f4f8 ("scsi: lpfc: avoid uninitialized
          variable warning")
        - KVM: PPC: Book3S HV: Fix lockdep warning when entering guest on POWER9
        - KVM: PPC: Book3S HV: Restore SPRG3 in kvmhv_p9_guest_entry()
        - powerpc/kexec: Fix loading of kernel + initramfs with kexec_file_load()
        - kasan: initialize tag to 0xff in __kasan_kmalloc
        - signal/arm64: Use force_sig not force_sig_fault for SIGKILL
        - x86/ima: Check EFI_RUNTIME_SERVICES before using
        - ima: fix wrong signed policy requirement when not appraising
        - drm/vmwgfx: Fix user space handle equal to zero
        - drm/vmwgfx: Fix compat mode shader operation
        - drm/atomic: Wire file_priv through for property changes
        - drm: Expose "FB_DAMAGE_CLIPS" property to atomic aware user-space only
        - drm/cma-helper: Fix drm_gem_cma_free_object()
        - ethtool: fix potential userspace buffer overflow
        - Fix memory leak in sctp_process_init
        - ipv4: not do cache for local delivery if bc_forwarding is enabled
        - ipv6: fix the check before getting the cookie in rt6_get_cookie
        - neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
        - net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set
        - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
        - net: mvpp2: Use strscpy to handle stat strings
        - net: rds: fix memory leak in rds_ib_flush_mr_pool
        - net: sfp: read eeprom in maximum 16 byte increments
        - net/tls: replace the sleeping lock around RX resync with a bit lock
        - packet: unconditionally free po->rollover
        - pktgen: do not sleep with the thread lock held.
        - Revert "fib_rules: return 0 directly if an exactly same rule exists when
          NLM_F_EXCL not supplied"
        - ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
        - ipv6: fix EFAULT on sendto with icmpv6 and hdrincl
        - mtd: spinand: macronix: Fix ECC Status Read
        - rcu: locking and unlocking need to always be at least barriers
        - parisc: Use implicit space register selection for loading the coherence
          index of I/O pdirs
        - NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter
        - NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled
        - fuse: fallocate: fix return with locked inode
        - pstore: Set tfm to NULL on free_buf_for_compression
        - pstore/ram: Run without kernel crash dump region
        - x86/power: Fix 'nosmt' vs hibernation triple fault during resume
        - i2c: xiic: Add max_read_len quirk
        - s390/mm: fix address space detection in exception handling
        - xen-blkfront: switch kcalloc to kvcalloc for large array allocation
        - MIPS: Bounds check virt_addr_valid
        - MIPS: pistachio: Build uImage.gz by default
        - Revert "MIPS: perf: ath79: Fix perfcount IRQ assignment"
        - genwqe: Prevent an integer overflow in the ioctl
        - test_firmware: Use correct snprintf() limit
        - drm/gma500/cdv: Check vbt config bits when detecting lvds panels
        - drm/msm: fix fb references in async update
        - drm: add non-desktop quirk for Valve HMDs
        - drm: add non-desktop quirks to Sensics and OSVR headsets.
        - drm/amdgpu/psp: move psp version specific function pointers to early_init
        - drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in
        - drm/i915: Fix I915_EXEC_RING_MASK
        - drm/i915/fbc: disable framebuffer compression on GeminiLake
        - drm/i915: Maintain consistent documentation subsection ordering
        - drm: don't block fb changes for async plane updates
        - drm/i915/gvt: Initialize intel_gvt_gtt_entry in stack
        - TTY: serial_core, add ->install
        - ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
        - udp: only choose unbound UDP socket for multicast when not in a VRF
        - neighbor: Reset gc_entries counter if new entry is released before insert
        - cls_matchall: avoid panic when receiving a packet before filter set
        - ipmr_base: Do not reset index in mr_table_dump
        - ARC: mm: SIGSEGV userspace trying to access kernel virtual memory
        - parisc: Fix crash due alternative coding for NP iopdir_fdc bit
        - SUNRPC fix regression in umount of a secure mount
        - fuse: fix copy_file_range() in the writeback case
        - memstick: mspro_block: Fix an error code in mspro_block_issue_req()
        - mmc: tmio: fix SCC error handling to avoid false positive CRC error
        - mmc: sdhci_am654: Fix SLOTTYPE write
        - nvme-rdma: fix queue mapping when queue count is limited
        - drm/vc4: fix fb references in async update
        - drm: Fix timestamp docs for variable refresh properties.
        - drm/amd/display: Add ASICREV_IS_PICASSO
        - drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2)
        - drm/amd: fix fb references in async update
        - rapidio: fix a NULL pointer dereference when create_workqueue() fails
        - fs/fat/file.c: issue flush after the writeback of FAT
        - sysctl: return -EINVAL if val violates minmax
        - ipc: prevent lockup on alloc_msg and free_msg
        - drm/pl111: Initialize clock spinlock early
        - ARM: prevent tracing IPI_CPU_BACKTRACE
        - mm/hmm: select mmu notifier when selecting HMM
        - hugetlbfs: on restore reserve error path retain subpool reservation
        - mem-hotplug: fix node spanned pages when we have a node with only
          ZONE_MOVABLE
        - mm/cma.c: fix crash on CMA allocation if bitmap allocation fails
        - initramfs: free initrd memory if opening /initrd.image fails
        - mm/cma.c: fix the bitmap status to show failed allocation reason
        - mm: page_mkclean vs MADV_DONTNEED race
        - mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
        - mm/slab.c: fix an infinite loop in leaks_show()
        - kernel/sys.c: prctl: fix false positive in validate_prctl_map()
        - thermal: rcar_gen3_thermal: disable interrupt in .remove
        - drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER
        - mfd: tps65912-spi: Add missing of table registration
        - mfd: intel-lpss: Set the device in reset state when init
        - drm/nouveau/disp/dp: respect sink limits when selecting failsafe link
          configuration
        - mfd: twl6040: Fix device init errors for ACCCTL register
        - perf/x86/intel: Allow PEBS multi-entry in watermark mode
        - drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when
          encoders change
        - drm/bridge: adv7511: Fix low refresh rate selection
        - objtool: Don't use ignore flag for fake jumps
        - drm/nouveau/kms/gv100-: fix spurious window immediate interlocks
        - bpf: fix undefined behavior in narrow load handling
        - EDAC/mpc85xx: Prevent building as a module
        - pwm: meson: Use the spin-lock only to protect register modifications
        - mailbox: stm32-ipcc: check invalid irq
        - ntp: Allow TAI-UTC offset to be set to zero
        - f2fs: fix to avoid panic in do_recover_data()
        - f2fs: fix to avoid panic in f2fs_inplace_write_data()
        - f2fs: fix to avoid panic in f2fs_remove_inode_page()
        - f2fs: fix to do sanity check on free nid
        - f2fs: fix to clear dirty inode in error path of f2fs_iget()
        - f2fs: fix to avoid panic in dec_valid_block_count()
        - f2fs: fix to use inline space only if inline_xattr is enable
        - f2fs: fix to do sanity check on valid block count of segment
        - f2fs: fix to do checksum even if inode page is uptodate
        - percpu: remove spurious lock dependency between percpu and sched
        - configfs: fix possible use-after-free in configfs_register_group
        - uml: fix a boot splat wrt use of cpu_all_mask
        - PCI: dwc: Free MSI in dw_pcie_host_init() error path
        - PCI: dwc: Free MSI IRQ page in dw_pcie_free_msi()
        - mmc: mmci: Prevent polling for busy detection in IRQ context
        - netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast
        - netfilter: nf_conntrack_h323: restore boundary check correctness
        - mips: Make sure dt memory regions are valid
        - netfilter: nf_tables: fix base chain stat rcu_dereference usage
        - watchdog: imx2_wdt: Fix set_timeout for big timeout values
        - watchdog: fix compile time error of pretimeout governors
        - blk-mq: move cancel of requeue_work into blk_mq_release
        - iommu/vt-d: Set intel_iommu_gfx_mapped correctly
        - misc: pci_endpoint_test: Fix test_reg_bar to be updated in pci_endpoint_test
        - PCI: designware-ep: Use aligned ATU window for raising MSI interrupts
        - nvme-pci: unquiesce admin queue on shutdown
        - nvme-pci: shutdown on timeout during deletion
        - netfilter: nf_flow_table: check ttl value in flow offload data path
        - netfilter: nf_flow_table: fix netdev refcnt leak
        - ALSA: hda - Register irq handler after the chip initialization
        - nvmem: core: fix read buffer in place
        - nvmem: sunxi_sid: Support SID on A83T and H5
        - fuse: retrieve: cap requested size to negotiated max_write
        - nfsd: allow fh_want_write to be called twice
        - nfsd: avoid uninitialized variable warning
        - vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING"
        - switchtec: Fix unintended mask of MRPC event
        - net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending
        - x86/PCI: Fix PCI IRQ routing table memory leak
        - i40e: Queues are reserved despite "Invalid argument" error
        - platform/chrome: cros_ec_proto: check for NULL transfer function
        - PCI: keystone: Prevent ARM32 specific code to be compiled for ARM64
        - soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
        - clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
        - soc: rockchip: Set the proper PWM for rk3288
        - ARM: dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
        - ARM: dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
        - ARM: dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
        - ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
        - ARM: dts: imx6sll: Specify IMX6SLL_CLK_IPG as "ipg" clock to SDMA
        - ARM: dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA
        - ARM: dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA
        - ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
        - ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
        - PCI: rpadlpar: Fix leaked device_node references in add/remove paths
        - drm/amd/display: Use plane->color_space for dpp if specified
        - ARM: OMAP2+: pm33xx-core: Do not Turn OFF CEFUSE as PPA may be using it
        - platform/x86: intel_pmc_ipc: adding error handling
        - power: supply: max14656: fix potential use-before-alloc
        - PCI: rcar: Fix a potential NULL pointer dereference
        - PCI: rcar: Fix 64bit MSI message address handling
        - scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags
        - video: hgafb: fix potential NULL pointer dereference
        - video: imsttfb: fix potential NULL pointer dereferences
        - block, bfq: increase idling for weight-raised queues
        - PCI: xilinx: Check for __get_free_pages() failure
        - gpio: gpio-omap: add check for off wake capable gpios
        - ice: Add missing case in print_link_msg for printing flow control
        - dmaengine: idma64: Use actual device for DMA transfers
        - pwm: tiehrpwm: Update shadow register for disabling PWMs
        - ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on
          Arndale Octa
        - pwm: Fix deadlock warning when removing PWM device
        - ARM: exynos: Fix undefined instruction during Exynos5422 resume
        - usb: typec: fusb302: Check vconn is off when we start toggling
        - soc: renesas: Identify R-Car M3-W ES1.3
        - gpio: vf610: Do not share irq_chip
        - percpu: do not search past bitmap when allocating an area
        - ovl: check the capability before cred overridden
        - ovl: support stacked SEEK_HOLE/SEEK_DATA
        - ALSA: seq: Cover unsubscribe_port() in list_mutex
        - media: rockchip/vpu: Fix/re-order probe-error/remove path
        - media: rockchip/vpu: Add missing dont_use_autosuspend() calls
        - drm/msm: correct attempted NULL pointer dereference in debugfs
        - mm/memory_hotplug: release memory resource after arch_remove_memory()
        - mm/memory_hotplug.c: fix the wrong usage of N_HIGH_MEMORY
        - drm/nouveau: fix duplication of nv50_head_atom struct
        - f2fs: fix error path of recovery
        - f2fs: fix to avoid panic in dec_valid_node_count()
        - f2fs: fix to avoid deadloop in foreground GC
        - f2fs: fix to retrieve inline xattr space
        - media: atmel: atmel-isc: fix asd memory allocation
        - vfio-pci/nvlink2: Fix potential VMA leak
        - powerpc/pseries: Track LMB nid instead of using device tree
        - arm64: defconfig: Update UFSHCD for Hi3660 soc
        - iommu/vt-d: Don't request page request irq under dmar_global_lock
        - soc/tegra: pmc: Remove reset sysfs entries on error
        - power: supply: cpcap-battery: Fix signed counter sample register
        - PCI: keystone: Invoke phy_reset() API before enabling PHY
        - iommu/vt-d: Flush IOTLB for untrusted device in time
        - arm64: dts: imx8mq: Mark iomuxc_gpr as i.MX6Q compatible
        - pinctrl: pinctrl-intel: move gpio suspend/resume to noirq phase
        - f2fs: fix potential recursive call when enabling data_flush
        - arm64: dts: qcom: qcs404: Fix regulator supply names
        - gpio: gpio-omap: limit errata 1.101 handling to wkup domain gpios only
        - media: v4l2-ctrl: v4l2_ctrl_request_setup returns with error upon failure
        - batman-adv: Adjust name for batadv_dat_send_data
        - ice: Enable LAN_EN for the right recipes
        - ice: Do not set LB_EN for prune switch rules
        - media: v4l2-fwnode: Defaults may not override endpoint configuration in
          firmware
        - ARM: shmobile: porter: enable R-Car Gen2 regulator quirk
    
     -- Khalid Elmously <email address hidden>  Tue, 17 Sep 2019 19:13:51 -0400
  • linux (5.0.0-29.31) disco; urgency=medium
    
      * powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts
        (CVE-2019-15031) / powerpc/tm: Fix FP/VMX unavailable exceptions inside a
        transaction (CVE-2019-15030) (LP: #1843533) // CVE-2019-15031
        - powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction
        - powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts
    
      * CVE-2019-14835
        - vhost: fix dirty log buffer overflow
    
      * Packaging resync (LP: #1786013)
        - [Packaging] resync getabis
    
     -- Stefan Bader <email address hidden>  Thu, 12 Sep 2019 11:19:04 +0200
  • linux (5.0.0-28.30) disco; urgency=medium
    
      * disco/linux: 5.0.0-28.30 -proposed tracker (LP: #1842561)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] resync getabis
    
      * ACPI support for the ARMv8.2 Statistical Profiling Extension (LP: #1841490)
        - ACPICA: ACPI 6.3: MADT: add support for statistical profiling in GICC
        - ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags
        - ACPI/PPTT: Modify node flag detection to find last IDENTICAL
        - ACPI/PPTT: Add function to return ACPI 6.3 Identical tokens
        - arm_pmu: acpi: spe: Add initial MADT/SPE probing
        - perf: arm_spe: Enable ACPI/Platform automatic module loading
    
      * Backport support for software count cache flush Spectre v2 mitigation. (CVE)
        (required for POWER9 DD2.3) (LP: #1822870) // QEMU -  count cache flush
        Spectre v2 mitigation (CVE) (required for POWER9 DD2.3) (LP: #1832622)
        - KVM: PPC: Book3S: Add count cache flush parameters to kvmppc_get_cpu_char()
    
      * Additional regression in CMA allocation rework (LP: #1841483)
        - dma-direct: fix zone selection after an unaddressable CMA allocation
    
      * [SRU][B-OEM-OSP1/D/E] reduce s2idle power consumption when BIOS uses shared
        power resources (LP: #1840882)
        - PCI / ACPI: Use cached ACPI device state to get PCI device power state
        - ACPI / PM: Introduce concept of a _PR0 dependent device
        - PCI / ACPI: Add _PR0 dependent devices
    
      * ipv6: fix neighbour resolution with raw socket (LP: #1834465)
        - ipv6: constify rt6_nexthop()
        - ipv6: fix neighbour resolution with raw socket
    
      * realtek r8822be kernel module fails after update to linux kernel-headers
        5.0.0-21 (LP: #1838133)
        - build_bug.h: add wrapper for _Static_assert
        - lib/vsprintf.c: move sizeof(struct printf_spec) next to its definition
        - linux/fs.h: move member alignment check next to definition of struct
          filename
        - rtw88: add license for Makefile
        - rtw88: fix subscript above array bounds compiler warning
        - rtw88: fix unassigned rssi_level in rtw_sta_info
        - rtw88: avoid circular locking between local->iflist_mtx and rtwdev->mutex
        - rtw88: Make some symbols static
        - rtw88: pci: use ieee80211_ac_numbers instead of 0-3
        - rtw88: pci: check if queue mapping exceeds size of ac_to_hwq
        - rtw88: more descriptions about LPS
        - rtw88: add fast xmit support
        - rtw88: add support for random mac scan
        - rtw88: add beacon function setting
        - rtw88: 8822c: add rf write protection when switching channel
        - rtw88: 8822c: update channel and bandwidth BB setting
        - rtw88: 8822c: disable rx clock gating before counter reset
        - rtw88: 8822c: use more accurate ofdm fa counting
        - rtw88: power on again if it was already on
        - rtw88: restore DACK results to save time
        - rtw88: rsvd page should go though management queue
        - rtw88: fix typo rtw_writ16_set
        - rtw88: resolve order of tx power setting routines
        - rtw88: do not use (void *) as argument
        - rtw88: unify prefixes for tx power setting routine
        - rtw88: remove unused variable
        - rtw88: fix incorrect tx power limit at 5G
        - rtw88: choose the lowest as world-wide power limit
        - rtw88: correct power limit selection
        - rtw88: update tx power limit table to RF v20
        - rtw88: remove all RTW_MAX_POWER_INDEX macro
        - rtw88: refine flow to get tx power index
        - rtw88: Fix misuse of GENMASK macro
        - rtw88: pci: Rearrange the memory usage for skb in RX ISR
        - rtw88: pci: Use DMA sync instead of remapping in RX ISR
        - rtw88: debug: dump tx power indexes in use
        - rtw88: use txpwr_lmt_cfg_pair struct, not arrays
        - rtw88: pci: remove set but not used variable 'ip_sel'
        - rtw88: allow c2h operation in irq context
        - rtw88: enclose c2h cmd handle with mutex
        - rtw88: add BT co-existence support
        - SAUCE: rtw88: pci: enable MSI interrupt
    
      * Disco update: upstream stable patchset 2019-08-30 (LP: #1842128)
        - selftests/bpf: fix sendmsg6_prog on s390
        - net: mvpp2: Don't check for 3 consecutive Idle frames for 10G links
        - selftests: forwarding: gre_multipath: Enable IPv4 forwarding
        - selftests: forwarding: gre_multipath: Fix flower filters
        - can: mcp251x: add error check when wq alloc failed
        - can: gw: Fix error path of cgw_module_init
        - ASoC: rockchip: Fix mono capture
        - mac80211_hwsim: Fix possible null-pointer dereferences in
          hwsim_dump_radio_nl()
        - netfilter: ipset: Actually allow destination MAC address for hash:ip,mac
          sets too
        - netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and
          hash:ip,mac sets
        - rxrpc: Fix potential deadlock
        - rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet
        - net: phy: phy_led_triggers: Fix a possible null-pointer dereference in
          phy_led_trigger_change_speed()
        - NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts
        - HID: quirks: Set the INCREMENT_USAGE_ON_DUPLICATE quirk on Saitek X52
        - drm/rockchip: Suspend DP late
        - SMB3: Fix potential memory leak when processing compound chain
        - s390: put _stext and _etext into .text section
        - net: stmmac: Fix issues when number of Queues >= 4
        - net: stmmac: tc: Do not return a fragment entry
        - block, bfq: handle NULL return value by bfq_init_rq()
        - KVM: arm64: Don't write junk to sysregs on reset
        - KVM: arm: Don't write junk to CP15 registers on reset
        - clk: socfpga: stratix10: fix rate caclulationg for cnt_clks
        - ceph: clear page dirty before invalidate page
        - Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE
        - dm integrity: fix a crash due to BUG_ON in __journal_read_write()
        - dm raid: add missing cleanup in raid_ctr()
        - xfs: don't trip over uninitialized buffer on extent read of corrupted inode
        - xfs: always rejoin held resources during defer roll
        - rxrpc: Fix local endpoint refcounting
        - rxrpc: Fix read-after-free in rxrpc_queue_local()
        - rxrpc: Fix local endpoint replacement
        - rxrpc: Fix local refcounting
        - regulator: axp20x: fix DCDCA and DCDCD for AXP806
        - regulator: axp20x: fix DCDC5 and DCDC6 for AXP803
        - HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT
        - MIPS: kernel: only use i8253 clocksource with periodic clockevent
        - mips: fix cacheinfo
        - netfilter: ebtables: fix a memory leak bug in compat
        - ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks
        - spi: pxa2xx: Balance runtime PM enable/disable on error
        - bpf: sockmap, sock_map_delete needs to use xchg
        - bpf: sockmap, synchronize_rcu before free'ing map
        - bpf: sockmap, only create entry if ulp is not already enabled
        - ASoC: dapm: fix a memory leak bug
        - bonding: Force slave speed check after link state recovery for 802.3ad
        - can: dev: call netif_carrier_off() in register_candev()
        - ASoC: Fail card instantiation if DAI format setup fails
        - st21nfca_connectivity_event_received: null check the allocation
        - st_nci_hci_connectivity_event_received: null check the allocation
        - {nl,mac}80211: fix interface combinations on crypto controlled devices
        - ASoC: ti: davinci-mcasp: Fix clk PDIR handling for i2s master mode
        - ASoC: ti: davinci-mcasp: Correct slot_width posed constraint
        - net: usb: qmi_wwan: Add the BroadMobi BM818 card
        - qed: RDMA - Fix the hw_ver returned in device attributes
        - isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in
          start_isoc_chain()
        - net: stmmac: manage errors returned by of_get_mac_address()
        - netfilter: ipset: Fix rename concurrency with listing
        - nvmem: Use the same permissions for eeprom as for nvmem
        - iwlwifi: mvm: avoid races in rate init and rate perform
        - iwlwifi: dbg_ini: move iwl_dbg_tlv_load_bin out of debug override ifdef
        - iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
        - iwlwifi: fix locking in delayed GTK setting
        - iwlwifi: mvm: send LQ command always ASYNC
        - isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack
        - perf bench numa: Fix cpu0 binding
        - spi: pxa2xx: Add support for Intel Comet Lake
        - spi: pxa2xx: Add support for Intel Tiger Lake
        - can: sja1000: force the string buffer NULL-terminated
        - can: peak_usb: force the string buffer NULL-terminated
        - net/ethernet/qlogic/qed: force the string buffer NULL-terminated
        - NFSv4: Fix a credential refcount leak in nfs41_check_delegation_stateid
        - NFSv4: When recovering state fails with EAGAIN, retry the same recovery
        - NFSv4.1: Fix open stateid recovery
        - NFSv4.1: Only reap expired delegations
        - NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim()
        - HID: input: fix a4tech horizontal wheel custom usage
        - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL
        - sched/deadline: Fix double accounting of rq/running bw in push & pull
        - s390/mm: fix dump_pagetables top level page table walking
        - ata: rb532_cf: Fix unused variable warning in rb532_pata_driver_probe
        - net: cxgb3_main: Fix a resource leak in a error path in 'init_one()'
        - drm/amdgpu: pin the csb buffer on hw init for gfx v8
        - net: hisilicon: make hip04_tx_reclaim non-reentrant
        - net: hisilicon: fix hip04-xmit never return TX_BUSY
        - net: hisilicon: Fix dma_map_single failed on arm64
        - NFSv4: Ensure state recovery handles ETIMEDOUT correctly
        - libata: have ata_scsi_rw_xlat() fail invalid passthrough requests
        - libata: add SG safety checks in SFF pio transfers
        - x86/lib/cpu: Address missing prototypes warning
        - drm/vmwgfx: fix memory leak when too many retries have occurred
        - block: aoe: Fix kernel crash due to atomic sleep when exiting
        - perf ftrace: Fix failure to set cpumask when only one cpu is present
        - perf cpumap: Fix writing to illegal memory in handling cpumap mask
        - perf pmu-events: Fix missing "cpu_clk_unhalted.core" event
        - selftests: kvm: Adding config fragments
        - HID: wacom: correct misreported EKR ring values
        - HID: wacom: Correct distance scale for 2nd-gen Intuos devices
        - Revert "dm bufio: fix deadlock with loop device"
        - ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply
        - libceph: fix PG split vs OSD (re)connect race
        - drm/nouveau: Don't retry infinitely when receiving no data on i2c over AUX
        - gpiolib: never report open-drain/source lines as 'input' to user-space
        - userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx
        - x86/retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386
        - x86/apic: Handle missing global clockevent gracefully
        - x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h
        - x86/boot: Save fields explicitly, zero out everything else
        - x86/boot: Fix boot regression caused by bootparam sanitizing
        - dm kcopyd: always complete failed jobs
        - dm btree: fix order of block initialization in btree_split_beneath
        - dm space map metadata: fix missing store of apply_bops() return value
        - dm table: fix invalid memory accesses with too high sector number
        - dm zoned: improve error handling in reclaim
        - dm zoned: improve error handling in i/o map code
        - dm zoned: properly handle backing device failure
        - genirq: Properly pair kobject_del() with kobject_add()
        - mm, page_alloc: move_freepages should not examine struct page of reserved
          memory
        - mm, page_owner: handle THP splits correctly
        - mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely
        - mm/zsmalloc.c: fix race condition in zs_destroy_pool
        - mm/kasan: fix false positive invalid-free reports with
          CONFIG_KASAN_SW_TAGS=y
        - xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT
        - dm zoned: fix potential NULL dereference in dmz_do_reclaim()
        - powerpc: Allow flush_(inval_)dcache_range to work across ranges >4GB
    
      * Disco update: upstream stable patchset 2019-08-29 (LP: #1841994)
        - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
        - gcc-9: don't warn about uninitialized variable
        - driver core: Establish order of operations for device_add and device_del via
          bitflag
        - drivers/base: Introduce kill_device()
        - libnvdimm/bus: Prevent duplicate device_unregister() calls
        - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant
        - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock
        - HID: wacom: fix bit shift for Cintiq Companion 2
        - HID: Add quirk for HP X1200 PIXART OEM mouse
        - atm: iphase: Fix Spectre v1 vulnerability
        - bnx2x: Disable multi-cos feature.
        - ife: error out when nla attributes are empty
        - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6
        - ip6_tunnel: fix possible use-after-free on xmit
        - ipip: validate header length in ipip_tunnel_xmit
        - mlxsw: spectrum: Fix error path in mlxsw_sp_module_init()
        - mvpp2: fix panic on module removal
        - mvpp2: refactor MTU change code
        - net: bridge: delete local fdb on device init failure
        - net: bridge: mcast: don't delete permanent entries when fast leave is
          enabled
        - net: fix ifindex collision during namespace removal
        - net/mlx5e: always initialize frag->last_in_page
        - net/mlx5: Use reversed order when unregister devices
        - net: phylink: Fix flow control for fixed-link
        - net: qualcomm: rmnet: Fix incorrect UL checksum offload logic
        - net: sched: Fix a possible null-pointer dereference in dequeue_func()
        - net sched: update vlan action for batched events operations
        - net: sched: use temporary variable for actions indexes
        - net/smc: do not schedule tx_work in SMC_CLOSED state
        - NFC: nfcmrvl: fix gpio-handling regression
        - ocelot: Cancel delayed work before wq destruction
        - tipc: compat: allow tipc commands without arguments
        - tun: mark small packets as owned by the tap sock
        - net/mlx5: Fix modify_cq_in alignment
        - net/mlx5e: Prevent encap flow counter update async to user query
        - r8169: don't use MSI before RTL8168d
        - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
        - cgroup: Call cgroup_release() before __exit_signal()
        - cgroup: Implement css_task_iter_skip()
        - cgroup: Include dying leaders with live threads in PROCS iterations
        - cgroup: css_task_iter_skip()'d iterators must be advanced before accessed
        - cgroup: Fix css_task_iter_advance_css_set() cset skip condition
        - spi: bcm2835: Fix 3-wire mode if DMA is enabled
        - ALSA: usb-audio: Sanity checks for each pipe and EP types
        - ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
        - drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case
        - net: phylink: don't start and stop SGMII PHYs in SFP modules twice
        - net: phy: mscc: initialize stats array
        - bpf: fix XDP vlan selftests test_xdp_vlan.sh
        - selftests/bpf: add wrapper scripts for test_xdp_vlan.sh
        - selftests/bpf: reduce time to execute test_xdp_vlan.sh
        - net: fix bpf_xdp_adjust_head regression for generic-XDP
        - hv_sock: Fix hang when a connection is closed
        - iio: cros_ec_accel_legacy: Fix incorrect channel setting
        - iio: adc: max9611: Fix misuse of GENMASK macro
        - staging: gasket: apex: fix copy-paste typo
        - staging: android: ion: Bail out upon SIGKILL when allocating memory.
        - crypto: ccp - Fix oops by properly managing allocated structures
        - crypto: ccp - Add support for valid authsize values less than 16
        - crypto: ccp - Ignore tag length when decrypting GCM ciphertext
        - usb: usbfs: fix double-free of usb memory upon submiturb error
        - usb: iowarrior: fix deadlock on disconnect
        - sound: fix a memory leak bug
        - mmc: cavium: Set the correct dma max segment size for mmc_host
        - mmc: cavium: Add the missing dma unmap when the dma has finished.
        - loop: set PF_MEMALLOC_NOIO for the worker thread
        - Input: usbtouchscreen - initialize PM mutex before using it
        - Input: elantech - enable SMBus on new (2018+) systems
        - Input: synaptics - enable RMI mode for HP Spectre X360
        - perf annotate: Fix s390 gap between kernel end and module start
        - perf db-export: Fix thread__exec_comm()
        - perf record: Fix module size on s390
        - x86/purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS
        - gfs2: gfs2_walk_metadata fix
        - usb: host: xhci-rcar: Fix timeout in xhci_suspend()
        - usb: yurex: Fix use-after-free in yurex_delete
        - usb: typec: tcpm: free log buf memory when remove debug file
        - usb: typec: tcpm: remove tcpm dir if no children
        - usb: typec: tcpm: Add NULL check before dereferencing config
        - usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests
        - can: rcar_canfd: fix possible IRQ storm on high load
        - can: peak_usb: fix potential double kfree_skb()
        - netfilter: nfnetlink: avoid deadlock due to synchronous request_module
        - vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn
        - netfilter: Fix rpfilter dropping vrf packets by mistake
        - netfilter: conntrack: always store window size un-scaled
        - netfilter: nft_hash: fix symhash with modulus one
        - scripts/sphinx-pre-install: fix script for RHEL/CentOS
        - drm/amd/display: Wait for backlight programming completion in set backlight
          level
        - drm/amd/display: use encoder's engine id to find matched free audio device
        - drm/amd/display: Fix dc_create failure handling and 666 color depths
        - drm/amd/display: Only enable audio if speaker allocation exists
        - drm/amd/display: Increase size of audios array
        - iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND
        - nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN
        - mac80211: don't warn about CW params when not using them
        - allocate_flower_entry: should check for null deref
        - hwmon: (nct6775) Fix register address and added missed tolerance for nct6106
        - drm: silence variable 'conn' set but not used
        - cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init()
        - s390/qdio: add sanity checks to the fast-requeue path
        - ALSA: compress: Fix regression on compressed capture streams
        - ALSA: compress: Prevent bypasses of set_params
        - ALSA: compress: Don't allow paritial drain operations on capture streams
        - ALSA: compress: Be more restrictive about when a drain is allowed
        - perf tools: Fix proper buffer size for feature processing
        - perf probe: Avoid calling freeing routine multiple times for same pointer
        - drbd: dynamically allocate shash descriptor
        - ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id()
        - ARM: davinci: fix sleep.S build error on ARMv4
        - ARM: dts: bcm: bcm47094: add missing #cells for mdio-bus-mux
        - scsi: megaraid_sas: fix panic on loading firmware crashdump
        - scsi: ibmvfc: fix WARN_ON during event pool release
        - scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG
        - test_firmware: fix a memory leak bug
        - tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop
        - perf/core: Fix creating kernel counters for PMUs that override event->cpu
        - s390/dma: provide proper ARCH_ZONE_DMA_BITS value
        - HID: sony: Fix race condition between rumble and device remove.
        - x86/purgatory: Do not use __builtin_memcpy and __builtin_memset
        - ALSA: usb-audio: fix a memory leak bug
        - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
        - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
        - hwmon: (nct7802) Fix wrong detection of in4 presence
        - drm/i915: Fix wrong escape clock divisor init for GLK
        - ALSA: firewire: fix a memory leak bug
        - ALSA: hiface: fix multiple memory leak bugs
        - ALSA: hda - Don't override global PCM hw info flag
        - ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457)
        - mac80211: don't WARN on short WMM parameters from AP
        - dax: dax_layout_busy_page() should not unmap cow pages
        - SMB3: Fix deadlock in validate negotiate hits reconnect
        - smb3: send CAP_DFS capability during session setup
        - NFSv4: Fix an Oops in nfs4_do_setattr
        - KVM: Fix leak vCPU's VMCS value into other pCPU
        - mwifiex: fix 802.11n/WPA detection
        - iwlwifi: don't unmap as page memory that was mapped as single
        - iwlwifi: mvm: fix an out-of-bound access
        - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41
        - iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support
        - iio: adc: gyroadc: fix uninitialized return code
        - staging: wilc1000: flush the workqueue before deinit the host
        - can: flexcan: fix stop mode acknowledgment
        - can: flexcan: fix an use-after-free in flexcan_setup_stop_mode()
        - powerpc: fix off by one in max_zone_pfn initialization for ZONE_DMA
        - scripts/sphinx-pre-install: don't use LaTeX with CentOS 7
        - rq-qos: don't reset has_sleepers on spurious wakeups
        - rq-qos: set ourself TASK_UNINTERRUPTIBLE after we schedule
        - rq-qos: use a mb for got_token
        - drm/amd/display: Clock does not lower in Updateplanes
        - drm/amd/display: fix DMCU hang when going into Modern Standby
        - drm/amd/display: allocate 4 ddc engines for RV2
        - mac80211: fix possible memory leak in ieee80211_assign_beacon
        - hwmon: (occ) Fix division by zero issue
        - ARM: dts: imx6ul: fix clock frequency property name of I2C buses
        - powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails
        - arm64: Force SSBS on context switch
        - arm64: entry: SP Alignment Fault doesn't write to FAR_EL1
        - drm/msm/dpu: Correct dpu encoder spinlock initialization
        - perf script: Fix off by one in brstackinsn IPC computation
        - perf stat: Fix segfault for event group in repeat mode
        - nvme: ignore subnqn for ADATA SX6000LNP
        - nvme: fix memory leak caused by incorrect subsystem free
        - perf/x86: Apply more accurate check on hypervisor platform
        - gen_compile_commands: lower the entry count threshold
        - NFSv4: Fix delegation state recovery
        - NFSv4: Check the return value of update_open_stateid()
        - KVM: arm/arm64: Sync ICH_VMCR_EL2 back when about to block
        - iwlwifi: mvm: fix a use-after-free bug in iwl_mvm_tx_tso_segment
        - sh: kernel: hw_breakpoint: Fix missing break in switch statement
        - seq_file: fix problem when seeking mid-record
        - mm/hmm: fix bad subpage pointer in try_to_unmap_one
        - mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and
          MPOL_MF_STRICT were specified
        - mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind
        - mm/memcontrol.c: fix use after free in mem_cgroup_iter()
        - mm/usercopy: use memory range to be accessed for wraparound check
        - cpufreq: schedutil: Don't skip freq update when limits change
        - xtensa: add missing isync to the cpu_reset TLB code
        - ALSA: hda/realtek - Add quirk for HP Envy x360
        - ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term
        - ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit
        - ALSA: hda - Apply workaround for another AMD chip 1022:1487
        - ALSA: hda - Fix a memory leak bug
        - HID: holtek: test for sanity of intfdata
        - HID: hiddev: avoid opening a disconnected device
        - HID: hiddev: do cleanup in failure of opening a device
        - Input: kbtab - sanity check for endpoint type
        - Input: iforce - add sanity checks
        - net: usb: pegasus: fix improper read if get_registers() fail
        - netfilter: ebtables: also count base chain policies
        - riscv: Make __fstate_clean() work correctly.
        - clk: at91: generated: Truncate divisor to GENERATED_MAX_DIV + 1
        - clk: sprd: Select REGMAP_MMIO to avoid compile errors
        - clk: renesas: cpg-mssr: Fix reset control race condition
        - xen/pciback: remove set but not used variable 'old_state'
        - irqchip/gic-v3-its: Free unused vpt_page when alloc vpe table fail
        - irqchip/irq-imx-gpcv2: Forward irq type to parent
        - perf header: Fix divide by zero error if f_header.attr_size==0
        - perf header: Fix use of unitialized value warning
        - libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
        - drm/bridge: lvds-encoder: Fix build error while CONFIG_DRM_KMS_HELPER=m
        - Btrfs: fix deadlock between fiemap and transaction commits
        - scsi: hpsa: correct scsi command status issue after reset
        - scsi: qla2xxx: Fix possible fcport null-pointer dereferences
        - drm/amdgpu: fix a potential information leaking bug
        - ata: libahci: do not complain in case of deferred probe
        - kbuild: modpost: handle KBUILD_EXTRA_SYMBOLS only for external modules
        - kbuild: Check for unknown options with cc-option usage in Kconfig and clang
        - arm64/efi: fix variable 'si' set but not used
        - arm64: unwind: Prohibit probing on return_address()
        - arm64/mm: fix variable 'pud' set but not used
        - IB/core: Add mitigation for Spectre V1
        - IB/mlx5: Fix MR registration flow to use UMR properly
        - IB/mad: Fix use-after-free in ib mad completion handling
        - drm: msm: Fix add_gpu_components
        - drm/exynos: fix missing decrement of retry counter
        - Revert "kmemleak: allow to coexist with fault injection"
        - ocfs2: remove set but not used variable 'last_hash'
        - asm-generic: fix -Wtype-limits compiler warnings
        - arm64: KVM: regmap: Fix unexpected switch fall-through
        - staging: comedi: dt3000: Fix signed integer overflow 'divider * base'
        - staging: comedi: dt3000: Fix rounding up of timer divisor
        - iio: adc: max9611: Fix temperature reading in probe
        - USB: core: Fix races in character device registration and deregistraion
        - usb: gadget: udc: renesas_usb3: Fix sysfs interface of "role"
        - usb: cdc-acm: make sure a refcount is taken early enough
        - USB: CDC: fix sanity checks in CDC union parser
        - USB: serial: option: add D-Link DWM-222 device ID
        - USB: serial: option: Add support for ZTE MF871A
        - USB: serial: option: add the BroadMobi BM818 card
        - USB: serial: option: Add Motorola modem UARTs
        - arm64: ftrace: Ensure module ftrace trampoline is coherent with I-side
        - netfilter: conntrack: Use consistent ct id hash calculation
        - Input: psmouse - fix build error of multiple definition
        - bnx2x: Fix VF's VLAN reconfiguration in reload.
        - bonding: Add vlan tx offload to hw_enc_features
        - net: dsa: Check existence of .port_mdb_add callback before calling it
        - net/mlx4_en: fix a memory leak bug
        - net/packet: fix race in tpacket_snd()
        - sctp: fix memleak in sctp_send_reset_streams
        - sctp: fix the transport error_count check
        - team: Add vlan tx offload to hw_enc_features
        - tipc: initialise addr_trail_end when setting node addresses
        - xen/netback: Reset nr_frags before freeing skb
        - net/mlx5e: Only support tx/rx pause setting for port owner
        - net/mlx5e: Use flow keys dissector to parse packets for ARFS
        - mm/z3fold.c: fix z3fold_destroy_pool() ordering
        - mm, vmscan: do not special-case slab reclaim when watermarks are boosted
        - drm/amdgpu: fix gfx9 soft recovery
        - riscv: Correct the initialized flow of FP register
        - blk-mq: move cancel of requeue_work to the front of blk_exit_queue
        - IB/mlx5: Replace kfree with kvfree
        - dma-mapping: check pfn validity in dma_common_{mmap,get_sgtable}
        - f2fs: fix to read source block before invalidating it
        - tools perf beauty: Fix usbdevfs_ioctl table generator to handle _IOC()
        - ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
        - drm/bridge: tc358764: Fix build error
        - tracing: Fix header include guards in trace event headers
        - drm/amdkfd: Fix byte align on VegaM
        - RDMA/restrack: Track driver QP types in resource tracker
        - RDMA/mlx5: Release locks during notifier unregister
        - arm64: kprobes: Recover pstate.D in single-step exception handler
        - arm64: Make debug exception handlers visible from RCU
        - page flags: prioritize kasan bits over last-cpuid
        - bnxt_en: Fix VNIC clearing logic for 57500 chips.
        - bnxt_en: Improve RX doorbell sequence.
        - bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
        - bnxt_en: Suppress HWRM errors for HWRM_NVM_GET_VARIABLE command
        - bnxt_en: Use correct src_fid to determine direction of the flow
        - bnxt_en: Fix to include flow direction in L2 key
        - net sched: update skbedit action for batched events operations
        - tc-testing: updated skbedit action tests with batch create/delete
    
      * Disco update: upstream stable patchset 2019-08-27 (LP: #1841681)
        - hv_sock: Add support for delayed close
        - vsock: correct removal of socket from the list
        - ISDN: hfcsusb: checking idx of ep configuration
        - media: au0828: fix null dereference in error path
        - ath10k: Change the warning message string
        - media: cpia2_usb: first wake up, then free in disconnect
        - media: pvrusb2: use a different format for warnings
        - NFS: Cleanup if nfs_match_client is interrupted
        - media: radio-raremono: change devm_k*alloc to k*alloc
        - Bluetooth: hci_uart: check for missing tty operations
        - sched/fair: Don't free p->numa_faults with concurrent readers
        - sched/fair: Use RCU accessors consistently for ->numa_group
        - /proc/<pid>/cmdline: remove all the special cases
        - /proc/<pid>/cmdline: add back the setproctitle() special case
        - drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
        - Fix allyesconfig output.
        - ceph: hold i_ceph_lock when removing caps for freeing inode
        - ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
        - xfrm: policy: fix bydst hlist corruption on hash rebuild
        - nvme: fix multipath crash when ANA is deactivated
        - ARM: riscpc: fix DMA
        - ARM: dts: rockchip: Make rk3288-veyron-minnie run at hs200
        - ARM: dts: rockchip: Make rk3288-veyron-mickey's emmc work again
        - ARM: dts: rockchip: Mark that the rk3288 timer might stop in suspend
        - ftrace: Enable trampoline when rec count returns back to one
        - dmaengine: tegra-apb: Error out if DMA_PREP_INTERRUPT flag is unset
        - arm64: dts: rockchip: fix isp iommu clocks and power domain
        - kernel/module.c: Only return -EEXIST for modules that have finished loading
        - firmware/psci: psci_checker: Park kthreads before stopping them
        - MIPS: lantiq: Fix bitfield masking
        - dmaengine: rcar-dmac: Reject zero-length slave DMA requests
        - clk: tegra210: fix PLLU and PLLU_OUT1
        - fs/adfs: super: fix use-after-free bug
        - clk: sprd: Add check for return value of sprd_clk_regmap_init()
        - btrfs: fix minimum number of chunk errors for DUP
        - btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit()
        - cifs: Fix a race condition with cifs_echo_request
        - ceph: fix improper use of smp_mb__before_atomic()
        - ceph: return -ERANGE if virtual xattr value didn't fit in buffer
        - ACPI: blacklist: fix clang warning for unused DMI table
        - scsi: zfcp: fix GCC compiler warning emitted with -Wmaybe-uninitialized
        - perf version: Fix segfault due to missing OPT_END()
        - x86: kvm: avoid constant-conversion warning
        - ACPI: fix false-positive -Wuninitialized warning
        - be2net: Signal that the device cannot transmit during reconfiguration
        - x86/apic: Silence -Wtype-limits compiler warnings
        - x86: math-emu: Hide clang warnings for 16-bit overflow
        - mm/cma.c: fail if fixed declaration can't be honored
        - lib/test_overflow.c: avoid tainting the kernel and fix wrap size
        - lib/test_string.c: avoid masking memset16/32/64 failures
        - coda: add error handling for fget
        - coda: fix build using bare-metal toolchain
        - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
          headers
        - drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings
        - ipc/mqueue.c: only perform resource calculation if user valid
        - xen/pv: Fix a boot up hang revealed by int3 self test
        - x86/kvm: Don't call kvm_spurious_fault() from .fixup
        - x86/paravirt: Fix callee-saved function ELF sizes
        - x86, boot: Remove multiple copy of static function sanitize_boot_params()
        - drm/nouveau: fix memory leak in nouveau_conn_reset()
        - kconfig: Clear "written" flag to avoid data loss
        - kbuild: initialize CLANG_FLAGS correctly in the top Makefile
        - Btrfs: fix incremental send failure after deduplication
        - Btrfs: fix race leading to fs corruption after transaction abort
        - mmc: dw_mmc: Fix occasional hang after tuning on eMMC
        - mmc: meson-mx-sdio: Fix misuse of GENMASK macro
        - gpiolib: fix incorrect IRQ requesting of an active-low lineevent
        - IB/hfi1: Fix Spectre v1 vulnerability
        - mtd: rawnand: micron: handle on-die "ECC-off" devices correctly
        - selinux: fix memory leak in policydb_init()
        - ALSA: hda: Fix 1-minute detection delay when i915 module is not available
        - mm: vmscan: check if mem cgroup is disabled or not before calling memcg slab
          shrinker
        - s390/dasd: fix endless loop after read unit address configuration
        - cgroup: kselftest: relax fs_spec checks
        - parisc: Fix build of compressed kernel even with debug enabled
        - drivers/perf: arm_pmu: Fix failure path in PM notifier
        - arm64: compat: Allow single-byte watchpoints on all addresses
        - arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
        - nbd: replace kill_bdev() with __invalidate_device() again
        - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
        - IB/mlx5: Fix unreg_umr to ignore the mkey state
        - IB/mlx5: Use direct mkey destroy command upon UMR unreg failure
        - IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache
        - IB/mlx5: Fix clean_mr() to work in the expected order
        - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
        - IB/hfi1: Check for error on call to alloc_rsm_map_table
        - drm/i915/gvt: fix incorrect cache entry for guest page mapping
        - eeprom: at24: make spd world-readable again
        - gcc-9: properly declare the {pv,hv}clock_page storage
        - scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
        - Documentation: Add swapgs description to the Spectre v1 documentation
        - arm64: dts: marvell: mcbin: enlarge PCI memory window
        - PCI: OF: Initialize dev->fwnode appropriately
        - arm64: qcom: qcs404: Add reset-cells to GCC node
        - swiotlb: fix phys_addr_t overflow warning
        - arm64: dts: rockchip: Fix USB3 Type-C on rk3399-sapphire
        - btrfs: Flush before reflinking any extent to prevent NOCOW write falling
          back to COW without data reservation
        - virtio-mmio: add error check for platform_get_irq
        - cifs: fix crash in cifs_dfs_do_automount
        - KVM: nVMX: Ignore segment base for VMX memory operand when segment not FS or
          GS
        - bpf: fix BTF verifier size resolution logic
        - mm/slab_common.c: work around clang bug #42570
        - mm/ioremap: check virtual address alignment while creating huge mappings
        - nds32: fix asm/syscall.h
        - mm/hotplug: make remove_memory() interface usable
        - crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL
        - bpf: Disable GCC -fgcse optimization for ___bpf_prog_run()
        - kbuild: modpost: include .*.cmd files only when targets exist
        - dax: Fix missed wakeup in put_unlocked_entry()
        - fgraph: Remove redundant ftrace_graph_notrace_addr() test
        - mmc: host: sdhci-sprd: Fix the missing pm_runtime_put_noidle()
        - mmc: mmc_spi: Enable stable writes
        - gpiolib: Preserve desc->flags when setting state
        - gpio: don't WARN() on NULL descs if gpiolib is disabled
        - i2c: at91: disable TXRDY interrupt after sending data
        - i2c: at91: fix clk_offset for sama5d2
        - mm: migrate: fix reference check race between __find_get_block() and
          migration
        - mm/migrate.c: initialize pud_entry in migrate_vma()
        - parisc: Add archclean Makefile target
        - parisc: Strip debug info from kernel before creating compressed vmlinuz
        - RDMA/bnxt_re: Honor vlan_id in GID entry comparison
        - drm/i915/perf: fix ICL perf register offsets
    
      * Disco update: upstream stable patchset 2019-08-22 (LP: #1841121)
        - hvsock: fix epollout hang from race condition
        - drm/panel: simple: Fix panel_simple_dsi_probe
        - iio: adc: stm32-dfsdm: manage the get_irq error case
        - iio: adc: stm32-dfsdm: missing error case during probe
        - staging: vt6656: use meaningful error code during buffer allocation
        - usb: core: hub: Disable hub-initiated U1/U2
        - tty: max310x: Fix invalid baudrate divisors calculator
        - pinctrl: rockchip: fix leaked of_node references
        - tty: serial: cpm_uart - fix init when SMC is relocated
        - drm/amd/display: Fill prescale_params->scale for RGB565
        - drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE
        - drm/amd/display: Disable ABM before destroy ABM struct
        - drm/amdkfd: Fix a potential memory leak
        - drm/amdkfd: Fix sdma queue map issue
        - drm/edid: Fix a missing-check bug in drm_load_edid_firmware()
        - PCI: Return error if cannot probe VF
        - drm/bridge: tc358767: read display_props in get_modes()
        - drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz
        - gpu: host1x: Increase maximum DMA segment size
        - drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry
        - drm/crc-debugfs: Also sprinkle irqrestore over early exits
        - memstick: Fix error cleanup path of memstick_init
        - tty/serial: digicolor: Fix digicolor-usart already registered warning
        - tty: serial: msm_serial: avoid system lockup condition
        - serial: 8250: Fix TX interrupt handling condition
        - drm/amd/display: Always allocate initial connector state state
        - drm/virtio: Add memory barriers for capset cache.
        - phy: renesas: rcar-gen2: Fix memory leak at error paths
        - drm/amd/display: fix compilation error
        - powerpc/pseries/mobility: prevent cpu hotplug during DT update
        - drm/rockchip: Properly adjust to a true clock in adjusted_mode
        - serial: imx: fix locking in set_termios()
        - tty: serial_core: Set port active bit in uart_port_activate
        - usb: gadget: Zero ffs_io_data
        - mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width
        - powerpc/pci/of: Fix OF flags parsing for 64bit BARs
        - drm/msm: Depopulate platform on probe failure
        - serial: mctrl_gpio: Check if GPIO property exisits before requesting it
        - PCI: sysfs: Ignore lockdep for remove attribute
        - i2c: stm32f7: fix the get_irq error cases
        - kbuild: Add -Werror=unknown-warning-option to CLANG_FLAGS
        - genksyms: Teach parser about 128-bit built-in types
        - PCI: xilinx-nwl: Fix Multi MSI data programming
        - iio: iio-utils: Fix possible incorrect mask calculation
        - powerpc/cacheflush: fix variable set but not used
        - powerpc/xmon: Fix disabling tracing while in xmon
        - recordmcount: Fix spurious mcount entries on powerpc
        - mfd: madera: Add missing of table registration
        - mfd: core: Set fwnode for created devices
        - mfd: arizona: Fix undefined behavior
        - mfd: hi655x-pmic: Fix missing return value check for
          devm_regmap_init_mmio_clk
        - mm/swap: fix release_pages() when releasing devmap pages
        - um: Silence lockdep complaint about mmap_sem
        - powerpc/4xx/uic: clear pending interrupt after irq type/pol change
        - RDMA/i40iw: Set queue pair state when being queried
        - serial: sh-sci: Terminate TX DMA during buffer flushing
        - serial: sh-sci: Fix TX DMA buffer flushing and workqueue races
        - IB/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE
        - powerpc/mm: Handle page table allocation failures
        - IB/ipoib: Add child to parent list only if device initialized
        - arm64: assembler: Switch ESB-instruction with a vanilla nop if
          !ARM64_HAS_RAS
        - PCI: mobiveil: Fix PCI base address in MEM/IO outbound windows
        - PCI: mobiveil: Fix the Class Code field
        - kallsyms: exclude kasan local symbols on s390
        - PCI: mobiveil: Initialize Primary/Secondary/Subordinate bus numbers
        - PCI: mobiveil: Use the 1st inbound window for MEM inbound transactions
        - perf test mmap-thread-lookup: Initialize variable to suppress memory
          sanitizer warning
        - perf stat: Fix use-after-freed pointer detected by the smatch tool
        - perf top: Fix potential NULL pointer dereference detected by the smatch tool
        - perf session: Fix potential NULL pointer dereference found by the smatch
          tool
        - perf annotate: Fix dereferencing freed memory found by the smatch tool
        - perf hists browser: Fix potential NULL pointer dereference found by the
          smatch tool
        - RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM
        - PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB
        - powerpc/boot: add {get, put}_unaligned_be32 to xz_config.h
        - block: init flush rq ref count to 1
        - f2fs: avoid out-of-range memory access
        - mailbox: handle failed named mailbox channel request
        - dlm: check if workqueues are NULL before flushing/destroying
        - powerpc/eeh: Handle hugepages in ioremap space
        - block/bio-integrity: fix a memory leak bug
        - sh: prevent warnings when using iounmap
        - mm/kmemleak.c: fix check for softirq context
        - 9p: pass the correct prototype to read_cache_page
        - mm/gup.c: mark undo_dev_pagemap as __maybe_unused
        - mm/gup.c: remove some BUG_ONs from get_gate_page()
        - memcg, fsnotify: no oom-kill for remote memcg charging
        - mm/mmu_notifier: use hlist_add_head_rcu()
        - proc: use down_read_killable mmap_sem for /proc/pid/smaps_rollup
        - proc: use down_read_killable mmap_sem for /proc/pid/pagemap
        - proc: use down_read_killable mmap_sem for /proc/pid/clear_refs
        - proc: use down_read_killable mmap_sem for /proc/pid/map_files
        - cxgb4: reduce kernel stack usage in cudbg_collect_mem_region()
        - proc: use down_read_killable mmap_sem for /proc/pid/maps
        - locking/lockdep: Fix lock used or unused stats error
        - mm: use down_read_killable for locking mmap_sem in access_remote_vm
        - locking/lockdep: Hide unused 'class' variable
        - usb: wusbcore: fix unbalanced get/put cluster_id
        - usb: pci-quirks: Correct AMD PLL quirk detection
        - btrfs: inode: Don't compress if NODATASUM or NODATACOW set
        - x86/sysfb_efi: Add quirks for some devices with swapped width and height
        - x86/speculation/mds: Apply more accurate check on hypervisor platform
        - binder: prevent transactions to context manager from its own process.
        - fpga-manager: altera-ps-spi: Fix build error
        - mei: me: add mule creek canyon (EHL) device ids
        - hpet: Fix division by zero in hpet_time_div()
        - ALSA: ac97: Fix double free of ac97_codec_device
        - powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask()
        - libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl()
        - access: avoid the RCU grace period for the temporary subjective credentials
        - regulator: 88pm800: fix warning same module names
        - media: drivers: media: coda: fix warning same module names
        - btrfs: shut up bogus -Wmaybe-uninitialized warning
        - drm/virtio: set seqno for dma-fence
        - ipmi_si: fix unexpected driver unregister warning
        - drm/bochs: Fix connector leak during driver unload
        - drm/msm/a6xx: Check for ERR or NULL before iounmap
        - ipmi:ssif: Only unregister the platform driver if it was registered
        - ipmi_ssif: fix unexpected driver unregister warning
        - drm/amd/display: Disable cursor when offscreen in negative direction
        - drm/amdgpu: Reserve shared fence for eviction fence
        - f2fs: fix to avoid deadloop if data_flush is on
        - tools: PCI: Fix broken pcitest compilation
        - drm/amd/display: Increase Backlight Gain Step Size
        - f2fs: Fix accounting for unusable blocks
        - f2fs: Lower threshold for disable_cp_again
        - drm/vkms: Forward timer right after drm_crtc_handle_vblank
        - i2c: nvidia-gpu: resume ccgx i2c client
        - PCI: endpoint: Allocate enough space for fixed size BAR
        - dma-remap: Avoid de-referencing NULL atomic_pool
        - platform/x86: asus-wmi: Increase input buffer size of WMI methods
        - iio: adxl372: fix iio_triggered_buffer_{pre,post}enable positions
        - serial: uartps: Use the same dynamic major number for all ports
        - kvm: vmx: fix limit checking in get_vmx_mem_address()
        - KVM: nVMX: Intercept VMWRITEs to GUEST_{CS,SS}_AR_BYTES
        - kvm: vmx: segment limit check: use access length
        - powerpc/rtas: retry when cpu offline races with suspend/migration
        - fixdep: check return value of printf() and putchar()
        - KVM: nVMX: Stash L1's CR3 in vmcs01.GUEST_CR3 on nested entry w/o EPT
        - perf trace: Fix potential NULL pointer dereference found by the smatch tool
        - perf map: Fix potential NULL pointer dereference found by smatch tool
        - perf intel-bts: Fix potential NULL pointer dereference found by the smatch
          tool
        - RDMA/core: Fix race when resolving IP address
        - nvme-pci: check for NULL return from pci_alloc_p2pmem()
        - nvme-pci: limit max_hw_sectors based on the DMA max mapping size
        - nvme-tcp: don't use sendpage for SLAB pages
        - nvme-tcp: set the STABLE_WRITES flag when data digests are enabled
        - powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
        - nvme: fix NULL deref for fabrics options
        - mm/mincore.c: fix race between swapoff and mincore
        - mm, swap: fix race between swapoff and some swap operations
        - usb-storage: Add a limitation for blk_queue_max_hw_sectors()
        - KVM: PPC: Book3S HV: Always save guest pmu for guest capable of nesting
        - KVM: PPC: Book3S HV: Save and restore guest visible PSSCR bits on pseries
        - selinux: check sidtab limit before adding a new entry
        - x86/stacktrace: Prevent access_ok() warnings in arch_stack_walk_user()
        - eeprom: make older eeprom drivers select NVMEM_SYSFS
        - drm/panel: Add support for Armadeus ST0700 Adapt
        - ALSA: hda - Fix intermittent CORB/RIRB stall on Intel chips
        - powerpc/mm: Limit rma_size to 1TB when running without HV mode
        - powerpc/pmu: Set pmcregs_in_use in paca when running as LPAR
        - iommu/vt-d: Don't queue_iova() if there is no flush queue
        - iommu/iova: Remove stale cached32_node
        - iommu/iova: Fix compilation error with !CONFIG_IOMMU_IOVA
        - libnvdimm/region: Register badblocks before namespaces
    
      * Line 6 POD HD500 driver fault (LP: #1790595) // Disco update: upstream
        stable patchset 2019-08-22 (LP: #1841121)
        - ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1
    
      * Disco update: upstream stable patchset 2019-08-21 (LP: #1840961)
        - bnx2x: Prevent load reordering in tx completion processing
        - caif-hsi: fix possible deadlock in cfhsi_exit_module()
        - hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback()
        - igmp: fix memory leak in igmpv3_del_delrec()
        - ipv4: don't set IPv6 only flags to IPv4 addresses
        - ipv6: rt6_check should return NULL if 'from' is NULL
        - ipv6: Unlink sibling route in case of failure
        - net: bcmgenet: use promisc for unsupported filters
        - net: dsa: mv88e6xxx: wait after reset deactivation
        - net: make skb_dst_force return true when dst is refcounted
        - net: neigh: fix multiple neigh timer scheduling
        - net: openvswitch: fix csum updates for MPLS actions
        - net: phy: sfp: hwmon: Fix scaling of RX power
        - net: stmmac: Re-work the queue selection for TSO packets
        - nfc: fix potential illegal memory access
        - r8169: fix issue with confused RX unit after PHY power-down on RTL8411b
        - rxrpc: Fix send on a connected, but unbound socket
        - sctp: fix error handling on stream scheduler initialization
        - sky2: Disable MSI on ASUS P6T
        - tcp: be more careful in tcp_fragment()
        - tcp: fix tcp_set_congestion_control() use from bpf hook
        - tcp: Reset bytes_acked and bytes_received when disconnecting
        - vrf: make sure skb->data contains ip header to make routing
        - net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn
        - macsec: fix use-after-free of skb during RX
        - macsec: fix checksumming after decryption
        - netrom: fix a memory leak in nr_rx_frame()
        - netrom: hold sock when setting skb->destructor
        - net_sched: unset TCQ_F_CAN_BYPASS when adding filters
        - net/tls: make sure offload also gets the keys wiped
        - sctp: not bind the socket in sctp_connect
        - net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
        - net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
        - net: bridge: don't cache ether dest pointer on input
        - net: bridge: stp: don't cache eth dest pointer before skb pull
        - dma-buf: balance refcount inbalance
        - dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc
        - gpio: davinci: silence error prints in case of EPROBE_DEFER
        - MIPS: lb60: Fix pin mappings
        - perf/core: Fix exclusive events' grouping
        - perf/core: Fix race between close() and fork()
        - ext4: don't allow any modifications to an immutable file
        - ext4: enforce the immutable flag on open files
        - mm: add filemap_fdatawait_range_keep_errors()
        - jbd2: introduce jbd2_inode dirty range scoping
        - ext4: use jbd2_inode dirty range scoping
        - ext4: allow directory holes
        - KVM: nVMX: do not use dangling shadow VMCS after guest reset
        - KVM: nVMX: Clear pending KVM_REQ_GET_VMCS12_PAGES when leaving nested
        - mm: vmscan: scan anonymous pages on file refaults
        - net: sched: verify that q!=NULL before setting q->flags
        - selftests: txring_overwrite: fix incorrect test of mmap() return value
        - net/tls: reject offload of TLS 1.3
        - net/mlx5e: Rx, Fix checksum calculation for new hardware
        - gpiolib: of: fix a memory leak in of_gpio_flags_quirks()
        - sd_zbc: Fix report zones buffer allocation
        - block: Limit zone array allocation size
        - bnxt_en: Fix VNIC accounting when enabling aRFS on 57500 chips.
        - mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed
        - mlxsw: spectrum: Do not process learned records with a dummy FID
        - Revert "kvm: x86: Use task structs fpu field for user"
    
      * Disco update: upstream stable patchset 2019-08-20 (LP: #1840846)
        - Revert "e1000e: fix cyclic resets at link up with active tx"
        - e1000e: start network tx queue only when link is up
        - Input: synaptics - enable SMBUS on T480 thinkpad trackpad
        - nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
        - drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT
        - firmware: improve LSM/IMA security behaviour
        - irqchip/gic-v3-its: Fix command queue pointer comparison bug
        - clk: ti: clkctrl: Fix returning uninitialized data
        - efi/bgrt: Drop BGRT status field reserved bits check
        - perf/core: Fix perf_sample_regs_user() mm check
        - ARM: dts: gemini Fix up DNS-313 compatible string
        - ARM: omap2: remove incorrect __init annotation
        - afs: Fix uninitialised spinlock afs_volume::cb_break_lock
        - x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz
        - be2net: fix link failure after ethtool offline test
        - ppp: mppe: Add softdep to arc4
        - sis900: fix TX completion
        - ARM: dts: imx6ul: fix PWM[1-4] interrupts
        - pinctrl: mcp23s08: Fix add_data and irqchip_add_nested call order
        - dm table: don't copy from a NULL pointer in realloc_argv()
        - dm verity: use message limit for data block corruption message
        - x86/boot/64: Fix crash if kernel image crosses page table boundary
        - x86/boot/64: Add missing fixup_pointer() for next_early_pgt access
        - HID: chicony: add another quirk for PixArt mouse
        - pinctrl: mediatek: Ignore interrupts that are wake only during resume
        - cpu/hotplug: Fix out-of-bounds read when setting fail state
        - pinctrl: mediatek: Update cur_mask in mask/mask ops
        - linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL
        - genirq: Delay deactivation in free_irq()
        - genirq: Fix misleading synchronize_irq() documentation
        - genirq: Add optional hardware synchronization for shutdown
        - x86/ioapic: Implement irq_get_irqchip_state() callback
        - x86/irq: Handle spurious interrupt after shutdown gracefully
        - x86/irq: Seperate unused system vectors from spurious entry again
        - ARC: hide unused function unw_hdr_alloc
        - s390: fix stfle zero padding
        - s390/qdio: (re-)initialize tiqdio list entries
        - s390/qdio: don't touch the dsci in tiqdio_add_input_queues()
        - crypto: talitos - move struct talitos_edesc into talitos.h
        - crypto: talitos - fix hash on SEC1.
        - crypto/NX: Set receive window credits to max number of CRBs in RxFIFO
        - drm/udl: introduce a macro to convert dev to udl.
        - drm/udl: move to embedding drm device inside udl device.
        - x86/entry/32: Fix ENDPROC of common_spurious
        - irqchip/irq-csky-mpintc: Support auto irq deliver to all cpus
        - arm64: dts: ls1028a: Fix CPU idle fail.
        - selftests/powerpc: Add test of fork with mapping above 512TB
        - x86/efi: fix a -Wtype-limits compilation warning
        - pinctrl: ocelot: fix gpio direction for pins after 31
        - pinctrl: ocelot: fix pinmuxing for pins after 31
        - mm/oom_kill.c: fix uninitialized oc->constraint
        - fork,memcg: alloc_thread_stack_node needs to set tsk->stack
        - MIPS: ath79: fix ar933x uart parity mode
        - MIPS: fix build on non-linux hosts
        - arm64/efi: Mark __efistub_stext_offset as an absolute symbol explicitly
        - scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported
        - dmaengine: imx-sdma: fix use-after-free on probe error path
        - wil6210: fix potential out-of-bounds read
        - ath10k: Do not send probe response template for mesh
        - ath9k: Check for errors when reading SREV register
        - ath6kl: add some bounds checking
        - ath10k: add peer id check in ath10k_peer_find_by_id
        - wil6210: fix spurious interrupts in 3-msi
        - ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
        - regmap: debugfs: Fix memory leak in regmap_debugfs_init
        - batman-adv: fix for leaked TVLV handler.
        - media: dvb: usb: fix use after free in dvb_usb_device_exit
        - media: spi: IR LED: add missing of table registration
        - crypto: talitos - fix skcipher failure due to wrong output IV
        - media: ov7740: avoid invalid framesize setting
        - media: marvell-ccic: fix DMA s/g desc number calculation
        - media: vpss: fix a potential NULL pointer dereference
        - media: media_device_enum_links32: clean a reserved field
        - net: stmmac: dwmac1000: Clear unused address entries
        - net: stmmac: dwmac4/5: Clear unused address entries
        - qed: Set the doorbell address correctly
        - signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
        - af_key: fix leaks in key_pol_get_resp and dump_sp.
        - xfrm: Fix xfrm sel prefix length validation
        - fscrypt: clean up some BUG_ON()s in block encryption/decryption
        - perf annotate TUI browser: Do not use member from variable within its own
          initialization
        - media: mc-device.c: don't memset __user pointer contents
        - media: saa7164: fix remove_proc_entry warning
        - media: staging: media: davinci_vpfe: - Fix for memory leak if decoder
          initialization fails.
        - net: phy: Check against net_device being NULL
        - crypto: talitos - properly handle split ICV.
        - crypto: talitos - Align SEC1 accesses to 32 bits boundaries.
        - tua6100: Avoid build warnings.
        - batman-adv: Fix duplicated OGMs on NETDEV_UP
        - locking/lockdep: Fix merging of hlocks with non-zero references
        - media: wl128x: Fix some error handling in fm_v4l2_init_video_device()
        - cpupower : frequency-set -r option misses the last cpu in related cpu list
        - arm64: mm: make CONFIG_ZONE_DMA32 configurable
        - perf jvmti: Address gcc string overflow warning for strncpy()
        - net: stmmac: dwmac4: fix flow control issue
        - net: stmmac: modify default value of tx-frames
        - crypto: inside-secure - do not rely on the hardware last bit for result
          descriptors
        - net: fec: Do not use netdev messages too early
        - net: axienet: Fix race condition causing TX hang
        - s390/qdio: handle PENDING state for QEBSM devices
        - RAS/CEC: Fix pfn insertion
        - net: sfp: add mutex to prevent concurrent state checks
        - ipset: Fix memory accounting for hash types on resize
        - perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode
        - perf test 6: Fix missing kvm module load for s390
        - perf report: Fix OOM error in TUI mode on s390
        - irqchip/meson-gpio: Add support for Meson-G12A SoC
        - media: uvcvideo: Fix access to uninitialized fields on probe error
        - media: fdp1: Support M3N and E3 platforms
        - iommu: Fix a leak in iommu_insert_resv_region
        - gpio: omap: fix lack of irqstatus_raw0 for OMAP4
        - gpio: omap: ensure irq is enabled before wakeup
        - regmap: fix bulk writes on paged registers
        - bpf: silence warning messages in core
        - media: s5p-mfc: fix reading min scratch buffer size on MFC v6/v7
        - selinux: fix empty write to keycreate file
        - x86/cpu: Add Ice Lake NNPI to Intel family
        - ASoC: meson: axg-tdm: fix sample clock inversion
        - rcu: Force inlining of rcu_read_lock()
        - x86/cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS
        - qed: iWARP - Fix tc for MPA ll2 connection
        - block: null_blk: fix race condition for null_del_dev
        - blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership
          arbitration
        - xfrm: fix sa selector validation
        - sched/core: Add __sched tag for io_schedule()
        - sched/fair: Fix "runnable_avg_yN_inv" not used warnings
        - perf/x86/intel/uncore: Handle invalid event coding for free-running counter
        - x86/atomic: Fix smp_mb__{before,after}_atomic()
        - perf evsel: Make perf_evsel__name() accept a NULL argument
        - vhost_net: disable zerocopy by default
        - ipoib: correcly show a VF hardware address
        - x86/cacheinfo: Fix a -Wtype-limits warning
        - blk-iolatency: only account submitted bios
        - ACPICA: Clear status of GPEs on first direct enable
        - EDAC/sysfs: Fix memory leak when creating a csrow object
        - nvme: fix possible io failures when removing multipathed ns
        - nvme-pci: properly report state change failure in nvme_reset_work
        - nvme-pci: set the errno on ctrl state change error
        - lightnvm: pblk: fix freeing of merged pages
        - arm64: Do not enable IRQs for ct_user_exit
        - ipsec: select crypto ciphers for xfrm_algo
        - ipvs: defer hook registration to avoid leaks
        - media: s5p-mfc: Make additional clocks optional
        - media: i2c: fix warning same module names
        - [Config] rename module adv7511
        - ntp: Limit TAI-UTC offset
        - timer_list: Guard procfs specific code
        - acpi/arm64: ignore 5.1 FADTs that are reported as 5.0
        - media: coda: fix mpeg2 sequence number handling
        - media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP
        - media: coda: increment sequence offset for the last returned frame
        - media: vimc: cap: check v4l2_fill_pixfmt return value
        - media: hdpvr: fix locking and a missing msleep
        - net: stmmac: sun8i: force select external PHY when no internal one
        - rtlwifi: rtl8192cu: fix error handle when usb probe failed
        - mt7601u: do not schedule rx_tasklet when the device has been disconnected
        - x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c
        - mt7601u: fix possible memory leak when the device is disconnected
        - ipvs: fix tinfo memory leak in start_sync_thread
        - ath10k: add missing error handling
        - ath10k: fix PCIE device wake up failed
        - perf tools: Increase MAX_NR_CPUS and MAX_CACHES
        - ASoC: Intel: hdac_hdmi: Set ops to NULL on remove
        - libata: don't request sense data on !ZAC ATA devices
        - clocksource/drivers/exynos_mct: Increase priority over ARM arch timer
        - xsk: Properly terminate assignment in xskq_produce_flush_desc
        - rslib: Fix decoding of shortened codes
        - rslib: Fix handling of of caller provided syndrome
        - ixgbe: Check DDM existence in transceiver before access
        - crypto: serpent - mark __serpent_setkey_sbox noinline
        - crypto: asymmetric_keys - select CRYPTO_HASH where needed
        - wil6210: drop old event after wmi_call timeout
        - EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
        - bcache: check CACHE_SET_IO_DISABLE in allocator code
        - bcache: check CACHE_SET_IO_DISABLE bit in bch_journal()
        - bcache: acquire bch_register_lock later in cached_dev_free()
        - bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
        - bcache: fix potential deadlock in cached_def_free()
        - net: hns3: fix a -Wformat-nonliteral compile warning
        - net: hns3: add some error checking in hclge_tm module
        - ath10k: destroy sdio workqueue while remove sdio module
        - net: mvpp2: prs: Don't override the sign bit in SRAM parser shift
        - igb: clear out skb->tstamp after reading the txtime
        - iwlwifi: mvm: Drop large non sta frames
        - bpf: fix uapi bpf_prog_info fields alignment
        - perf stat: Make metric event lookup more robust
        - perf stat: Fix group lookup for metric group
        - net: usb: asix: init MAC address buffers
        - rxrpc: Fix oops in tracepoint
        - bpf, libbpf, smatch: Fix potential NULL pointer dereference
        - selftests: bpf: fix inlines in test_lwt_seg6local
        - bonding: validate ip header before check IPPROTO_IGMP
        - gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
        - tools: bpftool: Fix json dump crash on powerpc
        - Bluetooth: hci_bcsp: Fix memory leak in rx_skb
        - Bluetooth: Add new 13d3:3491 QCA_ROME device
        - Bluetooth: Add new 13d3:3501 QCA_ROME device
        - Bluetooth: 6lowpan: search for destination address in all peers
        - perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64
        - Bluetooth: Check state in l2cap_disconnect_rsp
        - gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable()
        - Bluetooth: validate BLE connection interval updates
        - gtp: fix suspicious RCU usage
        - gtp: fix Illegal context switch in RCU read-side critical section.
        - gtp: fix use-after-free in gtp_encap_destroy()
        - gtp: fix use-after-free in gtp_newlink()
        - net: mvmdio: defer probe of orion-mdio if a clock is not ready
        - iavf: fix dereference of null rx_buffer pointer
        - floppy: fix out-of-bounds read in next_valid_format
        - floppy: fix invalid pointer dereference in drive_name
        - xen: let alloc_xenballooned_pages() fail if not enough memory free
        - scsi: NCR5380: Always re-enable reselection interrupt
        - Revert "scsi: ncr5380: Increase register polling limit"
        - scsi: core: Fix race on creating sense cache
        - scsi: megaraid_sas: Fix calculation of target ID
        - scsi: mac_scsi: Increase PIO/PDMA transfer length threshold
        - scsi: mac_scsi: Fix pseudo DMA implementation, take 2
        - crypto: ghash - fix unaligned memory access in ghash_setkey()
        - crypto: ccp - Validate the the error value used to index error messages
        - crypto: arm64/sha1-ce - correct digest for empty data in finup
        - crypto: arm64/sha2-ce - correct digest for empty data in finup
        - crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
        - crypto: crypto4xx - fix AES CTR blocksize value
        - crypto: crypto4xx - fix blocksize for cfb and ofb
        - crypto: crypto4xx - block ciphers should only accept complete blocks
        - crypto: ccp - memset structure fields to zero before reuse
        - crypto: ccp/gcm - use const time tag comparison.
        - crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe
        - bcache: Revert "bcache: fix high CPU occupancy during journal"
        - bcache: Revert "bcache: free heap cache_set->flush_btree in
          bch_journal_free"
        - bcache: ignore read-ahead request failure on backing device
        - bcache: fix mistaken sysfs entry for io_error counter
        - bcache: destroy dc->writeback_write_wq if failed to create
          dc->writeback_thread
        - Input: gtco - bounds check collection indent level
        - Input: synaptics - whitelist Lenovo T580 SMBus intertouch
        - regulator: s2mps11: Fix buck7 and buck8 wrong voltages
        - arm64: tegra: Update Jetson TX1 GPU regulator timings
        - iwlwifi: pcie: don't service an interrupt that was masked
        - iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X
        - iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill
        - iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices
        - NFSv4: Handle the special Linux file open access mode
        - pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error
        - pNFS: Fix a typo in pnfs_update_layout
        - pnfs: Fix a problem where we gratuitously start doing I/O through the MDS
        - lib/scatterlist: Fix mapping iterator when sg->offset is greater than
          PAGE_SIZE
        - ASoC: dapm: Adapt for debugfs API change
        - raid5-cache: Need to do start() part job after adding journal device
        - ALSA: seq: Break too long mutex context in the write loop
        - ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform
        - media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
        - media: coda: Remove unbalanced and unneeded mutex unlock
        - media: videobuf2-core: Prevent size alignment wrapping buffer size to 0
        - media: videobuf2-dma-sg: Prevent size from overflowing
        - KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed
        - arm64: tegra: Fix AGIC register range
        - fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys
          inodes.
        - kconfig: fix missing choice values in auto.conf
        - drm/nouveau/i2c: Enable i2c pads & busses during preinit
        - padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
        - dm zoned: fix zone state management race
        - xen/events: fix binding user event channels to cpus
        - 9p/xen: Add cleanup path in p9_trans_xen_init
        - 9p/virtio: Add cleanup path in p9_virtio_init
        - x86/boot: Fix memory leak in default_get_smp_config()
        - perf/x86/intel: Fix spurious NMI on fixed counter
        - perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs
        - perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs
        - drm/edid: parse CEA blocks embedded in DisplayID
        - intel_th: pci: Add Ice Lake NNPI support
        - PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
        - PCI: Do not poll for PME if the device is in D3cold
        - PCI: qcom: Ensure that PERST is asserted for at least 100 ms
        - Btrfs: fix data loss after inode eviction, renaming it, and fsync it
        - Btrfs: fix fsync not persisting dentry deletions due to inode evictions
        - Btrfs: add missing inode version, ctime and mtime updates when punching hole
        - IB/mlx5: Report correctly tag matching rendezvous capability
        - HID: wacom: generic: only switch the mode on devices with LEDs
        - HID: wacom: generic: Correct pad syncing
        - HID: wacom: correct touch resolution x/y typo
        - libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
        - coda: pass the host file in vma->vm_file on mmap
        - include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT
          architectures
        - xfs: don't overflow xattr listent buffer
        - xfs: rename m_inotbt_nores to m_finobt_nores
        - xfs: don't ever put nlink > 0 inodes on the unlinked list
        - xfs: reserve blocks for ifree transaction during log recovery
        - xfs: fix reporting supported extra file attributes for statx()
        - xfs: serialize unaligned dio writes against all other dio writes
        - xfs: abort unaligned nowait directio early
        - gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM
        - crypto: caam - limit output IV to CBC to work around CTR mode DMA issue
        - parisc: Ensure userspace privilege for ptraced processes in regset functions
        - parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1
        - powerpc/32s: fix suspend/resume when IBATs 4-7 are used
        - powerpc/watchpoint: Restore NV GPRs while returning from exception
        - powerpc/powernv/npu: Fix reference leak
        - powerpc/pseries: Fix oops in hotplug memory notifier
        - mmc: sdhci-msm: fix mutex while in spinlock
        - eCryptfs: fix a couple type promotion bugs
        - mtd: rawnand: mtk: Correct low level time calculation of r/w cycle
        - mtd: spinand: read returns badly if the last page has bitflips
        - intel_th: msu: Fix single mode with disabled IOMMU
        - Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
        - usb: Handle USB3 remote wakeup for LPM enabled devices correctly
        - blk-throttle: fix zero wait time for iops throttled group
        - blk-iolatency: clear use_delay when io.latency is set to zero
        - blkcg: update blkcg_print_stat() to handle larger outputs
        - net: mvmdio: allow up to four clocks to be specified for orion-mdio
        - dt-bindings: allow up to four clocks for orion-mdio
        - dm bufio: fix deadlock with loop device
        - ath10k: Check tx_stats before use it
        - ath10k: fix incorrect multicast/broadcast rate setting
        - spi: rockchip: turn down tx dma bursts
        - ath10k: Fix encoding for protected management frames
        - media: v4l2-core: fix use-after-free error
        - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
        - locking/lockdep: Fix OOO unlock when hlocks need merging
        - media: aspeed: change irq to threaded irq
        - gpio: omap: Fix lost edge wake-up interrupts
        - media: davinci: vpif_capture: fix memory leak in vpif_probe()
        - perf/x86/intel: Disable check_msr for real HW
        - integrity: Fix __integrity_init_keyring() section mismatch
        - iavf: allow null RX descriptors
        - ASoC: rsnd: fixup mod ID calculation in rsnd_ctu_probe_
        - bpf: fix callees pruning callers
        - net: netsec: initialize tx ring on ndo_open
        - EDAC/sysfs: Drop device references properly
        - nvme-pci: adjust irq max_vector using num_possible_cpus()
        - media: mt9m111: fix fw-node refactoring
        - ASoC: soc-core: call snd_soc_unbind_card() under mutex_lock;
        - ath10k: fix fw crash by moving chip reset after napi disabled
        - netfilter: ctnetlink: Fix regression in conntrack entry deletion
        - bpf: fix BPF_ALU32 | BPF_ARSH on BE arches
        - gpio: Fix return value mismatch of function gpiod_get_from_of_node()
        - ath9k: correctly handle short radar pulses
        - ath10k: Fix memory leak in qmi
        - net: hns3: add Asym Pause support to fix autoneg problem
        - iwlwifi: dbg: fix debug monitor stop and restart delays
        - bnxt_en: Disable bus master during PCI shutdown and driver unload.
        - bnxt_en: Fix statistics context reservation logic for RDMA driver.
        - perf stat: Fix metrics with --no-merge
        - perf stat: Don't merge events in the same PMU
        - net: hns3: enable broadcast promisc mode when initializing VF
        - Bluetooth: hidp: NUL terminate a string in the compat ioctl
        - xdp: fix race on generic receive path
        - net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue
        - blk-iolatency: fix STS_AGAIN handling
        - scsi: NCR5380: Handle PDMA failure reliably
        - scsi: sd_zbc: Fix compilation warning
        - scsi: zfcp: fix request object use-after-free in send path causing seqno
          errors
        - scsi: zfcp: fix request object use-after-free in send path causing wrong
          traces
        - cifs: fix crash in smb2_compound_op()/smb2_set_next_command()
        - cifs: Properly handle auto disabling of serverino option
        - regulator: s2mps11: Fix ERR_PTR dereference on GPIO lookup failure
        - iwlwifi: mvm: delay GTK setting in FW in AP mode
        - iwlwifi: mvm: clear rfkill_safe_init_done when we start the firmware
        - opp: Don't use IS_ERR on invalid supplies
        - ASoC: core: Adapt for debugfs API change
        - ceph: fix end offset in truncate_inode_pages_range call
        - KVM: nVMX: Always sync GUEST_BNDCFGS when it comes from vmcs01
        - KVM: VMX: Fix handling of #MC that occurs during VM-Entry
        - KVM: VMX: check CPUID before allowing read/write of IA32_XSS
        - KVM: PPC: Book3S HV: Signed extend decrementer value if not using large
          decrementer
        - KVM: PPC: Book3S HV: Clear pending decrementer exceptions on nested guest
          entry
        - KVM: PPC: Book3S HV: Fix CR0 setting in TM emulation
        - signal/usb: Replace kill_pid_info_as_cred with kill_pid_usb_asyncio
        - signal: Correct namespace fixups of si_pid and si_uid
        - i3c: fix i2c and i3c scl rate by bus mode
        - ARM: dts: gemini: Set DIR-685 SPI CS as active low
        - rt2x00usb: fix rx queue hang
        - block: Allow mapping of vmalloc-ed buffers
        - block: Fix potential overflow in blk_report_zones()
        - RDMA/srp: Accept again source addresses that do not have a port number
        - mm/nvdimm: add is_ioremap_addr and use that to check ioremap address
        - resource: fix locking in find_next_iomem_res()
        - powerpc/powernv: Fix stale iommu table base after VFIO
        - dax: Fix missed wakeup with PMD faults
        - pstore: Fix double-free in pstore_mkfile() failure path
    
      * Disco update: upstream stable patchset 2019-08-19 (LP: #1840718)
        - Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
        - Bluetooth: Fix regression with minimum encryption key size alignment
        - Bluetooth: Fix faulty expression for minimum encryption key size check
        - netfilter: nf_flow_table: ignore DF bit setting
        - netfilter: nft_flow_offload: set liberal tracking mode for tcp
        - netfilter: nft_flow_offload: don't offload when sequence numbers need
          adjustment
        - netfilter: nft_flow_offload: IPCB is only valid for ipv4 family
        - ASoC : cs4265 : readable register too low
        - ASoC: ak4458: add return value for ak4458_probe
        - ASoC: soc-pcm: BE dai needs prepare when pause release after resume
        - ASoC: ak4458: rstn_control - return a non-zero on error only
        - spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
        - drm/mediatek: fix unbind functions
        - drm/mediatek: unbind components in mtk_drm_unbind()
        - drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver
        - drm/mediatek: clear num_pipes when unbind driver
        - drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable()
        - ASoC: max98090: remove 24-bit format support if RJ is 0
        - ASoC: sun4i-i2s: Fix sun8i tx channel offset mask
        - ASoC: sun4i-i2s: Add offset to RX channel select
        - x86/CPU: Add more Icelake model numbers
        - usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i]
        - usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC
        - ALSA: hdac: fix memory release for SST and SOF drivers
        - SoC: rt274: Fix internal jack assignment in set_jack callback
        - scsi: hpsa: correct ioaccel2 chaining
        - drm: panel-orientation-quirks: Add quirk for GPD pocket2
        - drm: panel-orientation-quirks: Add quirk for GPD MicroPC
        - platform/x86: intel-vbtn: Report switch events when event wakes device
        - platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device
          registration
        - platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow
        - i2c: pca-platform: Fix GPIO lookup code
        - cpuset: restore sanity to cpuset_cpus_allowed_fallback()
        - scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE
        - mm/mlock.c: change count_mm_mlocked_page_nr return type
        - tracing: avoid build warning with HAVE_NOP_MCOUNT
        - module: Fix livepatch/ftrace module text permissions race
        - ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper()
        - crypto: user - prevent operating on larval algorithms
        - crypto: cryptd - Fix skcipher instance memory leak
        - ALSA: seq: fix incorrect order of dest_client/dest_ports arguments
        - ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages
        - ALSA: line6: Fix write on zero-sized buffer
        - ALSA: usb-audio: fix sign unintended sign extension on left shifts
        - ALSA: hda/realtek: Add quirks for several Clevo notebook barebones
        - ALSA: hda/realtek - Change front mic location for Lenovo M710q
        - lib/mpi: Fix karactx leak in mpi_powm
        - fs/userfaultfd.c: disable irqs for fault_pending and event locks
        - tracing/snapshot: Resize spare buffer if size changed
        - ARM: dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node
        - arm64: kaslr: keep modules inside module region when KASAN is enabled
        - drm/amd/powerplay: use hardware fan control if no powerplay fan table
        - drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
        - drm/etnaviv: add missing failure path to destroy suballoc
        - drm/imx: notify drm core before sending event during crtc disable
        - drm/imx: only send event on crtc disable if kept disabled
        - ftrace/x86: Remove possible deadlock between register_kprobe() and
          ftrace_run_update_code()
        - mm/vmscan.c: prevent useless kswapd loops
        - btrfs: Ensure replaced device doesn't have pending chunk allocation
        - tty: rocket: fix incorrect forward declaration of 'rp_init()'
        - net/smc: move unhash before release of clcsock
        - media: s5p-mfc: fix incorrect bus assignment in virtual child device
        - drm/fb-helper: generic: Don't take module ref for fbcon
        - f2fs: don't access node/meta inode mapping after iput
        - ALSA: hda: Initialize power_state field properly
        - ip6: fix skb leak in ip6frag_expire_frag_queue()
        - net: IP defrag: encapsulate rbtree defrag code into callable functions
        - net: IP6 defrag: use rbtrees for IPv6 defrag
        - net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
        - netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
        - sc16is7xx: move label 'err_spi' to correct section
        - netfilter: ipv6: nf_defrag: accept duplicate fragments again
        - KVM: x86: degrade WARN to pr_warn_ratelimited
        - KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC
        - nfsd: Fix overflow causing non-working mounts on 1 TB machines
        - svcrdma: Ignore source port when computing DRC hash
        - MIPS: Fix bounds check virt_addr_valid
        - MIPS: Add missing EHB in mtc0 -> mfc0 sequence.
        - MIPS: have "plain" make calls build dtbs for selected platforms
        - dmaengine: qcom: bam_dma: Fix completed descriptors count
        - dmaengine: imx-sdma: remove BD_INTR for channel0
        - signal: remove the wrong signal_pending() check in restore_user_sigmask()
        - idr: Fix idr_get_next race with idr_remove
        - ASoC: core: lock client_mutex while removing link components
        - iommu/vt-d: Set the right field for Page Walk Snoop
        - HID: a4tech: fix horizontal scrolling
        - ASoC: hda: fix unbalanced codec dev refcount for HDA_DEV_ASOC
        - gpio: pca953x: hack to fix 24 bit gpio expanders
        - ASoC: Intel: sst: fix kmalloc call with wrong flags
        - arm64: tlbflush: Ensure start/end of address range are aligned to stride
        - dax: Fix xarray entry association for mixed mappings
        - swap_readpage(): avoid blk_wake_io_task() if !synchronous
        - drm/virtio: move drm_connector_update_edid_property() call
        - s390/mm: fix pxd_bad with folded page tables
        - dmaengine: jz4780: Fix an endian bug in IRQ handler
        - scsi: target/iblock: Fix overrun in WRITE SAME emulation
        - crypto: talitos - rename alternative AEAD algos.
        - soc: brcmstb: Fix error path for unsupported CPUs
        - soc: bcm: brcmstb: biuctrl: Register writes require a barrier
        - samples, bpf: fix to change the buffer size for read()
        - samples, bpf: suppress compiler warning
        - mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he()
        - bpf: sockmap, fix use after free from sleep in psock backlog workqueue
        - soundwire: stream: fix out of boundary access on port properties
        - staging:iio:ad7150: fix threshold mode config bit
        - mac80211: mesh: fix RCU warning
        - mac80211: free peer keys before vif down in mesh
        - iwlwifi: Fix double-free problems in iwl_req_fw_callback()
        - soundwire: intel: set dai min and max channels correctly
        - dt-bindings: can: mcp251x: add mcp25625 support
        - can: mcp251x: add support for mcp25625
        - can: m_can: implement errata "Needless activation of MRAF irq"
        - can: af_can: Fix error path of can_init()
        - ibmvnic: Do not close unopened driver during reset
        - ibmvnic: Refresh device multicast list after reset
        - ibmvnic: Fix unchecked return codes of memory allocations
        - ARM: dts: am335x phytec boards: Fix cd-gpios active level
        - s390/boot: disable address-of-packed-member warning
        - drm/vmwgfx: Honor the sg list segment size limitation
        - drm/vmwgfx: fix a warning due to missing dma_parms
        - riscv: Fix udelay in RV32.
        - Input: imx_keypad - make sure keyboard can always wake up system
        - KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
        - mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed
        - ARM: davinci: da850-evm: call regulator_has_full_constraints()
        - ARM: davinci: da8xx: specify dma_coherent_mask for lcdc
        - mac80211: only warn once on chanctx_conf being NULL
        - mac80211: do not start any work during reconfigure flow
        - bpf, devmap: Fix premature entry free on destroying map
        - bpf, devmap: Add missing bulk queue free
        - bpf, devmap: Add missing RCU read lock on flush
        - bpf, x64: fix stack layout of JITed bpf code
        - qmi_wwan: add support for QMAP padding in the RX path
        - qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode
        - qmi_wwan: extend permitted QMAP mux_id value range
        - mmc: core: complete HS400 before checking status
        - md: fix for divide error in status_resync
        - bnx2x: Check if transceiver implements DDM before access
        - drm: return -EFAULT if copy_to_user() fails
        - ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
        - net: lio_core: fix potential sign-extension overflow on large shift
        - scsi: qedi: Check targetname while finding boot target information
        - quota: fix a problem about transfer quota
        - net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge()
        - NFS4: Only set creation opendata if O_CREAT
        - net :sunrpc :clnt :Fix xps refcount imbalance on the error path
        - fscrypt: don't set policy for a dead directory
        - udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
        - media: stv0297: fix frequency range limit
        - ALSA: usb-audio: Fix parse of UAC2 Extension Units
        - ALSA: hda/realtek - Headphone Mic can't record after S3
        - block, bfq: NULL out the bic when it's no longer valid
        - perf pmu: Fix uncore PMU alias list for ARM64
        - x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
        - x86/tls: Fix possible spectre-v1 in do_get_thread_area()
        - Documentation: Add section about CPU vulnerabilities for Spectre
        - Documentation/admin: Remove the vsyscall=native documentation
        - mwifiex: Abort at too short BSS descriptor element
        - mwifiex: Don't abort on small, spec-compliant vendor IEs
        - USB: serial: ftdi_sio: add ID for isodebug v1
        - USB: serial: option: add support for GosunCn ME3630 RNDIS mode
        - Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
        - p54usb: Fix race between disconnect and firmware loading
        - usb: gadget: ether: Fix race between gether_disconnect and rx_submit
        - usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset()
        - usb: renesas_usbhs: add a workaround for a race condition of workqueue
        - drivers/usb/typec/tps6598x.c: fix portinfo width
        - drivers/usb/typec/tps6598x.c: fix 4CC cmd write
        - staging: comedi: dt282x: fix a null pointer deref on interrupt
        - staging: comedi: amplc_pci230: fix null pointer deref on interrupt
        - HID: Add another Primax PIXART OEM mouse quirk
        - lkdtm: support llvm-objcopy
        - binder: fix memory leak in error path
        - carl9170: fix misuse of device driver API
        - VMCI: Fix integer overflow in VMCI handle arrays
        - staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work
        - staging: bcm2835-camera: Replace spinlock protecting context_map with mutex
        - staging: bcm2835-camera: Ensure all buffers are returned on disable
        - staging: bcm2835-camera: Remove check of the number of buffers supplied
        - staging: bcm2835-camera: Handle empty EOS buffers whilst streaming
        - staging: rtl8712: reduce stack usage, again
        - crypto: lrw - use correct alignmask
        - bpf: sockmap, restore sk_write_space when psock gets dropped
        - ARM: dts: Drop bogus CLKSEL for timer12 on dra7
        - iwlwifi: fix load in rfkill flow for unified firmware
        - tools: bpftool: Fix JSON output when lookup fails
        - soundwire: stream: fix bad unlock balance
        - can: flexcan: Remove unneeded registration message
        - RISC-V: defconfig: enable clocks, serial console
        - xdp: check device pointer before clearing
        - KVM: nVMX: use correct clean fields when copying from eVMCS
        - gpu: ipu-v3: image-convert: Fix input bytesperline width/height align
        - gpu: ipu-v3: image-convert: Fix input bytesperline for packed formats
        - gpu: ipu-v3: image-convert: Fix image downsize coefficients
        - cfg80211: util: fix bit count off by one
        - cfg80211: report measurement start TSF correctly
        - IB/hfi1: Create inline to get extended headers
        - IB/hfi1: Wakeup QPs orphaned on wait list after flush
        - IB/hfi1: Handle wakeup of orphaned QPs for pio
        - IB/hfi1: Handle port down properly in pio
        - powerpc: enable a 30-bit ZONE_DMA for 32-bit pmac
        - tpm: Actually fail on TPM errors during "get random"
        - tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations
        - perf intel-pt: Fix itrace defaults for perf script
        - perf auxtrace: Fix itrace defaults for perf script
        - perf intel-pt: Fix itrace defaults for perf script intel-pt documentation
        - perf header: Assign proper ff->ph in perf_event__synthesize_features()
        - usb: gadget: f_fs: data_len used before properly set
        - staging: wilc1000: fix error path cleanup in wilc_wlan_initialize()
        - staging: mt7621-pci: fix PCIE_FTS_NUM_LO macro
        - iio: adc: stm32-adc: add missing vdda-supply
        - staging: vchiq_2835_arm: revert "quit using custom down_interruptible()"
        - staging: vchiq: revert "switch to wait_for_completion_killable"
        - staging: vchiq: make wait events interruptible
    
      * Touchpad not detecting in Linux (LP: #1825718) // Disco update: upstream
        stable patchset 2019-08-19 (LP: #1840718)
        - HID: i2c-hid: add iBall Aer3 to descriptor override
    
      * Disco update: upstream stable patchset 2019-08-16 (LP: #1840521)
        - arm64: Don't unconditionally add -Wno-psabi to KBUILD_CFLAGS
        - Revert "x86/uaccess, ftrace: Fix ftrace_likely_update() vs. SMAP"
        - qmi_wwan: Fix out-of-bounds read
        - fs/proc/array.c: allow reporting eip/esp for all coredumping threads
        - mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask
        - fs/binfmt_flat.c: make load_flat_shared_library() work
        - clk: socfpga: stratix10: fix divider entry for the emac clocks
        - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails
        - mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on
          !PageHuge
        - dm log writes: make sure super sector log updates are written in order
        - scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()
        - x86/speculation: Allow guests to use SSBD even if host does not
        - x86/microcode: Fix the microcode load on CPU hotplug for real
        - x86/resctrl: Prevent possible overrun during bitmap operations
        - NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O
        - cpu/speculation: Warn on unsupported mitigations= parameter
        - irqchip/mips-gic: Use the correct local interrupt map registers
        - af_packet: Block execution of tasks waiting for transmit to complete in
          AF_PACKET
        - bonding: Always enable vlan tx offload
        - ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop
        - net/packet: fix memory leak in packet_set_ring()
        - net: remove duplicate fetch in sock_getsockopt
        - net: stmmac: fixed new system time seconds value calculation
        - net: stmmac: set IC bit when transmitting frames with HW timestamp
        - sctp: change to hold sk after auth shkey is created successfully
        - team: Always enable vlan tx offload
        - tipc: change to use register_pernet_device
        - tipc: check msg->req data len in tipc_nl_compat_bearer_disable
        - tun: wake up waitqueues after IFF_UP is set
        - bpf: simplify definition of BPF_FIB_LOOKUP related flags
        - bpf: lpm_trie: check left child of last leftmost node for NULL
        - bpf: fix nested bpf tracepoints with per-cpu data
        - bpf: fix unconnected udp hooks
        - bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro
        - bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err
        - arm64: futex: Avoid copying out uninitialised stack in failed cmpxchg()
        - bpf, arm64: use more scalable stadd over ldxr / stxr loop in xadd
        - futex: Update comments and docs about return values of arch futex code
        - RDMA: Directly cast the sockaddr union to sockaddr
        - tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
        - arm64: insn: Fix ldadd instruction encoding
        - clk: tegra210: Fix default rates for HDA clocks
        - mm, swap: fix THP swap out
        - mm: fix page cache convergence regression
        - efi/memreserve: deal with memreserve entries in unmapped memory
        - net: aquantia: fix vlans not working over bridged network
    
      * Disco update: upstream stable patchset 2019-08-15 (LP: #1840373)
        - tracing: Silence GCC 9 array bounds warning
        - gcc-9: silence 'address-of-packed-member' warning
        - ovl: support the FS_IOC_FS[SG]ETXATTR ioctls
        - ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls
        - ovl: make i_ino consistent with st_ino in more cases
        - ovl: detect overlapping layers
        - ovl: don't fail with disconnected lower NFS
        - ovl: fix bogus -Wmaybe-unitialized warning
        - mmc: sdhci: sdhci-pci-o2micro: Correctly set bus width when tuning
        - mmc: core: API to temporarily disable retuning for SDIO CRC errors
        - mmc: core: Add sdio_retune_hold_now() and sdio_retune_release()
        - mmc: core: Prevent processing SDIO IRQs when the card is suspended
        - scsi: ufs: Avoid runtime suspend possibly being blocked forever
        - usb: chipidea: udc: workaround for endpoint conflict issue
        - xhci: detect USB 3.2 capable host controllers correctly
        - usb: xhci: Don't try to recover an endpoint if port is in error state.
        - IB/hfi1: Validate fault injection opcode user input
        - IB/hfi1: Silence txreq allocation warnings
        - iio: temperature: mlx90632 Relax the compatibility check
        - Input: synaptics - enable SMBus on ThinkPad E480 and E580
        - Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD
        - Input: silead - add MSSL0017 to acpi_device_id
        - apparmor: enforce nullbyte at end of tag string
        - brcmfmac: sdio: Disable auto-tuning around commands expected to fail
        - brcmfmac: sdio: Don't tune while the card is off
        - ARC: fix build warnings
        - dmaengine: dw-axi-dmac: fix null dereference when pointer first is null
        - dmaengine: sprd: Fix block length overflow
        - ARC: [plat-hsdk]: Add missing multicast filter bins number to GMAC node
        - ARC: [plat-hsdk]: Add missing FIFO size entry in GMAC node
        - fpga: dfl: afu: Pass the correct device to dma_mapping_error()
        - fpga: dfl: Add lockdep classes for pdata->lock
        - parport: Fix mem leak in parport_register_dev_model
        - parisc: Fix compiler warnings in float emulation code
        - IB/rdmavt: Fix alloc_qpn() WARN_ON()
        - IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
        - IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value
        - IB/hfi1: Validate page aligned for a given virtual address
        - MIPS: uprobes: remove set but not used variable 'epc'
        - xtensa: Fix section mismatch between memblock_reserve and mem_reserve
        - kselftest/cgroup: fix unexpected testing failure on test_memcontrol
        - kselftest/cgroup: fix unexpected testing failure on test_core
        - kselftest/cgroup: fix incorrect test_core skip
        - selftests: vm: install test_vmalloc.sh for run_vmtests
        - net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0
        - mdesc: fix a missing-check bug in get_vdev_port_node_info()
        - sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD
        - net: ethernet: mediatek: Use hw_feature to judge if HWLRO is supported
        - net: ethernet: mediatek: Use NET_IP_ALIGN to judge if HW RX_2BYTE_OFFSET is
          enabled
        - drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times
        - drm/arm/hdlcd: Actually validate CRTC modes
        - drm/arm/hdlcd: Allow a bit of clock tolerance
        - nvmet: fix data_len to 0 for bdev-backed write_zeroes
        - scripts/checkstack.pl: Fix arm64 wrong or unknown architecture
        - scsi: ufs: Check that space was properly alloced in copy_query_response
        - scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous()
        - net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set
        - s390/qeth: fix VLAN attribute in bridge_hostnotify udev event
        - hwmon: (core) add thermal sensors only if dev->of_node is present
        - hwmon: (pmbus/core) Treat parameters as paged if on multiple pages
        - arm64: Silence gcc warnings about arch ABI drift
        - nvme: Fix u32 overflow in the number of namespace list calculation
        - btrfs: start readahead also in seed devices
        - can: xilinx_can: use correct bittiming_const for CAN FD core
        - can: flexcan: fix timeout when set small bitrate
        - can: purge socket error queue on sock destruct
        - riscv: mm: synchronize MMU after pte change
        - powerpc/bpf: use unsigned division instruction for 64-bit operations
        - ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX
        - ARM: dts: dra76x: Update MMC2_HS200_MANUAL1 iodelay values
        - ARM: dts: am57xx-idk: Remove support for voltage switching for SD card
        - arm64/sve: <uapi/asm/ptrace.h> should not depend on <uapi/linux/prctl.h>
        - arm64: ssbd: explicitly depend on <linux/prctl.h>
        - drm/vmwgfx: Use the backdoor port if the HB port is not available
        - staging: erofs: add requirements field in superblock
        - SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write
        - cfg80211: fix memory leak of wiphy device name
        - mac80211: drop robust management frames from unknown TA
        - {nl,mac}80211: allow 4addr AP operation on crypto controlled devices
        - mac80211: handle deauthentication/disassociation from TDLS peer
        - nl80211: fix station_info pertid memory leak
        - mac80211: Do not use stack memory with scatterlist for GMAC
        - x86/resctrl: Don't stop walking closids when a locksetup group is found
        - mmc: sdhi: disallow HS400 for M3-W ES1.2, RZ/G2M, and V3H
        - mmc: mediatek: fix SDIO IRQ interrupt handle flow
        - mmc: mediatek: fix SDIO IRQ detection issue
        - cifs: fix GlobalMid_Lock bug in cifs_reconnect
        - IB/hfi1: Close PSM sdma_progress sleep window
        - IB/hfi1: Avoid hardlockup with flushlist_lock
        - IB/hfi1: Correct tid qp rcd to match verbs context
        - iio: imu: st_lsm6dsx: fix PM support for st_lsm6dsx i2c controller
        - apparmor: reset pos on failure to unpack for various functions
        - Revert "brcmfmac: disable command decode in sdio_aos"
        - lkdtm/usercopy: Moves the KERNEL_DS test to non-canonical
        - dmaengine: jz4780: Fix transfers being ACKed too soon
        - dmaengine: mediatek-cqdma: sleeping in atomic context
        - dmaengine: sprd: Fix the possible crash when getting descriptor status
        - dmaengine: sprd: Add validation of current descriptor in irq handler
        - dmaengine: sprd: Fix the incorrect start for 2-stage destination channels
        - dmaengine: sprd: Fix the right place to configure 2-stage transfer
        - fpga: stratix10-soc: fix use-after-free on s10_init()
        - crypto: hmac - fix memory leak in hmac_init_tfm()
        - userfaultfd: selftest: fix compiler warning
        - selftests: set sysctl bc_forwarding properly in router_broadcast.sh
        - kbuild: tar-pkg: enable communication with jobserver
        - net: phylink: avoid reducing support mask
        - udmabuf: actually unmap the scatterlist
        - s390/qeth: handle limited IPv4 broadcast in L3 TX path
        - s390/qeth: check dst entry before use
        - ARM: mvebu_v7_defconfig: fix Ethernet on Clearfog
        - KVM: x86/mmu: Allocate PAE root array when using SVM's 32-bit NPT
        - binder: fix possible UAF when freeing buffer
        - x86/vdso: Prevent segfaults due to hoisted vclock reads
    
      * VIMC module not available (CONFIG_VIDEO_VIMC not set) (LP: #1831482)
        - [Config] Enable VIMC module
    
      * reboot will introduce an alarm 'beep ...' during BIOS phase (LP: #1840395)
        - ALSA: hda - Let all conexant codec enter D3 when rebooting
        - ALSA: hda - Add a generic reboot_notify
    
      * Include Sunix serial/parallel driver (LP: #1826716)
        - serial: 8250_pci: Add support for Sunix serial boards
        - parport: parport_serial: Add support for Sunix Multi I/O boards
    
      * Intel HDMI audio print "Unable to sync register" errors (LP: #1840394)
        - ALSA: hda - Don't resume forcibly i915 HDMI/DP codec
    
      * UBUNTU: SAUCE: shiftfs: pass correct point down (LP: #1837231)
        - SAUCE: shiftfs: pass correct point down
    
      * shiftfs: add O_DIRECT support (LP: #1837223)
        - SAUCE: shiftfs: add O_DIRECT support
    
      * p54usb module in linux-modules-extra-5.0.0-23-generic does not work
        (LP: #1839693)
        - p54: fix crash during initialization
    
      * Goodix touchpad may drop first input event (LP: #1840075)
        - Revert "UBUNTU: SAUCE: i2c: designware: add Inpiron/Vostro 7590 into i2c
          quirk"
        - Revert "UBUNTU: SAUCE: i2c: designware: Add disable runtime pm quirk"
        - mfd: intel-lpss: Remove D3cold delay
    
      * NULL pointer dereference when Inserting the VIMC module (LP: #1840028)
        - media: vimc: fix component match compare
    
      * Fix touchpad IRQ storm after S3 (LP: #1841396)
        - pinctrl: intel: remap the pin number to gpio offset for irq enabled pin
    
      * [SRU][B/OEM-B/OEM-OSP1/D] UBUNTU: SAUCE: enable middle button for one more
        ThinkPad (LP: #1841722)
        - SAUCE: Input: elantech - enable middle button for one more ThinkPad
    
      * Disco update: upstream stable patchset 2019-08-13 (LP: #1840076)
        - [Config] updateconfigs for CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT
        - drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3)
        - nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled
        - HID: multitouch: handle faulty Elo touch device
        - HID: wacom: Don't set tool type until we're in range
        - HID: wacom: Don't report anything prior to the tool entering range
        - HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact
        - HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth
        - HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary
        - ALSA: oxfw: allow PCM capture for Stanton SCS.1m
        - ALSA: hda/realtek - Update headset mode for ALC256
        - ALSA: firewire-motu: fix destruction of data for isochronous resources
        - libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
        - mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
        - fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
        - mm/vmscan.c: fix trying to reclaim unevictable LRU page
        - signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
        - ptrace: restore smp_rmb() in __ptrace_may_access()
        - iommu/arm-smmu: Avoid constant zero in TLBI writes
        - i2c: acorn: fix i2c warning
        - bcache: fix stack corruption by PRECEDING_KEY()
        - cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
        - ASoC: cs42xx8: Add regcache mask dirty
        - ASoC: fsl_asrc: Fix the issue about unsupported rate
        - drm/i915/sdvo: Implement proper HDMI audio support for SDVO
        - x86/uaccess, kcov: Disable stack protector
        - ALSA: seq: Protect in-kernel ioctl calls with mutex
        - ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
        - Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
        - s390/kasan: fix strncpy_from_user kasan checks
        - Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
        - f2fs: fix to avoid accessing xattr across the boundary
        - scsi: qedi: remove memset/memcpy to nfunc and use func instead
        - scsi: qedi: remove set but not used variables 'cdev' and 'udev'
        - scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show
        - scsi: lpfc: add check for loss of ndlp when sending RRQ
        - arm64/mm: Inhibit huge-vmap with ptdump
        - nvme: fix srcu locking on error return in nvme_get_ns_from_disk
        - nvme: remove the ifdef around nvme_nvm_ioctl
        - nvme: merge nvme_ns_ioctl into nvme_ioctl
        - nvme: release namespace SRCU protection before performing controller ioctls
        - nvme: fix memory leak for power latency tolerance
        - platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI
          table
        - platform/x86: pmc_atom: Add several Beckhoff Automation boards to
          critclk_systems DMI table
        - scsi: bnx2fc: fix incorrect cast to u64 on shift operation
        - libnvdimm: Fix compilation warnings with W=1
        - selftests/timers: Add missing fflush(stdout) calls
        - tracing: Prevent hist_field_var_ref() from accessing NULL tracing_map_elts
        - usbnet: ipheth: fix racing condition
        - KVM: arm/arm64: Move cc/it checks under hyp's Makefile to avoid
          instrumentation
        - KVM: x86/pmu: mask the result of rdpmc according to the width of the
          counters
        - KVM: x86/pmu: do not mask the value that is written to fixed PMUs
        - KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
        - tools/kvm_stat: fix fields filter for child events
        - drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an
          invalid read
        - drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
        - usb: dwc2: Fix DMA cache alignment issues
        - usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression)
        - USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
        - USB: serial: pl2303: add Allied Telesis VT-Kit3
        - USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
        - USB: serial: option: add Telit 0x1260 and 0x1261 compositions
        - timekeeping: Repair ktime_get_coarse*() granularity
        - RAS/CEC: Convert the timer callback to a workqueue
        - RAS/CEC: Fix binary search function
        - x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback
        - x86/kasan: Fix boot with 5-level paging and KASAN
        - x86/mm/KASLR: Compute the size of the vmemmap section properly
        - x86/resctrl: Prevent NULL pointer dereference when local MBM is disabled
        - drm/edid: abstract override/firmware EDID retrieval
        - drm: add fallback override/firmware EDID modes workaround
        - HID: input: make sure the wheel high resolution multiplier is set
        - HID: input: fix assignment of .value
        - Revert "HID: Increase maximum report size allowed by hid_field_extract()"
        - selinux: fix a missing-check bug in selinux_add_mnt_opt( )
        - selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts()
        - media: dvb: warning about dvb frequency limits produces too much noise
        - drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc
        - drm/i915/dsi: Use a fuzzy check for burst mode clock check
        - drm/i915: Fix per-pixel alpha with CCS
        - drm/i915/dmc: protect against reading random memory
        - drivers/perf: arm_spe: Don't error on high-order pages for aux buf
        - bpf: sockmap, only stop/flush strp if it was enabled at some point
        - bpf: sockmap remove duplicate queue free
        - bpf: sockmap fix msg->sg.size account on ingress skb
        - scsi: qla2xxx: Add cleanup for PCI EEH recovery
        - scsi: lpfc: resolve lockdep warnings
        - arm64: Print physical address of page table base in show_pte()
        - net: macb: fix error format in dev_err()
        - bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0
        - tools/bpftool: move set_max_rlimit() before __bpf_object__open_xattr()
        - nvme-pci: Fix controller freeze wait disabling
        - scsi: myrs: Fix uninitialized variable
        - nvme-pci: use blk-mq mapping for unmanaged irqs
        - KVM: nVMX: really fix the size checks on KVM_SET_NESTED_STATE
        - KVM: selftests: Fix a condition in test_hv_cpuid()
        - kvm: vmx: Fix -Wmissing-prototypes warnings
        - KVM: LAPIC: Fix lapic_timer_advance_ns parameter overflow
        - KVM: x86: do not spam dmesg with VMCS/VMCB dumps
        - kvm: selftests: aarch64: dirty_log_test: fix unaligned memslot size
        - kvm: selftests: aarch64: fix default vm mode
        - tracing/uprobe: Fix NULL pointer dereference in trace_uprobe_create()
        - powerpc: Fix kexec failure on book3s/32
        - powerpc/64s: Fix THP PMD collapse serialisation
        - ax25: fix inconsistent lock state in ax25_destroy_timer
        - be2net: Fix number of Rx queues used for flow hashing
        - hv_netvsc: Set probe mode to sync
        - ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
        - lapb: fixed leak of control-blocks.
        - neigh: fix use-after-free read in pneigh_get_next
        - net: dsa: rtl8366: Fix up VLAN filtering
        - net: openvswitch: do not free vport if register_netdevice() is failed.
        - sctp: Free cookie before we memdup a new one
        - sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg
        - tipc: purge deferredq list for each grp member in tipc_group_delete
        - vsock/virtio: set SOCK_DONE on peer shutdown
        - net/mlx5: Avoid reloading already removed devices
        - net: mvpp2: prs: Fix parser range for VID filtering
        - net: mvpp2: prs: Use the correct helpers when removing all VID filters
        - Staging: vc04_services: Fix a couple error codes
        - perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints
        - netfilter: nf_queue: fix reinject verdict handling
        - ipvs: Fix use-after-free in ip_vs_in
        - selftests: netfilter: missing error check when setting up veth interface
        - clk: ti: clkctrl: Fix clkdm_clk handling
        - powerpc/powernv: Return for invalid IMC domain
        - usb: xhci: Fix a potential null pointer dereference in
          xhci_debugfs_create_endpoint()
        - mISDN: make sure device name is NUL terminated
        - x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor
        - perf/ring_buffer: Fix exposing a temporarily decreased data_head
        - perf/ring_buffer: Add ordering to rb->nest increment
        - perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data
        - gpio: fix gpio-adp5588 build errors
        - net: stmmac: update rx tail pointer register to fix rx dma hang issue.
        - net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()
        - ACPI/PCI: PM: Add missing wakeup.flags.valid checks
        - drm/etnaviv: lock MMU while dumping core
        - net: aquantia: tx clean budget logic error
        - net: aquantia: fix LRO with FCS error
        - i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
        - ALSA: hda - Force polling mode on CNL for fixing codec communication
        - configfs: Fix use-after-free when accessing sd->s_dentry
        - perf data: Fix 'strncat may truncate' build failure with recent gcc
        - perf namespace: Protect reading thread's namespace
        - perf record: Fix s390 missing module symbol and warning for non-root users
        - ia64: fix build errors by exporting paddr_to_nid()
        - xen/pvcalls: Remove set but not used variable
        - xenbus: Avoid deadlock during suspend due to open transactions
        - KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list
        - KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu
        - arm64: fix syscall_fn_t type
        - arm64: use the correct function type in SYSCALL_DEFINE0
        - arm64: use the correct function type for __arm64_sys_ni_syscall
        - net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs
        - net: phylink: ensure consistent phy interface mode
        - net: phy: dp83867: Set up RGMII TX delay
        - scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
        - scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask
        - scsi: scsi_dh_alua: Fix possible null-ptr-deref
        - mlxsw: spectrum: Prevent force of 56G
        - ocfs2: fix error path kobject memory leak
        - coredump: fix race condition between collapse_huge_page() and core dumping
        - Abort file_remove_privs() for non-reg. files
        - net: tls, correctly account for copied bytes with multiple sk_msgs
        - vxlan: Don't assume linear buffers in error handler
        - geneve: Don't assume linear buffers in error handler
        - net/mlx5: Update pci error handler entries and command translation
        - mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead
        - net/mlx5e: Add ndo_set_feature for uplink representor
        - mlxsw: spectrum_flower: Fix TOS matching
        - net/mlx5e: Support tagged tunnel over bond
        - net: correct udp zerocopy refcnt also when zerocopy only on append
        - net/mlx5e: Avoid detaching non-existing netdev under switchdev mode
        - staging: erofs: set sb->s_root to NULL when failing from __getname()
        - staging: wilc1000: Fix some double unlock bugs in wilc_wlan_cleanup()
        - pinctrl: intel: Clear interrupt status in mask/unmask callback
        - netfilter: nf_tables: fix oops during rule dump
        - netfilter: nft_fib: Fix existence check support
        - net: stmmac: dwmac-mediatek: modify csr_clk value to fix mdio read/write
          fail
        - dpaa2-eth: Fix potential spectre issue
        - dpaa2-eth: Use PTR_ERR_OR_ZERO where appropriate
        - dpaa_eth: use only online CPU portals
        - dfs_cache: fix a wrong use of kfree in flush_cache_ent()
        - KVM: PPC: Book3S HV: Use new mutex to synchronize MMU setup
        - blk-mq: Fix memory leak in error handling
        - mm: mmu_gather: remove __tlb_reset_range() for force flush
        - nvme-tcp: rename function to have nvme_tcp prefix
        - nvme-tcp: fix possible null deref on a timed out io queue connect
        - nvme-tcp: fix queue mapping when queue count is limited
    
      * Disco update: upstream stable patchset 2019-08-12 (LP: #1839887)
        - selftests/tls: test for lowat overshoot with multiple records
        - selftests/tls: add test for sleeping even though there is data
        - sparc64: Fix regression in non-hypervisor TLB flush xcall
        - include/linux/bitops.h: sanitize rotate primitives
        - xhci: update bounce buffer with correct sg num
        - xhci: Use %zu for printing size_t type
        - xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
        - usb: xhci: avoid null pointer deref when bos field is NULL
        - usbip: usbip_host: fix BUG: sleeping function called from invalid context
        - usbip: usbip_host: fix stub_dev lock context imbalance regression
        - USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
        - USB: sisusbvga: fix oops in error path of sisusb_probe
        - USB: Add LPM quirk for Surface Dock GigE adapter
        - USB: rio500: refuse more than one device at a time
        - USB: rio500: fix memory leak in close after disconnect
        - media: usb: siano: Fix general protection fault in smsusb
        - media: usb: siano: Fix false-positive "uninitialized variable" warning
        - media: smsusb: better handle optional alignment
        - brcmfmac: fix NULL pointer derefence during USB disconnect
        - scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
        - scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
        - tracing: Avoid memory leak in predicate_parse()
        - Btrfs: fix wrong ctime and mtime of a directory after log replay
        - Btrfs: fix race updating log root item during fsync
        - Btrfs: fix fsync not persisting changed attributes of a directory
        - Btrfs: incremental send, fix file corruption when no-holes feature is
          enabled
        - iio: dac: ds4422/ds4424 fix chip verification
        - iio: adc: ti-ads8688: fix timestamp is not updated in buffer
        - s390/crypto: fix possible sleep during spinlock aquired
        - KVM: PPC: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts
        - powerpc/perf: Fix MMCRA corruption by bhrb_filter
        - ALSA: line6: Assure canceling delayed work at disconnection
        - ALSA: hda/realtek - Set default power save node to 0
        - KVM: s390: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID
        - drm/nouveau/i2c: Disable i2c bus access after ->fini()
        - i2c: mlxcpld: Fix wrong initialization order in probe
        - i2c: synquacer: fix synquacer_i2c_doxfer() return value
        - tty: serial: msm_serial: Fix XON/XOFF
        - tty: max310x: Fix external crystal register setup
        - memcg: make it work on sparse non-0-node systems
        - kernel/signal.c: trace_signal_deliver when signal_group_exit
        - arm64: Fix the arm64_personality() syscall wrapper redirection
        - docs: Fix conf.py for Sphinx 2.0
        - doc: Cope with the deprecation of AutoReporter
        - doc: Cope with Sphinx logging deprecations
        - ima: show rules with IMA_INMASK correctly
        - evm: check hash algorithm passed to init_desc()
        - vt/fbcon: deinitialize resources in visual_init() after failed memory
          allocation
        - serial: sh-sci: disable DMA for uart_console
        - staging: vc04_services: prevent integer overflow in create_pagelist()
        - staging: wlan-ng: fix adapter initialization failure
        - cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case
        - CIFS: cifs_read_allocate_pages: don't iterate through whole page array on
          ENOMEM
        - Revert "lockd: Show pid of lockd for remote locks"
        - gcc-plugins: Fix build failures under Darwin host
        - drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using
          get_pages()
        - drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set
        - drm/sun4i: Fix sun8i HDMI PHY clock initialization
        - drm/sun4i: Fix sun8i HDMI PHY configuration for > 148.5 MHz
        - drm/rockchip: shutdown drm subsystem on shutdown
        - drm/lease: Make sure implicit planes are leased
        - Revert "x86/build: Move _etext to actual end of .text"
        - scsi: lpfc: Fix backport of faf5a744f4f8 ("scsi: lpfc: avoid uninitialized
          variable warning")
        - KVM: PPC: Book3S HV: Fix lockdep warning when entering guest on POWER9
        - KVM: PPC: Book3S HV: Restore SPRG3 in kvmhv_p9_guest_entry()
        - powerpc/kexec: Fix loading of kernel + initramfs with kexec_file_load()
        - kasan: initialize tag to 0xff in __kasan_kmalloc
        - signal/arm64: Use force_sig not force_sig_fault for SIGKILL
        - x86/ima: Check EFI_RUNTIME_SERVICES before using
        - ima: fix wrong signed policy requirement when not appraising
        - drm/vmwgfx: Fix user space handle equal to zero
        - drm/vmwgfx: Fix compat mode shader operation
        - drm/atomic: Wire file_priv through for property changes
        - drm: Expose "FB_DAMAGE_CLIPS" property to atomic aware user-space only
        - drm/cma-helper: Fix drm_gem_cma_free_object()
        - ethtool: fix potential userspace buffer overflow
        - Fix memory leak in sctp_process_init
        - ipv4: not do cache for local delivery if bc_forwarding is enabled
        - ipv6: fix the check before getting the cookie in rt6_get_cookie
        - neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
        - net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set
        - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
        - net: mvpp2: Use strscpy to handle stat strings
        - net: rds: fix memory leak in rds_ib_flush_mr_pool
        - net: sfp: read eeprom in maximum 16 byte increments
        - net/tls: replace the sleeping lock around RX resync with a bit lock
        - packet: unconditionally free po->rollover
        - pktgen: do not sleep with the thread lock held.
        - Revert "fib_rules: return 0 directly if an exactly same rule exists when
          NLM_F_EXCL not supplied"
        - ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
        - ipv6: fix EFAULT on sendto with icmpv6 and hdrincl
        - mtd: spinand: macronix: Fix ECC Status Read
        - rcu: locking and unlocking need to always be at least barriers
        - parisc: Use implicit space register selection for loading the coherence
          index of I/O pdirs
        - NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter
        - NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled
        - fuse: fallocate: fix return with locked inode
        - pstore: Set tfm to NULL on free_buf_for_compression
        - pstore/ram: Run without kernel crash dump region
        - x86/power: Fix 'nosmt' vs hibernation triple fault during resume
        - i2c: xiic: Add max_read_len quirk
        - s390/mm: fix address space detection in exception handling
        - xen-blkfront: switch kcalloc to kvcalloc for large array allocation
        - MIPS: Bounds check virt_addr_valid
        - MIPS: pistachio: Build uImage.gz by default
        - Revert "MIPS: perf: ath79: Fix perfcount IRQ assignment"
        - genwqe: Prevent an integer overflow in the ioctl
        - test_firmware: Use correct snprintf() limit
        - drm/gma500/cdv: Check vbt config bits when detecting lvds panels
        - drm/msm: fix fb references in async update
        - drm: add non-desktop quirk for Valve HMDs
        - drm: add non-desktop quirks to Sensics and OSVR headsets.
        - drm/amdgpu/psp: move psp version specific function pointers to early_init
        - drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in
        - drm/i915: Fix I915_EXEC_RING_MASK
        - drm/i915/fbc: disable framebuffer compression on GeminiLake
        - drm/i915: Maintain consistent documentation subsection ordering
        - drm: don't block fb changes for async plane updates
        - drm/i915/gvt: Initialize intel_gvt_gtt_entry in stack
        - TTY: serial_core, add ->install
        - ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
        - udp: only choose unbound UDP socket for multicast when not in a VRF
        - neighbor: Reset gc_entries counter if new entry is released before insert
        - cls_matchall: avoid panic when receiving a packet before filter set
        - ipmr_base: Do not reset index in mr_table_dump
        - ARC: mm: SIGSEGV userspace trying to access kernel virtual memory
        - parisc: Fix crash due alternative coding for NP iopdir_fdc bit
        - SUNRPC fix regression in umount of a secure mount
        - fuse: fix copy_file_range() in the writeback case
        - memstick: mspro_block: Fix an error code in mspro_block_issue_req()
        - mmc: tmio: fix SCC error handling to avoid false positive CRC error
        - mmc: sdhci_am654: Fix SLOTTYPE write
        - nvme-rdma: fix queue mapping when queue count is limited
        - drm/vc4: fix fb references in async update
        - drm: Fix timestamp docs for variable refresh properties.
        - drm/amd/display: Add ASICREV_IS_PICASSO
        - drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2)
        - drm/amd: fix fb references in async update
        - rapidio: fix a NULL pointer dereference when create_workqueue() fails
        - fs/fat/file.c: issue flush after the writeback of FAT
        - sysctl: return -EINVAL if val violates minmax
        - ipc: prevent lockup on alloc_msg and free_msg
        - drm/pl111: Initialize clock spinlock early
        - ARM: prevent tracing IPI_CPU_BACKTRACE
        - mm/hmm: select mmu notifier when selecting HMM
        - hugetlbfs: on restore reserve error path retain subpool reservation
        - mem-hotplug: fix node spanned pages when we have a node with only
          ZONE_MOVABLE
        - mm/cma.c: fix crash on CMA allocation if bitmap allocation fails
        - initramfs: free initrd memory if opening /initrd.image fails
        - mm/cma.c: fix the bitmap status to show failed allocation reason
        - mm: page_mkclean vs MADV_DONTNEED race
        - mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
        - mm/slab.c: fix an infinite loop in leaks_show()
        - kernel/sys.c: prctl: fix false positive in validate_prctl_map()
        - thermal: rcar_gen3_thermal: disable interrupt in .remove
        - drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER
        - mfd: tps65912-spi: Add missing of table registration
        - mfd: intel-lpss: Set the device in reset state when init
        - drm/nouveau/disp/dp: respect sink limits when selecting failsafe link
          configuration
        - mfd: twl6040: Fix device init errors for ACCCTL register
        - perf/x86/intel: Allow PEBS multi-entry in watermark mode
        - drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when
          encoders change
        - drm/bridge: adv7511: Fix low refresh rate selection
        - objtool: Don't use ignore flag for fake jumps
        - drm/nouveau/kms/gv100-: fix spurious window immediate interlocks
        - bpf: fix undefined behavior in narrow load handling
        - EDAC/mpc85xx: Prevent building as a module
        - pwm: meson: Use the spin-lock only to protect register modifications
        - mailbox: stm32-ipcc: check invalid irq
        - ntp: Allow TAI-UTC offset to be set to zero
        - f2fs: fix to avoid panic in do_recover_data()
        - f2fs: fix to avoid panic in f2fs_inplace_write_data()
        - f2fs: fix to avoid panic in f2fs_remove_inode_page()
        - f2fs: fix to do sanity check on free nid
        - f2fs: fix to clear dirty inode in error path of f2fs_iget()
        - f2fs: fix to avoid panic in dec_valid_block_count()
        - f2fs: fix to use inline space only if inline_xattr is enable
        - f2fs: fix to do sanity check on valid block count of segment
        - f2fs: fix to do checksum even if inode page is uptodate
        - percpu: remove spurious lock dependency between percpu and sched
        - configfs: fix possible use-after-free in configfs_register_group
        - uml: fix a boot splat wrt use of cpu_all_mask
        - PCI: dwc: Free MSI in dw_pcie_host_init() error path
        - PCI: dwc: Free MSI IRQ page in dw_pcie_free_msi()
        - mmc: mmci: Prevent polling for busy detection in IRQ context
        - netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast
        - netfilter: nf_conntrack_h323: restore boundary check correctness
        - mips: Make sure dt memory regions are valid
        - netfilter: nf_tables: fix base chain stat rcu_dereference usage
        - watchdog: imx2_wdt: Fix set_timeout for big timeout values
        - watchdog: fix compile time error of pretimeout governors
        - blk-mq: move cancel of requeue_work into blk_mq_release
        - iommu/vt-d: Set intel_iommu_gfx_mapped correctly
        - misc: pci_endpoint_test: Fix test_reg_bar to be updated in pci_endpoint_test
        - PCI: designware-ep: Use aligned ATU window for raising MSI interrupts
        - nvme-pci: unquiesce admin queue on shutdown
        - nvme-pci: shutdown on timeout during deletion
        - netfilter: nf_flow_table: check ttl value in flow offload data path
        - netfilter: nf_flow_table: fix netdev refcnt leak
        - ALSA: hda - Register irq handler after the chip initialization
        - nvmem: core: fix read buffer in place
        - nvmem: sunxi_sid: Support SID on A83T and H5
        - fuse: retrieve: cap requested size to negotiated max_write
        - nfsd: allow fh_want_write to be called twice
        - nfsd: avoid uninitialized variable warning
        - vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING"
        - switchtec: Fix unintended mask of MRPC event
        - net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending
        - x86/PCI: Fix PCI IRQ routing table memory leak
        - i40e: Queues are reserved despite "Invalid argument" error
        - platform/chrome: cros_ec_proto: check for NULL transfer function
        - PCI: keystone: Prevent ARM32 specific code to be compiled for ARM64
        - soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
        - clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
        - soc: rockchip: Set the proper PWM for rk3288
        - ARM: dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
        - ARM: dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
        - ARM: dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
        - ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
        - ARM: dts: imx6sll: Specify IMX6SLL_CLK_IPG as "ipg" clock to SDMA
        - ARM: dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA
        - ARM: dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA
        - ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
        - ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
        - PCI: rpadlpar: Fix leaked device_node references in add/remove paths
        - drm/amd/display: Use plane->color_space for dpp if specified
        - ARM: OMAP2+: pm33xx-core: Do not Turn OFF CEFUSE as PPA may be using it
        - platform/x86: intel_pmc_ipc: adding error handling
        - power: supply: max14656: fix potential use-before-alloc
        - PCI: rcar: Fix a potential NULL pointer dereference
        - PCI: rcar: Fix 64bit MSI message address handling
        - scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags
        - video: hgafb: fix potential NULL pointer dereference
        - video: imsttfb: fix potential NULL pointer dereferences
        - block, bfq: increase idling for weight-raised queues
        - PCI: xilinx: Check for __get_free_pages() failure
        - gpio: gpio-omap: add check for off wake capable gpios
        - ice: Add missing case in print_link_msg for printing flow control
        - dmaengine: idma64: Use actual device for DMA transfers
        - pwm: tiehrpwm: Update shadow register for disabling PWMs
        - ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on
          Arndale Octa
        - pwm: Fix deadlock warning when removing PWM device
        - ARM: exynos: Fix undefined instruction during Exynos5422 resume
        - usb: typec: fusb302: Check vconn is off when we start toggling
        - soc: renesas: Identify R-Car M3-W ES1.3
        - gpio: vf610: Do not share irq_chip
        - percpu: do not search past bitmap when allocating an area
        - ovl: check the capability before cred overridden
        - ovl: support stacked SEEK_HOLE/SEEK_DATA
        - ALSA: seq: Cover unsubscribe_port() in list_mutex
        - media: rockchip/vpu: Fix/re-order probe-error/remove path
        - media: rockchip/vpu: Add missing dont_use_autosuspend() calls
        - drm/msm: correct attempted NULL pointer dereference in debugfs
        - mm/memory_hotplug: release memory resource after arch_remove_memory()
        - mm/memory_hotplug.c: fix the wrong usage of N_HIGH_MEMORY
        - drm/nouveau: fix duplication of nv50_head_atom struct
        - f2fs: fix error path of recovery
        - f2fs: fix to avoid panic in dec_valid_node_count()
        - f2fs: fix to avoid deadloop in foreground GC
        - f2fs: fix to retrieve inline xattr space
        - media: atmel: atmel-isc: fix asd memory allocation
        - vfio-pci/nvlink2: Fix potential VMA leak
        - powerpc/pseries: Track LMB nid instead of using device tree
        - arm64: defconfig: Update UFSHCD for Hi3660 soc
        - iommu/vt-d: Don't request page request irq under dmar_global_lock
        - soc/tegra: pmc: Remove reset sysfs entries on error
        - power: supply: cpcap-battery: Fix signed counter sample register
        - PCI: keystone: Invoke phy_reset() API before enabling PHY
        - iommu/vt-d: Flush IOTLB for untrusted device in time
        - arm64: dts: imx8mq: Mark iomuxc_gpr as i.MX6Q compatible
        - pinctrl: pinctrl-intel: move gpio suspend/resume to noirq phase
        - f2fs: fix potential recursive call when enabling data_flush
        - arm64: dts: qcom: qcs404: Fix regulator supply names
        - gpio: gpio-omap: limit errata 1.101 handling to wkup domain gpios only
        - media: v4l2-ctrl: v4l2_ctrl_request_setup returns with error upon failure
        - batman-adv: Adjust name for batadv_dat_send_data
        - ice: Enable LAN_EN for the right recipes
        - ice: Do not set LB_EN for prune switch rules
        - media: v4l2-fwnode: Defaults may not override endpoint configuration in
          firmware
        - ARM: shmobile: porter: enable R-Car Gen2 regulator quirk
    
     -- Kleber Sacilotto de Souza <email address hidden>  Wed, 04 Sep 2019 10:50:38 +0200
  • linux (5.0.0-27.28) disco; urgency=medium
    
      * disco/linux: 5.0.0-27.28 -proposed tracker (LP: #1840816)
    
      * [Potential Regression] System crashes when running ftrace test in
        ubuntu_kernel_selftests (LP: #1840750)
        - x86/kprobes: Set instruction page as executable
    
    linux (5.0.0-26.27) disco; urgency=medium
    
      * disco/linux: 5.0.0-26.27 -proposed tracker (LP: #1839972)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] update helper scripts
    
      * alsa/hdmi: add icelake hdmi audio support for a Dell machine (LP: #1836916)
        - ALSA: hda: hdmi - add Icelake support
        - ALSA: hda/hdmi - Remove duplicated define
        - ALSA: hda/hdmi - Fix i915 reverse port/pin mapping
    
      * input/mouse: alps trackpoint-only device doesn't work (LP: #1836752)
        - Input: alps - don't handle ALPS cs19 trackpoint-only device
        - Input: alps - fix a mismatch between a condition check and its comment
    
      * [18.04 FEAT] Enhanced hardware support (LP: #1836857)
        - s390: report new CPU capabilities
        - s390: add alignment hints to vector load and store
    
      * System does not auto detect disconnection of external monitor (LP: #1835001)
        - drm/i915: Add support for retrying hotplug
        - drm/i915: Enable hotplug retry
    
      * [18.04 FEAT] Enhanced CPU-MF hardware counters - kernel part (LP: #1836860)
        - s390/cpum_cf: Add support for CPU-MF SVN 6
        - s390/cpumf: Add extended counter set definitions for model 8561 and 8562
    
      * EeePC 1005px laptop backlight is off after system boot up (LP: #1837117)
        - platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from
          asus_nb_wmi
    
      * br_netfilter: namespace sysctl operations (LP: #1836910)
        - netfilter: bridge: port sysctls to use brnf_net
        - netfilter: bridge: namespace bridge netfilter sysctls
        - netfilter: bridge: prevent UAF in brnf_exit_net()
    
      * ideapad_laptop disables WiFi/BT radios on Lenovo Y540 (LP: #1837136)
        - platform/x86: ideapad-laptop: Remove no_hw_rfkill_list
    
      * shiftfs: allow overlayfs (LP: #1838677)
        - SAUCE: shiftfs: enable overlayfs on shiftfs
    
      * bcache: bch_allocator_thread(): hung task timeout (LP: #1784665)
        - bcache: never writeback a discard operation
        - bcache: improve bcache_reboot()
        - SAUCE: bcache: fix deadlock in bcache_allocator
    
      * Regressions in CMA allocation rework (LP: #1839395)
        - dma-contiguous: do not overwrite align in dma_alloc_contiguous()
        - dma-contiguous: page-align the size in dma_free_contiguous()
    
      * CVE-2019-3900
        - vhost: introduce vhost_exceeds_weight()
        - vhost_net: fix possible infinite loop
        - vhost: vsock: add weight support
        - vhost: scsi: add weight support
    
      * Disco update: 5.0.21 upstream stable release (LP: #1837518)
        - bonding/802.3ad: fix slave link initialization transition states
        - cxgb4: offload VLAN flows regardless of VLAN ethtype
        - inet: switch IP ID generator to siphash
        - ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
        - ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST
        - ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
        - ipv6: Fix redirect with VRF
        - llc: fix skb leak in llc_build_and_send_ui_pkt()
        - mlxsw: spectrum_acl: Avoid warning after identical rules insertion
        - net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT
        - net: fec: fix the clk mismatch in failed_reset path
        - net-gro: fix use-after-free read in napi_gro_frags()
        - net: mvneta: Fix err code path of probe
        - net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
        - net: phy: marvell10g: report if the PHY fails to boot firmware
        - net: sched: don't use tc_action->order during action dump
        - net: stmmac: fix reset gpio free missing
        - r8169: fix MAC address being lost in PCI D3
        - usbnet: fix kernel crash after disconnect
        - net/mlx5: Avoid double free in fs init error unwinding path
        - tipc: Avoid copying bytes beyond the supplied data
        - net/mlx5: Allocate root ns memory using kzalloc to match kfree
        - net/mlx5e: Disable rxhash when CQE compress is enabled
        - net: stmmac: fix ethtool flow control not able to get/set
        - net: stmmac: dma channel control register need to be init first
        - bnxt_en: Fix aggregation buffer leak under OOM condition.
        - bnxt_en: Fix possible BUG() condition when calling pci_disable_msix().
        - bnxt_en: Reduce memory usage when running in kdump kernel.
        - net/tls: fix state removal with feature flags off
        - net/tls: don't ignore netdev notifications if no TLS features
        - cxgb4: Revert "cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size"
        - net: correct zerocopy refcnt with udp MSG_MORE
        - crypto: vmx - ghash: do nosimd fallback manually
        - xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
        - Revert "tipc: fix modprobe tipc failed after switch order of device
          registration"
        - tipc: fix modprobe tipc failed after switch order of device registration
        - Linux 5.0.21
    
      * Disco update: 5.0.20 upstream stable release (LP: #1837517)
        - x86: Hide the int3_emulate_call/jmp functions from UML
        - ext4: do not delete unlinked inode from orphan list on failed truncate
        - ext4: wait for outstanding dio during truncate in nojournal mode
        - KVM: x86: fix return value for reserved EFER
        - bio: fix improper use of smp_mb__before_atomic()
        - sbitmap: fix improper use of smp_mb__before_atomic()
        - Revert "scsi: sd: Keep disk read-only when re-reading partition"
        - crypto: hash - fix incorrect HASH_MAX_DESCSIZE
        - crypto: vmx - CTR: always increment IV as quadword
        - mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time
          problem
        - mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem
        - kvm: svm/avic: fix off-by-one in checking host APIC ID
        - libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead
        - arm64/kernel: kaslr: reduce module randomization range to 2 GB
        - arm64/iommu: handle non-remapped addresses in ->mmap and ->get_sgtable
        - gfs2: Fix sign extension bug in gfs2_update_stats
        - btrfs: don't double unlock on error in btrfs_punch_hole
        - Btrfs: do not abort transaction at btrfs_update_root() after failure to COW
          path
        - Btrfs: avoid fallback to transaction commit during fsync of files with holes
        - Btrfs: fix race between ranged fsync and writeback of adjacent ranges
        - btrfs: sysfs: Fix error path kobject memory leak
        - btrfs: sysfs: don't leak memory when failing add fsid
        - fbdev: fix divide error in fb_var_to_videomode
        - cifs: fix credits leak for SMB1 oplock breaks
        - arm64: errata: Add workaround for Cortex-A76 erratum #1463225
        - [Config] Add CONFIG_ARM64_ERRATUM_1463225
        - btrfs: honor path->skip_locking in backref code
        - ovl: relax WARN_ON() for overlapping layers use case
        - fbdev: fix WARNING in __alloc_pages_nodemask bug
        - media: cpia2: Fix use-after-free in cpia2_exit
        - media: serial_ir: Fix use-after-free in serial_ir_init_module
        - media: vb2: add waiting_in_dqbuf flag
        - media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
        - ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
        - bpf: devmap: fix use-after-free Read in __dev_map_entry_free
        - batman-adv: mcast: fix multicast tt/tvlv worker locking
        - at76c50x-usb: Don't register led_trigger if usb_register_driver failed
        - acct_on(): don't mess with freeze protection
        - netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
        - Revert "btrfs: Honour FITRIM range constraints during free space trim"
        - gfs2: Fix lru_count going negative
        - cxgb4: Fix error path in cxgb4_init_module
        - afs: Fix getting the afs.fid xattr
        - NFS: make nfs_match_client killable
        - gfs2: fix race between gfs2_freeze_func and unmount
        - IB/hfi1: Fix WQ_MEM_RECLAIM warning
        - gfs2: Fix occasional glock use-after-free
        - mmc: core: Verify SD bus width
        - tools/bpf: fix perf build error with uClibc (seen on ARC)
        - selftests/bpf: set RLIMIT_MEMLOCK properly for test_libbpf_open.c
        - bpftool: exclude bash-completion/bpftool from .gitignore pattern
        - ice: Separate if conditions for ice_set_features()
        - blk-mq: split blk_mq_alloc_and_init_hctx into two parts
        - blk-mq: grab .q_usage_counter when queuing request from plug code path
        - dmaengine: tegra210-dma: free dma controller in remove()
        - net: ena: gcc 8: fix compilation warning
        - net: ena: fix: set freed objects to NULL to avoid failing future allocations
        - hv_netvsc: fix race that may miss tx queue wakeup
        - Bluetooth: Ignore CC events not matching the last HCI command
        - pinctrl: zte: fix leaked of_node references
        - ASoC: Intel: kbl_da7219_max98357a: Map BTN_0 to KEY_PLAYPAUSE
        - usb: dwc2: gadget: Increase descriptors count for ISOC's
        - usb: dwc3: move synchronize_irq() out of the spinlock protected block
        - usb: gadget: f_fs: don't free buffer prematurely
        - ASoC: hdmi-codec: unlock the device on startup errors
        - powerpc/perf: Return accordingly on invalid chip-id in
        - powerpc/boot: Fix missing check of lseek() return value
        - powerpc/perf: Fix loop exit condition in nest_imc_event_init
        - spi: atmel-quadspi: fix crash while suspending
        - ASoC: imx: fix fiq dependencies
        - spi: pxa2xx: fix SCR (divisor) calculation
        - brcm80211: potential NULL dereference in
          brcmf_cfg80211_vndr_cmds_dcmd_handler()
        - ACPI / property: fix handling of data_nodes in acpi_get_next_subnode()
        - drm/nouveau/bar/nv50: ensure BAR is mapped
        - media: stm32-dcmi: return appropriate error codes during probe
        - ARM: vdso: Remove dependency with the arch_timer driver internals
        - arm64: Fix compiler warning from pte_unmap() with -Wunused-but-set-variable
        - x86/ftrace: Set trampoline pages as executable
        - powerpc/watchdog: Use hrtimers for per-CPU heartbeat
        - sched/cpufreq: Fix kobject memleak
        - scsi: qla2xxx: Fix a qla24xx_enable_msix() error path
        - scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending()
        - scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in
          tcm_qla2xxx_close_session()
        - scsi: qla2xxx: Fix hardirq-unsafe locking
        - x86/modules: Avoid breaking W^X while loading modules
        - Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota
          reserve
        - btrfs: fix panic during relocation after ENOSPC before writeback happens
        - btrfs: Don't panic when we can't find a root key
        - iwlwifi: pcie: don't crash on invalid RX interrupt
        - rtc: 88pm860x: prevent use-after-free on device remove
        - rtc: stm32: manage the get_irq probe defer case
        - scsi: qedi: Abort ep termination if offload not scheduled
        - s390/kexec_file: Fix detection of text segment in ELF loader
        - ALSA: hda: fix unregister device twice on ASoC driver
        - sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs
        - net: ethernet: ti: cpsw: fix allmulti cfg in dual_mac mode
        - w1: fix the resume command API
        - net: phy: improve genphy_soft_reset
        - s390: qeth: address type mismatch warning
        - dmaengine: pl330: _stop: clear interrupt status
        - mac80211/cfg80211: update bss channel on channel switch
        - libbpf: fix samples/bpf build failure due to undefined UINT32_MAX
        - slimbus: fix a potential NULL pointer dereference in
          of_qcom_slim_ngd_register
        - ASoC: fsl_sai: Update is_slave_mode with correct value
        - Fix nfs4.2 return -EINVAL when do dedupe operation
        - mwifiex: prevent an array overflow
        - rsi: Fix NULL pointer dereference in kmalloc
        - net: cw1200: fix a NULL pointer dereference
        - nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE
        - nvme-rdma: fix a NULL deref when an admin connect times out
        - nvme-tcp: fix a NULL deref when an admin connect times out
        - crypto: sun4i-ss - Fix invalid calculation of hash end
        - bcache: avoid potential memleak of list of journal_replay(s) in the
          CACHE_SYNC branch of run_cache_set
        - bcache: return error immediately in bch_journal_replay()
        - bcache: fix failure in journal relplay
        - bcache: add failure check to run_cache_set() for journal replay
        - bcache: avoid clang -Wunintialized warning
        - RDMA/cma: Consider scope_id while binding to ipv6 ll address
        - vfio-ccw: Do not call flush_workqueue while holding the spinlock
        - vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev
        - x86/build: Move _etext to actual end of .text
        - smpboot: Place the __percpu annotation correctly
        - x86/uaccess: Dont leak the AC flag into __put_user() argument evaluation
        - x86/mm: Remove in_nmi() warning from 64-bit implementation of
          vmalloc_fault()
        - mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC
          versions
        - Bluetooth: hci_qca: Give enough time to ROME controller to bootup.
        - Bluetooth: btbcm: Add default address for BCM43341B
        - HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
        - pinctrl: pistachio: fix leaked of_node references
        - pinctrl: st: fix leaked of_node references
        - pinctrl: samsung: fix leaked of_node references
        - clk: rockchip: undo several noc and special clocks as critical on rk3288
        - perf/arm-cci: Remove broken race mitigation
        - dmaengine: at_xdmac: remove BUG_ON macro in tasklet
        - media: coda: clear error return value before picture run
        - media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper
        - media: au0828: stop video streaming only when last user stops
        - media: ov2659: make S_FMT succeed even if requested format doesn't match
        - audit: fix a memory leak bug
        - media: stm32-dcmi: fix crash when subdev do not expose any formats
        - media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable()
        - media: pvrusb2: Prevent a buffer overflow
        - iio: adc: stm32-dfsdm: fix unmet direct dependencies detected
        - block: fix use-after-free on gendisk
        - powerpc/numa: improve control of topology updates
        - powerpc/64: Fix booting large kernels with STRICT_KERNEL_RWX
        - random: fix CRNG initialization when random.trust_cpu=1
        - random: add a spinlock_t to struct batched_entropy
        - cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock
        - sched/core: Check quota and period overflow at usec to nsec conversion
        - sched/rt: Check integer overflow at usec to nsec conversion
        - sched/core: Handle overflow in cpu_shares_write_u64
        - staging: vc04_services: handle kzalloc failure
        - drm/msm/dpu: release resources on modeset failure
        - drm/msm: a5xx: fix possible object reference leak
        - drm/msm: dpu: Don't set frame_busy_mask for async updates
        - drm/msm: Fix NULL pointer dereference
        - irq_work: Do not raise an IPI when queueing work on the local CPU
        - thunderbolt: Take domain lock in switch sysfs attribute callbacks
        - s390/qeth: handle error from qeth_update_from_chp_desc()
        - USB: core: Don't unbind interfaces following device reset failure
        - x86/irq/64: Limit IST stack overflow check to #DB stack
        - drm: etnaviv: avoid DMA API warning when importing buffers
        - dt-bindings: phy-qcom-qmp: Add UFS PHY reset
        - phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode
        - phy: mapphone-mdm6600: add gpiolib dependency
        - dpaa2-eth: Fix Rx classification status
        - i40e: Able to add up to 16 MAC filters on an untrusted VF
        - i40e: don't allow changes to HW VLAN stripping on active port VLANs
        - ACPI/IORT: Reject platform device creation on NUMA node mapping failure
        - arm64: vdso: Fix clock_getres() for CLOCK_REALTIME
        - RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
        - perf/x86/msr: Add Icelake support
        - perf/x86/intel/rapl: Add Icelake support
        - perf/x86/intel/cstate: Add Icelake support
        - PM / devfreq: Fix static checker warning in try_then_request_governor
        - hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
        - hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
        - hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
        - hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
        - hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
        - mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers
        - mmc_spi: add a status check for spi_sync_locked
        - mmc: sdhci-of-esdhc: add erratum eSDHC5 support
        - mmc: sdhci-of-esdhc: add erratum A-009204 support
        - mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
        - drm/amdgpu: fix old fence check in amdgpu_fence_emit
        - PM / core: Propagate dev->power.wakeup_path when no callbacks
        - clk: rockchip: Fix video codec clocks on rk3288
        - extcon: arizona: Disable mic detect if running when driver is removed
        - clk: rockchip: Make rkpwm a critical clock on rk3288
        - clk: zynqmp: fix check for fractional clock
        - s390: zcrypt: initialize variables before_use
        - x86/microcode: Fix the ancient deprecated microcode loading method
        - s390/mm: silence compiler warning when compiling without CONFIG_PGSTE
        - s390: cio: fix cio_irb declaration
        - selftests: cgroup: fix cleanup path in test_memcg_subtree_control()
        - qmi_wwan: Add quirk for Quectel dynamic config
        - cpufreq: ppc_cbe: fix possible object reference leak
        - cpufreq/pasemi: fix possible object reference leak
        - cpufreq: pmac32: fix possible object reference leak
        - cpufreq: kirkwood: fix possible object reference leak
        - cpufreq: imx6q: fix possible object reference leak
        - block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR
        - samples/bpf: fix build with new clang
        - x86/build: Keep local relocations with ld.lld
        - regulator: core: Avoid potential deadlock on regulator_unregister
        - drm/pl111: fix possible object reference leak
        - iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion
        - iio: hmc5843: fix potential NULL pointer dereferences
        - iio: common: ssp_sensors: Initialize calculated_time in
          ssp_common_process_data
        - iio: adc: ti-ads7950: Fix improper use of mlock
        - selftests/bpf: ksym_search won't check symbols exists
        - rtlwifi: fix a potential NULL pointer dereference
        - mwifiex: Fix mem leak in mwifiex_tm_cmd
        - brcmfmac: fix missing checks for kmemdup
        - b43: shut up clang -Wuninitialized variable warning
        - brcmfmac: convert dev_init_lock mutex to completion
        - brcmfmac: fix WARNING during USB disconnect in case of unempty psq
        - brcmfmac: fix race during disconnect when USB completion is in progress
        - brcmfmac: fix Oops when bringing up interface during USB disconnect
        - rtc: xgene: fix possible race condition
        - rtlwifi: fix potential NULL pointer dereference
        - scsi: ufs: Fix regulator load and icc-level configuration
        - scsi: ufs: Avoid configuring regulator with undefined voltage range
        - drm/panel: otm8009a: Add delay at the end of initialization
        - drm/amd/display: Prevent cursor hotspot overflow for RV overlay planes
        - arm64: cpu_ops: fix a leaked reference by adding missing of_node_put
        - locking/static_key: Fix false positive warnings on concurrent dec/inc
        - wil6210: fix return code of wmi_mgmt_tx and wmi_mgmt_tx_ext
        - x86/uaccess, ftrace: Fix ftrace_likely_update() vs. SMAP
        - x86/uaccess, signal: Fix AC=1 bloat
        - x86/ia32: Fix ia32_restore_sigcontext() AC leak
        - x86/uaccess: Fix up the fixup
        - chardev: add additional check for minor range overlap
        - sh: sh7786: Add explicit I/O cast to sh7786_mm_sel()
        - HID: core: move Usage Page concatenation to Main item
        - ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put
        - ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put
        - cxgb3/l2t: Fix undefined behaviour
        - clk: renesas: rcar-gen3: Correct parent clock of SYS-DMAC
        - block: pass page to xen_biovec_phys_mergeable
        - clk: renesas: rcar-gen3: Correct parent clock of Audio-DMAC
        - HID: logitech-hidpp: change low battery level threshold from 31 to 30
          percent
        - spi: tegra114: reset controller on probe
        - kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.
        - media: video-mux: fix null pointer dereferences
        - media: wl128x: prevent two potential buffer overflows
        - media: gspca: Kill URBs on USB device disconnect
        - efifb: Omit memory map check on legacy boot
        - thunderbolt: property: Fix a missing check of kzalloc
        - thunderbolt: Fix to check the return value of kmemdup
        - drm: rcar-du: lvds: Set LVEN and LVRES bits together on D3
        - timekeeping: Force upper bound for setting CLOCK_REALTIME
        - scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload
          check
        - virtio_console: initialize vtermno value for ports
        - tty: ipwireless: fix missing checks for ioremap
        - staging: mt7621-mmc: Initialize completions a single time during probe
        - overflow: Fix -Wtype-limits compilation warnings
        - x86/mce: Fix machine_check_poll() tests for error types
        - rcutorture: Fix cleanup path for invalid torture_type strings
        - x86/mce: Handle varying MCA bank counts
        - rcuperf: Fix cleanup path for invalid perf_type strings
        - rcu: Do a single rhp->func read in rcu_head_after_call_rcu()
        - spi: stm32-qspi: add spi_master_put in release function
        - usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
        - scsi: qla4xxx: avoid freeing unallocated dma memory
        - scsi: lpfc: avoid uninitialized variable warning
        - ice: Prevent unintended multiple chain resets
        - selinux: avoid uninitialized variable warning
        - batman-adv: allow updating DAT entry timeouts on incoming ARP Replies
        - dmaengine: tegra210-adma: use devm_clk_*() helpers
        - x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die processors
        - staging: mt7621-mmc: Check for nonzero number of scatterlist entries
        - hwrng: omap - Set default quality
        - thunderbolt: Fix to check return value of ida_simple_get
        - thunderbolt: Fix to check for kmemdup failure
        - drm/amd/display: fix releasing planes when exiting odm
        - drm/amd/display: Link train only when link is DP and backend is enabled
        - drm/amd/display: Reset alpha state for planes to the correct values
        - thunderbolt: property: Fix a NULL pointer dereference
        - media: v4l2-fwnode: The first default data lane is 0 on C-PHY
        - media: staging/intel-ipu3: mark PM function as __maybe_unused
        - tinydrm/mipi-dbi: Use dma-safe buffers for all SPI transfers
        - igb: Exclude device from suspend direct complete optimization
        - media: si2165: fix a missing check of return value
        - media: dvbsky: Avoid leaking dvb frontend
        - media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
        - drm/amd/display: add pipe lock during stream update
        - media: staging: davinci_vpfe: disallow building with COMPILE_TEST
        - drm/amd/display: Fix Divide by 0 in memory calculations
        - drm/amd/display: Set stream->mode_changed when connectors change
        - scsi: ufs: fix a missing check of devm_reset_control_get
        - media: vimc: stream: fix thread state before sleep
        - media: gspca: do not resubmit URBs when streaming has stopped
        - media: go7007: avoid clang frame overflow warning with KASAN
        - media: vimc: zero the media_device on probe
        - media: vim2m: replace devm_kzalloc by kzalloc
        - media: cedrus: Add a quirk for not setting DMA offset
        - scsi: lpfc: Fix FDMI manufacturer attribute value
        - scsi: lpfc: Fix fc4type information for FDMI
        - media: saa7146: avoid high stack usage with clang
        - scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
        - scsi: lpfc: Fix use-after-free mailbox cmd completion
        - audit: fix a memleak caused by auditing load module
        - spi : spi-topcliff-pch: Fix to handle empty DMA buffers
        - drm: writeback: Fix leak of writeback job
        - drm/omap: dsi: Fix PM for display blank with paired dss_pll calls
        - drm/omap: Notify all devices in the pipeline of output disconnection
        - spi: rspi: Fix sequencer reset during initialization
        - regulator: wm831x ldo: Fix notifier mutex lock warning
        - regulator: wm831x isink: Fix notifier mutex lock warning
        - regulator: ltc3676: Fix notifier mutex lock warning
        - regulator: ltc3589: Fix notifier mutex lock warning
        - regulator: pv88060: Fix notifier mutex lock warning
        - spi: imx: stop buffer overflow in RX FIFO flush
        - regulator: lp8755: Fix notifier mutex lock warning
        - regulator: da9211: Fix notifier mutex lock warning
        - regulator: da9063: Fix notifier mutex lock warning
        - regulator: pv88080: Fix notifier mutex lock warning
        - regulator: wm831x: Fix notifier mutex lock warning
        - regulator: pv88090: Fix notifier mutex lock warning
        - regulator: da9062: Fix notifier mutex lock warning
        - regulator: da9055: Fix notifier mutex lock warning
        - spi: Fix zero length xfer bug
        - ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM
        - ASoC: ti: fix davinci_mcasp_probe dependencies
        - drm/v3d: Handle errors from IRQ setup.
        - drm/drv: Hold ref on parent device during drm_device lifetime
        - drm: Wake up next in drm_read() chain if we are forced to putback the event
        - drm/sun4i: dsi: Change the start delay calculation
        - vfio-ccw: Prevent quiesce function going into an infinite loop
        - ice: Put __ICE_PREPARED_FOR_RESET check in ice_prepare_for_reset
        - drm/sun4i: dsi: Enforce boundaries on the start delay
        - NFS: Fix a double unlock from nfs_match,get_client
        - Linux 5.0.20
    
      * Disco update: 5.0.19 upstream stable release (LP: #1837516)
        - ipv6: fix src addr routing with the exception table
        - ipv6: prevent possible fib6 leaks
        - net: Always descend into dsa/
        - net: avoid weird emergency message
        - net/mlx4_core: Change the error print to info print
        - net: test nouarg before dereferencing zerocopy pointers
        - net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions
        - nfp: flower: add rcu locks when accessing netdev for tunnels
        - ppp: deflate: Fix possible crash in deflate_init
        - rtnetlink: always put IFLA_LINK for links with a link-netnsid
        - tipc: switch order of device registration to fix a crash
        - vsock/virtio: free packets during the socket release
        - tipc: fix modprobe tipc failed after switch order of device registration
        - vsock/virtio: Initialize core virtio vsock before registering the driver
        - net/mlx5e: Add missing ethtool driver info for representors
        - net/mlx5e: Additional check for flow destination comparison
        - net/mlx5: Imply MLXFW in mlx5_core
        - net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled
        - blk-mq: free hw queue's resource in hctx's release handler
        - regulator: core: fix error path for regulator_set_voltage_unlocked
        - parisc: Export running_on_qemu symbol for modules
        - parisc: Add memory clobber to TLB purges
        - parisc: Skip registering LED when running in QEMU
        - parisc: Add memory barrier to asm pdc and sync instructions
        - parisc: Allow live-patching of __meminit functions
        - parisc: Use PA_ASM_LEVEL in boot code
        - parisc: Rename LEVEL to PA_ASM_LEVEL to avoid name clash with DRBD code
        - stm class: Fix channel free in stm output free path
        - stm class: Fix channel bitmap on 32-bit systems
        - brd: re-enable __GFP_HIGHMEM in brd_insert_page()
        - proc: prevent changes to overridden credentials
        - Revert "MD: fix lock contention for flush bios"
        - md: batch flush requests.
        - md: add mddev->pers to avoid potential NULL pointer dereference
        - md: add a missing endianness conversion in check_sb_changes
        - dcache: sort the freeing-without-RCU-delay mess for good.
        - intel_th: msu: Fix single mode with IOMMU
        - p54: drop device reference count if fails to enable device
        - of: fix clang -Wunsequenced for be32_to_cpu()
        - brcmfmac: Add DMI nvram filename quirk for ACEPC T8 and T11 mini PCs
        - phy: ti-pipe3: fix missing bit-wise or operator when assigning val
        - media: ov6650: Fix sensor possibly not detected on probe
        - media: imx: csi: Allow unknown nearest upstream entities
        - media: imx: Clear fwnode link struct for each endpoint iteration
        - RDMA/mlx5: Use get_zeroed_page() for clock_info
        - RDMA/ipoib: Allow user space differentiate between valid dev_port
        - NFS4: Fix v4.0 client state corruption when mount
        - PNFS fallback to MDS if no deviceid found
        - clk: hi3660: Mark clk_gate_ufs_subsys as critical
        - clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider
        - clk: mediatek: Disable tuner_en before change PLL rate
        - clk: rockchip: fix wrong clock definitions for rk3328
        - udlfb: delete the unused parameter for dlfb_handle_damage
        - udlfb: fix sleeping inside spinlock
        - udlfb: introduce a rendering mutex
        - fuse: fix writepages on 32bit
        - fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
        - ovl: fix missing upper fs freeze protection on copy up for ioctl
        - gcc-plugins: arm_ssp_per_task_plugin: Fix for older GCC < 6
        - iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
        - ceph: flush dirty inodes before proceeding with remount
        - x86_64: Add gap to int3 to allow for call emulation
        - x86_64: Allow breakpoints to emulate call instructions
        - ftrace/x86_64: Emulate call function while updating in breakpoint handler
        - tracing: Fix partial reading of trace event's id file
        - tracing: probeevent: Fix to make the type of $comm string
        - memory: tegra: Fix integer overflow on tick value calculation
        - perf intel-pt: Fix instructions sampling rate
        - perf intel-pt: Fix improved sample timestamp
        - perf intel-pt: Fix sample timestamp wrt non-taken branches
        - MIPS: perf: Fix build with CONFIG_CPU_BMIPS5000 enabled
        - objtool: Allow AR to be overridden with HOSTAR
        - x86/mpx, mm/core: Fix recursive munmap() corruption
        - fbdev/efifb: Ignore framebuffer memmap entries that lack any memory types
        - fbdev: sm712fb: fix brightness control on reboot, don't set SR30
        - fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75
        - fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F
        - fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA
        - fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping
          VRAM
        - fbdev: sm712fb: fix support for 1024x768-16 mode
        - fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
        - fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting
        - PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken
        - PCI: Mark Atheros AR9462 to avoid bus reset
        - PCI: Reset Lenovo ThinkPad P50 nvgpu at boot if necessary
        - PCI: Init PCIe feature bits for managed host bridge alloc
        - PCI/AER: Change pci_aer_init() stub to return void
        - PCI: rcar: Add the initialization of PCIe link in resume_noirq()
        - PCI: Factor out pcie_retrain_link() function
        - PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum
        - dm cache metadata: Fix loading discard bitset
        - dm zoned: Fix zone report handling
        - dm delay: fix a crash when invalid device is specified
        - dm crypt: move detailed message into debug level
        - dm integrity: correctly calculate the size of metadata area
        - dm mpath: always free attached_handler_name in parse_path()
        - fuse: Add FOPEN_STREAM to use stream_open()
        - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
        - xfrm: Reset secpath in xfrm failure
        - xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
        - vti4: ipip tunnel deregistration fixes.
        - xfrm: clean up xfrm protocol checks
        - esp4: add length check for UDP encapsulation
        - xfrm: Honor original L3 slave device in xfrmi policy lookup
        - xfrm4: Fix uninitialized memory read in _decode_session4
        - ARC: PAE40: don't panic and instead turn off hw ioc
        - clk: sunxi-ng: nkmp: Avoid GENMASK(-1, 0)
        - KVM: PPC: Book3S HV: Perserve PSSCR FAKE_SUSPEND bit on guest exit
        - KVM: PPC: Book3S: Protect memslots while validating user address
        - power: supply: cpcap-battery: Fix division by zero
        - securityfs: fix use-after-free on symlink traversal
        - apparmorfs: fix use-after-free on symlink traversal
        - PCI: Fix issue with "pci=disable_acs_redir" parameter being ignored
        - x86: kvm: hyper-v: deal with buggy TLB flush requests from WS2012
        - mac80211: Fix kernel panic due to use of txq after free
        - net: ieee802154: fix missing checks for regmap_update_bits
        - KVM: arm/arm64: Ensure vcpu target is unset on reset failure
        - power: supply: sysfs: prevent endless uevent loop with
          CONFIG_POWER_SUPPLY_DEBUG
        - tools: bpftool: fix infinite loop in map create
        - bpf: Fix preempt_enable_no_resched() abuse
        - qmi_wwan: new Wistron, ZTE and D-Link devices
        - iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb()
        - sched/cpufreq: Fix kobject memleak
        - x86/mm/mem_encrypt: Disable all instrumentation for early SME setup
        - KVM: fix KVM_CLEAR_DIRTY_LOG for memory slots of unaligned size
        - KVM: selftests: make hyperv_cpuid test pass on AMD
        - ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
        - i2c: designware: ratelimit 'transfer when suspended' errors
        - perf bench numa: Add define for RUSAGE_THREAD if not present
        - perf cs-etm: Always allocate memory for cs_etm_queue::prev_packet
        - perf/x86/intel: Fix race in intel_pmu_disable_event()
        - Revert "Don't jump to compute_result state from check_result state"
        - md/raid: raid5 preserve the writeback action after the parity check
        - driver core: Postpone DMA tear-down until after devres release for probe
          failure
        - bpf: relax inode permission check for retrieving bpf program
        - bpf: add map_lookup_elem_sys_only for lookups from syscall side
        - bpf, lru: avoid messing with eviction heuristics upon syscall lookup
        - fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough
        - Linux 5.0.19
    
      * CVE-2019-13648
        - powerpc/tm: Fix oops on sigreturn on systems without TM
    
      * bcache kernel warning when attaching device (LP: #1837788)
        - bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached
    
      * CVE-2019-14283
        - floppy: fix out-of-bounds read in copy_buffer
    
      * CVE-2019-14284
        - floppy: fix div-by-zero in setup_format_params
    
      * alsa/hda: neither mute led nor mic-mute led work on several Lenovo laptops
        (LP: #1837963)
        - SAUCE: ALSA: hda - Add a conexant codec entry to let mute led work
    
     -- Khalid Elmously <email address hidden>  Tue, 20 Aug 2019 15:25:30 -0400
  • linux (5.0.0-26.27) disco; urgency=medium
    
      * disco/linux: 5.0.0-26.27 -proposed tracker (LP: #1839972)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] update helper scripts
    
      * alsa/hdmi: add icelake hdmi audio support for a Dell machine (LP: #1836916)
        - ALSA: hda: hdmi - add Icelake support
        - ALSA: hda/hdmi - Remove duplicated define
        - ALSA: hda/hdmi - Fix i915 reverse port/pin mapping
    
      * input/mouse: alps trackpoint-only device doesn't work (LP: #1836752)
        - Input: alps - don't handle ALPS cs19 trackpoint-only device
        - Input: alps - fix a mismatch between a condition check and its comment
    
      * [18.04 FEAT] Enhanced hardware support (LP: #1836857)
        - s390: report new CPU capabilities
        - s390: add alignment hints to vector load and store
    
      * System does not auto detect disconnection of external monitor (LP: #1835001)
        - drm/i915: Add support for retrying hotplug
        - drm/i915: Enable hotplug retry
    
      * [18.04 FEAT] Enhanced CPU-MF hardware counters - kernel part (LP: #1836860)
        - s390/cpum_cf: Add support for CPU-MF SVN 6
        - s390/cpumf: Add extended counter set definitions for model 8561 and 8562
    
      * EeePC 1005px laptop backlight is off after system boot up (LP: #1837117)
        - platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from
          asus_nb_wmi
    
      * br_netfilter: namespace sysctl operations (LP: #1836910)
        - netfilter: bridge: port sysctls to use brnf_net
        - netfilter: bridge: namespace bridge netfilter sysctls
        - netfilter: bridge: prevent UAF in brnf_exit_net()
    
      * ideapad_laptop disables WiFi/BT radios on Lenovo Y540 (LP: #1837136)
        - platform/x86: ideapad-laptop: Remove no_hw_rfkill_list
    
      * shiftfs: allow overlayfs (LP: #1838677)
        - SAUCE: shiftfs: enable overlayfs on shiftfs
    
      * bcache: bch_allocator_thread(): hung task timeout (LP: #1784665)
        - bcache: never writeback a discard operation
        - bcache: improve bcache_reboot()
        - SAUCE: bcache: fix deadlock in bcache_allocator
    
      * Regressions in CMA allocation rework (LP: #1839395)
        - dma-contiguous: do not overwrite align in dma_alloc_contiguous()
        - dma-contiguous: page-align the size in dma_free_contiguous()
    
      * CVE-2019-3900
        - vhost: introduce vhost_exceeds_weight()
        - vhost_net: fix possible infinite loop
        - vhost: vsock: add weight support
        - vhost: scsi: add weight support
    
      * Disco update: 5.0.21 upstream stable release (LP: #1837518)
        - bonding/802.3ad: fix slave link initialization transition states
        - cxgb4: offload VLAN flows regardless of VLAN ethtype
        - inet: switch IP ID generator to siphash
        - ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
        - ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST
        - ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
        - ipv6: Fix redirect with VRF
        - llc: fix skb leak in llc_build_and_send_ui_pkt()
        - mlxsw: spectrum_acl: Avoid warning after identical rules insertion
        - net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT
        - net: fec: fix the clk mismatch in failed_reset path
        - net-gro: fix use-after-free read in napi_gro_frags()
        - net: mvneta: Fix err code path of probe
        - net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
        - net: phy: marvell10g: report if the PHY fails to boot firmware
        - net: sched: don't use tc_action->order during action dump
        - net: stmmac: fix reset gpio free missing
        - r8169: fix MAC address being lost in PCI D3
        - usbnet: fix kernel crash after disconnect
        - net/mlx5: Avoid double free in fs init error unwinding path
        - tipc: Avoid copying bytes beyond the supplied data
        - net/mlx5: Allocate root ns memory using kzalloc to match kfree
        - net/mlx5e: Disable rxhash when CQE compress is enabled
        - net: stmmac: fix ethtool flow control not able to get/set
        - net: stmmac: dma channel control register need to be init first
        - bnxt_en: Fix aggregation buffer leak under OOM condition.
        - bnxt_en: Fix possible BUG() condition when calling pci_disable_msix().
        - bnxt_en: Reduce memory usage when running in kdump kernel.
        - net/tls: fix state removal with feature flags off
        - net/tls: don't ignore netdev notifications if no TLS features
        - cxgb4: Revert "cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size"
        - net: correct zerocopy refcnt with udp MSG_MORE
        - crypto: vmx - ghash: do nosimd fallback manually
        - xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
        - Revert "tipc: fix modprobe tipc failed after switch order of device
          registration"
        - tipc: fix modprobe tipc failed after switch order of device registration
        - Linux 5.0.21
    
      * Disco update: 5.0.20 upstream stable release (LP: #1837517)
        - x86: Hide the int3_emulate_call/jmp functions from UML
        - ext4: do not delete unlinked inode from orphan list on failed truncate
        - ext4: wait for outstanding dio during truncate in nojournal mode
        - KVM: x86: fix return value for reserved EFER
        - bio: fix improper use of smp_mb__before_atomic()
        - sbitmap: fix improper use of smp_mb__before_atomic()
        - Revert "scsi: sd: Keep disk read-only when re-reading partition"
        - crypto: hash - fix incorrect HASH_MAX_DESCSIZE
        - crypto: vmx - CTR: always increment IV as quadword
        - mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time
          problem
        - mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem
        - kvm: svm/avic: fix off-by-one in checking host APIC ID
        - libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead
        - arm64/kernel: kaslr: reduce module randomization range to 2 GB
        - arm64/iommu: handle non-remapped addresses in ->mmap and ->get_sgtable
        - gfs2: Fix sign extension bug in gfs2_update_stats
        - btrfs: don't double unlock on error in btrfs_punch_hole
        - Btrfs: do not abort transaction at btrfs_update_root() after failure to COW
          path
        - Btrfs: avoid fallback to transaction commit during fsync of files with holes
        - Btrfs: fix race between ranged fsync and writeback of adjacent ranges
        - btrfs: sysfs: Fix error path kobject memory leak
        - btrfs: sysfs: don't leak memory when failing add fsid
        - fbdev: fix divide error in fb_var_to_videomode
        - cifs: fix credits leak for SMB1 oplock breaks
        - arm64: errata: Add workaround for Cortex-A76 erratum #1463225
        - [Config] Add CONFIG_ARM64_ERRATUM_1463225
        - btrfs: honor path->skip_locking in backref code
        - ovl: relax WARN_ON() for overlapping layers use case
        - fbdev: fix WARNING in __alloc_pages_nodemask bug
        - media: cpia2: Fix use-after-free in cpia2_exit
        - media: serial_ir: Fix use-after-free in serial_ir_init_module
        - media: vb2: add waiting_in_dqbuf flag
        - media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
        - ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
        - bpf: devmap: fix use-after-free Read in __dev_map_entry_free
        - batman-adv: mcast: fix multicast tt/tvlv worker locking
        - at76c50x-usb: Don't register led_trigger if usb_register_driver failed
        - acct_on(): don't mess with freeze protection
        - netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression
        - Revert "btrfs: Honour FITRIM range constraints during free space trim"
        - gfs2: Fix lru_count going negative
        - cxgb4: Fix error path in cxgb4_init_module
        - afs: Fix getting the afs.fid xattr
        - NFS: make nfs_match_client killable
        - gfs2: fix race between gfs2_freeze_func and unmount
        - IB/hfi1: Fix WQ_MEM_RECLAIM warning
        - gfs2: Fix occasional glock use-after-free
        - mmc: core: Verify SD bus width
        - tools/bpf: fix perf build error with uClibc (seen on ARC)
        - selftests/bpf: set RLIMIT_MEMLOCK properly for test_libbpf_open.c
        - bpftool: exclude bash-completion/bpftool from .gitignore pattern
        - ice: Separate if conditions for ice_set_features()
        - blk-mq: split blk_mq_alloc_and_init_hctx into two parts
        - blk-mq: grab .q_usage_counter when queuing request from plug code path
        - dmaengine: tegra210-dma: free dma controller in remove()
        - net: ena: gcc 8: fix compilation warning
        - net: ena: fix: set freed objects to NULL to avoid failing future allocations
        - hv_netvsc: fix race that may miss tx queue wakeup
        - Bluetooth: Ignore CC events not matching the last HCI command
        - pinctrl: zte: fix leaked of_node references
        - ASoC: Intel: kbl_da7219_max98357a: Map BTN_0 to KEY_PLAYPAUSE
        - usb: dwc2: gadget: Increase descriptors count for ISOC's
        - usb: dwc3: move synchronize_irq() out of the spinlock protected block
        - usb: gadget: f_fs: don't free buffer prematurely
        - ASoC: hdmi-codec: unlock the device on startup errors
        - powerpc/perf: Return accordingly on invalid chip-id in
        - powerpc/boot: Fix missing check of lseek() return value
        - powerpc/perf: Fix loop exit condition in nest_imc_event_init
        - spi: atmel-quadspi: fix crash while suspending
        - ASoC: imx: fix fiq dependencies
        - spi: pxa2xx: fix SCR (divisor) calculation
        - brcm80211: potential NULL dereference in
          brcmf_cfg80211_vndr_cmds_dcmd_handler()
        - ACPI / property: fix handling of data_nodes in acpi_get_next_subnode()
        - drm/nouveau/bar/nv50: ensure BAR is mapped
        - media: stm32-dcmi: return appropriate error codes during probe
        - ARM: vdso: Remove dependency with the arch_timer driver internals
        - arm64: Fix compiler warning from pte_unmap() with -Wunused-but-set-variable
        - x86/ftrace: Set trampoline pages as executable
        - powerpc/watchdog: Use hrtimers for per-CPU heartbeat
        - sched/cpufreq: Fix kobject memleak
        - scsi: qla2xxx: Fix a qla24xx_enable_msix() error path
        - scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending()
        - scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in
          tcm_qla2xxx_close_session()
        - scsi: qla2xxx: Fix hardirq-unsafe locking
        - x86/modules: Avoid breaking W^X while loading modules
        - Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota
          reserve
        - btrfs: fix panic during relocation after ENOSPC before writeback happens
        - btrfs: Don't panic when we can't find a root key
        - iwlwifi: pcie: don't crash on invalid RX interrupt
        - rtc: 88pm860x: prevent use-after-free on device remove
        - rtc: stm32: manage the get_irq probe defer case
        - scsi: qedi: Abort ep termination if offload not scheduled
        - s390/kexec_file: Fix detection of text segment in ELF loader
        - ALSA: hda: fix unregister device twice on ASoC driver
        - sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs
        - net: ethernet: ti: cpsw: fix allmulti cfg in dual_mac mode
        - w1: fix the resume command API
        - net: phy: improve genphy_soft_reset
        - s390: qeth: address type mismatch warning
        - dmaengine: pl330: _stop: clear interrupt status
        - mac80211/cfg80211: update bss channel on channel switch
        - libbpf: fix samples/bpf build failure due to undefined UINT32_MAX
        - slimbus: fix a potential NULL pointer dereference in
          of_qcom_slim_ngd_register
        - ASoC: fsl_sai: Update is_slave_mode with correct value
        - Fix nfs4.2 return -EINVAL when do dedupe operation
        - mwifiex: prevent an array overflow
        - rsi: Fix NULL pointer dereference in kmalloc
        - net: cw1200: fix a NULL pointer dereference
        - nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE
        - nvme-rdma: fix a NULL deref when an admin connect times out
        - nvme-tcp: fix a NULL deref when an admin connect times out
        - crypto: sun4i-ss - Fix invalid calculation of hash end
        - bcache: avoid potential memleak of list of journal_replay(s) in the
          CACHE_SYNC branch of run_cache_set
        - bcache: return error immediately in bch_journal_replay()
        - bcache: fix failure in journal relplay
        - bcache: add failure check to run_cache_set() for journal replay
        - bcache: avoid clang -Wunintialized warning
        - RDMA/cma: Consider scope_id while binding to ipv6 ll address
        - vfio-ccw: Do not call flush_workqueue while holding the spinlock
        - vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev
        - x86/build: Move _etext to actual end of .text
        - smpboot: Place the __percpu annotation correctly
        - x86/uaccess: Dont leak the AC flag into __put_user() argument evaluation
        - x86/mm: Remove in_nmi() warning from 64-bit implementation of
          vmalloc_fault()
        - mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC
          versions
        - Bluetooth: hci_qca: Give enough time to ROME controller to bootup.
        - Bluetooth: btbcm: Add default address for BCM43341B
        - HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
        - pinctrl: pistachio: fix leaked of_node references
        - pinctrl: st: fix leaked of_node references
        - pinctrl: samsung: fix leaked of_node references
        - clk: rockchip: undo several noc and special clocks as critical on rk3288
        - perf/arm-cci: Remove broken race mitigation
        - dmaengine: at_xdmac: remove BUG_ON macro in tasklet
        - media: coda: clear error return value before picture run
        - media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper
        - media: au0828: stop video streaming only when last user stops
        - media: ov2659: make S_FMT succeed even if requested format doesn't match
        - audit: fix a memory leak bug
        - media: stm32-dcmi: fix crash when subdev do not expose any formats
        - media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable()
        - media: pvrusb2: Prevent a buffer overflow
        - iio: adc: stm32-dfsdm: fix unmet direct dependencies detected
        - block: fix use-after-free on gendisk
        - powerpc/numa: improve control of topology updates
        - powerpc/64: Fix booting large kernels with STRICT_KERNEL_RWX
        - random: fix CRNG initialization when random.trust_cpu=1
        - random: add a spinlock_t to struct batched_entropy
        - cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock
        - sched/core: Check quota and period overflow at usec to nsec conversion
        - sched/rt: Check integer overflow at usec to nsec conversion
        - sched/core: Handle overflow in cpu_shares_write_u64
        - staging: vc04_services: handle kzalloc failure
        - drm/msm/dpu: release resources on modeset failure
        - drm/msm: a5xx: fix possible object reference leak
        - drm/msm: dpu: Don't set frame_busy_mask for async updates
        - drm/msm: Fix NULL pointer dereference
        - irq_work: Do not raise an IPI when queueing work on the local CPU
        - thunderbolt: Take domain lock in switch sysfs attribute callbacks
        - s390/qeth: handle error from qeth_update_from_chp_desc()
        - USB: core: Don't unbind interfaces following device reset failure
        - x86/irq/64: Limit IST stack overflow check to #DB stack
        - drm: etnaviv: avoid DMA API warning when importing buffers
        - dt-bindings: phy-qcom-qmp: Add UFS PHY reset
        - phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode
        - phy: mapphone-mdm6600: add gpiolib dependency
        - dpaa2-eth: Fix Rx classification status
        - i40e: Able to add up to 16 MAC filters on an untrusted VF
        - i40e: don't allow changes to HW VLAN stripping on active port VLANs
        - ACPI/IORT: Reject platform device creation on NUMA node mapping failure
        - arm64: vdso: Fix clock_getres() for CLOCK_REALTIME
        - RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
        - perf/x86/msr: Add Icelake support
        - perf/x86/intel/rapl: Add Icelake support
        - perf/x86/intel/cstate: Add Icelake support
        - PM / devfreq: Fix static checker warning in try_then_request_governor
        - hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
        - hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
        - hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
        - hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
        - hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
        - mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers
        - mmc_spi: add a status check for spi_sync_locked
        - mmc: sdhci-of-esdhc: add erratum eSDHC5 support
        - mmc: sdhci-of-esdhc: add erratum A-009204 support
        - mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
        - drm/amdgpu: fix old fence check in amdgpu_fence_emit
        - PM / core: Propagate dev->power.wakeup_path when no callbacks
        - clk: rockchip: Fix video codec clocks on rk3288
        - extcon: arizona: Disable mic detect if running when driver is removed
        - clk: rockchip: Make rkpwm a critical clock on rk3288
        - clk: zynqmp: fix check for fractional clock
        - s390: zcrypt: initialize variables before_use
        - x86/microcode: Fix the ancient deprecated microcode loading method
        - s390/mm: silence compiler warning when compiling without CONFIG_PGSTE
        - s390: cio: fix cio_irb declaration
        - selftests: cgroup: fix cleanup path in test_memcg_subtree_control()
        - qmi_wwan: Add quirk for Quectel dynamic config
        - cpufreq: ppc_cbe: fix possible object reference leak
        - cpufreq/pasemi: fix possible object reference leak
        - cpufreq: pmac32: fix possible object reference leak
        - cpufreq: kirkwood: fix possible object reference leak
        - cpufreq: imx6q: fix possible object reference leak
        - block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR
        - samples/bpf: fix build with new clang
        - x86/build: Keep local relocations with ld.lld
        - regulator: core: Avoid potential deadlock on regulator_unregister
        - drm/pl111: fix possible object reference leak
        - iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion
        - iio: hmc5843: fix potential NULL pointer dereferences
        - iio: common: ssp_sensors: Initialize calculated_time in
          ssp_common_process_data
        - iio: adc: ti-ads7950: Fix improper use of mlock
        - selftests/bpf: ksym_search won't check symbols exists
        - rtlwifi: fix a potential NULL pointer dereference
        - mwifiex: Fix mem leak in mwifiex_tm_cmd
        - brcmfmac: fix missing checks for kmemdup
        - b43: shut up clang -Wuninitialized variable warning
        - brcmfmac: convert dev_init_lock mutex to completion
        - brcmfmac: fix WARNING during USB disconnect in case of unempty psq
        - brcmfmac: fix race during disconnect when USB completion is in progress
        - brcmfmac: fix Oops when bringing up interface during USB disconnect
        - rtc: xgene: fix possible race condition
        - rtlwifi: fix potential NULL pointer dereference
        - scsi: ufs: Fix regulator load and icc-level configuration
        - scsi: ufs: Avoid configuring regulator with undefined voltage range
        - drm/panel: otm8009a: Add delay at the end of initialization
        - drm/amd/display: Prevent cursor hotspot overflow for RV overlay planes
        - arm64: cpu_ops: fix a leaked reference by adding missing of_node_put
        - locking/static_key: Fix false positive warnings on concurrent dec/inc
        - wil6210: fix return code of wmi_mgmt_tx and wmi_mgmt_tx_ext
        - x86/uaccess, ftrace: Fix ftrace_likely_update() vs. SMAP
        - x86/uaccess, signal: Fix AC=1 bloat
        - x86/ia32: Fix ia32_restore_sigcontext() AC leak
        - x86/uaccess: Fix up the fixup
        - chardev: add additional check for minor range overlap
        - sh: sh7786: Add explicit I/O cast to sh7786_mm_sel()
        - HID: core: move Usage Page concatenation to Main item
        - ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put
        - ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put
        - cxgb3/l2t: Fix undefined behaviour
        - clk: renesas: rcar-gen3: Correct parent clock of SYS-DMAC
        - block: pass page to xen_biovec_phys_mergeable
        - clk: renesas: rcar-gen3: Correct parent clock of Audio-DMAC
        - HID: logitech-hidpp: change low battery level threshold from 31 to 30
          percent
        - spi: tegra114: reset controller on probe
        - kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.
        - media: video-mux: fix null pointer dereferences
        - media: wl128x: prevent two potential buffer overflows
        - media: gspca: Kill URBs on USB device disconnect
        - efifb: Omit memory map check on legacy boot
        - thunderbolt: property: Fix a missing check of kzalloc
        - thunderbolt: Fix to check the return value of kmemdup
        - drm: rcar-du: lvds: Set LVEN and LVRES bits together on D3
        - timekeeping: Force upper bound for setting CLOCK_REALTIME
        - scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload
          check
        - virtio_console: initialize vtermno value for ports
        - tty: ipwireless: fix missing checks for ioremap
        - staging: mt7621-mmc: Initialize completions a single time during probe
        - overflow: Fix -Wtype-limits compilation warnings
        - x86/mce: Fix machine_check_poll() tests for error types
        - rcutorture: Fix cleanup path for invalid torture_type strings
        - x86/mce: Handle varying MCA bank counts
        - rcuperf: Fix cleanup path for invalid perf_type strings
        - rcu: Do a single rhp->func read in rcu_head_after_call_rcu()
        - spi: stm32-qspi: add spi_master_put in release function
        - usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
        - scsi: qla4xxx: avoid freeing unallocated dma memory
        - scsi: lpfc: avoid uninitialized variable warning
        - ice: Prevent unintended multiple chain resets
        - selinux: avoid uninitialized variable warning
        - batman-adv: allow updating DAT entry timeouts on incoming ARP Replies
        - dmaengine: tegra210-adma: use devm_clk_*() helpers
        - x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die processors
        - staging: mt7621-mmc: Check for nonzero number of scatterlist entries
        - hwrng: omap - Set default quality
        - thunderbolt: Fix to check return value of ida_simple_get
        - thunderbolt: Fix to check for kmemdup failure
        - drm/amd/display: fix releasing planes when exiting odm
        - drm/amd/display: Link train only when link is DP and backend is enabled
        - drm/amd/display: Reset alpha state for planes to the correct values
        - thunderbolt: property: Fix a NULL pointer dereference
        - media: v4l2-fwnode: The first default data lane is 0 on C-PHY
        - media: staging/intel-ipu3: mark PM function as __maybe_unused
        - tinydrm/mipi-dbi: Use dma-safe buffers for all SPI transfers
        - igb: Exclude device from suspend direct complete optimization
        - media: si2165: fix a missing check of return value
        - media: dvbsky: Avoid leaking dvb frontend
        - media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
        - drm/amd/display: add pipe lock during stream update
        - media: staging: davinci_vpfe: disallow building with COMPILE_TEST
        - drm/amd/display: Fix Divide by 0 in memory calculations
        - drm/amd/display: Set stream->mode_changed when connectors change
        - scsi: ufs: fix a missing check of devm_reset_control_get
        - media: vimc: stream: fix thread state before sleep
        - media: gspca: do not resubmit URBs when streaming has stopped
        - media: go7007: avoid clang frame overflow warning with KASAN
        - media: vimc: zero the media_device on probe
        - media: vim2m: replace devm_kzalloc by kzalloc
        - media: cedrus: Add a quirk for not setting DMA offset
        - scsi: lpfc: Fix FDMI manufacturer attribute value
        - scsi: lpfc: Fix fc4type information for FDMI
        - media: saa7146: avoid high stack usage with clang
        - scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
        - scsi: lpfc: Fix use-after-free mailbox cmd completion
        - audit: fix a memleak caused by auditing load module
        - spi : spi-topcliff-pch: Fix to handle empty DMA buffers
        - drm: writeback: Fix leak of writeback job
        - drm/omap: dsi: Fix PM for display blank with paired dss_pll calls
        - drm/omap: Notify all devices in the pipeline of output disconnection
        - spi: rspi: Fix sequencer reset during initialization
        - regulator: wm831x ldo: Fix notifier mutex lock warning
        - regulator: wm831x isink: Fix notifier mutex lock warning
        - regulator: ltc3676: Fix notifier mutex lock warning
        - regulator: ltc3589: Fix notifier mutex lock warning
        - regulator: pv88060: Fix notifier mutex lock warning
        - spi: imx: stop buffer overflow in RX FIFO flush
        - regulator: lp8755: Fix notifier mutex lock warning
        - regulator: da9211: Fix notifier mutex lock warning
        - regulator: da9063: Fix notifier mutex lock warning
        - regulator: pv88080: Fix notifier mutex lock warning
        - regulator: wm831x: Fix notifier mutex lock warning
        - regulator: pv88090: Fix notifier mutex lock warning
        - regulator: da9062: Fix notifier mutex lock warning
        - regulator: da9055: Fix notifier mutex lock warning
        - spi: Fix zero length xfer bug
        - ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM
        - ASoC: ti: fix davinci_mcasp_probe dependencies
        - drm/v3d: Handle errors from IRQ setup.
        - drm/drv: Hold ref on parent device during drm_device lifetime
        - drm: Wake up next in drm_read() chain if we are forced to putback the event
        - drm/sun4i: dsi: Change the start delay calculation
        - vfio-ccw: Prevent quiesce function going into an infinite loop
        - ice: Put __ICE_PREPARED_FOR_RESET check in ice_prepare_for_reset
        - drm/sun4i: dsi: Enforce boundaries on the start delay
        - NFS: Fix a double unlock from nfs_match,get_client
        - Linux 5.0.20
    
      * Disco update: 5.0.19 upstream stable release (LP: #1837516)
        - ipv6: fix src addr routing with the exception table
        - ipv6: prevent possible fib6 leaks
        - net: Always descend into dsa/
        - net: avoid weird emergency message
        - net/mlx4_core: Change the error print to info print
        - net: test nouarg before dereferencing zerocopy pointers
        - net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions
        - nfp: flower: add rcu locks when accessing netdev for tunnels
        - ppp: deflate: Fix possible crash in deflate_init
        - rtnetlink: always put IFLA_LINK for links with a link-netnsid
        - tipc: switch order of device registration to fix a crash
        - vsock/virtio: free packets during the socket release
        - tipc: fix modprobe tipc failed after switch order of device registration
        - vsock/virtio: Initialize core virtio vsock before registering the driver
        - net/mlx5e: Add missing ethtool driver info for representors
        - net/mlx5e: Additional check for flow destination comparison
        - net/mlx5: Imply MLXFW in mlx5_core
        - net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled
        - blk-mq: free hw queue's resource in hctx's release handler
        - regulator: core: fix error path for regulator_set_voltage_unlocked
        - parisc: Export running_on_qemu symbol for modules
        - parisc: Add memory clobber to TLB purges
        - parisc: Skip registering LED when running in QEMU
        - parisc: Add memory barrier to asm pdc and sync instructions
        - parisc: Allow live-patching of __meminit functions
        - parisc: Use PA_ASM_LEVEL in boot code
        - parisc: Rename LEVEL to PA_ASM_LEVEL to avoid name clash with DRBD code
        - stm class: Fix channel free in stm output free path
        - stm class: Fix channel bitmap on 32-bit systems
        - brd: re-enable __GFP_HIGHMEM in brd_insert_page()
        - proc: prevent changes to overridden credentials
        - Revert "MD: fix lock contention for flush bios"
        - md: batch flush requests.
        - md: add mddev->pers to avoid potential NULL pointer dereference
        - md: add a missing endianness conversion in check_sb_changes
        - dcache: sort the freeing-without-RCU-delay mess for good.
        - intel_th: msu: Fix single mode with IOMMU
        - p54: drop device reference count if fails to enable device
        - of: fix clang -Wunsequenced for be32_to_cpu()
        - brcmfmac: Add DMI nvram filename quirk for ACEPC T8 and T11 mini PCs
        - phy: ti-pipe3: fix missing bit-wise or operator when assigning val
        - media: ov6650: Fix sensor possibly not detected on probe
        - media: imx: csi: Allow unknown nearest upstream entities
        - media: imx: Clear fwnode link struct for each endpoint iteration
        - RDMA/mlx5: Use get_zeroed_page() for clock_info
        - RDMA/ipoib: Allow user space differentiate between valid dev_port
        - NFS4: Fix v4.0 client state corruption when mount
        - PNFS fallback to MDS if no deviceid found
        - clk: hi3660: Mark clk_gate_ufs_subsys as critical
        - clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider
        - clk: mediatek: Disable tuner_en before change PLL rate
        - clk: rockchip: fix wrong clock definitions for rk3328
        - udlfb: delete the unused parameter for dlfb_handle_damage
        - udlfb: fix sleeping inside spinlock
        - udlfb: introduce a rendering mutex
        - fuse: fix writepages on 32bit
        - fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
        - ovl: fix missing upper fs freeze protection on copy up for ioctl
        - gcc-plugins: arm_ssp_per_task_plugin: Fix for older GCC < 6
        - iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
        - ceph: flush dirty inodes before proceeding with remount
        - x86_64: Add gap to int3 to allow for call emulation
        - x86_64: Allow breakpoints to emulate call instructions
        - ftrace/x86_64: Emulate call function while updating in breakpoint handler
        - tracing: Fix partial reading of trace event's id file
        - tracing: probeevent: Fix to make the type of $comm string
        - memory: tegra: Fix integer overflow on tick value calculation
        - perf intel-pt: Fix instructions sampling rate
        - perf intel-pt: Fix improved sample timestamp
        - perf intel-pt: Fix sample timestamp wrt non-taken branches
        - MIPS: perf: Fix build with CONFIG_CPU_BMIPS5000 enabled
        - objtool: Allow AR to be overridden with HOSTAR
        - x86/mpx, mm/core: Fix recursive munmap() corruption
        - fbdev/efifb: Ignore framebuffer memmap entries that lack any memory types
        - fbdev: sm712fb: fix brightness control on reboot, don't set SR30
        - fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75
        - fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F
        - fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA
        - fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping
          VRAM
        - fbdev: sm712fb: fix support for 1024x768-16 mode
        - fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
        - fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting
        - PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken
        - PCI: Mark Atheros AR9462 to avoid bus reset
        - PCI: Reset Lenovo ThinkPad P50 nvgpu at boot if necessary
        - PCI: Init PCIe feature bits for managed host bridge alloc
        - PCI/AER: Change pci_aer_init() stub to return void
        - PCI: rcar: Add the initialization of PCIe link in resume_noirq()
        - PCI: Factor out pcie_retrain_link() function
        - PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum
        - dm cache metadata: Fix loading discard bitset
        - dm zoned: Fix zone report handling
        - dm delay: fix a crash when invalid device is specified
        - dm crypt: move detailed message into debug level
        - dm integrity: correctly calculate the size of metadata area
        - dm mpath: always free attached_handler_name in parse_path()
        - fuse: Add FOPEN_STREAM to use stream_open()
        - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
        - xfrm: Reset secpath in xfrm failure
        - xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
        - vti4: ipip tunnel deregistration fixes.
        - xfrm: clean up xfrm protocol checks
        - esp4: add length check for UDP encapsulation
        - xfrm: Honor original L3 slave device in xfrmi policy lookup
        - xfrm4: Fix uninitialized memory read in _decode_session4
        - ARC: PAE40: don't panic and instead turn off hw ioc
        - clk: sunxi-ng: nkmp: Avoid GENMASK(-1, 0)
        - KVM: PPC: Book3S HV: Perserve PSSCR FAKE_SUSPEND bit on guest exit
        - KVM: PPC: Book3S: Protect memslots while validating user address
        - power: supply: cpcap-battery: Fix division by zero
        - securityfs: fix use-after-free on symlink traversal
        - apparmorfs: fix use-after-free on symlink traversal
        - PCI: Fix issue with "pci=disable_acs_redir" parameter being ignored
        - x86: kvm: hyper-v: deal with buggy TLB flush requests from WS2012
        - mac80211: Fix kernel panic due to use of txq after free
        - net: ieee802154: fix missing checks for regmap_update_bits
        - KVM: arm/arm64: Ensure vcpu target is unset on reset failure
        - power: supply: sysfs: prevent endless uevent loop with
          CONFIG_POWER_SUPPLY_DEBUG
        - tools: bpftool: fix infinite loop in map create
        - bpf: Fix preempt_enable_no_resched() abuse
        - qmi_wwan: new Wistron, ZTE and D-Link devices
        - iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb()
        - sched/cpufreq: Fix kobject memleak
        - x86/mm/mem_encrypt: Disable all instrumentation for early SME setup
        - KVM: fix KVM_CLEAR_DIRTY_LOG for memory slots of unaligned size
        - KVM: selftests: make hyperv_cpuid test pass on AMD
        - ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
        - i2c: designware: ratelimit 'transfer when suspended' errors
        - perf bench numa: Add define for RUSAGE_THREAD if not present
        - perf cs-etm: Always allocate memory for cs_etm_queue::prev_packet
        - perf/x86/intel: Fix race in intel_pmu_disable_event()
        - Revert "Don't jump to compute_result state from check_result state"
        - md/raid: raid5 preserve the writeback action after the parity check
        - driver core: Postpone DMA tear-down until after devres release for probe
          failure
        - bpf: relax inode permission check for retrieving bpf program
        - bpf: add map_lookup_elem_sys_only for lookups from syscall side
        - bpf, lru: avoid messing with eviction heuristics upon syscall lookup
        - fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough
        - Linux 5.0.19
    
      * CVE-2019-13648
        - powerpc/tm: Fix oops on sigreturn on systems without TM
    
      * bcache kernel warning when attaching device (LP: #1837788)
        - bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached
    
      * CVE-2019-14283
        - floppy: fix out-of-bounds read in copy_buffer
    
      * CVE-2019-14284
        - floppy: fix div-by-zero in setup_format_params
    
      * alsa/hda: neither mute led nor mic-mute led work on several Lenovo laptops
        (LP: #1837963)
        - SAUCE: ALSA: hda - Add a conexant codec entry to let mute led work
    
     -- Stefan Bader <email address hidden>  Tue, 13 Aug 2019 14:19:24 +0200
  • linux (5.0.0-25.26) disco; urgency=medium
    
      * CVE-2019-1125
        - x86/cpufeatures: Carve out CQM features retrieval
        - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word
        - x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations
        - x86/speculation: Enable Spectre v1 swapgs mitigations
        - x86/entry/64: Use JMP instead of JMPQ
        - x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS
    
     -- Kleber Sacilotto de Souza <email address hidden>  Thu, 01 Aug 2019 12:04:35 +0200
  • linux (5.0.0-24.25) disco; urgency=medium
    
      * disco/linux: 5.0.0-24.25 -proposed tracker (LP: #1838395)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] resync git-ubuntu-log
    
      * hibmc-drm Causes Unreadable Display for Huawei amd64 Servers (LP: #1762940)
        - [Config] Set CONFIG_DRM_HISI_HIBMC to arm64 only
        - SAUCE: Make CONFIG_DRM_HISI_HIBMC depend on ARM64
    
      * [18.04 FEAT] zKVM: Add hardware CPU Model - kernel part (LP: #1836153)
        - KVM: s390: add debug logging for cpu model subfunctions
        - KVM: s390: implement subfunction processor calls
        - KVM: s390: add vector enhancements facility 2 to cpumodel
        - KVM: s390: add vector BCD enhancements facility to cpumodel
        - KVM: s390: add MSA9 to cpumodel
        - KVM: s390: provide query function for instructions returning 32 byte
        - KVM: s390: add enhanced sort facilty to cpu model
        - KVM: s390: add deflate conversion facilty to cpu model
        - KVM: s390: enable MSA9 keywrapping functions depending on cpu model
    
      * bcache: risk of data loss on I/O errors in backing or caching devices
        (LP: #1829563)
        - Revert "bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()"
    
      * Intel ethernet I219 has slow RX speed (LP: #1836152)
        - SAUCE: e1000e: add workaround for possible stalled packet
        - SAUCE: e1000e: disable force K1-off feature
    
      * Intel ethernet I219 may wrongly detect connection speed as 10Mbps
        (LP: #1836177)
        - SAUCE: e1000e: Make watchdog use delayed work
    
      * Unhide Nvidia HDA audio controller (LP: #1836308)
        - PCI: Enable NVIDIA HDA controllers
    
      * Enable Armada SOCs and MVPP2 NIC driver for disco/generic arm64
        (LP: #1835054)
        - [Config] Enable Armada SOCs and MVPP2 NIC driver for disco/generic arm64
    
      * ixgbe{vf} - Physical Function gets IRQ when VF checks link state
        (LP: #1836760)
        - ixgbevf: Use cached link state instead of re-reading the value for ethtool
    
      * Two crashes on raid0 error path (during a member device removal)
        (LP: #1836806)
        - block: Fix a NULL pointer dereference in generic_make_request()
        - md/raid0: Do not bypass blocking queue entered for raid0 bios
    
      * CVE-2019-13233
        - x86/insn-eval: Fix use-after-free access to LDT entry
    
      * cifs set_oplock buffer overflow in strcat (LP: #1824981)
        - cifs: fix strcat buffer overflow and reduce raciness in
          smb21_set_oplock_level()
    
      * CVE-2019-13272
        - ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME
    
      * hda/realtek: can't detect external mic on a Dell machine (LP: #1836755)
        - ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine
    
      * CVE-2019-12614
        - powerpc/pseries/dlpar: Fix a missing check in dlpar_parse_cc_property()
    
      * bnx2x driver causes 100% CPU load (LP: #1832082)
        - bnx2x: Prevent ptp_task to be rescheduled indefinitely
    
      * Sometimes touchpad detected as mouse(i2c designware fails to get adapter
        number) (LP: #1835150)
        - i2c: i2c-designware-platdrv: Cleanup setting of the adapter number
        - i2c: i2c-designware-platdrv: Always use a dynamic adapter number
    
      * Disco update: 5.0.18 upstream stable release (LP: #1836614)
        - locking/rwsem: Prevent decrement of reader count before increment
        - x86/speculation/mds: Revert CPU buffer clear on double fault exit
        - x86/speculation/mds: Improve CPU buffer clear documentation
        - objtool: Fix function fallthrough detection
        - arm64: dts: rockchip: fix IO domain voltage setting of APIO5 on rockpro64
        - arm64: dts: rockchip: Disable DCMDs on RK3399's eMMC controller.
        - ARM: dts: qcom: ipq4019: enlarge PCIe BAR range
        - ARM: dts: exynos: Fix interrupt for shared EINTs on Exynos5260
        - ARM: dts: exynos: Fix audio (microphone) routing on Odroid XU3
        - mmc: sdhci-of-arasan: Add DTS property to disable DCMDs.
        - ARM: exynos: Fix a leaked reference by adding missing of_node_put
        - power: supply: axp288_charger: Fix unchecked return value
        - power: supply: axp288_fuel_gauge: Add ACEPC T8 and T11 mini PCs to the
          blacklist
        - arm64: mmap: Ensure file offset is treated as unsigned
        - arm64: arch_timer: Ensure counter register reads occur with seqlock held
        - arm64: compat: Reduce address limit
        - arm64: Clear OSDLR_EL1 on CPU boot
        - arm64: Save and restore OSDLR_EL1 across suspend/resume
        - sched/x86: Save [ER]FLAGS on context switch
        - x86/MCE: Add an MCE-record filtering function
        - x86/MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models
        - x86/MCE/AMD: Carve out the MC4_MISC thresholding quirk
        - x86/MCE: Group AMD function prototypes in <asm/mce.h>
        - x86/MCE/AMD: Don't report L1 BTB MCA errors on some family 17h models
        - crypto: crypto4xx - fix ctr-aes missing output IV
        - crypto: crypto4xx - fix cfb and ofb "overran dst buffer" issues
        - crypto: salsa20 - don't access already-freed walk.iv
        - crypto: lrw - don't access already-freed walk.iv
        - crypto: chacha-generic - fix use as arm64 no-NEON fallback
        - crypto: chacha20poly1305 - set cra_name correctly
        - crypto: ccp - Do not free psp_master when PLATFORM_INIT fails
        - crypto: vmx - fix copy-paste error in CTR mode
        - crypto: skcipher - don't WARN on unprocessed data after slow walk step
        - crypto: crct10dif-generic - fix use via crypto_shash_digest()
        - crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
        - crypto: arm64/gcm-aes-ce - fix no-NEON fallback code
        - crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
        - crypto: rockchip - update IV buffer to contain the next IV
        - crypto: caam/qi2 - fix zero-length buffer DMA mapping
        - crypto: caam/qi2 - fix DMA mapping of stack memory
        - crypto: caam/qi2 - generate hash keys in-place
        - crypto: arm/aes-neonbs - don't access already-freed walk.iv
        - crypto: arm64/aes-neonbs - don't access already-freed walk.iv
        - mmc: tegra: fix ddr signaling for non-ddr modes
        - mmc: core: Fix tag set memory leak
        - mmc: sdhci-pci: Fix BYT OCP setting
        - ALSA: line6: toneport: Fix broken usage of timer for delayed execution
        - ALSA: usb-audio: Fix a memory leak bug
        - ALSA: hda/realtek - EAPD turn on later
        - ASoC: max98090: Fix restore of DAPM Muxes
        - ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
        - ASoC: fsl_esai: Fix missing break in switch statement
        - ASoC: codec: hdac_hdmi add device_link to card device
        - bpf, arm64: remove prefetch insn in xadd mapping
        - crypto: ccree - remove special handling of chained sg
        - crypto: ccree - fix mem leak on error path
        - crypto: ccree - don't map MAC key on stack
        - crypto: ccree - use correct internal state sizes for export
        - crypto: ccree - don't map AEAD key and IV on stack
        - crypto: ccree - pm resume first enable the source clk
        - crypto: ccree - HOST_POWER_DOWN_EN should be the last CC access during
          suspend
        - crypto: ccree - add function to handle cryptocell tee fips error
        - crypto: ccree - handle tee fips error during power management resume
        - mm/mincore.c: make mincore() more conservative
        - mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned
          addresses
        - mm/hugetlb.c: don't put_page in lock of hugetlb_lock
        - hugetlb: use same fault hash key for shared and private mappings
        - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
        - userfaultfd: use RCU to free the task struct when fork fails
        - ACPI: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle
        - mfd: da9063: Fix OTP control register names to match datasheets for
          DA9063/63L
        - mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values
        - mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write
        - mtd: maps: physmap: Store gpio_values correctly
        - mtd: maps: Allow MTD_PHYSMAP with MTD_RAM
        - tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0
        - tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
        - jbd2: check superblock mapped prior to committing
        - ext4: make sanity check in mballoc more strict
        - ext4: ignore e_value_offs for xattrs with value-in-ea-inode
        - ext4: avoid drop reference to iloc.bh twice
        - ext4: fix use-after-free race with debug_want_extra_isize
        - ext4: actually request zeroing of inode table after grow
        - ext4: fix ext4_show_options for file systems w/o journal
        - btrfs: Check the first key and level for cached extent buffer
        - btrfs: Correctly free extent buffer in case btree_read_extent_buffer_pages
          fails
        - btrfs: Honour FITRIM range constraints during free space trim
        - Btrfs: send, flush dellaloc in order to avoid data loss
        - Btrfs: do not start a transaction during fiemap
        - Btrfs: do not start a transaction at iterate_extent_inodes()
        - Btrfs: fix race between send and deduplication that lead to failures and
          crashes
        - bcache: fix a race between cache register and cacheset unregister
        - bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
        - ipmi:ssif: compare block number correctly for multi-part return messages
        - crypto: ccm - fix incompatibility between "ccm" and "ccm_base"
        - fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going
          into workqueue when umount
        - tty: Don't force RISCV SBI console as preferred console
        - ext4: fix data corruption caused by overlapping unaligned and aligned IO
        - ext4: fix use-after-free in dx_release()
        - ext4: avoid panic during forced reboot due to aborted journal
        - ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug
        - jbd2: fix potential double free
        - KVM: Fix the bitmap range to copy during clear dirty
        - KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes
        - KVM: lapic: Busy wait for timer to expire when using hv_timer
        - kbuild: turn auto.conf.cmd into a mandatory include file
        - xen/pvh: set xen_domain_type to HVM in xen_pvh_init
        - xen/pvh: correctly setup the PV EFI interface for dom0
        - libnvdimm/namespace: Fix label tracking error
        - iov_iter: optimize page_copy_sane()
        - mm/gup: Remove the 'write' parameter from gup_fast_permitted()
        - s390/mm: make the pxd_offset functions more robust
        - s390/mm: convert to the generic get_user_pages_fast code
        - ext4: fix compile error when using BUFFER_TRACE
        - ext4: don't update s_rev_level if not required
        - Linux 5.0.18
    
      * Disco update: 5.0.17 upstream stable release (LP: #1836577)
        - bfq: update internal depth state when queue depth changes
        - platform/x86: sony-laptop: Fix unintentional fall-through
        - platform/x86: thinkpad_acpi: Disable Bluetooth for some machines
        - platform/x86: dell-laptop: fix rfkill functionality
        - hwmon: (pwm-fan) Disable PWM if fetching cooling data fails
        - hwmon: (occ) Fix extended status bits
        - selftests/seccomp: Handle namespace failures gracefully
        - kernfs: fix barrier usage in __kernfs_new_node()
        - virt: vbox: Sanity-check parameter types for hgcm-calls coming from
          userspace
        - USB: serial: fix unthrottle races
        - iio: adc: xilinx: fix potential use-after-free on remove
        - iio: adc: xilinx: fix potential use-after-free on probe
        - iio: adc: xilinx: prevent touching unclocked h/w on remove
        - acpi/nfit: Always dump _DSM output payload
        - libnvdimm/namespace: Fix a potential NULL pointer dereference
        - HID: input: add mapping for Expose/Overview key
        - HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
        - HID: input: add mapping for "Toggle Display" key
        - libnvdimm/btt: Fix a kmemdup failure check
        - s390/dasd: Fix capacity calculation for large volumes
        - mac80211: fix unaligned access in mesh table hash function
        - mac80211: Increase MAX_MSG_LEN
        - cfg80211: Handle WMM rules in regulatory domain intersection
        - mac80211: fix memory accounting with A-MSDU aggregation
        - nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands
        - libnvdimm/security: provide fix for secure-erase to use zero-key
        - libnvdimm/pmem: fix a possible OOB access when read and write pmem
        - tools/testing/nvdimm: Retain security state after overwrite
        - s390/3270: fix lockdep false positive on view->lock
        - drm/ttm: fix dma_fence refcount imbalance on error path
        - drm/amd/display: extending AUX SW Timeout
        - clocksource/drivers/npcm: select TIMER_OF
        - clocksource/drivers/oxnas: Fix OX820 compatible
        - selftests: fib_tests: Fix 'Command line is not complete' errors
        - drm/amdgpu: shadow in shadow_list without tbo.mem.start cause page fault in
          sriov TDR
        - mISDN: Check address length before reading address family
        - vxge: fix return of a free'd memblock on a failed dma mapping
        - qede: fix write to free'd pointer error and double free of ptp
        - afs: Unlock pages for __pagevec_release()
        - afs: Fix in-progess ops to ignore server-level callback invalidation
        - qed: Delete redundant doorbell recovery types
        - qed: Fix the doorbell address sanity check
        - qed: Fix missing DORQ attentions
        - qed: Fix the DORQ's attentions handling
        - drm/amd/display: If one stream full updates, full update all planes
        - s390/pkey: add one more argument space for debug feature entry
        - x86/build/lto: Fix truncated .bss with -fdata-sections
        - x86/mm: Prevent bogus warnings with "noexec=off"
        - x86/reboot, efi: Use EFI reboot for Acer TravelMate X514-51T
        - KVM: nVMX: always use early vmcs check when EPT is disabled
        - KVM: fix spectrev1 gadgets
        - KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in
          tracing
        - tools lib traceevent: Fix missing equality check for strcmp
        - perf top: Always sample time to satisfy needs of use of ordered queuing
        - ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash
        - ocelot: Don't sleep in atomic context (irqs_disabled())
        - perf tools: Fix map reference counting
        - scsi: aic7xxx: fix EISA support
        - slab: store tagged freelist for off-slab slabmgmt
        - mm/hotplug: treat CMA pages as unmovable
        - mm: fix inactive list balancing between NUMA nodes and cgroups
        - init: initialize jump labels before command line option parsing
        - drm: bridge: dw-hdmi: Fix overflow workaround for Rockchip SoCs
        - selftests: netfilter: check icmp pkttoobig errors are set as related
        - ipvs: do not schedule icmp errors from tunnels
        - netfilter: ctnetlink: don't use conntrack/expect object addresses as id
        - netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()
        - netfilter: nat: fix icmp id randomization
        - MIPS: perf: ath79: Fix perfcount IRQ assignment
        - IB/mlx5: Fix scatter to CQE in DCT QP creation
        - s390: ctcm: fix ctcm_new_device error return code
        - drm/sun4i: Set device driver data at bind time for use in unbind
        - drm/sun4i: Fix component unbinding and component master deletion
        - of_net: Fix residues after of_get_nvmem_mac_address removal
        - selftests/net: correct the return value for run_afpackettests
        - netfilter: never get/set skb->tstamp
        - netfilter: fix nf_l4proto_log_invalid to log invalid packets
        - dmaengine: bcm2835: Avoid GFP_KERNEL in device_prep_slave_sg
        - gpu: ipu-v3: dp: fix CSC handling
        - drm/imx: don't skip DP channel disable for background plane
        - ARM: fix function graph tracer and unwinder dependencies
        - ARM: 8856/1: NOMMU: Fix CCR register faulty initialization when MPU is
          disabled
        - spi: Micrel eth switch: declare missing of table
        - spi: ST ST95HF NFC: declare missing of table
        - ceph: handle the case where a dentry has been renamed on outstanding req
        - Revert "drm/virtio: drop prime import/export callbacks"
        - drm/sun4i: Unbind components before releasing DRM and memory
        - Input: snvs_pwrkey - make it depend on ARCH_MXC
        - Input: synaptics-rmi4 - fix possible double free
        - net: vrf: Fix operation not supported when set vrf mac
        - gpio: Fix gpiochip_add_data_with_key() error path
        - mm/memory_hotplug.c: drop memory device reference after find_memory_block()
        - mm/page_alloc.c: avoid potential NULL pointer dereference
        - bpf: only test gso type on gso packets
        - net: sched: fix cleanup NULL pointer exception in act_mirr
        - net: mvpp2: fix validate for PPv2.1
        - drm/rockchip: fix for mailbox read validation.
        - cw1200: fix missing unlock on error in cw1200_hw_scan()
        - mwl8k: Fix rate_idx underflow
        - rtlwifi: rtl8723ae: Fix missing break in switch statement
        - Don't jump to compute_result state from check_result state
        - bonding: fix arp_validate toggling in active-backup mode
        - bridge: Fix error path for kobject_init_and_add()
        - dpaa_eth: fix SG frame cleanup
        - fib_rules: return 0 directly if an exactly same rule exists when NLM_F_EXCL
          not supplied
        - ipv4: Fix raw socket lookup for local traffic
        - net: dsa: Fix error cleanup path in dsa_init_module
        - net: ethernet: stmmac: dwmac-sun8i: enable support of unicast filtering
        - net: macb: Change interrupt and napi enable order in open
        - net: seeq: fix crash caused by not set dev.parent
        - net: ucc_geth - fix Oops when changing number of buffers in the ring
        - packet: Fix error path in packet_init
        - selinux: do not report error on connect(AF_UNSPEC)
        - tipc: fix hanging clients using poll with EPOLLOUT flag
        - vlan: disable SIOCSHWTSTAMP in container
        - vrf: sit mtu should not be updated when vrf netdev is the link
        - tuntap: fix dividing by zero in ebpf queue selection
        - tuntap: synchronize through tfiles array instead of tun->numqueues
        - net: phy: fix phy_validate_pause
        - flow_dissector: disable preemption around BPF calls
        - isdn: bas_gigaset: use usb_fill_int_urb() properly
        - drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl
        - drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
        - powerpc/book3s/64: check for NULL pointer in pgd_alloc()
        - powerpc/powernv/idle: Restore IAMR after idle
        - powerpc/booke64: set RI in default MSR
        - virtio_ring: Fix potential mem leak in virtqueue_add_indirect_packed
        - PCI: hv: Fix a memory leak in hv_eject_device_work()
        - PCI: hv: Add hv_pci_remove_slots() when we unload the driver
        - PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary
        - f2fs: Fix use of number of devices
        - Linux 5.0.17
        - [Config] update configs after update to 5.0.17
    
      * Disco update: 5.0.16 upstream stable release (LP: #1835580)
        - Linux 5.0.16
    
      * CVE-2019-10126
        - mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()
    
      * CVE-2019-3846
        - mwifiex: Fix possible buffer overflows at parsing bss descriptor
    
      * CVE-2019-12984
        - nfc: Ensure presence of required attributes in the deactivate_target handler
    
      * Sometimes touchpad(goodix) can't use tap function (LP: #1836020)
        - SAUCE: i2c: designware: add Inpiron/Vostro 7590 into i2c quirk
    
      * proc_thermal flooding dmesg (LP: #1824690)
        - drivers: thermal: processor_thermal: Downgrade error message
    
     -- Stefan Bader <email address hidden>  Tue, 30 Jul 2019 13:02:33 +0200
  • linux (5.0.0-23.24) disco; urgency=medium
    
      * disco/linux: 5.0.0-23.24 -proposed tracker (LP: #1838271)
    
      * linux hwe i386 kernel 5.0.0-21.22~18.04.1 crashes on Lenovo x220
        (LP: #1838115)
        - x86/mm: Check for pfn instead of page in vmalloc_sync_one()
        - x86/mm: Sync also unmappings in vmalloc_sync_all()
        - mm/vmalloc.c: add priority threshold to __purge_vmap_area_lazy()
        - mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy()
    
     -- Stefan Bader <email address hidden>  Mon, 29 Jul 2019 16:49:23 +0200
  • linux (5.0.0-22.23) disco; urgency=medium
    
      * disco/linux: 5.0.0-22.23 -proposed tracker (LP: #1837576)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] resync git-ubuntu-log
    
      * hibmc-drm Causes Unreadable Display for Huawei amd64 Servers (LP: #1762940)
        - [Config] Set CONFIG_DRM_HISI_HIBMC to arm64 only
        - SAUCE: Make CONFIG_DRM_HISI_HIBMC depend on ARM64
    
      * [18.04 FEAT] zKVM: Add hardware CPU Model - kernel part (LP: #1836153)
        - KVM: s390: add debug logging for cpu model subfunctions
        - KVM: s390: implement subfunction processor calls
        - KVM: s390: add vector enhancements facility 2 to cpumodel
        - KVM: s390: add vector BCD enhancements facility to cpumodel
        - KVM: s390: add MSA9 to cpumodel
        - KVM: s390: provide query function for instructions returning 32 byte
        - KVM: s390: add enhanced sort facilty to cpu model
        - KVM: s390: add deflate conversion facilty to cpu model
        - KVM: s390: enable MSA9 keywrapping functions depending on cpu model
    
      * bcache: risk of data loss on I/O errors in backing or caching devices
        (LP: #1829563)
        - Revert "bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()"
    
      * Intel ethernet I219 has slow RX speed (LP: #1836152)
        - SAUCE: e1000e: add workaround for possible stalled packet
        - SAUCE: e1000e: disable force K1-off feature
    
      * Intel ethernet I219 may wrongly detect connection speed as 10Mbps
        (LP: #1836177)
        - SAUCE: e1000e: Make watchdog use delayed work
    
      * Unhide Nvidia HDA audio controller (LP: #1836308)
        - PCI: Enable NVIDIA HDA controllers
    
      * Enable Armada SOCs and MVPP2 NIC driver for disco/generic arm64
        (LP: #1835054)
        - [Config] Enable Armada SOCs and MVPP2 NIC driver for disco/generic arm64
    
      * ixgbe{vf} - Physical Function gets IRQ when VF checks link state
        (LP: #1836760)
        - ixgbevf: Use cached link state instead of re-reading the value for ethtool
    
      * Two crashes on raid0 error path (during a member device removal)
        (LP: #1836806)
        - block: Fix a NULL pointer dereference in generic_make_request()
        - md/raid0: Do not bypass blocking queue entered for raid0 bios
    
      * CVE-2019-13233
        - x86/insn-eval: Fix use-after-free access to LDT entry
    
      * cifs set_oplock buffer overflow in strcat (LP: #1824981)
        - cifs: fix strcat buffer overflow and reduce raciness in
          smb21_set_oplock_level()
    
      * CVE-2019-13272
        - ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME
    
      * hda/realtek: can't detect external mic on a Dell machine (LP: #1836755)
        - ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine
    
      * CVE-2019-12614
        - powerpc/pseries/dlpar: Fix a missing check in dlpar_parse_cc_property()
    
      * bnx2x driver causes 100% CPU load (LP: #1832082)
        - bnx2x: Prevent ptp_task to be rescheduled indefinitely
    
      * Sometimes touchpad detected as mouse(i2c designware fails to get adapter
        number) (LP: #1835150)
        - i2c: i2c-designware-platdrv: Cleanup setting of the adapter number
        - i2c: i2c-designware-platdrv: Always use a dynamic adapter number
    
      * Disco update: 5.0.18 upstream stable release (LP: #1836614)
        - locking/rwsem: Prevent decrement of reader count before increment
        - x86/speculation/mds: Revert CPU buffer clear on double fault exit
        - x86/speculation/mds: Improve CPU buffer clear documentation
        - objtool: Fix function fallthrough detection
        - arm64: dts: rockchip: fix IO domain voltage setting of APIO5 on rockpro64
        - arm64: dts: rockchip: Disable DCMDs on RK3399's eMMC controller.
        - ARM: dts: qcom: ipq4019: enlarge PCIe BAR range
        - ARM: dts: exynos: Fix interrupt for shared EINTs on Exynos5260
        - ARM: dts: exynos: Fix audio (microphone) routing on Odroid XU3
        - mmc: sdhci-of-arasan: Add DTS property to disable DCMDs.
        - ARM: exynos: Fix a leaked reference by adding missing of_node_put
        - power: supply: axp288_charger: Fix unchecked return value
        - power: supply: axp288_fuel_gauge: Add ACEPC T8 and T11 mini PCs to the
          blacklist
        - arm64: mmap: Ensure file offset is treated as unsigned
        - arm64: arch_timer: Ensure counter register reads occur with seqlock held
        - arm64: compat: Reduce address limit
        - arm64: Clear OSDLR_EL1 on CPU boot
        - arm64: Save and restore OSDLR_EL1 across suspend/resume
        - sched/x86: Save [ER]FLAGS on context switch
        - x86/MCE: Add an MCE-record filtering function
        - x86/MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models
        - x86/MCE/AMD: Carve out the MC4_MISC thresholding quirk
        - x86/MCE: Group AMD function prototypes in <asm/mce.h>
        - x86/MCE/AMD: Don't report L1 BTB MCA errors on some family 17h models
        - crypto: crypto4xx - fix ctr-aes missing output IV
        - crypto: crypto4xx - fix cfb and ofb "overran dst buffer" issues
        - crypto: salsa20 - don't access already-freed walk.iv
        - crypto: lrw - don't access already-freed walk.iv
        - crypto: chacha-generic - fix use as arm64 no-NEON fallback
        - crypto: chacha20poly1305 - set cra_name correctly
        - crypto: ccp - Do not free psp_master when PLATFORM_INIT fails
        - crypto: vmx - fix copy-paste error in CTR mode
        - crypto: skcipher - don't WARN on unprocessed data after slow walk step
        - crypto: crct10dif-generic - fix use via crypto_shash_digest()
        - crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
        - crypto: arm64/gcm-aes-ce - fix no-NEON fallback code
        - crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
        - crypto: rockchip - update IV buffer to contain the next IV
        - crypto: caam/qi2 - fix zero-length buffer DMA mapping
        - crypto: caam/qi2 - fix DMA mapping of stack memory
        - crypto: caam/qi2 - generate hash keys in-place
        - crypto: arm/aes-neonbs - don't access already-freed walk.iv
        - crypto: arm64/aes-neonbs - don't access already-freed walk.iv
        - mmc: tegra: fix ddr signaling for non-ddr modes
        - mmc: core: Fix tag set memory leak
        - mmc: sdhci-pci: Fix BYT OCP setting
        - ALSA: line6: toneport: Fix broken usage of timer for delayed execution
        - ALSA: usb-audio: Fix a memory leak bug
        - ALSA: hda/realtek - EAPD turn on later
        - ASoC: max98090: Fix restore of DAPM Muxes
        - ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
        - ASoC: fsl_esai: Fix missing break in switch statement
        - ASoC: codec: hdac_hdmi add device_link to card device
        - bpf, arm64: remove prefetch insn in xadd mapping
        - crypto: ccree - remove special handling of chained sg
        - crypto: ccree - fix mem leak on error path
        - crypto: ccree - don't map MAC key on stack
        - crypto: ccree - use correct internal state sizes for export
        - crypto: ccree - don't map AEAD key and IV on stack
        - crypto: ccree - pm resume first enable the source clk
        - crypto: ccree - HOST_POWER_DOWN_EN should be the last CC access during
          suspend
        - crypto: ccree - add function to handle cryptocell tee fips error
        - crypto: ccree - handle tee fips error during power management resume
        - mm/mincore.c: make mincore() more conservative
        - mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned
          addresses
        - mm/hugetlb.c: don't put_page in lock of hugetlb_lock
        - hugetlb: use same fault hash key for shared and private mappings
        - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
        - userfaultfd: use RCU to free the task struct when fork fails
        - ACPI: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle
        - mfd: da9063: Fix OTP control register names to match datasheets for
          DA9063/63L
        - mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values
        - mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write
        - mtd: maps: physmap: Store gpio_values correctly
        - mtd: maps: Allow MTD_PHYSMAP with MTD_RAM
        - tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0
        - tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
        - jbd2: check superblock mapped prior to committing
        - ext4: make sanity check in mballoc more strict
        - ext4: ignore e_value_offs for xattrs with value-in-ea-inode
        - ext4: avoid drop reference to iloc.bh twice
        - ext4: fix use-after-free race with debug_want_extra_isize
        - ext4: actually request zeroing of inode table after grow
        - ext4: fix ext4_show_options for file systems w/o journal
        - btrfs: Check the first key and level for cached extent buffer
        - btrfs: Correctly free extent buffer in case btree_read_extent_buffer_pages
          fails
        - btrfs: Honour FITRIM range constraints during free space trim
        - Btrfs: send, flush dellaloc in order to avoid data loss
        - Btrfs: do not start a transaction during fiemap
        - Btrfs: do not start a transaction at iterate_extent_inodes()
        - Btrfs: fix race between send and deduplication that lead to failures and
          crashes
        - bcache: fix a race between cache register and cacheset unregister
        - bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
        - ipmi:ssif: compare block number correctly for multi-part return messages
        - crypto: ccm - fix incompatibility between "ccm" and "ccm_base"
        - fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going
          into workqueue when umount
        - tty: Don't force RISCV SBI console as preferred console
        - ext4: fix data corruption caused by overlapping unaligned and aligned IO
        - ext4: fix use-after-free in dx_release()
        - ext4: avoid panic during forced reboot due to aborted journal
        - ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug
        - jbd2: fix potential double free
        - KVM: Fix the bitmap range to copy during clear dirty
        - KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes
        - KVM: lapic: Busy wait for timer to expire when using hv_timer
        - kbuild: turn auto.conf.cmd into a mandatory include file
        - xen/pvh: set xen_domain_type to HVM in xen_pvh_init
        - xen/pvh: correctly setup the PV EFI interface for dom0
        - libnvdimm/namespace: Fix label tracking error
        - iov_iter: optimize page_copy_sane()
        - mm/gup: Remove the 'write' parameter from gup_fast_permitted()
        - s390/mm: make the pxd_offset functions more robust
        - s390/mm: convert to the generic get_user_pages_fast code
        - ext4: fix compile error when using BUFFER_TRACE
        - ext4: don't update s_rev_level if not required
        - Linux 5.0.18
    
      * Disco update: 5.0.17 upstream stable release (LP: #1836577)
        - bfq: update internal depth state when queue depth changes
        - platform/x86: sony-laptop: Fix unintentional fall-through
        - platform/x86: thinkpad_acpi: Disable Bluetooth for some machines
        - platform/x86: dell-laptop: fix rfkill functionality
        - hwmon: (pwm-fan) Disable PWM if fetching cooling data fails
        - hwmon: (occ) Fix extended status bits
        - selftests/seccomp: Handle namespace failures gracefully
        - kernfs: fix barrier usage in __kernfs_new_node()
        - virt: vbox: Sanity-check parameter types for hgcm-calls coming from
          userspace
        - USB: serial: fix unthrottle races
        - iio: adc: xilinx: fix potential use-after-free on remove
        - iio: adc: xilinx: fix potential use-after-free on probe
        - iio: adc: xilinx: prevent touching unclocked h/w on remove
        - acpi/nfit: Always dump _DSM output payload
        - libnvdimm/namespace: Fix a potential NULL pointer dereference
        - HID: input: add mapping for Expose/Overview key
        - HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
        - HID: input: add mapping for "Toggle Display" key
        - libnvdimm/btt: Fix a kmemdup failure check
        - s390/dasd: Fix capacity calculation for large volumes
        - mac80211: fix unaligned access in mesh table hash function
        - mac80211: Increase MAX_MSG_LEN
        - cfg80211: Handle WMM rules in regulatory domain intersection
        - mac80211: fix memory accounting with A-MSDU aggregation
        - nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands
        - libnvdimm/security: provide fix for secure-erase to use zero-key
        - libnvdimm/pmem: fix a possible OOB access when read and write pmem
        - tools/testing/nvdimm: Retain security state after overwrite
        - s390/3270: fix lockdep false positive on view->lock
        - drm/ttm: fix dma_fence refcount imbalance on error path
        - drm/amd/display: extending AUX SW Timeout
        - clocksource/drivers/npcm: select TIMER_OF
        - clocksource/drivers/oxnas: Fix OX820 compatible
        - selftests: fib_tests: Fix 'Command line is not complete' errors
        - drm/amdgpu: shadow in shadow_list without tbo.mem.start cause page fault in
          sriov TDR
        - mISDN: Check address length before reading address family
        - vxge: fix return of a free'd memblock on a failed dma mapping
        - qede: fix write to free'd pointer error and double free of ptp
        - afs: Unlock pages for __pagevec_release()
        - afs: Fix in-progess ops to ignore server-level callback invalidation
        - qed: Delete redundant doorbell recovery types
        - qed: Fix the doorbell address sanity check
        - qed: Fix missing DORQ attentions
        - qed: Fix the DORQ's attentions handling
        - drm/amd/display: If one stream full updates, full update all planes
        - s390/pkey: add one more argument space for debug feature entry
        - x86/build/lto: Fix truncated .bss with -fdata-sections
        - x86/mm: Prevent bogus warnings with "noexec=off"
        - x86/reboot, efi: Use EFI reboot for Acer TravelMate X514-51T
        - KVM: nVMX: always use early vmcs check when EPT is disabled
        - KVM: fix spectrev1 gadgets
        - KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in
          tracing
        - tools lib traceevent: Fix missing equality check for strcmp
        - perf top: Always sample time to satisfy needs of use of ordered queuing
        - ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash
        - ocelot: Don't sleep in atomic context (irqs_disabled())
        - perf tools: Fix map reference counting
        - scsi: aic7xxx: fix EISA support
        - slab: store tagged freelist for off-slab slabmgmt
        - mm/hotplug: treat CMA pages as unmovable
        - mm: fix inactive list balancing between NUMA nodes and cgroups
        - init: initialize jump labels before command line option parsing
        - drm: bridge: dw-hdmi: Fix overflow workaround for Rockchip SoCs
        - selftests: netfilter: check icmp pkttoobig errors are set as related
        - ipvs: do not schedule icmp errors from tunnels
        - netfilter: ctnetlink: don't use conntrack/expect object addresses as id
        - netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()
        - netfilter: nat: fix icmp id randomization
        - MIPS: perf: ath79: Fix perfcount IRQ assignment
        - IB/mlx5: Fix scatter to CQE in DCT QP creation
        - s390: ctcm: fix ctcm_new_device error return code
        - drm/sun4i: Set device driver data at bind time for use in unbind
        - drm/sun4i: Fix component unbinding and component master deletion
        - of_net: Fix residues after of_get_nvmem_mac_address removal
        - selftests/net: correct the return value for run_afpackettests
        - netfilter: never get/set skb->tstamp
        - netfilter: fix nf_l4proto_log_invalid to log invalid packets
        - dmaengine: bcm2835: Avoid GFP_KERNEL in device_prep_slave_sg
        - gpu: ipu-v3: dp: fix CSC handling
        - drm/imx: don't skip DP channel disable for background plane
        - ARM: fix function graph tracer and unwinder dependencies
        - ARM: 8856/1: NOMMU: Fix CCR register faulty initialization when MPU is
          disabled
        - spi: Micrel eth switch: declare missing of table
        - spi: ST ST95HF NFC: declare missing of table
        - ceph: handle the case where a dentry has been renamed on outstanding req
        - Revert "drm/virtio: drop prime import/export callbacks"
        - drm/sun4i: Unbind components before releasing DRM and memory
        - Input: snvs_pwrkey - make it depend on ARCH_MXC
        - Input: synaptics-rmi4 - fix possible double free
        - net: vrf: Fix operation not supported when set vrf mac
        - gpio: Fix gpiochip_add_data_with_key() error path
        - mm/memory_hotplug.c: drop memory device reference after find_memory_block()
        - mm/page_alloc.c: avoid potential NULL pointer dereference
        - bpf: only test gso type on gso packets
        - net: sched: fix cleanup NULL pointer exception in act_mirr
        - net: mvpp2: fix validate for PPv2.1
        - drm/rockchip: fix for mailbox read validation.
        - cw1200: fix missing unlock on error in cw1200_hw_scan()
        - mwl8k: Fix rate_idx underflow
        - rtlwifi: rtl8723ae: Fix missing break in switch statement
        - Don't jump to compute_result state from check_result state
        - bonding: fix arp_validate toggling in active-backup mode
        - bridge: Fix error path for kobject_init_and_add()
        - dpaa_eth: fix SG frame cleanup
        - fib_rules: return 0 directly if an exactly same rule exists when NLM_F_EXCL
          not supplied
        - ipv4: Fix raw socket lookup for local traffic
        - net: dsa: Fix error cleanup path in dsa_init_module
        - net: ethernet: stmmac: dwmac-sun8i: enable support of unicast filtering
        - net: macb: Change interrupt and napi enable order in open
        - net: seeq: fix crash caused by not set dev.parent
        - net: ucc_geth - fix Oops when changing number of buffers in the ring
        - packet: Fix error path in packet_init
        - selinux: do not report error on connect(AF_UNSPEC)
        - tipc: fix hanging clients using poll with EPOLLOUT flag
        - vlan: disable SIOCSHWTSTAMP in container
        - vrf: sit mtu should not be updated when vrf netdev is the link
        - tuntap: fix dividing by zero in ebpf queue selection
        - tuntap: synchronize through tfiles array instead of tun->numqueues
        - net: phy: fix phy_validate_pause
        - flow_dissector: disable preemption around BPF calls
        - isdn: bas_gigaset: use usb_fill_int_urb() properly
        - drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl
        - drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
        - powerpc/book3s/64: check for NULL pointer in pgd_alloc()
        - powerpc/powernv/idle: Restore IAMR after idle
        - powerpc/booke64: set RI in default MSR
        - virtio_ring: Fix potential mem leak in virtqueue_add_indirect_packed
        - PCI: hv: Fix a memory leak in hv_eject_device_work()
        - PCI: hv: Add hv_pci_remove_slots() when we unload the driver
        - PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary
        - f2fs: Fix use of number of devices
        - Linux 5.0.17
        - [Config] update configs after update to 5.0.17
    
      * Disco update: 5.0.16 upstream stable release (LP: #1835580)
        - Linux 5.0.16
    
      * CVE-2019-10126
        - mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()
    
      * CVE-2019-3846
        - mwifiex: Fix possible buffer overflows at parsing bss descriptor
    
      * CVE-2019-12984
        - nfc: Ensure presence of required attributes in the deactivate_target handler
    
      * Sometimes touchpad(goodix) can't use tap function (LP: #1836020)
        - SAUCE: i2c: designware: add Inpiron/Vostro 7590 into i2c quirk
    
      * proc_thermal flooding dmesg (LP: #1824690)
        - drivers: thermal: processor_thermal: Downgrade error message
    
     -- Stefan Bader <email address hidden>  Tue, 23 Jul 2019 17:19:39 +0200
  • linux (5.0.0-21.22) disco; urgency=medium
    
      * linux: 5.0.0-21.22 -proposed tracker (LP: #1834902)
    
      * Disco update: 5.0.15 upstream stable release (LP: #1834529)
        - net: stmmac: Use bfsize1 in ndesc_init_rx_desc
        - Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup()
        - ubsan: Fix nasty -Wbuiltin-declaration-mismatch GCC-9 warnings
        - staging: greybus: power_supply: fix prop-descriptor request size
        - staging: wilc1000: Avoid GFP_KERNEL allocation from atomic context.
        - staging: most: cdev: fix chrdev_region leak in mod_exit
        - staging: most: sound: pass correct device when creating a sound card
        - ASoC: tlv320aic3x: fix reset gpio reference counting
        - ASoC: hdmi-codec: fix S/PDIF DAI
        - ASoC: stm32: sai: fix iec958 controls indexation
        - ASoC: stm32: sai: fix exposed capabilities in spdif mode
        - ASoC: stm32: sai: fix race condition in irq handler
        - ASoC:soc-pcm:fix a codec fixup issue in TDM case
        - ASoC:hdac_hda:use correct format to setup hda codec
        - ASoC:intel:skl:fix a simultaneous playback & capture issue on hda platform
        - ASoC: dpcm: prevent snd_soc_dpcm use after free
        - ASoC: nau8824: fix the issue of the widget with prefix name
        - ASoC: nau8810: fix the issue of widget with prefixed name
        - ASoC: samsung: odroid: Fix clock configuration for 44100 sample rate
        - ASoC: rt5682: Check JD status when system resume
        - ASoC: rt5682: fix jack type detection issue
        - ASoC: rt5682: recording has no sound after booting
        - ASoC: wm_adsp: Add locking to wm_adsp2_bus_error
        - clk: meson-gxbb: round the vdec dividers to closest
        - ASoC: stm32: dfsdm: manage multiple prepare
        - ASoC: stm32: dfsdm: fix debugfs warnings on entry creation
        - ASoC: cs4270: Set auto-increment bit for register writes
        - ASoC: dapm: Fix NULL pointer dereference in snd_soc_dapm_free_kcontrol
        - drm/omap: hdmi4_cec: Fix CEC clock handling for PM
        - IB/hfi1: Clear the IOWAIT pending bits when QP is put into error state
        - IB/hfi1: Eliminate opcode tests on mr deref
        - IB/hfi1: Fix the allocation of RSM table
        - MIPS: KGDB: fix kgdb support for SMP platforms.
        - ASoC: tlv320aic32x4: Fix Common Pins
        - drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata()
        - perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS
        - perf/x86/intel: Initialize TFA MSR
        - linux/kernel.h: Use parentheses around argument in u64_to_user_ptr()
        - iov_iter: Fix build error without CONFIG_CRYPTO
        - xtensa: fix initialization of pt_regs::syscall in start_thread
        - ASoC: rockchip: pdm: fix regmap_ops hang issue
        - drm/amdkfd: Add picasso pci id
        - drm/amdgpu: Adjust IB test timeout for XGMI configuration
        - drm/amdgpu: amdgpu_device_recover_vram always failed if only one node in
          shadow_list
        - drm/amd/display: fix cursor black issue
        - ASoC: cs35l35: Disable regulators on driver removal
        - objtool: Add rewind_stack_do_exit() to the noreturn list
        - slab: fix a crash by reading /proc/slab_allocators
        - drm/sun4i: tcon top: Fix NULL/invalid pointer dereference in
          sun8i_tcon_top_un/bind
        - virtio_pci: fix a NULL pointer reference in vp_del_vqs
        - RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove
        - RDMA/hns: Fix bug that caused srq creation to fail
        - KEYS: trusted: fix -Wvarags warning
        - scsi: csiostor: fix missing data copy in csio_scsi_err_handler()
        - drm/mediatek: fix possible object reference leak
        - drm/mediatek: fix the rate and divder of hdmi phy for MT2701
        - drm/mediatek: make implementation of recalc_rate() for MT2701 hdmi phy
        - drm/mediatek: remove flag CLK_SET_RATE_PARENT for MT2701 hdmi phy
        - drm/mediatek: using new factor for tvdpll for MT2701 hdmi phy
        - drm/mediatek: no change parent rate in round_rate() for MT2701 hdmi phy
        - ASoC: Intel: kbl: fix wrong number of channels
        - ASoC: stm32: sai: fix master clock management
        - ALSA: hda: Fix racy display power access
        - virtio-blk: limit number of hw queues by nr_cpu_ids
        - blk-mq: introduce blk_mq_complete_request_sync()
        - nvme: cancel request synchronously
        - nvme-fc: correct csn initialization and increments on error
        - nvmet: fix discover log page when offsets are used
        - platform/x86: pmc_atom: Drop __initconst on dmi table
        - NFSv4.1 fix incorrect return value in copy_file_range
        - perf/core: Fix perf_event_disable_inatomic() race
        - genirq: Prevent use-after-free and work list corruption
        - usb: dwc3: Allow building USB_DWC3_QCOM without EXTCON
        - usb: dwc3: Fix default lpm_nyet_threshold value
        - USB: serial: f81232: fix interrupt worker not stop
        - USB: cdc-acm: fix unthrottle races
        - usb-storage: Set virt_boundary_mask to avoid SG overflows
        - intel_th: pci: Add Comet Lake support
        - iio: adc: qcom-spmi-adc5: Fix of-based module autoloading
        - cpufreq: armada-37xx: fix frequency calculation for opp
        - ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for
          hibernate
        - soc: sunxi: Fix missing dependency on REGMAP_MMIO
        - scsi: lpfc: change snprintf to scnprintf for possible overflow
        - scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines
        - scsi: qla2xxx: Fix device staying in blocked state
        - Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
        - Bluetooth: Fix not initializing L2CAP tx_credits
        - Bluetooth: hci_bcm: Fix empty regulator supplies for Intel Macs
        - UAS: fix alignment of scatter/gather segments
        - ASoC: Intel: avoid Oops if DMA setup fails
        - i3c: Fix a shift wrap bug in i3c_bus_set_addr_slot_status()
        - locking/futex: Allow low-level atomic operations to return -EAGAIN
        - arm64: futex: Bound number of LDXR/STXR loops in FUTEX_WAKE_OP
        - Linux 5.0.15
        - Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR
          connections"
    
      * QCA9377 isn't being recognized sometimes (LP: #1757218)
        - SAUCE: USB: Disable USB2 LPM at shutdown
    
      * Cache line contention prevents scaling of 100Gbps performance (LP: #1832909)
        - iommu/iova: Separate atomic variables to improve performance
    
      * net: hns: Fix loopback test failed at copper ports (LP: #1833132)
        - net: hns: Fix loopback test failed at copper ports
    
      * hns: fix ICMP6 neighbor solicitation messages discard problem (LP: #1833140)
        - net: hns: fix unsigned comparison to less than zero
    
      * [UBUNTU] pkey: Indicate old mkvp only if old and curr. mkvp are different
        (LP: #1832625)
        - pkey: Indicate old mkvp only if old and current mkvp are different
    
      * [UBUNTU] kernel: Fix gcm-aes-s390 wrong scatter-gather list processing
        (LP: #1832623)
        - s390/crypto: fix gcm-aes-s390 selftest failures
    
      * AX88772A USB to Ethernet dongle doesn't work (LP: #1834114)
        - net: phy: rename Asix Electronics PHY driver
        - [Config] update configs and annotations for ASIX renamed
    
      * Add nvidia-418 dkms build support to disco (LP: #1834476)
        - add nvidia-418 dkms build
    
      * depmod may prefer unsigned l-r-m nvidia modules to signed modules
        (LP: #1834479)
        - [Packaging] dkms-build--nvidia-N -- clean up unsigned ko files
    
      * Hi1620 driver updates from upstream 5.2 merge window (LP: #1830815)
        - ethtool: Added support for 50Gbps per lane link modes
        - net: hns3: Make hclgevf_update_link_mode static
        - net: hns3: Make hclge_destroy_cmd_queue static
        - RDMA/hns: Only assign the relatived fields of psn if IB_QP_SQ_PSN is set
        - RDMA/hns: Only assign the fields of the rq psn if IB_QP_RQ_PSN is set
        - RDMA/hns: Update the range of raq_psn field of qp context
        - RDMA/hns: Only assgin some fields if the relatived attr_mask is set
        - RDMA/hns: Hide error print information with roce vf device
        - RDMA/hns: Bugfix for sending with invalidate
        - RDMA/hns: Delete unused variable in hns_roce_v2_modify_qp function
        - RDMA/hns: Limit scope of hns_roce_cmq_send()
        - RDMA/hns: Convert cq_table to XArray
        - RDMA/hns: Convert qp_table_tree to XArray
        - RDMA/hns: Fix bad endianess of port_pd variable
        - net: hns3: check 1000M half for hns3_ethtool_ops.set_link_ksettings
        - net: hns3: reduce resources use in kdump kernel
        - net: hns3: modify the VF network port media type acquisition method
        - net: hns3: return 0 and print warning when hit duplicate MAC
        - net: hns3: minor optimization for ring_space
        - net: hns3: minor optimization for datapath
        - net: hns3: simplify hclgevf_cmd_csq_clean
        - net: hns3: add protect when handling mac addr list
        - net: hns3: check resetting status in hns3_get_stats()
        - net: hns3: prevent change MTU when resetting
        - net: hns3: modify HNS3_NIC_STATE_INITED flag in
          hns3_reset_notify_uninit_enet
        - net: hns3: split function hnae3_match_n_instantiate()
        - RDMA/hns: Dump detailed driver-specific CQ
        - RDMA/hns: Support to create 1M srq queue
        - RDMA/hns: Bugfix for SCC hem free
        - net: hns3: set vport alive state to default while resetting
        - net: hns3: set up the vport alive state while reinitializing
        - net: hns3: not reset vport who not alive when PF reset
        - net: hns3: adjust the timing of hns3_client_stop when unloading
        - net: hns3: deactive the reset timer when reset successfully
        - net: hns3: ignore lower-level new coming reset
        - net: hns3: do not request reset when hardware resetting
        - net: hns3: handle pending reset while reset fail
        - net: hns3: stop mailbox handling when command queue need re-init
        - net: hns3: add error handler for initializing command queue
        - net: hns3: remove resetting check in hclgevf_reset_task_schedule
        - net: hns3: fix keep_alive_timer not stop problem
        - scsi: hisi_sas: add host reset interface for test
        - scsi: hisi_sas: Remedy inconsistent PHY down state in software
        - scsi: hisi_sas: Fix for setting the PHY linkrate when disconnected
        - scsi: hisi_sas: Adjust the printk format of functions hisi_sas_init_device()
        - scsi: hisi_sas: allocate different SAS address for directly attached
          situation
        - scsi: hisi_sas: Support all RAS events with MSI interrupts
        - scsi: hisi_sas: Don't hard reset disk during controller reset
        - scsi: hisi_sas: Don't fail IT nexus reset for Open Reject timeout
        - scsi: hisi_sas: Some misc tidy-up
        - net: hns3: modify VLAN initialization to be compatible with port based VLAN
        - net: hns3: fix VLAN offload handle for VLAN inserted by port
        - net: hns3: fix set port based VLAN for PF
        - net: hns3: fix set port based VLAN issue for VF
        - net: hns3: minor refactor for hns3_rx_checksum
        - net: hns3: add hns3_gro_complete for HW GRO process
        - net: hns3: always assume no drop TC for performance reason
        - net: hns3: divide shared buffer between TC
        - net: hns3: set dividual reset level for all RAS and MSI-X errors
        - net: hns3: do not initialize MDIO bus when PHY is inexistent
        - net: hns3: free the pending skb when clean RX ring
        - net: hns3: code optimization for command queue' spin lock
        - net: hns3: fix sparse: warning when calling hclge_set_vlan_filter_hw()
        - net: hns3: fix for vport->bw_limit overflow problem
        - net: hns3: add reset statistics info for PF
        - net: hns3: add reset statistics for VF
        - net: hns3: add some debug information for hclge_check_event_cause
        - net: hns3: add some debug info for hclgevf_get_mbx_resp()
        - net: hns3: refine tx timeout count handle
        - net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info()
        - net: hns3: dump more information when tx timeout happens
        - net: hns3: Add support for netif message level settings
        - net: hns3: add support for dump ncl config by debugfs
        - net: hns3: Add handling of MAC tunnel interruption
        - net: hns3: add queue's statistics update to service task
        - net: hns3: add function type check for debugfs help information
        - RDMA/hns: Bugfix for mapping user db
        - net: hns3: fix data race between ring->next_to_clean
        - net: hns3: fix for TX clean num when cleaning TX BD
        - net: hns3: handle the BD info on the last BD of the packet
        - net: hns3: stop sending keep alive msg when VF command queue needs reinit
        - net: hns3: use atomic_t replace u32 for arq's count
        - net: hns3: use a reserved byte to identify need_resp flag
        - net: hns3: not reset TQP in the DOWN while VF resetting
        - net: hns3: fix pause configure fail problem
        - net: hns3: extend the loopback state acquisition time
        - net: hns3: prevent double free in hns3_put_ring_config()
        - net: hns3: remove reset after command send failed
        - net: hns3: add support for multiple media type
        - net: hns3: add autoneg and change speed support for fibre port
        - net: hns3: add support for FEC encoding control
        - net: hns3: unify maybe_stop_tx for TSO and non-TSO case
        - net: hns3: use napi_schedule_irqoff in hard interrupts handlers
        - net: hns3: add counter for times RX pages gets allocated
        - net: hns3: add linearizing checking for TSO case
        - net: hns3: fix for tunnel type handling in hns3_rx_checksum
        - net: hns3: refactor BD filling for l2l3l4 info
        - net: hns3: combine len and checksum handling for inner and outer header.
        - net: hns3: fix error handling for desc filling
        - net: hns3: optimize the barrier using when cleaning TX BD
        - net: hns3: unify the page reusing for page size 4K and 64K
        - net: hns3: some cleanup for struct hns3_enet_ring
        - net: hns3: use devm_kcalloc when allocating desc_cb
        - net: hns3: remove redundant assignment of l2_hdr to itself
        - net: hns3: initialize CPU reverse mapping
        - net: hns3: refine the flow director handle
        - net: hns3: add aRFS support for PF
        - net: hns3: fix for FEC configuration
        - RDMA/hns: Remove unnecessary print message in aeq
        - RDMA/hns: Update CQE specifications
        - RDMA/hns: Move spin_lock_irqsave to the correct place
        - RDMA/hns: Remove jiffies operation in disable interrupt context
        - RDMA/hns: Replace magic numbers with #defines
        - net: hns3: fix compile warning without CONFIG_RFS_ACCEL
        - net: hns3: fix for HNS3_RXD_GRO_SIZE_M macro
        - net: hns3: add support for dump firmware statistics by debugfs
        - net: hns3: use HCLGE_STATE_NIC_REGISTERED to indicate PF NIC client has
          registered
        - net: hns3: use HCLGE_STATE_ROCE_REGISTERED to indicate PF ROCE client has
          registered
        - net: hns3: use HCLGEVF_STATE_NIC_REGISTERED to indicate VF NIC client has
          registered
        - net: hns3: modify hclge_init_client_instance()
        - net: hns3: modify hclgevf_init_client_instance()
        - net: hns3: add handshake with hardware while doing reset
        - net: hns3: stop schedule reset service while unloading driver
        - net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit()
        - net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector
        - RDMA/hns: Bugfix for posting multiple srq work request
        - net: hns3: remove redundant core reset
        - net: hns3: don't configure new VLAN ID into VF VLAN table when it's full
        - net: hns3: fix VLAN filter restore issue after reset
        - net: hns3: set the port shaper according to MAC speed
        - net: hns3: add a check to pointer in error_detected and slot_reset
        - net: hns3: set ops to null when unregister ad_dev
        - net: hns3: add handling of two bits in MAC tunnel interrupts
        - net: hns3: remove setting bit of reset_requests when handling mac tunnel
          interrupts
        - net: hns3: add opcode about query and clear RAS & MSI-X to special opcode
        - net: hns3: delay and separate enabling of NIC and ROCE HW errors
        - RDMA/hns: fix inverted logic of readl read and shift
        - RDMA/hns: Bugfix for filling the sge of srq
        - net: hns3: log detail error info of ROCEE ECC and AXI errors
        - net: hns3: fix wrong size of mailbox responding data
        - net: hns3: make HW GRO handling compliant with SW GRO
        - net: hns3: replace numa_node_id with numa_mem_id for buffer reusing
        - net: hns3: refactor hns3_get_new_int_gl function
        - net: hns3: trigger VF reset if a VF has an over_8bd_nfe_err
        - net: hns3: delete the redundant user NIC codes
        - net: hns3: small changes for magic numbers
        - net: hns3: use macros instead of magic numbers
        - net: hns3: refactor PF/VF RSS hash key configuration
        - net: hns3: some modifications to simplify and optimize code
        - net: hns3: fix some coding style issues
        - net: hns3: delay setting of reset level for hw errors until slot_reset is
          called
        - net: hns3: fix avoid unnecessary resetting for the H/W errors which do not
          require reset
        - net: hns3: process H/W errors occurred before HNS dev initialization
        - net: hns3: add recovery for the H/W errors occurred before the HNS dev
          initialization
        - net: hns3: some changes of MSI-X bits in PPU(RCB)
        - net: hns3: extract handling of mpf/pf msi-x errors into functions
        - net: hns3: clear restting state when initializing HW device
        - net: hns3: free irq when exit from abnormal branch
        - net: hns3: fix for dereferencing before null checking
        - net: hns3: fix for skb leak when doing selftest
        - net: hns3: delay ring buffer clearing during reset
        - net: hns3: some variable modification
        - net: hns3: fix dereference of ae_dev before it is null checked
        - scsi: hisi_sas: Delete PHY timers when rmmod or probe failed
        - scsi: hisi_sas: Fix the issue of argument mismatch of printing ecc errors
        - scsi: hisi_sas: Reduce HISI_SAS_SGE_PAGE_CNT in size
        - scsi: hisi_sas: Change the type of some numbers to unsigned
        - scsi: hisi_sas: Ignore the error code between phy down to phy up
        - scsi: hisi_sas: Disable stash for v3 hw
        - net: hns3: Add missing newline at end of file
        - net: hns3: Fix inconsistent indenting
        - RDMa/hns: Don't stuck in endless timeout loop
    
      * Kernel modules generated incorrectly when system is localized to a non-
        English language (LP: #1828084)
        - scripts: override locale from environment when running recordmcount.pl
    
      * [UBUNTU] kernel: Fix wrong dispatching for control domain CPRBs
        (LP: #1832624)
        - s390/zcrypt: Fix wrong dispatching for control domain CPRBs
    
      * shiftfs: allow changing ro/rw for subvolumes (LP: #1832316)
        - SAUCE: shiftfs: allow changing ro/rw for subvolumes
    
      * Sound device not detected after resume from hibernate (LP: #1826868)
        - drm/i915: Force 2*96 MHz cdclk on glk/cnl when audio power is enabled
        - drm/i915: Save the old CDCLK atomic state
        - drm/i915: Remove redundant store of logical CDCLK state
        - drm/i915: Skip modeset for cdclk changes if possible
    
      * [raven] fix screen corruption on modprobe (LP: #1831846)
        - drm/amdgpu: keep stolen memory on picasso
        - drm/amdgpu: reserve stollen vram for raven series
    
      * Handle overflow in proc_get_long of sysctl (LP: #1833935)
        - sysctl: handle overflow in proc_get_long
    
      * Oops during sas expander hotplugging (LP: #1831799)
        - scsi: libsas: delete sas port if expander discover failed
    
      * [SRU][B/B-OEM/C/D/OEM-OSP1] Add RTL8822 wifi driver rtw88 (LP: #1831828)
        - rtw88: new Realtek 802.11ac driver
        - rtw88: fix shift of more than 32 bits of a integer
        - rtw88: phy: mark expected switch fall-throughs
        - rtw88: Make RA_MASK macros ULL
        - [Config] Add realtek wifi RTW88 support
    
      * Dell XPS 13 (9370) defaults to s2idle sleep/suspend instead of deep, NVMe
        drains lots of power under s2idle (LP: #1808957)
        - Revert "UBUNTU: SAUCE: pci/nvme: prevent WDC PC SN720 NVMe from entering D3
          and being disabled"
        - Revert "UBUNTU: SAUCE: nvme: add quirk to not call disable function when
          suspending"
        - Revert "UBUTU: SAUCE: pci: prevent Intel NVMe SSDPEKKF from entering D3"
        - Revert "UBUNTU: SAUCE: nvme: add quirk to not call disable function when
          suspending"
        - Revert "UBUNTU: SAUCE: pci: prevent sk hynix nvme from entering D3"
        - PCI: PM: Avoid possible suspend-to-idle issue
        - PCI: PM: Skip devices in D0 for suspend-to-idle
        - nvme-pci: Sync queues on reset
        - nvme: Export get and set features
        - nvme-pci: Use host managed power state for suspend
    
      * arm64: cma_alloc errors at boot (LP: #1823753)
        - [Config] Bump CMA_SIZE_MBYTES to 32 on arm64
        - dma-contiguous: add dma_{alloc, free}_contiguous() helpers
        - dma-contiguous: use fallback alloc_pages for single pages
        - dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc,
          free}_contiguous()
    
      * libsas: old linkrate advertised after phy disabled (LP: #1830435)
        - scsi: libsas: Inject revalidate event for root port event
        - scsi: libsas: Do discovery on empty PHY to update PHY info
    
      * fanotify06 from ubuntu_ltp_syscalls failed (LP: #1833028)
        - ovl: do not generate duplicate fsnotify events for "fake" path
    
      * hinic: fix oops due to race in set_rx_mode (LP: #1832048)
        - hinic: fix a bug in set rx mode
    
      * ubuntu 18.04 flickering screen with Radeon X1600 (LP: #1791312)
        - drm/radeon: prefer lower reference dividers
    
      * [ALSA] [PATCH] Headset fixup for System76 Gazelle (gaze14) (LP: #1827555)
        - ALSA: hda/realtek - Headset fixup for System76 Gazelle (gaze14)
        - ALSA: hda/realtek - Corrected fixup for System76 Gazelle (gaze14)
    
      * ftrace in ubuntu_kernel_selftests complains "Illegal number" because of the
        absence of tput (LP: #1828989)
        - selftests/ftrace: Handle the absence of tput
    
      * CVE-2019-11833
        - ext4: zero out the unused memory region in the extent tree block
    
      * Disco update: 5.0.14 upstream stable release (LP: #1832775)
        - selftests/seccomp: Prepare for exclusive seccomp flags
        - seccomp: Make NEW_LISTENER and TSYNC flags exclusive
        - ARC: memset: fix build with L1_CACHE_SHIFT != 6
        - iwlwifi: fix driver operation for 5350
        - mwifiex: Make resume actually do something useful again on SDIO cards
        - mtd: rawnand: marvell: Clean the controller state before each operation
        - mac80211: don't attempt to rename ERR_PTR() debugfs dirs
        - i2c: synquacer: fix enumeration of slave devices
        - i2c: imx: correct the method of getting private data in notifier_call
        - i2c: Prevent runtime suspend of adapter when Host Notify is required
        - ALSA: hda/realtek - Add new Dell platform for headset mode
        - USB: yurex: Fix protection fault after device removal
        - USB: w1 ds2490: Fix bug caused by improper use of altsetting array
        - USB: dummy-hcd: Fix failure to give back unlinked URBs
        - usb: usbip: fix isoc packet num validation in get_pipe
        - USB: core: Fix unterminated string returned by usb_string()
        - USB: core: Fix bug caused by duplicate interface PM usage counter
        - KVM: lapic: Disable timer advancement if adaptive tuning goes haywire
        - KVM: x86: Consider LAPIC TSC-Deadline timer expired if deadline too short
        - KVM: lapic: Track lapic timer advance per vCPU
        - KVM: lapic: Allow user to disable adaptive tuning of timer advancement
        - KVM: lapic: Convert guest TSC to host time domain if necessary
        - arm64: dts: rockchip: fix rk3328-roc-cc gmac2io tx/rx_delay
        - HID: logitech: check the return value of create_singlethread_workqueue
        - HID: debug: fix race condition with between rdesc_show() and device removal
        - rtc: cros-ec: Fail suspend/resume if wake IRQ can't be configured
        - rtc: sh: Fix invalid alarm warning for non-enabled alarm
        - ARM: OMAP2+: add missing of_node_put after of_device_is_available
        - batman-adv: Reduce claim hash refcnt only for removed entry
        - batman-adv: Reduce tt_local hash refcnt only for removed entry
        - batman-adv: Reduce tt_global hash refcnt only for removed entry
        - batman-adv: fix warning in function batadv_v_elp_get_throughput
        - ARM: dts: rockchip: Fix gpu opp node names for rk3288
        - reset: meson-audio-arb: Fix missing .owner setting of reset_controller_dev
        - ARM: dts: Fix dcan clkctrl clock for am3
        - i40e: fix i40e_ptp_adjtime when given a negative delta
        - ixgbe: fix mdio bus registration
        - i40e: fix WoL support check
        - riscv: fix accessing 8-byte variable from RV32
        - HID: quirks: Fix keyboard + touchpad on Lenovo Miix 630
        - net: hns3: fix compile error
        - xdp: fix cpumap redirect SKB creation bug
        - net/mlx5: E-Switch, Protect from invalid memory access in offload fdb table
        - net/mlx5: E-Switch, Fix esw manager vport indication for more vport commands
        - bonding: show full hw address in sysfs for slave entries
        - net: stmmac: use correct DMA buffer size in the RX descriptor
        - net: stmmac: ratelimit RX error logs
        - net: stmmac: don't stop NAPI processing when dropping a packet
        - net: stmmac: don't overwrite discard_frame status
        - net: stmmac: fix dropping of multi-descriptor RX frames
        - net: stmmac: don't log oversized frames
        - jffs2: fix use-after-free on symlink traversal
        - debugfs: fix use-after-free on symlink traversal
        - mfd: twl-core: Disable IRQ while suspended
        - block: use blk_free_flush_queue() to free hctx->fq in blk_mq_init_hctx
        - rtc: da9063: set uie_unsupported when relevant
        - HID: input: add mapping for Assistant key
        - vfio/pci: use correct format characters
        - scsi: core: add new RDAC LENOVO/DE_Series device
        - scsi: storvsc: Fix calculation of sub-channel count
        - arm/mach-at91/pm : fix possible object reference leak
        - blk-mq: do not reset plug->rq_count before the list is sorted
        - arm64: fix wrong check of on_sdei_stack in nmi context
        - net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw()
        - net: hns: Fix probabilistic memory overwrite when HNS driver initialized
        - net: hns: fix ICMP6 neighbor solicitation messages discard problem
        - net: hns: Fix WARNING when remove HNS driver with SMMU enabled
        - libcxgb: fix incorrect ppmax calculation
        - KVM: SVM: prevent DBG_DECRYPT and DBG_ENCRYPT overflow
        - kmemleak: powerpc: skip scanning holes in the .bss section
        - hugetlbfs: fix memory leak for resv_map
        - sh: fix multiple function definition build errors
        - null_blk: prevent crash from bad home_node value
        - xsysace: Fix error handling in ace_setup
        - fs: stream_open - opener for stream-like files so that read and write can
          run simultaneously without deadlock
        - ARM: orion: don't use using 64-bit DMA masks
        - ARM: iop: don't use using 64-bit DMA masks
        - perf/x86/amd: Update generic hardware cache events for Family 17h
        - Bluetooth: btusb: request wake pin with NOAUTOEN
        - Bluetooth: mediatek: fix up an error path to restore bdev->tx_state
        - clk: qcom: Add missing freq for usb30_master_clk on 8998
        - usb: dwc3: Reset num_trbs after skipping
        - staging: iio: adt7316: allow adt751x to use internal vref for all dacs
        - staging: iio: adt7316: fix the dac read calculation
        - staging: iio: adt7316: fix handling of dac high resolution option
        - staging: iio: adt7316: fix the dac write calculation
        - scsi: RDMA/srpt: Fix a credit leak for aborted commands
        - ASoC: Intel: bytcr_rt5651: Revert "Fix DMIC map headsetmic mapping"
        - ASoC: rsnd: gen: fix SSI9 4/5/6/7 busif related register address
        - ASoC: sunxi: sun50i-codec-analog: Rename hpvcc regulator supply to cpvdd
        - ASoC: wm_adsp: Correct handling of compressed streams that restart
        - ASoC: dpcm: skip missing substream while applying symmetry
        - ASoC: stm32: fix sai driver name initialisation
        - KVM: VMX: Save RSI to an unused output in the vCPU-run asm blob
        - KVM: nVMX: Remove a rogue "rax" clobber from nested_vmx_check_vmentry_hw()
        - kvm: vmx: Fix typos in vmentry/vmexit control setting
        - KVM: lapic: Check for in-kernel LAPIC before deferencing apic pointer
        - platform/x86: intel_pmc_core: Fix PCH IP name
        - platform/x86: intel_pmc_core: Handle CFL regmap properly
        - IB/core: Unregister notifier before freeing MAD security
        - IB/core: Fix potential memory leak while creating MAD agents
        - IB/core: Destroy QP if XRC QP fails
        - Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ
        - Input: stmfts - acknowledge that setting brightness is a blocking call
        - gpio: mxc: add check to return defer probe if clock tree NOT ready
        - selinux: avoid silent denials in permissive mode under RCU walk
        - selinux: never allow relabeling on context mounts
        - mac80211: Honor SW_CRYPTO_CONTROL for unicast keys in AP VLAN mode
        - powerpc/mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown
          search
        - x86/mce: Improve error message when kernel cannot recover, p2
        - clk: x86: Add system specific quirk to mark clocks as critical
        - x86/mm/KASLR: Fix the size of the direct mapping section
        - x86/mm: Fix a crash with kmemleak_scan()
        - x86/mm/tlb: Revert "x86/mm: Align TLB invalidation info"
        - i2c: i2c-stm32f7: Fix SDADEL minimum formula
        - media: v4l2: i2c: ov7670: Fix PLL bypass register values
        - ASoC: wm_adsp: Check for buffer in trigger stop
        - mm/kmemleak.c: fix unused-function warning
        - Linux 5.0.14
    
      * [ZenBook S UX391UA, Realtek ALC294, Mic, Internal] No sound at all
        (LP: #1784485) // Disco update: 5.0.14 upstream stable release
        (LP: #1832775)
        - ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR
    
      * Support new ums-realtek device (LP: #1831840)
        - USB: usb-storage: Add new ID to ums-realtek
    
      * amd_iommu possible data corruption (LP: #1823037)
        - iommu/amd: Set exclusion range correctly
    
      * Add new sound card PCIID into the alsa driver (LP: #1832299)
        - ALSA: hda/intel: add CometLake PCI IDs
    
      * idle-page oopses when accessing page frames that are out of range
        (LP: #1833410)
        - mm/page_idle.c: fix oops because end_pfn is larger than max_pfn
    
      * Sometimes touchpad automatically trigger double click (LP: #1833484)
        - SAUCE: i2c: designware: Add disable runtime pm quirk
    
      * Disco update: 5.0.13 upstream stable release (LP: #1832749)
        - ipv4: ip_do_fragment: Preserve skb_iif during fragmentation
        - ipv6: A few fixes on dereferencing rt->from
        - ipv6: fix races in ip6_dst_destroy()
        - ipv6/flowlabel: wait rcu grace period before put_pid()
        - ipv6: invert flowlabel sharing check in process and user mode
        - l2ip: fix possible use-after-free
        - l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv()
        - net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc
        - net: phy: marvell: Fix buffer overrun with stats counters
        - net/tls: avoid NULL pointer deref on nskb->sk in fallback
        - rxrpc: Fix net namespace cleanup
        - sctp: avoid running the sctp state machine recursively
        - selftests: fib_rule_tests: print the result and return 1 if any tests failed
        - packet: validate msg_namelen in send directly
        - packet: in recvmsg msg_name return at least sizeof sockaddr_ll
        - selftests: fib_rule_tests: Fix icmp proto with ipv6
        - tcp: add sanity tests in tcp_add_backlog()
        - udp: fix GRO reception in case of length mismatch
        - udp: fix GRO packet of death
        - bnxt_en: Improve multicast address setup logic.
        - bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one()
        - bnxt_en: Fix possible crash in bnxt_hwrm_ring_free() under error conditions.
        - bnxt_en: Pass correct extended TX port statistics size to firmware.
        - bnxt_en: Fix statistics context reservation logic.
        - bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt().
        - net/tls: don't copy negative amounts of data in reencrypt
        - net/tls: fix copy to fragments in reencrypt
        - KVM: x86: Whitelist port 0x7e for pre-incrementing %rip
        - KVM: nVMX: Fix size checks in vmx_set_nested_state
        - ALSA: line6: use dynamic buffers
        - iwlwifi: mvm: properly check debugfs dentry before using it
        - ath10k: Drop WARN_ON()s that always trigger during system resume
        - Linux 5.0.13
    
      * Add pointstick support on HP ZBook 17 G5 (LP: #1833387)
        - Revert "HID: multitouch: Support ALPS PTP stick with pid 0x120A"
        - SAUCE: HID: multitouch: Add pointstick support for ALPS Touchpad
    
      * [SRU][B/B-OEM/B-OEM-OSP-1/C/D/E] Add trackpoint middle button support of 2
        new thinpads (LP: #1833637)
        - Input: elantech - enable middle button support on 2 ThinkPads
    
      * Kernel panic upon resetting ixgbe SR-IOV VFIO virtual function using 5.0
        kernel (LP: #1829652)
        - SAUCE: ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw
    
      * CVE-2019-11884
        - Bluetooth: hidp: fix buffer overflow
    
      * TPM module can not initial (LP: #1826142)
        - spi: Optionally use GPIO descriptors for CS GPIOs
        - spi: dw: Convert to use CS GPIO descriptors
        - spi: dw: fix warning unused variable 'ret'
        - spi: Support high CS when using descriptors
        - spi: dw: Fix default polarity of native chipselect
        - gpio: of: Fix logic inversion
        - spi: Add missing error handling for CS GPIOs
    
      * CVE-2018-12126 // CVE-2018-12127 // CVE-2018-12130 // CVE-2019-11091
        - SAUCE: Synchronize MDS mitigations with upstream
        - Documentation: Correct the possible MDS sysfs values
        - x86/speculation/mds: Fix documentation typo
    
      * CVE-2019-11091
        - x86/mds: Add MDSUM variant to the MDS documentation
    
      * Regression for ubuntu_kernel_selftests [net] ubuntu_bpf test case fails to
        build on disco (LP: #1829812)
        - tools: bpftool: add basic probe capability, probe syscall availability
        - tools: bpftool: add probes for eBPF program types
    
      * POSIX fix for ftrace test in ubuntu_kernel_selftests (LP: #1828995)
        - selftests/ftrace: Replace \e with \033
        - selftests/ftrace: Replace echo -e with printf
    
      * Disco update: 5.0.12 upstream stable release (LP: #1830934)
        - selinux: use kernel linux/socket.h for genheaders and mdp
        - Revert "ACPICA: Clear status of GPEs before enabling them"
        - drm/i915: Do not enable FEC without DSC
        - mm: make page ref count overflow check tighter and more explicit
        - mm: add 'try_get_page()' helper function
        - mm: prevent get_user_pages() from overflowing page refcount
        - fs: prevent page refcount overflow in pipe_buf_get
        - arm64: dts: renesas: r8a77990: Fix SCIF5 DMA channels
        - ARM: dts: bcm283x: Fix hdmi hpd gpio pull
        - s390: limit brk randomization to 32MB
        - mt76x02: fix hdr pointer in write txwi for USB
        - mt76: mt76x2: fix external LNA gain settings
        - mt76: mt76x2: fix 2.4 GHz channel gain settings
        - net: ieee802154: fix a potential NULL pointer dereference
        - ieee802154: hwsim: propagate genlmsg_reply return code
        - Btrfs: fix file corruption after snapshotting due to mix of buffered/DIO
          writes
        - net: stmmac: don't set own bit too early for jumbo frames
        - net: stmmac: fix jumbo frame sending with non-linear skbs
        - qlcnic: Avoid potential NULL pointer dereference
        - xsk: fix umem memory leak on cleanup
        - staging: axis-fifo: add CONFIG_OF dependency
        - staging, mt7621-pci: fix build without pci support
        - netfilter: nft_set_rbtree: check for inactive element after flag mismatch
        - netfilter: bridge: set skb transport_header before entering
          NF_INET_PRE_ROUTING
        - netfilter: fix NETFILTER_XT_TARGET_TEE dependencies
        - netfilter: ip6t_srh: fix NULL pointer dereferences
        - s390/qeth: fix race when initializing the IP address table
        - ARM: imx51: fix a leaked reference by adding missing of_node_put
        - sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init()
        - serial: ar933x_uart: Fix build failure with disabled console
        - KVM: arm64: Reset the PMU in preemptible context
        - arm64: KVM: Always set ICH_HCR_EL2.EN if GICv4 is enabled
        - KVM: arm/arm64: vgic-its: Take the srcu lock when writing to guest memory
        - KVM: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots
        - usb: dwc3: pci: add support for Comet Lake PCH ID
        - usb: gadget: net2280: Fix overrun of OUT messages
        - usb: gadget: net2280: Fix net2280_dequeue()
        - usb: gadget: net2272: Fix net2272_dequeue()
        - ARM: dts: pfla02: increase phy reset duration
        - i2c: i801: Add support for Intel Comet Lake
        - KVM: arm/arm64: Fix handling of stage2 huge mappings
        - net: ks8851: Dequeue RX packets explicitly
        - net: ks8851: Reassert reset pin if chip ID check fails
        - net: ks8851: Delay requesting IRQ until opened
        - net: ks8851: Set initial carrier state to down
        - staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc
        - staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference
        - staging: rtl8712: uninitialized memory in read_bbreg_hdl()
        - staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc
        - net: phy: Add DP83825I to the DP83822 driver
        - net: macb: Add null check for PCLK and HCLK
        - net/sched: don't dereference a->goto_chain to read the chain index
        - ARM: dts: imx6qdl: Fix typo in imx6qdl-icore-rqs.dtsi
        - drm/tegra: hub: Fix dereference before check
        - NFS: Fix a typo in nfs_init_timeout_values()
        - net: xilinx: fix possible object reference leak
        - net: ibm: fix possible object reference leak
        - net: ethernet: ti: fix possible object reference leak
        - drm: Fix drm_release() and device unplug
        - gpio: aspeed: fix a potential NULL pointer dereference
        - drm/meson: Fix invalid pointer in meson_drv_unbind()
        - drm/meson: Uninstall IRQ handler
        - ARM: davinci: fix build failure with allnoconfig
        - sbitmap: order READ/WRITE freed instance and setting clear bit
        - staging: vc04_services: Fix an error code in vchiq_probe()
        - scsi: mpt3sas: Fix kernel panic during expander reset
        - scsi: aacraid: Insure we don't access PCIe space during AER/EEH
        - scsi: qla4xxx: fix a potential NULL pointer dereference
        - usb: usb251xb: fix to avoid potential NULL pointer dereference
        - leds: trigger: netdev: fix refcnt leak on interface rename
        - SUNRPC: fix uninitialized variable warning
        - x86/realmode: Don't leak the trampoline kernel address
        - usb: u132-hcd: fix resource leak
        - ceph: fix use-after-free on symlink traversal
        - scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN
        - x86/mm: Don't exceed the valid physical address space
        - libata: fix using DMA buffers on stack
        - kbuild: skip parsing pre sub-make code for recursion
        - afs: Fix StoreData op marshalling
        - gpio: of: Check propname before applying "cs-gpios" quirks
        - gpio: of: Check for "spi-cs-high" in child instead of parent node
        - KVM: nVMX: Do not inherit quadrant and invalid for the root shadow EPT
        - KVM: SVM: Workaround errata#1096 (insn_len maybe zero on SMAP violation)
        - kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs
        - x86/kvm/hyper-v: avoid spurious pending stimer on vCPU init
        - KVM: selftests: assert on exit reason in CR4/cpuid sync test
        - KVM: selftests: explicitly disable PIE for tests
        - KVM: selftests: disable stack protector for all KVM tests
        - KVM: selftests: complete IO before migrating guest state
        - gpio: of: Fix of_gpiochip_add() error path
        - nvme-multipath: relax ANA state check
        - nvmet: fix building bvec from sg list
        - nvmet: fix error flow during ns enable
        - perf cs-etm: Add missing case value
        - perf machine: Update kernel map address and re-order properly
        - kconfig/[mn]conf: handle backspace (^H) key
        - iommu/amd: Reserve exclusion range in iova-domain
        - kasan: fix variable 'tag' set but not used warning
        - ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK
        - leds: pca9532: fix a potential NULL pointer dereference
        - leds: trigger: netdev: use memcpy in device_name_store
        - Linux 5.0.12
        - [Config] Document drop of axis-fifo for amd64/i386
    
      * Disco update: 5.0.11 upstream stable release (LP: #1830929)
        - netfilter: nf_tables: bogus EBUSY when deleting set after flush
        - netfilter: nf_tables: bogus EBUSY in helper removal from transaction
        - intel_th: gth: Fix an off-by-one in output unassigning
        - powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64
        - ALSA: hda/realtek - Move to ACT_INIT state
        - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
        - block, bfq: fix use after free in bfq_bfqq_expire
        - cifs: fix memory leak in SMB2_read
        - cifs: fix page reference leak with readv/writev
        - cifs: do not attempt cifs operation on smb2+ rename error
        - tracing: Fix a memory leak by early error exit in trace_pid_write()
        - tracing: Fix buffer_ref pipe ops
        - crypto: xts - Fix atomic sleep when walking skcipher
        - crypto: lrw - Fix atomic sleep when walking skcipher
        - gpio: eic: sprd: Fix incorrect irq type setting for the sync EIC
        - zram: pass down the bvec we need to read into in the work struct
        - lib/Kconfig.debug: fix build error without CONFIG_BLOCK
        - MIPS: scall64-o32: Fix indirect syscall number load
        - trace: Fix preempt_enable_no_resched() abuse
        - mm: do not boost watermarks to avoid fragmentation for the DISCONTIG memory
          model
        - arm64: mm: Ensure tail of unaligned initrd is reserved
        - IB/rdmavt: Fix frwr memory registration
        - RDMA/mlx5: Do not allow the user to write to the clock page
        - RDMA/mlx5: Use rdma_user_map_io for mapping BAR pages
        - RDMA/ucontext: Fix regression with disassociate
        - sched/numa: Fix a possible divide-by-zero
        - ceph: only use d_name directly when parent is locked
        - ceph: ensure d_name stability in ceph_dentry_hash()
        - ceph: fix ci->i_head_snapc leak
        - nfsd: Don't release the callback slot unless it was actually held
        - nfsd: wake waiters blocked on file_lock before deleting it
        - nfsd: wake blocked file lock waiters before sending callback
        - sunrpc: don't mark uninitialised items as VALID.
        - perf/x86/intel: Update KBL Package C-state events to also include
          PC8/PC9/PC10 counters
        - Input: synaptics-rmi4 - write config register values to the right offset
        - dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid
        - dmaengine: sh: rcar-dmac: Fix glitch in dmaengine_tx_status
        - dmaengine: mediatek-cqdma: fix wrong register usage in mtk_cqdma_start
        - ARM: 8857/1: efi: enable CP15 DMB instructions before cleaning the cache
        - powerpc/mm/radix: Make Radix require HUGETLB_PAGE
        - drm/vc4: Fix memory leak during gpu reset.
        - drm/ttm: fix re-init of global structures
        - drm/vc4: Fix compilation error reported by kbuild test bot
        - ext4: fix some error pointer dereferences
        - loop: do not print warn message if partition scan is successful
        - tipc: handle the err returned from cmd header function
        - slip: make slhc_free() silently accept an error pointer
        - workqueue: Try to catch flush_work() without INIT_WORK().
        - sched/deadline: Correctly handle active 0-lag timers
        - mac80211_hwsim: calculate if_combination.max_interfaces
        - NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
        - netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
        - fm10k: Fix a potential NULL pointer dereference
        - tipc: check bearer name with right length in tipc_nl_compat_bearer_enable
        - tipc: check link name with right length in tipc_nl_compat_link_set
        - net: netrom: Fix error cleanup path of nr_proto_init
        - net/rds: Check address length before reading address family
        - rxrpc: fix race condition in rxrpc_input_packet()
        - pin iocb through aio.
        - aio: fold lookup_kiocb() into its sole caller
        - aio: keep io_event in aio_kiocb
        - aio: store event at final iocb_put()
        - Fix aio_poll() races
        - x86, retpolines: Raise limit for generating indirect calls from switch-case
        - x86/retpolines: Disable switch jump tables when retpolines are enabled
        - rdma: fix build errors on s390 and MIPS due to bad ZERO_PAGE use
        - ipv4: add sanity checks in ipv4_link_failure()
        - ipv4: set the tcp_min_rtt_wlen range from 0 to one day
        - mlxsw: spectrum: Fix autoneg status in ethtool
        - net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query
        - net: rds: exchange of 8K and 1M pool
        - net/rose: fix unbound loop in rose_loopback_timer()
        - net: stmmac: move stmmac_check_ether_addr() to driver probe
        - net/tls: fix refcount adjustment in fallback
        - stmmac: pci: Adjust IOT2000 matching
        - team: fix possible recursive locking when add slaves
        - net: socionext: replace napi_alloc_frag with the netdev variant on init
        - net/ncsi: handle overflow when incrementing mac address
        - mlxsw: pci: Reincrease PCI reset timeout
        - mlxsw: spectrum: Put MC TCs into DWRR mode
        - net/mlx5e: Fix the max MTU check in case of XDP
        - net/mlx5e: Fix use-after-free after xdp_return_frame
        - net/tls: avoid potential deadlock in tls_set_device_offload_rx()
        - net/tls: don't leak IV and record seq when offload fails
        - Linux 5.0.11
    
      * Disco update: 5.0.10 upstream stable release (LP: #1830922)
        - bonding: fix event handling for stacked bonds
        - failover: allow name change on IFF_UP slave interfaces
        - net: atm: Fix potential Spectre v1 vulnerabilities
        - net: bridge: fix per-port af_packet sockets
        - net: bridge: multicast: use rcu to access port list from
          br_multicast_start_querier
        - net: fec: manage ahb clock in runtime pm
        - net: Fix missing meta data in skb with vlan packet
        - net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv
        - tcp: tcp_grow_window() needs to respect tcp_space()
        - team: set slave to promisc if team is already in promisc mode
        - tipc: missing entries in name table of publications
        - vhost: reject zero size iova range
        - ipv4: recompile ip options in ipv4_link_failure
        - ipv4: ensure rcu_read_lock() in ipv4_link_failure()
        - mlxsw: spectrum_switchdev: Add MDB entries in prepare phase
        - mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue
        - mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue
        - mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue
        - mlxsw: spectrum_router: Do not check VRF MAC address
        - net: thunderx: raise XDP MTU to 1508
        - net: thunderx: don't allow jumbo frames with XDP
        - net/tls: fix the IV leaks
        - net/tls: don't leak partially sent record in device mode
        - net: strparser: partially revert "strparser: Call skb_unclone conditionally"
        - net/tls: fix build without CONFIG_TLS_DEVICE
        - net: bridge: fix netlink export of vlan_stats_per_port option
        - net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded
        - net/mlx5e: Protect against non-uplink representor for encap
        - net/mlx5e: Switch to Toeplitz RSS hash by default
        - net/mlx5e: Rx, Fixup skb checksum for packets with tail padding
        - net/mlx5e: Rx, Check ip headers sanity
        - Revert "net/mlx5e: Enable reporting checksum unnecessary also for L3
          packets"
        - net/mlx5: FPGA, tls, hold rcu read lock a bit longer
        - net/tls: prevent bad memory access in tls_is_sk_tx_device_offloaded()
        - net/mlx5: FPGA, tls, idr remove on flow delete
        - route: Avoid crash from dereferencing NULL rt->from
        - nfp: flower: replace CFI with vlan present
        - nfp: flower: remove vlan CFI bit from push vlan action
        - sch_cake: Use tc_skb_protocol() helper for getting packet protocol
        - sch_cake: Make sure we can write the IP header before changing DSCP bits
        - NFC: nci: Add some bounds checking in nci_hci_cmd_received()
        - nfc: nci: Potential off by one in ->pipes[] array
        - sch_cake: Simplify logic in cake_select_tin()
        - CIFS: keep FileInfo handle live during oplock break
        - cifs: Fix lease buffer length error
        - cifs: Fix use-after-free in SMB2_write
        - cifs: Fix use-after-free in SMB2_read
        - cifs: fix handle leak in smb2_query_symlink()
        - fs/dax: Deposit pagetable even when installing zero page
        - KVM: x86: Don't clear EFER during SMM transitions for 32-bit vCPU
        - KVM: x86: svm: make sure NMI is injected after nmi_singlestep
        - Staging: iio: meter: fixed typo
        - staging: iio: ad7192: Fix ad7193 channel address
        - iio: gyro: mpu3050: fix chip ID reading
        - iio/gyro/bmg160: Use millidegrees for temperature scale
        - iio:chemical:bme680: Fix, report temperature in millidegrees
        - iio:chemical:bme680: Fix SPI read interface
        - iio: cros_ec: Fix the maths for gyro scale calculation
        - iio: ad_sigma_delta: select channel when reading register
        - iio: dac: mcp4725: add missing powerdown bits in store eeprom
        - iio: Fix scan mask selection
        - iio: adc: at91: disable adc channel interrupt in timeout case
        - iio: core: fix a possible circular locking dependency
        - io: accel: kxcjk1013: restore the range after resume.
        - staging: most: core: use device description as name
        - staging: comedi: vmk80xx: Fix use of uninitialized semaphore
        - staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf
        - staging: comedi: ni_usb6501: Fix use of uninitialized mutex
        - staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf
        - ALSA: core: Fix card races between register and disconnect
        - Input: elan_i2c - add hardware ID for multiple Lenovo laptops
        - serial: sh-sci: Fix HSCIF RX sampling point adjustment
        - serial: sh-sci: Fix HSCIF RX sampling point calculation
        - vt: fix cursor when clearing the screen
        - scsi: core: set result when the command cannot be dispatched
        - Revert "scsi: fcoe: clear FC_RP_STARTED flags when receiving a LOGO"
        - i3c: dw: Fix dw_i3c_master_disable controller by using correct mask
        - i3c: Fix the verification of random PID
        - Revert "svm: Fix AVIC incomplete IPI emulation"
        - coredump: fix race condition between mmget_not_zero()/get_task_mm() and core
          dumping
        - x86/kvm: move kvm_load/put_guest_xcr0 into atomic context
        - ipmi: fix sleep-in-atomic in free_user at cleanup SRCU user->release_barrier
        - crypto: x86/poly1305 - fix overflow during partial reduction
        - drm/ttm: fix out-of-bounds read in ttm_put_pages() v2
        - arm64: futex: Restore oldval initialization to work around buggy compilers
        - x86/kprobes: Verify stack frame on kretprobe
        - kprobes: Mark ftrace mcount handler functions nokprobe
        - x86/kprobes: Avoid kretprobe recursion bug
        - kprobes: Fix error check when reusing optimized probes
        - rt2x00: do not increment sequence number while re-transmitting
        - mac80211: do not call driver wake_tx_queue op during reconfig
        - s390/mem_detect: Use IS_ENABLED(CONFIG_BLK_DEV_INITRD)
        - drm/amdgpu/gmc9: fix VM_L2_CNTL3 programming
        - perf/x86/amd: Add event map for AMD Family 17h
        - x86/cpu/bugs: Use __initconst for 'const' init data
        - perf/x86: Fix incorrect PEBS_REGS
        - x86/speculation: Prevent deadlock on ssb_state::lock
        - timers/sched_clock: Prevent generic sched_clock wrap caused by tick_freeze()
        - nfit/ars: Remove ars_start_flags
        - nfit/ars: Introduce scrub_flags
        - nfit/ars: Allow root to busy-poll the ARS state machine
        - nfit/ars: Avoid stale ARS results
        - tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
        - tpm: Fix the type of the return value in calc_tpm2_event_size()
        - Revert "kbuild: use -Oz instead of -Os when using clang"
        - sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup
        - tpm: fix an invalid condition in tpm_common_poll
        - mt76x02: avoid status_list.lock and sta->rate_ctrl_lock dependency
        - device_cgroup: fix RCU imbalance in error case
        - perf/ring_buffer: Fix AUX record suppression
        - mm/memory_hotplug: do not unlock after failing to take the
          device_hotplug_lock
        - mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y
          CONFIG_SMP=n
        - ALSA: info: Fix racy addition/deletion of nodes
        - percpu: stop printing kernel addresses
        - kernel/sysctl.c: fix out-of-bounds access when setting file-max
        - Linux 5.0.10
    
      * Disco update: 5.0.9 upstream stable release (LP: #1830906)
        - ARC: u-boot args: check that magic number is correct
        - arc: hsdk_defconfig: Enable CONFIG_BLK_DEV_RAM
        - perf/core: Restore mmap record type correctly
        - mips: bcm47xx: Enable USB power on Netgear WNDR3400v2
        - ext4: avoid panic during forced reboot
        - ext4: add missing brelse() in add_new_gdb_meta_bg()
        - ext4: report real fs size after failed resize
        - ALSA: echoaudio: add a check for ioremap_nocache
        - ALSA: sb8: add a check for request_region
        - auxdisplay: hd44780: Fix memory leak on ->remove()
        - drm/udl: use drm_gem_object_put_unlocked.
        - IB/mlx4: Fix race condition between catas error reset and aliasguid flows
        - i40iw: Avoid panic when handling the inetdev event
        - mmc: davinci: remove extraneous __init annotation
        - ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and
          declaration
        - paride/pf: cleanup queues when detection fails
        - paride/pcd: cleanup queues when detection fails
        - thermal/intel_powerclamp: fix __percpu declaration of worker_data
        - thermal: samsung: Fix incorrect check after code merge
        - thermal: bcm2835: Fix crash in bcm2835_thermal_debugfs
        - thermal/int340x_thermal: Add additional UUIDs
        - thermal/int340x_thermal: fix mode setting
        - thermal/intel_powerclamp: fix truncated kthread name
        - scsi: iscsi: flush running unbind operations when removing a session
        - sched/cpufreq: Fix 32-bit math overflow
        - sched/core: Fix buffer overflow in cgroup2 property cpu.max
        - x86/mm: Don't leak kernel addresses
        - tools/power turbostat: return the exit status of a command
        - scsi: core: Also call destroy_rcu_head() for passthrough requests
        - scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID
        - perf stat: Fix --no-scale
        - perf list: Don't forget to drop the reference to the allocated thread_map
        - perf tools: Fix errors under optimization level '-Og'
        - perf config: Fix an error in the config template documentation
        - perf config: Fix a memory leak in collect_config()
        - perf build-id: Fix memory leak in print_sdt_events()
        - perf top: Fix error handling in cmd_top()
        - perf hist: Add missing map__put() in error case
        - perf map: Remove map from 'names' tree in __maps__remove()
        - perf maps: Purge all maps from the 'names' tree
        - perf top: Fix global-buffer-overflow issue
        - perf evsel: Free evsel->counts in perf_evsel__exit()
        - perf tests: Fix a memory leak of cpu_map object in the
          openat_syscall_event_on_all_cpus test
        - perf tests: Fix memory leak by expr__find_other() in test__expr()
        - perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test()
        - ACPI / utils: Drop reference in test for device presence
        - PM / Domains: Avoid a potential deadlock
        - blk-iolatency: #include "blk.h"
        - drm/exynos/mixer: fix MIXER shadow registry synchronisation code
        - irqchip/stm32: Don't clear rising/falling config registers at init
        - irqchip/stm32: Don't set rising configuration registers at init
        - irqchip/mbigen: Don't clear eventid when freeing an MSI
        - x86/hpet: Prevent potential NULL pointer dereference
        - x86/hyperv: Prevent potential NULL pointer dereference
        - x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors
        - drm/nouveau/debugfs: Fix check of pm_runtime_get_sync failure
        - iommu/vt-d: Check capability before disabling protected memory
        - iommu/vt-d: Save the right domain ID used by hardware
        - x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return
          an error
        - cifs: fix that return -EINVAL when do dedupe operation
        - fix incorrect error code mapping for OBJECTID_NOT_FOUND
        - cifs: Fix slab-out-of-bounds when tracing SMB tcon
        - x86/gart: Exclude GART aperture from kcore
        - ext4: prohibit fstrim in norecovery mode
        - lkdtm: Print real addresses
        - lkdtm: Add tests for NULL pointer dereference
        - drm/amdgpu: psp_ring_destroy cause psp->km_ring.ring_mem NULL
        - drm/panel: panel-innolux: set display off in innolux_panel_unprepare
        - crypto: axis - fix for recursive locking from bottom half
        - Revert "ACPI / EC: Remove old CLEAR_ON_RESUME quirk"
        - coresight: cpu-debug: Support for CA73 CPUs
        - PCI: Blacklist power management of Gigabyte X299 DESIGNARE EX PCIe ports
        - PCI/ASPM: Save LTR Capability for suspend/resume
        - f2fs: sync filesystem after roll-forward recovery
        - drm/nouveau/volt/gf117: fix speedo readout register
        - platform/x86: intel_pmc_core: Quirk to ignore XTAL shutdown
        - ARM: 8839/1: kprobe: make patch_lock a raw_spinlock_t
        - drm/amdkfd: use init_mqd function to allocate object for hid_mqd (CI)
        - appletalk: Fix use-after-free in atalk_proc_exit
        - cifs: return -ENODATA when deleting an xattr that does not exist
        - lib/div64.c: off by one in shift
        - rxrpc: Fix client call connect/disconnect race
        - f2fs: fix to dirty inode for i_mode recovery
        - f2fs: fix to use kvfree instead of kzfree
        - f2fs: fix to add refcount once page is tagged PG_private
        - include/linux/swap.h: use offsetof() instead of custom __swapoffset macro
        - bpf: fix use after free in bpf_evict_inode
        - IB/hfi1: Failed to drain send queue when QP is put into error state
        - paride/pf: Fix potential NULL pointer dereference
        - paride/pcd: Fix potential NULL pointer dereference and mem leak
        - Linux 5.0.9
    
      * crashdump fails on HiSilicon D06 (LP: #1828868)
        - iommu/arm-smmu-v3: Don't disable SMMU in kdump kernel
    
      * Eletrical noise occurred when external headset enter powersaving mode on a
        DEll machine (LP: #1828798)
        - ALSA: hda/realtek - Fixup headphone noise via runtime suspend
    
      * [18.04/18.10] File libperf-jvmti.so is missing in linux-tools-common deb on
        Ubuntu (LP: #1761379)
        - [Packaging] Support building libperf-jvmti.so
    
      * ethtool identify command doesn't blink LED on Hi1620 NICs (LP: #1829306)
        - net: phy: marvell: add new default led configure for m88e151x
    
      * Add support to Comet Lake LPSS (LP: #1830175)
        - mfd: intel-lpss: Add Intel Comet Lake PCI IDs
    
      * Reduce NAPI weight in hns driver from 256 to 64 (LP: #1830587)
        - net: hns: Use NAPI_POLL_WEIGHT for hns driver
    
     -- Stefan Bader <email address hidden>  Tue, 02 Jul 2019 12:25:52 +0200
  • linux (5.0.0-20.21) disco; urgency=medium
    
      * linux: 5.0.0-20.21 -proposed tracker (LP: #1833934)
    
      * CVE-2019-11479
        - SAUCE: tcp: add tcp_min_snd_mss sysctl
        - SAUCE: tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
    
      * Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard
        manipulation (LP: #1831638) // CVE-2019-11478
        - tcp: refine memory limit test in tcp_fragment()
    
     -- Stefan Bader <email address hidden>  Mon, 24 Jun 2019 10:09:02 +0200
  • linux (5.0.0-19.20) disco; urgency=medium
    
      * CVE-2019-12817
        - SAUCE: powerpc/mm/64s/hash: Reallocate context ids on fork
    
     -- Stefan Bader <email address hidden>  Wed, 19 Jun 2019 14:45:13 +0200
  • linux (5.0.0-18.19) disco; urgency=medium
    
      * linux: 5.0.0-18.19 -proposed tracker (LP: #1832492)
    
      * CVE-2019-11479
        - SAUCE: tcp: add tcp_min_snd_mss sysctl
        - SAUCE: tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
    
      * CVE-2019-11884
        - Bluetooth: hidp: fix buffer overflow
    
      * TPM module can not initial (LP: #1826142)
        - spi: Optionally use GPIO descriptors for CS GPIOs
        - spi: dw: Convert to use CS GPIO descriptors
        - spi: dw: fix warning unused variable 'ret'
        - spi: Support high CS when using descriptors
        - spi: dw: Fix default polarity of native chipselect
        - gpio: of: Fix logic inversion
        - spi: Add missing error handling for CS GPIOs
    
      * CVE-2018-12126 // CVE-2018-12127 // CVE-2018-12130 // CVE-2019-11091
        - SAUCE: Synchronize MDS mitigations with upstream
        - Documentation: Correct the possible MDS sysfs values
        - x86/speculation/mds: Fix documentation typo
    
      * CVE-2019-11091
        - x86/mds: Add MDSUM variant to the MDS documentation
    
      * Regression for ubuntu_kernel_selftests [net] ubuntu_bpf test case fails to
        build on disco (LP: #1829812)
        - tools: bpftool: add basic probe capability, probe syscall availability
        - tools: bpftool: add probes for eBPF program types
    
      * POSIX fix for ftrace test in ubuntu_kernel_selftests (LP: #1828995)
        - selftests/ftrace: Replace \e with \033
        - selftests/ftrace: Replace echo -e with printf
    
      * Disco update: 5.0.12 upstream stable release (LP: #1830934)
        - selinux: use kernel linux/socket.h for genheaders and mdp
        - Revert "ACPICA: Clear status of GPEs before enabling them"
        - drm/i915: Do not enable FEC without DSC
        - mm: make page ref count overflow check tighter and more explicit
        - mm: add 'try_get_page()' helper function
        - mm: prevent get_user_pages() from overflowing page refcount
        - fs: prevent page refcount overflow in pipe_buf_get
        - arm64: dts: renesas: r8a77990: Fix SCIF5 DMA channels
        - ARM: dts: bcm283x: Fix hdmi hpd gpio pull
        - s390: limit brk randomization to 32MB
        - mt76x02: fix hdr pointer in write txwi for USB
        - mt76: mt76x2: fix external LNA gain settings
        - mt76: mt76x2: fix 2.4 GHz channel gain settings
        - net: ieee802154: fix a potential NULL pointer dereference
        - ieee802154: hwsim: propagate genlmsg_reply return code
        - Btrfs: fix file corruption after snapshotting due to mix of buffered/DIO
          writes
        - net: stmmac: don't set own bit too early for jumbo frames
        - net: stmmac: fix jumbo frame sending with non-linear skbs
        - qlcnic: Avoid potential NULL pointer dereference
        - xsk: fix umem memory leak on cleanup
        - staging: axis-fifo: add CONFIG_OF dependency
        - staging, mt7621-pci: fix build without pci support
        - netfilter: nft_set_rbtree: check for inactive element after flag mismatch
        - netfilter: bridge: set skb transport_header before entering
          NF_INET_PRE_ROUTING
        - netfilter: fix NETFILTER_XT_TARGET_TEE dependencies
        - netfilter: ip6t_srh: fix NULL pointer dereferences
        - s390/qeth: fix race when initializing the IP address table
        - ARM: imx51: fix a leaked reference by adding missing of_node_put
        - sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init()
        - serial: ar933x_uart: Fix build failure with disabled console
        - KVM: arm64: Reset the PMU in preemptible context
        - arm64: KVM: Always set ICH_HCR_EL2.EN if GICv4 is enabled
        - KVM: arm/arm64: vgic-its: Take the srcu lock when writing to guest memory
        - KVM: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots
        - usb: dwc3: pci: add support for Comet Lake PCH ID
        - usb: gadget: net2280: Fix overrun of OUT messages
        - usb: gadget: net2280: Fix net2280_dequeue()
        - usb: gadget: net2272: Fix net2272_dequeue()
        - ARM: dts: pfla02: increase phy reset duration
        - i2c: i801: Add support for Intel Comet Lake
        - KVM: arm/arm64: Fix handling of stage2 huge mappings
        - net: ks8851: Dequeue RX packets explicitly
        - net: ks8851: Reassert reset pin if chip ID check fails
        - net: ks8851: Delay requesting IRQ until opened
        - net: ks8851: Set initial carrier state to down
        - staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc
        - staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference
        - staging: rtl8712: uninitialized memory in read_bbreg_hdl()
        - staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc
        - net: phy: Add DP83825I to the DP83822 driver
        - net: macb: Add null check for PCLK and HCLK
        - net/sched: don't dereference a->goto_chain to read the chain index
        - ARM: dts: imx6qdl: Fix typo in imx6qdl-icore-rqs.dtsi
        - drm/tegra: hub: Fix dereference before check
        - NFS: Fix a typo in nfs_init_timeout_values()
        - net: xilinx: fix possible object reference leak
        - net: ibm: fix possible object reference leak
        - net: ethernet: ti: fix possible object reference leak
        - drm: Fix drm_release() and device unplug
        - gpio: aspeed: fix a potential NULL pointer dereference
        - drm/meson: Fix invalid pointer in meson_drv_unbind()
        - drm/meson: Uninstall IRQ handler
        - ARM: davinci: fix build failure with allnoconfig
        - sbitmap: order READ/WRITE freed instance and setting clear bit
        - staging: vc04_services: Fix an error code in vchiq_probe()
        - scsi: mpt3sas: Fix kernel panic during expander reset
        - scsi: aacraid: Insure we don't access PCIe space during AER/EEH
        - scsi: qla4xxx: fix a potential NULL pointer dereference
        - usb: usb251xb: fix to avoid potential NULL pointer dereference
        - leds: trigger: netdev: fix refcnt leak on interface rename
        - SUNRPC: fix uninitialized variable warning
        - x86/realmode: Don't leak the trampoline kernel address
        - usb: u132-hcd: fix resource leak
        - ceph: fix use-after-free on symlink traversal
        - scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN
        - x86/mm: Don't exceed the valid physical address space
        - libata: fix using DMA buffers on stack
        - kbuild: skip parsing pre sub-make code for recursion
        - afs: Fix StoreData op marshalling
        - gpio: of: Check propname before applying "cs-gpios" quirks
        - gpio: of: Check for "spi-cs-high" in child instead of parent node
        - KVM: nVMX: Do not inherit quadrant and invalid for the root shadow EPT
        - KVM: SVM: Workaround errata#1096 (insn_len maybe zero on SMAP violation)
        - kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs
        - x86/kvm/hyper-v: avoid spurious pending stimer on vCPU init
        - KVM: selftests: assert on exit reason in CR4/cpuid sync test
        - KVM: selftests: explicitly disable PIE for tests
        - KVM: selftests: disable stack protector for all KVM tests
        - KVM: selftests: complete IO before migrating guest state
        - gpio: of: Fix of_gpiochip_add() error path
        - nvme-multipath: relax ANA state check
        - nvmet: fix building bvec from sg list
        - nvmet: fix error flow during ns enable
        - perf cs-etm: Add missing case value
        - perf machine: Update kernel map address and re-order properly
        - kconfig/[mn]conf: handle backspace (^H) key
        - iommu/amd: Reserve exclusion range in iova-domain
        - kasan: fix variable 'tag' set but not used warning
        - ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK
        - leds: pca9532: fix a potential NULL pointer dereference
        - leds: trigger: netdev: use memcpy in device_name_store
        - Linux 5.0.12
        - [Config] Document drop of axis-fifo for amd64/i386
    
      * Disco update: 5.0.11 upstream stable release (LP: #1830929)
        - netfilter: nf_tables: bogus EBUSY when deleting set after flush
        - netfilter: nf_tables: bogus EBUSY in helper removal from transaction
        - intel_th: gth: Fix an off-by-one in output unassigning
        - powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64
        - ALSA: hda/realtek - Move to ACT_INIT state
        - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
        - block, bfq: fix use after free in bfq_bfqq_expire
        - cifs: fix memory leak in SMB2_read
        - cifs: fix page reference leak with readv/writev
        - cifs: do not attempt cifs operation on smb2+ rename error
        - tracing: Fix a memory leak by early error exit in trace_pid_write()
        - tracing: Fix buffer_ref pipe ops
        - crypto: xts - Fix atomic sleep when walking skcipher
        - crypto: lrw - Fix atomic sleep when walking skcipher
        - gpio: eic: sprd: Fix incorrect irq type setting for the sync EIC
        - zram: pass down the bvec we need to read into in the work struct
        - lib/Kconfig.debug: fix build error without CONFIG_BLOCK
        - MIPS: scall64-o32: Fix indirect syscall number load
        - trace: Fix preempt_enable_no_resched() abuse
        - mm: do not boost watermarks to avoid fragmentation for the DISCONTIG memory
          model
        - arm64: mm: Ensure tail of unaligned initrd is reserved
        - IB/rdmavt: Fix frwr memory registration
        - RDMA/mlx5: Do not allow the user to write to the clock page
        - RDMA/mlx5: Use rdma_user_map_io for mapping BAR pages
        - RDMA/ucontext: Fix regression with disassociate
        - sched/numa: Fix a possible divide-by-zero
        - ceph: only use d_name directly when parent is locked
        - ceph: ensure d_name stability in ceph_dentry_hash()
        - ceph: fix ci->i_head_snapc leak
        - nfsd: Don't release the callback slot unless it was actually held
        - nfsd: wake waiters blocked on file_lock before deleting it
        - nfsd: wake blocked file lock waiters before sending callback
        - sunrpc: don't mark uninitialised items as VALID.
        - perf/x86/intel: Update KBL Package C-state events to also include
          PC8/PC9/PC10 counters
        - Input: synaptics-rmi4 - write config register values to the right offset
        - dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid
        - dmaengine: sh: rcar-dmac: Fix glitch in dmaengine_tx_status
        - dmaengine: mediatek-cqdma: fix wrong register usage in mtk_cqdma_start
        - ARM: 8857/1: efi: enable CP15 DMB instructions before cleaning the cache
        - powerpc/mm/radix: Make Radix require HUGETLB_PAGE
        - drm/vc4: Fix memory leak during gpu reset.
        - drm/ttm: fix re-init of global structures
        - drm/vc4: Fix compilation error reported by kbuild test bot
        - ext4: fix some error pointer dereferences
        - loop: do not print warn message if partition scan is successful
        - tipc: handle the err returned from cmd header function
        - slip: make slhc_free() silently accept an error pointer
        - workqueue: Try to catch flush_work() without INIT_WORK().
        - sched/deadline: Correctly handle active 0-lag timers
        - mac80211_hwsim: calculate if_combination.max_interfaces
        - NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
        - netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
        - fm10k: Fix a potential NULL pointer dereference
        - tipc: check bearer name with right length in tipc_nl_compat_bearer_enable
        - tipc: check link name with right length in tipc_nl_compat_link_set
        - net: netrom: Fix error cleanup path of nr_proto_init
        - net/rds: Check address length before reading address family
        - rxrpc: fix race condition in rxrpc_input_packet()
        - pin iocb through aio.
        - aio: fold lookup_kiocb() into its sole caller
        - aio: keep io_event in aio_kiocb
        - aio: store event at final iocb_put()
        - Fix aio_poll() races
        - x86, retpolines: Raise limit for generating indirect calls from switch-case
        - x86/retpolines: Disable switch jump tables when retpolines are enabled
        - rdma: fix build errors on s390 and MIPS due to bad ZERO_PAGE use
        - ipv4: add sanity checks in ipv4_link_failure()
        - ipv4: set the tcp_min_rtt_wlen range from 0 to one day
        - mlxsw: spectrum: Fix autoneg status in ethtool
        - net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query
        - net: rds: exchange of 8K and 1M pool
        - net/rose: fix unbound loop in rose_loopback_timer()
        - net: stmmac: move stmmac_check_ether_addr() to driver probe
        - net/tls: fix refcount adjustment in fallback
        - stmmac: pci: Adjust IOT2000 matching
        - team: fix possible recursive locking when add slaves
        - net: socionext: replace napi_alloc_frag with the netdev variant on init
        - net/ncsi: handle overflow when incrementing mac address
        - mlxsw: pci: Reincrease PCI reset timeout
        - mlxsw: spectrum: Put MC TCs into DWRR mode
        - net/mlx5e: Fix the max MTU check in case of XDP
        - net/mlx5e: Fix use-after-free after xdp_return_frame
        - net/tls: avoid potential deadlock in tls_set_device_offload_rx()
        - net/tls: don't leak IV and record seq when offload fails
        - Linux 5.0.11
    
      * Disco update: 5.0.10 upstream stable release (LP: #1830922)
        - bonding: fix event handling for stacked bonds
        - failover: allow name change on IFF_UP slave interfaces
        - net: atm: Fix potential Spectre v1 vulnerabilities
        - net: bridge: fix per-port af_packet sockets
        - net: bridge: multicast: use rcu to access port list from
          br_multicast_start_querier
        - net: fec: manage ahb clock in runtime pm
        - net: Fix missing meta data in skb with vlan packet
        - net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv
        - tcp: tcp_grow_window() needs to respect tcp_space()
        - team: set slave to promisc if team is already in promisc mode
        - tipc: missing entries in name table of publications
        - vhost: reject zero size iova range
        - ipv4: recompile ip options in ipv4_link_failure
        - ipv4: ensure rcu_read_lock() in ipv4_link_failure()
        - mlxsw: spectrum_switchdev: Add MDB entries in prepare phase
        - mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue
        - mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue
        - mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue
        - mlxsw: spectrum_router: Do not check VRF MAC address
        - net: thunderx: raise XDP MTU to 1508
        - net: thunderx: don't allow jumbo frames with XDP
        - net/tls: fix the IV leaks
        - net/tls: don't leak partially sent record in device mode
        - net: strparser: partially revert "strparser: Call skb_unclone conditionally"
        - net/tls: fix build without CONFIG_TLS_DEVICE
        - net: bridge: fix netlink export of vlan_stats_per_port option
        - net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded
        - net/mlx5e: Protect against non-uplink representor for encap
        - net/mlx5e: Switch to Toeplitz RSS hash by default
        - net/mlx5e: Rx, Fixup skb checksum for packets with tail padding
        - net/mlx5e: Rx, Check ip headers sanity
        - Revert "net/mlx5e: Enable reporting checksum unnecessary also for L3
          packets"
        - net/mlx5: FPGA, tls, hold rcu read lock a bit longer
        - net/tls: prevent bad memory access in tls_is_sk_tx_device_offloaded()
        - net/mlx5: FPGA, tls, idr remove on flow delete
        - route: Avoid crash from dereferencing NULL rt->from
        - nfp: flower: replace CFI with vlan present
        - nfp: flower: remove vlan CFI bit from push vlan action
        - sch_cake: Use tc_skb_protocol() helper for getting packet protocol
        - sch_cake: Make sure we can write the IP header before changing DSCP bits
        - NFC: nci: Add some bounds checking in nci_hci_cmd_received()
        - nfc: nci: Potential off by one in ->pipes[] array
        - sch_cake: Simplify logic in cake_select_tin()
        - CIFS: keep FileInfo handle live during oplock break
        - cifs: Fix lease buffer length error
        - cifs: Fix use-after-free in SMB2_write
        - cifs: Fix use-after-free in SMB2_read
        - cifs: fix handle leak in smb2_query_symlink()
        - fs/dax: Deposit pagetable even when installing zero page
        - KVM: x86: Don't clear EFER during SMM transitions for 32-bit vCPU
        - KVM: x86: svm: make sure NMI is injected after nmi_singlestep
        - Staging: iio: meter: fixed typo
        - staging: iio: ad7192: Fix ad7193 channel address
        - iio: gyro: mpu3050: fix chip ID reading
        - iio/gyro/bmg160: Use millidegrees for temperature scale
        - iio:chemical:bme680: Fix, report temperature in millidegrees
        - iio:chemical:bme680: Fix SPI read interface
        - iio: cros_ec: Fix the maths for gyro scale calculation
        - iio: ad_sigma_delta: select channel when reading register
        - iio: dac: mcp4725: add missing powerdown bits in store eeprom
        - iio: Fix scan mask selection
        - iio: adc: at91: disable adc channel interrupt in timeout case
        - iio: core: fix a possible circular locking dependency
        - io: accel: kxcjk1013: restore the range after resume.
        - staging: most: core: use device description as name
        - staging: comedi: vmk80xx: Fix use of uninitialized semaphore
        - staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf
        - staging: comedi: ni_usb6501: Fix use of uninitialized mutex
        - staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf
        - ALSA: core: Fix card races between register and disconnect
        - Input: elan_i2c - add hardware ID for multiple Lenovo laptops
        - serial: sh-sci: Fix HSCIF RX sampling point adjustment
        - serial: sh-sci: Fix HSCIF RX sampling point calculation
        - vt: fix cursor when clearing the screen
        - scsi: core: set result when the command cannot be dispatched
        - Revert "scsi: fcoe: clear FC_RP_STARTED flags when receiving a LOGO"
        - i3c: dw: Fix dw_i3c_master_disable controller by using correct mask
        - i3c: Fix the verification of random PID
        - Revert "svm: Fix AVIC incomplete IPI emulation"
        - coredump: fix race condition between mmget_not_zero()/get_task_mm() and core
          dumping
        - x86/kvm: move kvm_load/put_guest_xcr0 into atomic context
        - ipmi: fix sleep-in-atomic in free_user at cleanup SRCU user->release_barrier
        - crypto: x86/poly1305 - fix overflow during partial reduction
        - drm/ttm: fix out-of-bounds read in ttm_put_pages() v2
        - arm64: futex: Restore oldval initialization to work around buggy compilers
        - x86/kprobes: Verify stack frame on kretprobe
        - kprobes: Mark ftrace mcount handler functions nokprobe
        - x86/kprobes: Avoid kretprobe recursion bug
        - kprobes: Fix error check when reusing optimized probes
        - rt2x00: do not increment sequence number while re-transmitting
        - mac80211: do not call driver wake_tx_queue op during reconfig
        - s390/mem_detect: Use IS_ENABLED(CONFIG_BLK_DEV_INITRD)
        - drm/amdgpu/gmc9: fix VM_L2_CNTL3 programming
        - perf/x86/amd: Add event map for AMD Family 17h
        - x86/cpu/bugs: Use __initconst for 'const' init data
        - perf/x86: Fix incorrect PEBS_REGS
        - x86/speculation: Prevent deadlock on ssb_state::lock
        - timers/sched_clock: Prevent generic sched_clock wrap caused by tick_freeze()
        - nfit/ars: Remove ars_start_flags
        - nfit/ars: Introduce scrub_flags
        - nfit/ars: Allow root to busy-poll the ARS state machine
        - nfit/ars: Avoid stale ARS results
        - tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
        - tpm: Fix the type of the return value in calc_tpm2_event_size()
        - Revert "kbuild: use -Oz instead of -Os when using clang"
        - sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup
        - tpm: fix an invalid condition in tpm_common_poll
        - mt76x02: avoid status_list.lock and sta->rate_ctrl_lock dependency
        - device_cgroup: fix RCU imbalance in error case
        - perf/ring_buffer: Fix AUX record suppression
        - mm/memory_hotplug: do not unlock after failing to take the
          device_hotplug_lock
        - mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y
          CONFIG_SMP=n
        - ALSA: info: Fix racy addition/deletion of nodes
        - percpu: stop printing kernel addresses
        - kernel/sysctl.c: fix out-of-bounds access when setting file-max
        - Linux 5.0.10
    
      * Disco update: 5.0.9 upstream stable release (LP: #1830906)
        - ARC: u-boot args: check that magic number is correct
        - arc: hsdk_defconfig: Enable CONFIG_BLK_DEV_RAM
        - perf/core: Restore mmap record type correctly
        - mips: bcm47xx: Enable USB power on Netgear WNDR3400v2
        - ext4: avoid panic during forced reboot
        - ext4: add missing brelse() in add_new_gdb_meta_bg()
        - ext4: report real fs size after failed resize
        - ALSA: echoaudio: add a check for ioremap_nocache
        - ALSA: sb8: add a check for request_region
        - auxdisplay: hd44780: Fix memory leak on ->remove()
        - drm/udl: use drm_gem_object_put_unlocked.
        - IB/mlx4: Fix race condition between catas error reset and aliasguid flows
        - i40iw: Avoid panic when handling the inetdev event
        - mmc: davinci: remove extraneous __init annotation
        - ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and
          declaration
        - paride/pf: cleanup queues when detection fails
        - paride/pcd: cleanup queues when detection fails
        - thermal/intel_powerclamp: fix __percpu declaration of worker_data
        - thermal: samsung: Fix incorrect check after code merge
        - thermal: bcm2835: Fix crash in bcm2835_thermal_debugfs
        - thermal/int340x_thermal: Add additional UUIDs
        - thermal/int340x_thermal: fix mode setting
        - thermal/intel_powerclamp: fix truncated kthread name
        - scsi: iscsi: flush running unbind operations when removing a session
        - sched/cpufreq: Fix 32-bit math overflow
        - sched/core: Fix buffer overflow in cgroup2 property cpu.max
        - x86/mm: Don't leak kernel addresses
        - tools/power turbostat: return the exit status of a command
        - scsi: core: Also call destroy_rcu_head() for passthrough requests
        - scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID
        - perf stat: Fix --no-scale
        - perf list: Don't forget to drop the reference to the allocated thread_map
        - perf tools: Fix errors under optimization level '-Og'
        - perf config: Fix an error in the config template documentation
        - perf config: Fix a memory leak in collect_config()
        - perf build-id: Fix memory leak in print_sdt_events()
        - perf top: Fix error handling in cmd_top()
        - perf hist: Add missing map__put() in error case
        - perf map: Remove map from 'names' tree in __maps__remove()
        - perf maps: Purge all maps from the 'names' tree
        - perf top: Fix global-buffer-overflow issue
        - perf evsel: Free evsel->counts in perf_evsel__exit()
        - perf tests: Fix a memory leak of cpu_map object in the
          openat_syscall_event_on_all_cpus test
        - perf tests: Fix memory leak by expr__find_other() in test__expr()
        - perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test()
        - ACPI / utils: Drop reference in test for device presence
        - PM / Domains: Avoid a potential deadlock
        - blk-iolatency: #include "blk.h"
        - drm/exynos/mixer: fix MIXER shadow registry synchronisation code
        - irqchip/stm32: Don't clear rising/falling config registers at init
        - irqchip/stm32: Don't set rising configuration registers at init
        - irqchip/mbigen: Don't clear eventid when freeing an MSI
        - x86/hpet: Prevent potential NULL pointer dereference
        - x86/hyperv: Prevent potential NULL pointer dereference
        - x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors
        - drm/nouveau/debugfs: Fix check of pm_runtime_get_sync failure
        - iommu/vt-d: Check capability before disabling protected memory
        - iommu/vt-d: Save the right domain ID used by hardware
        - x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return
          an error
        - cifs: fix that return -EINVAL when do dedupe operation
        - fix incorrect error code mapping for OBJECTID_NOT_FOUND
        - cifs: Fix slab-out-of-bounds when tracing SMB tcon
        - x86/gart: Exclude GART aperture from kcore
        - ext4: prohibit fstrim in norecovery mode
        - lkdtm: Print real addresses
        - lkdtm: Add tests for NULL pointer dereference
        - drm/amdgpu: psp_ring_destroy cause psp->km_ring.ring_mem NULL
        - drm/panel: panel-innolux: set display off in innolux_panel_unprepare
        - crypto: axis - fix for recursive locking from bottom half
        - Revert "ACPI / EC: Remove old CLEAR_ON_RESUME quirk"
        - coresight: cpu-debug: Support for CA73 CPUs
        - PCI: Blacklist power management of Gigabyte X299 DESIGNARE EX PCIe ports
        - PCI/ASPM: Save LTR Capability for suspend/resume
        - f2fs: sync filesystem after roll-forward recovery
        - drm/nouveau/volt/gf117: fix speedo readout register
        - platform/x86: intel_pmc_core: Quirk to ignore XTAL shutdown
        - ARM: 8839/1: kprobe: make patch_lock a raw_spinlock_t
        - drm/amdkfd: use init_mqd function to allocate object for hid_mqd (CI)
        - appletalk: Fix use-after-free in atalk_proc_exit
        - cifs: return -ENODATA when deleting an xattr that does not exist
        - lib/div64.c: off by one in shift
        - rxrpc: Fix client call connect/disconnect race
        - f2fs: fix to dirty inode for i_mode recovery
        - f2fs: fix to use kvfree instead of kzfree
        - f2fs: fix to add refcount once page is tagged PG_private
        - include/linux/swap.h: use offsetof() instead of custom __swapoffset macro
        - bpf: fix use after free in bpf_evict_inode
        - IB/hfi1: Failed to drain send queue when QP is put into error state
        - paride/pf: Fix potential NULL pointer dereference
        - paride/pcd: Fix potential NULL pointer dereference and mem leak
        - Linux 5.0.9
    
      * crashdump fails on HiSilicon D06 (LP: #1828868)
        - iommu/arm-smmu-v3: Don't disable SMMU in kdump kernel
    
      * Eletrical noise occurred when external headset enter powersaving mode on a
        DEll machine (LP: #1828798)
        - ALSA: hda/realtek - Fixup headphone noise via runtime suspend
    
      * [18.04/18.10] File libperf-jvmti.so is missing in linux-tools-common deb on
        Ubuntu (LP: #1761379)
        - [Packaging] Support building libperf-jvmti.so
    
      * ethtool identify command doesn't blink LED on Hi1620 NICs (LP: #1829306)
        - net: phy: marvell: add new default led configure for m88e151x
    
      * Add support to Comet Lake LPSS (LP: #1830175)
        - mfd: intel-lpss: Add Intel Comet Lake PCI IDs
    
      * Reduce NAPI weight in hns driver from 256 to 64 (LP: #1830587)
        - net: hns: Use NAPI_POLL_WEIGHT for hns driver
    
     -- Stefan Bader <email address hidden>  Wed, 12 Jun 2019 19:29:09 +0200
  • linux (5.0.0-17.18) disco; urgency=medium
    
      * Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard
        manipulation (LP: #1831638)
        - SAUCE: tcp: tcp_fragment() should apply sane memory limits
    
      * Remote denial of service (system crash) caused by integer overflow in TCP
        SACK handling (LP: #1831637)
        - SAUCE: tcp: limit payload size of sacked skbs
    
     -- Stefan Bader <email address hidden>  Tue, 04 Jun 2019 17:22:50 +0200
  • linux (5.0.0-16.17) disco; urgency=medium
    
      * linux: 5.0.0-16.17 -proposed tracker (LP: #1829173)
    
      * shiftfs: lock security sensitive superblock flags (LP: #1827122)
        - SAUCE: shiftfs: lock down certain superblock flags
    
      * Please package libbpf (which is done out of the kernel src) in Debian [for
        19.10] (LP: #1826410)
        - SAUCE: tools -- fix add ability to disable libbfd
    
      * Disco update: 5.0.8 upstream stable release (LP: #1828415)
        - drm/i915/gvt: do not let pin count of shadow mm go negative
        - kbuild: pkg: use -f $(srctree)/Makefile to recurse to top Makefile
        - netfilter: nft_compat: use .release_ops and remove list of extension
        - netfilter: nf_tables: use-after-free in dynamic operations
        - netfilter: nf_tables: add missing ->release_ops() in error path of newrule()
        - hv_netvsc: Fix unwanted wakeup after tx_disable
        - ibmvnic: Fix completion structure initialization
        - ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
        - ipv6: Fix dangling pointer when ipv6 fragment
        - ipv6: sit: reset ip header pointer in ipip6_rcv
        - kcm: switch order of device registration to fix a crash
        - net: ethtool: not call vzalloc for zero sized memory request
        - net-gro: Fix GRO flush when receiving a GSO packet.
        - net/mlx5: Decrease default mr cache size
        - netns: provide pure entropy for net_hash_mix()
        - net: rds: force to destroy connection if t_sock is NULL in
          rds_tcp_kill_sock().
        - net/sched: act_sample: fix divide by zero in the traffic path
        - net/sched: fix ->get helper of the matchall cls
        - qmi_wwan: add Olicard 600
        - r8169: disable ASPM again
        - sctp: initialize _pad of sockaddr_in before copying to user memory
        - tcp: Ensure DCTCP reacts to losses
        - tcp: fix a potential NULL pointer dereference in tcp_sk_exit
        - vrf: check accept_source_route on the original netdevice
        - net/mlx5e: Fix error handling when refreshing TIRs
        - net/mlx5e: Add a lock on tir list
        - nfp: validate the return code from dev_queue_xmit()
        - nfp: disable netpoll on representors
        - bnxt_en: Improve RX consumer index validity check.
        - bnxt_en: Reset device on RX buffer errors.
        - net: ip_gre: fix possible use-after-free in erspan_rcv
        - net: ip6_gre: fix possible use-after-free in ip6erspan_rcv
        - net: bridge: always clear mcast matching struct on reports and leaves
        - net: thunderx: fix NULL pointer dereference in nicvf_open/nicvf_stop
        - net: vrf: Fix ping failed when vrf mtu is set to 0
        - net: core: netif_receive_skb_list: unlist skb before passing to pt->func
        - r8169: disable default rx interrupt coalescing on RTL8168
        - net: mlx5: Add a missing check on idr_find, free buf
        - net/mlx5e: Update xoff formula
        - net/mlx5e: Update xon formula
        - kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD
        - lib/string.c: implement a basic bcmp
        - Revert "clk: meson: clean-up clock registration"
        - tty: mark Siemens R3964 line discipline as BROKEN
        - [Config]: remove CONFIG_R3964
        - [Config]: add CONFIG_LDISC_AUTOLOAD=y
        - tty: ldisc: add sysctl to prevent autoloading of ldiscs
        - hwmon: (w83773g) Select REGMAP_I2C to fix build error
        - hwmon: (occ) Fix power sensor indexing
        - SMB3: Allow persistent handle timeout to be configurable on mount
        - HID: logitech: Handle 0 scroll events for the m560
        - ACPICA: Clear status of GPEs before enabling them
        - ACPICA: Namespace: remove address node from global list after method
          termination
        - ALSA: seq: Fix OOB-reads from strlcpy
        - ALSA: hda/realtek: Enable headset MIC of Acer TravelMate B114-21 with ALC233
        - ALSA: hda/realtek - Add quirk for Tuxedo XC 1509
        - ALSA: xen-front: Do not use stream buffer size before it is set
        - mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd()
        - arm64: dts: rockchip: fix rk3328 sdmmc0 write errors
        - mmc: alcor: don't write data before command has completed
        - mmc: sdhci-omap: Don't finish_mrq() on a command error during tuning
        - parisc: Detect QEMU earlier in boot process
        - parisc: regs_return_value() should return gpr28
        - parisc: also set iaoq_b in instruction_pointer_set()
        - alarmtimer: Return correct remaining time
        - drm/i915/gvt: do not deliver a workload if its creation fails
        - drm/sun4i: DW HDMI: Lower max. supported rate for H6
        - drm/udl: add a release method and delay modeset teardown
        - kvm: svm: fix potential get_num_contig_pages overflow
        - include/linux/bitrev.h: fix constant bitrev
        - mm: writeback: use exact memcg dirty counts
        - ASoC: intel: Fix crash at suspend/resume after failed codec registration
        - ASoC: fsl_esai: fix channel swap issue when stream starts
        - Btrfs: do not allow trimming when a fs is mounted with the nologreplay
          option
        - btrfs: prop: fix zstd compression parameter validation
        - btrfs: prop: fix vanished compression property after failed set
        - riscv: Fix syscall_get_arguments() and syscall_set_arguments()
        - block: Revert v5.0 blk_mq_request_issue_directly() changes
        - block: do not leak memory in bio_copy_user_iov()
        - block: fix the return errno for direct IO
        - genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
        - genirq: Initialize request_mutex if CONFIG_SPARSE_IRQ=n
        - virtio: Honour 'may_reduce_num' in vring_create_virtqueue
        - ARM: OMAP1: ams-delta: Fix broken GPIO ID allocation
        - ARM: dts: rockchip: fix rk3288 cpu opp node reference
        - ARM: dts: am335x-evmsk: Correct the regulators for the audio codec
        - ARM: dts: am335x-evm: Correct the regulators for the audio codec
        - ARM: dts: rockchip: Fix SD card detection on rk3288-tinker
        - ARM: dts: at91: Fix typo in ISC_D0 on PC9
        - arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
        - arm64: dts: rockchip: Fix vcc_host1_5v GPIO polarity on rk3328-rock64
        - arm64: dts: rockchip: fix rk3328 rgmii high tx error rate
        - arm64: backtrace: Don't bother trying to unwind the userspace stack
        - IB/mlx5: Reset access mask when looping inside page fault handler
        - xen: Prevent buffer overflow in privcmd ioctl
        - sched/fair: Do not re-read ->h_load_next during hierarchical load
          calculation
        - xtensa: fix return_address
        - csky: Fix syscall_get_arguments() and syscall_set_arguments()
        - x86/asm: Remove dead __GNUC__ conditionals
        - x86/asm: Use stricter assembly constraints in bitops
        - x86/perf/amd: Resolve race condition when disabling PMC
        - x86/perf/amd: Resolve NMI latency issues for active PMCs
        - x86/perf/amd: Remove need to check "running" bit in NMI handler
        - PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
        - PCI: pciehp: Ignore Link State Changes after powering off a slot
        - xprtrdma: Fix helper that drains the transport
        - powerpc/64s/radix: Fix radix segment exception handling
        - dm integrity: change memcmp to strncmp in dm_integrity_ctr
        - dm: revert 8f50e358153d ("dm: limit the max bio size as BIO_MAX_PAGES *
          PAGE_SIZE")
        - dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors
        - dm: disable DISCARD if the underlying storage no longer supports it
        - dm integrity: fix deadlock with overlapping I/O
        - drm/virtio: do NOT reuse resource ids
        - Linux 5.0.8
    
      * Disco update: 5.0.7 upstream stable release (LP: #1828410)
        - ext4: cleanup bh release code in ext4_ind_remove_space()
        - CIFS: fix POSIX lock leak and invalid ptr deref
        - nvme-fc: fix numa_node when dev is null
        - nvme-loop: init nvmet_ctrl fatal_err_work when allocate
        - h8300: use cc-cross-prefix instead of hardcoding h8300-unknown-linux-
        - f2fs: fix to adapt small inline xattr space in __find_inline_xattr()
        - f2fs: fix to avoid deadlock in f2fs_read_inline_dir()
        - tracing: kdb: Fix ftdump to not sleep
        - net/mlx5e: Fix access to non-existing receive queue
        - net/mlx5: Avoid panic when setting vport rate
        - net/mlx5: Avoid panic when setting vport mac, getting vport config
        - xsk: fix to reject invalid flags in xsk_bind
        - clk: ti: clkctrl: Fix clkdm_name regression for TI_CLK_CLKCTRL_COMPAT
        - gpio: gpio-omap: fix level interrupt idling
        - include/linux/relay.h: fix percpu annotation in struct rchan
        - sysctl: handle overflow for file-max
        - net: stmmac: Avoid sometimes uninitialized Clang warnings
        - enic: fix build warning without CONFIG_CPUMASK_OFFSTACK
        - libbpf: force fixdep compilation at the start of the build
        - iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver
        - x86/hyperv: Fix kernel panic when kexec on HyperV
        - perf c2c: Fix c2c report for empty numa node
        - mm/sparse: fix a bad comparison
        - mm/cma.c: cma_declare_contiguous: correct err handling
        - mm/page_ext.c: fix an imbalance with kmemleak
        - mm, swap: bounds check swap_info array accesses to avoid NULL derefs
        - docs/core-api/mm: fix user memory accessors formatting
        - mm,oom: don't kill global init via memory.oom.group
        - memcg: killed threads should not invoke memcg OOM killer
        - mm, mempolicy: fix uninit memory access
        - mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512!
        - mm/slab.c: kmemleak no scan alien caches
        - ocfs2: fix a panic problem caused by o2cb_ctl
        - f2fs: do not use mutex lock in atomic context
        - f2fs: fix to data block override node segment by mistake
        - fs/file.c: initialize init_files.resize_wait
        - page_poison: play nicely with KASAN
        - kasan: fix kasan_check_read/write definitions
        - cifs: use correct format characters
        - dm thin: add sanity checks to thin-pool and external snapshot creation
        - f2fs: fix to check inline_xattr_size boundary correctly
        - cifs: Accept validate negotiate if server return NT_STATUS_NOT_SUPPORTED
        - cifs: Fix NULL pointer dereference of devname
        - perf beauty msg_flags: Add missing %s lost when adding prefix suppression
          logic
        - netfilter: nf_tables: check the result of dereferencing base_chain->stats
        - PCI: mediatek: Fix memory mapped IO range size computation
        - netfilter: conntrack: tcp: only close if RST matches exact sequence
        - iommu/vt-d: Disable ATS support on untrusted devices
        - jbd2: fix invalid descriptor block checksum
        - ext4: fix bigalloc cluster freeing when hole punching under load
        - fs: fix guard_bio_eod to check for real EOD errors
        - tools lib traceevent: Fix buffer overflow in arg_eval
        - mm/resource: Return real error codes from walk failures
        - PCI/PME: Fix hotplug/sysfs remove deadlock in pcie_pme_remove()
        - wil6210: check null pointer in _wil_cfg80211_merge_extra_ies
        - mt76: fix a leaked reference by adding a missing of_node_put
        - ath10k: Fix the wrong updation of BW in tx_stats debugfs entry
        - lockdep/lib/tests: Fix run_tests.sh
        - crypto: crypto4xx - add missing of_node_put after of_device_is_available
        - crypto: cavium/zip - fix collision with generic cra_driver_name
        - tools/bpf: selftests: add map lookup to test_map_in_map bpf prog
        - usb: chipidea: Grab the (legacy) USB PHY by phandle first
        - powerpc/powernv/ioda: Fix locked_vm counting for memory used by IOMMU tables
        - scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c
        - kbuild: invoke syncconfig if include/config/auto.conf.cmd is missing
        - kbuild: make -r/-R effective in top Makefile for old Make versions
        - btrfs: save drop_progress if we drop refs at all
        - drm/amd/display: Fix reference counting for struct dc_sink.
        - ath10k: don't report unset rssi values to mac80211
        - powerpc/xmon: Fix opcode being uninitialized in print_insn_powerpc
        - coresight: etm4x: Add support to enable ETMv4.2
        - serial: 8250_pxa: honor the port number from devicetree
        - ARM: 8840/1: use a raw_spinlock_t in unwind
        - ARM: 8845/1: use unified assembler in c files
        - iommu/io-pgtable-arm-v7s: Only kmemleak_ignore L2 tables
        - powerpc/hugetlb: Handle mmap_min_addr correctly in get_unmapped_area
          callback
        - net: dsa: mv88e6xxx: Default CMODE to 1000BaseX only on 6390X
        - ice: fix ice_remove_rule_internal vsi_list handling
        - perf script: Handle missing fields with -F +..
        - btrfs: qgroup: Make qgroup async transaction commit more aggressive
        - btrfs: don't enospc all tickets on flush failure
        - mmc: omap: fix the maximum timeout setting
        - net: dsa: mv88e6xxx: Add lockdep classes to fix false positive splat
        - veth: Fix -Wformat-truncation
        - e1000e: Fix -Wformat-truncation warnings
        - mlxsw: spectrum: Avoid -Wformat-truncation warnings
        - i2c: Allow recovery of the initial IRQ by an I2C client device.
        - platform/x86: ideapad-laptop: Fix no_hw_rfkill_list for Lenovo RESCUER
          R720-15IKBN
        - platform/mellanox: mlxreg-hotplug: Fix KASAN warning
        - loop: set GENHD_FL_NO_PART_SCAN after blkdev_reread_part()
        - i2c: designware: Do not allow i2c_dw_xfer() calls while suspended
        - IB/mlx4: Increase the timeout for CM cache
        - clk: fractional-divider: check parent rate only if flag is set
        - perf annotate: Fix getting source line failure
        - powerpc/44x: Force PCI on for CURRITUCK
        - ASoC: qcom: Fix of-node refcount unbalance in qcom_snd_parse_of()
        - cpufreq: acpi-cpufreq: Report if CPU doesn't support boost technologies
        - efi: cper: Fix possible out-of-bounds access
        - s390/ism: ignore some errors during deregistration
        - scsi: megaraid_sas: return error when create DMA pool failed
        - scsi: fcoe: make use of fip_mode enum complete
        - drm/amd/display: Clear stream->mode_changed after commit
        - perf test: Fix failure of 'evsel-tp-sched' test on s390
        - mwifiex: don't advertise IBSS features without FW support
        - perf report: Don't shadow inlined symbol with different addr range
        - SoC: imx-sgtl5000: add missing put_device()
        - media: ov7740: fix runtime pm initialization
        - media: sh_veu: Correct return type for mem2mem buffer helpers
        - media: s5p-jpeg: Correct return type for mem2mem buffer helpers
        - media: rockchip/rga: Correct return type for mem2mem buffer helpers
        - media: s5p-g2d: Correct return type for mem2mem buffer helpers
        - media: mx2_emmaprp: Correct return type for mem2mem buffer helpers
        - media: mtk-jpeg: Correct return type for mem2mem buffer helpers
        - media: rockchip/vpu: Correct return type for mem2mem buffer helpers
        - mt76: usb: do not run mt76u_queues_deinit twice
        - gpio: of: Apply regulator-gpio quirk only to enable-gpios
        - xen/gntdev: Do not destroy context while dma-bufs are in use
        - vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1
        - HID: intel-ish-hid: avoid binding wrong ishtp_cl_device
        - cgroup, rstat: Don't flush subtree root unless necessary
        - efi: Fix build error due to enum collision between efi.h and ima.h
        - drm/sched: Fix entities with 0 rqs.
        - regulator: core: Take lock before applying system load
        - jbd2: fix race when writing superblock
        - leds: lp55xx: fix null deref on firmware load failure
        - tools build: Add -lrt to FEATURE_CHECK_LDFLAGS-libaio
        - tools build: Add test-reallocarray.c to test-all.c to fix the build
        - perf beauty waitid options: Fix up prefix showing logic
        - perf trace: Check if the 'fd' is negative when mapping it to pathname
        - perf report: Add s390 diagnosic sampling descriptor size
        - perf coresight: Do not test for libopencsd by default
        - iwlwifi: pcie: fix emergency path
        - ACPI / video: Refactor and fix dmi_is_desktop()
        - selftests: ir: fix warning: "%s" directive output may be truncated ’
          directive output may be truncated
        - selftests: skip seccomp get_metadata test if not real root
        - kprobes: Prohibit probing on bsearch()
        - kprobes: Prohibit probing on RCU debug routine
        - netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in
          __nf_conntrack_confirm
        - ARM: 8833/1: Ensure that NEON code always compiles with Clang
        - ARM: dts: meson8b: fix the Ethernet data line signals in eth_rgmii_pins
        - ALSA: PCM: check if ops are defined before suspending PCM
        - ath10k: fix shadow register implementation for WCN3990
        - usb: f_fs: Avoid crash due to out-of-scope stack ptr access
        - sched/topology: Fix percpu data types in struct sd_data & struct s_data
        - bcache: fix input overflow to cache set sysfs file io_error_halflife
        - bcache: fix input overflow to sequential_cutoff
        - bcache: fix potential div-zero error of writeback_rate_i_term_inverse
        - bcache: improve sysfs_strtoul_clamp()
        - genirq: Avoid summation loops for /proc/stat
        - net: marvell: mvpp2: fix stuck in-band SGMII negotiation
        - iw_cxgb4: fix srqidx leak during connection abort
        - net: phy: consider latched link-down status in polling mode
        - fbdev: fbmem: fix memory access if logo is bigger than the screen
        - cdrom: Fix race condition in cdrom_sysctl_register
        - drm: rcar-du: add missing of_node_put
        - drm/amd/display: Don't re-program planes for DPMS changes
        - bpf: test_maps: fix possible out of bound access warning
        - x86/kexec: Fill in acpi_rsdp_addr from the first kernel
        - powerpc/ptrace: Mitigate potential Spectre v1
        - drm/amd/display: Disconnect mpcc when changing tg
        - perf/aux: Make perf_event accessible to setup_aux()
        - e1000e: fix cyclic resets at link up with active tx
        - e1000e: Exclude device from suspend direct complete optimization
        - platform/x86: intel_pmc_core: Fix PCH IP sts reading
        - i2c: of: Try to find an I2C adapter matching the parent
        - staging: spi: mt7621: Add return code check on device_reset()
        - iwlwifi: mvm: fix RFH config command with >=10 CPUs
        - ASoC: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe
        - sched/debug: Initialize sd_sysctl_cpus if !CONFIG_CPUMASK_OFFSTACK
        - efi/memattr: Don't bail on zero VA if it equals the region's PA
        - sched/core: Use READ_ONCE()/WRITE_ONCE() in
          move_queued_task()/task_rq_lock()
        - drm/vkms: Bugfix racing hrtimer vblank handle
        - drm/vkms: Bugfix extra vblank frame
        - ARM: dts: lpc32xx: Remove leading 0x and 0s from bindings notation
        - soc: qcom: gsbi: Fix error handling in gsbi_probe()
        - drm/msm/dpu: Convert to a chained irq chip
        - mt7601u: bump supported EEPROM version
        - ARM: 8830/1: NOMMU: Toggle only bits in EXC_RETURN we are really care of
        - ARM: avoid Cortex-A9 livelock on tight dmb loops
        - block, bfq: fix in-service-queue check for queue merging
        - block, bfq: fix queue removal from weights tree
        - bpf: fix missing prototype warnings
        - selftests/bpf: skip verifier tests for unsupported program types
        - powerpc/64s: Clear on-stack exception marker upon exception return
        - cgroup/pids: turn cgroup_subsys->free() into cgroup_subsys->release() to fix
          the accounting
        - backlight: pwm_bl: Use gpiod_get_value_cansleep() to get initial state
        - tty: increase the default flip buffer limit to 2*640K
        - powerpc/pseries: Perform full re-add of CPU for topology update post-
          migration
        - drm/amd/display: Enable vblank interrupt during CRC capture
        - ALSA: dice: add support for Solid State Logic Duende Classic/Mini
        - regulator: mcp16502: Include linux/gpio/consumer.h to fix build error
        - usb: dwc3: gadget: Fix OTG events when gadget driver isn't loaded
        - platform/x86: intel-hid: Missing power button release on some Dell models
        - perf trace: Fixup etcsnoop example
        - perf script python: Use PyBytes for attr in trace-event-python
        - perf script python: Add trace_context extension module to sys.modules
        - media: mt9m111: set initial frame size other than 0x0
        - hwrng: virtio - Avoid repeated init of completion
        - soc/tegra: fuse: Fix illegal free of IO base address
        - selftests/bpf: suppress readelf stderr when probing for BTF support
        - HID: intel-ish: ipc: handle PIMR before ish_wakeup also clear PISR
          busy_clear bit
        - f2fs: UBSAN: set boolean value iostat_enable correctly
        - f2fs: fix to initialize variable to avoid UBSAN/smatch warning
        - hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable
        - pinctrl: meson: fix G12A ao pull registers base address
        - pinctrl: sh-pfc: r8a77990: Fix MOD_SEL bit numbering
        - pinctrl: sh-pfc: r8a77995: Fix MOD_SEL bit numbering
        - cpu/hotplug: Mute hotplug lockdep during init
        - dmaengine: imx-dma: fix warning comparison of distinct pointer types
        - dmaengine: qcom_hidma: assign channel cookie correctly
        - dmaengine: qcom_hidma: initialize tx flags in hidma_prep_dma_*
        - netfilter: physdev: relax br_netfilter dependency
        - media: rcar-vin: Allow independent VIN link enablement
        - media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration
        - PCI: pciehp: Assign ctrl->slot_ctrl before writing it to hardware
        - audit: hand taken context to audit_kill_trees for syscall logging
        - regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting
        - pinctrl: meson: meson8b: add the eth_rxd2 and eth_rxd3 pins
        - drm: Auto-set allow_fb_modifiers when given modifiers at plane init
        - drm/nouveau: Stop using drm_crtc_force_disable
        - x86/build: Specify elf_i386 linker emulation explicitly for i386 objects
        - selinux: do not override context on context mounts
        - brcmfmac: Use firmware_request_nowarn for the clm_blob
        - wlcore: Fix memory leak in case wl12xx_fetch_firmware failure
        - x86/build: Mark per-CPU symbols as absolute explicitly for LLD
        - drm/fb-helper: fix leaks in error path of drm_fb_helper_fbdev_setup
        - clk: meson: clean-up clock registration
        - ARM: shmobile: Fix R-Car Gen2 regulator quirk
        - clk: rockchip: fix frac settings of GPLL clock for rk3328
        - dmaengine: tegra: avoid overflow of byte tracking
        - staging: iio: adt7316: fix dac_bits assignment
        - Input: soc_button_array - fix mapping of the 5th GPIO in a PNP0C40 device
        - ASoC: simple-card-utils: check "reg" property on
          asoc_simple_card_get_dai_id()
        - drm: Reorder set_property_atomic to avoid returning with an active ww_ctx
        - drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers
        - net: stmmac: Avoid one more sometimes uninitialized Clang warning
        - appletalk: Fix compile regression
        - gpio: of: Restrict enable-gpio quirk to regulator-gpio
        - ACPI / video: Extend chassis-type detection with a "Lunch Box" check
        - bcache: fix potential div-zero error of writeback_rate_p_term_inverse
        - kbuild: add workaround for Debian make-kpkg
        - kbuild: skip sub-make for in-tree build with GNU Make 4.x
        - Linux 5.0.7
    
      * enabling ftrace on Hi1620 CS causes an Oops (LP: #1822871)
        - arm64/ftrace: fix inadvertent BUG() in trampoline check
        - arm64/module: ftrace: deal with place relative nature of PLTs
    
      * The noise keeps occurring when Headset is plugged in on a Dell machine
        (LP: #1827972)
        - ALSA: hda/realtek - Fixed Dell AIO speaker noise
    
      * CONFIG_LOG_BUF_SHIFT set to 14 is too low on arm64 (LP: #1824864)
        - [Config] CONFIG_LOG_BUF_SHIFT=18 on all 64bit arches
    
      * There are 4 HDMI/Displayport audio output listed in sound setting without
        attach any HDMI/DP monitor (LP: #1827967)
        - ALSA: hda/hdmi - Read the pin sense from register when repolling
        - ALSA: hda/hdmi - Consider eld_valid when reporting jack event
    
      * Headphone jack switch sense is inverted: plugging in headphones disables
        headphone output (LP: #1824259)
        - ASoC: rt5645: Headphone Jack sense inverts on the LattePanda board
    
      * ratelimit cma_alloc messages (LP: #1828092)
        - SAUCE: cma: ratelimit cma_alloc error messages
    
      * linux-buildinfo: pull out ABI information into its own package
        (LP: #1806380)
        - [Packaging] autoreconstruct -- base tag is always primary mainline version
    
      * CTAUTO:DevOps:860.50:devops4fp1:Error occurred during LINUX Dmesg error
        Checking for all LINUX clients for devops4p10 (LP: #1766201)
        - SAUCE: integrity: downgrade error to warning
    
      * False positive test result in run_netsocktests from net in
        ubuntu_kernel_selftest (LP: #1825777)
        - selftests/net: correct the return value for run_netsocktests
    
     -- Stefan Bader <email address hidden>  Wed, 15 May 2019 12:32:35 +0200
  • linux (5.0.0-15.16) disco; urgency=medium
    
      * CVE-2019-11683
        - udp: fix GRO reception in case of length mismatch
        - udp: fix GRO packet of death
    
      * CVE-2018-12126 // CVE-2018-12127 // CVE-2018-12130
        - x86/msr-index: Cleanup bit defines
        - x86/speculation: Consolidate CPU whitelists
        - x86/speculation/mds: Add basic bug infrastructure for MDS
        - x86/speculation/mds: Add BUG_MSBDS_ONLY
        - x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests
        - x86/speculation/mds: Add mds_clear_cpu_buffers()
        - x86/speculation/mds: Clear CPU buffers on exit to user
        - x86/kvm/vmx: Add MDS protection when L1D Flush is not active
        - x86/speculation/mds: Conditionally clear CPU buffers on idle entry
        - x86/speculation/mds: Add mitigation control for MDS
        - x86/speculation/mds: Add sysfs reporting for MDS
        - x86/speculation/mds: Add mitigation mode VMWERV
        - Documentation: Move L1TF to separate directory
        - Documentation: Add MDS vulnerability documentation
        - x86/speculation/mds: Add mds=full,nosmt cmdline option
        - x86/speculation: Move arch_smt_update() call to after mitigation decisions
        - x86/speculation/mds: Add SMT warning message
        - x86/speculation/mds: Fix comment
        - x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off
        - x86/speculation/mds: Add 'mitigations=' support for MDS
    
      * CVE-2017-5715 // CVE-2017-5753
        - s390/speculation: Support 'mitigations=' cmdline option
    
      * CVE-2017-5715 // CVE-2017-5753 // CVE-2017-5754 // CVE-2018-3639
        - powerpc/speculation: Support 'mitigations=' cmdline option
    
      * CVE-2017-5715 // CVE-2017-5754 // CVE-2018-3620 // CVE-2018-3639 //
        CVE-2018-3646
        - cpu/speculation: Add 'mitigations=' cmdline option
        - x86/speculation: Support 'mitigations=' cmdline option
    
      * Packaging resync (LP: #1786013)
        - [Packaging] resync git-ubuntu-log
    
    linux (5.0.0-14.15) disco; urgency=medium
    
      * linux: 5.0.0-14.15 -proposed tracker (LP: #1826150)
    
      * [SRU] Please sync vbox modules from virtualbox 6.0.6 on next kernel update
        (LP: #1825210)
        - vbox-update: updates for renamed makefiles
        - ubuntu: vbox -- update to 6.0.6-dfsg-1
    
      * Intel I210 Ethernet card not working after hotplug [8086:1533]
        (LP: #1818490)
        - igb: Fix WARN_ONCE on runtime suspend
    
      * [regression][snd_hda_codec_realtek] repeating crackling noise after 19.04
        upgrade (LP: #1821663)
        - ALSA: hda - Add two more machines to the power_save_blacklist
    
      * CVE-2019-9500
        - brcmfmac: assure SSID length from firmware is limited
    
      * CVE-2019-9503
        - brcmfmac: add subtype check for event handling in data path
    
      * CVE-2019-3882
        - vfio/type1: Limit DMA mappings per container
    
      * autofs kernel module missing (LP: #1824333)
        - [Config] Update autofs4 path in inclusion list
    
      * The Realtek card reader does not enter PCIe 1.1/1.2 (LP: #1825487)
        - misc: rtsx: Enable OCP for rts522a rts524a rts525a rts5260
        - SAUCE: misc: rtsx: Fixed rts5260 power saving parameter and sd glitch
    
      * headset-mic doesn't work on two Dell laptops. (LP: #1825272)
        - ALSA: hda/realtek - add two more pin configuration sets to quirk table
    
      * CVE-2019-3887
        - KVM: x86: nVMX: close leak of L0's x2APIC MSRs (CVE-2019-3887)
        - KVM: x86: nVMX: fix x2APIC VTPR read intercept
    
      * CVE-2019-3874
        - sctp: implement memory accounting on tx path
        - sctp: implement memory accounting on rx path
    
      * CVE-2019-1999
        - binder: fix race between munmap() and direct reclaim
    
      * apparmor does not start in Disco LXD containers (LP: #1824812)
        - SAUCE: shiftfs: use separate llseek method for directories
    
     -- Stefan Bader <email address hidden>  Mon, 06 May 2019 17:33:15 +0200
  • linux (5.0.0-14.15) disco; urgency=medium
    
      * linux: 5.0.0-14.15 -proposed tracker (LP: #1826150)
    
      * [SRU] Please sync vbox modules from virtualbox 6.0.6 on next kernel update
        (LP: #1825210)
        - vbox-update: updates for renamed makefiles
        - ubuntu: vbox -- update to 6.0.6-dfsg-1
    
      * Intel I210 Ethernet card not working after hotplug [8086:1533]
        (LP: #1818490)
        - igb: Fix WARN_ONCE on runtime suspend
    
      * [regression][snd_hda_codec_realtek] repeating crackling noise after 19.04
        upgrade (LP: #1821663)
        - ALSA: hda - Add two more machines to the power_save_blacklist
    
      * CVE-2019-9500
        - brcmfmac: assure SSID length from firmware is limited
    
      * CVE-2019-9503
        - brcmfmac: add subtype check for event handling in data path
    
      * CVE-2019-3882
        - vfio/type1: Limit DMA mappings per container
    
      * autofs kernel module missing (LP: #1824333)
        - [Config] Update autofs4 path in inclusion list
    
      * The Realtek card reader does not enter PCIe 1.1/1.2 (LP: #1825487)
        - misc: rtsx: Enable OCP for rts522a rts524a rts525a rts5260
        - SAUCE: misc: rtsx: Fixed rts5260 power saving parameter and sd glitch
    
      * headset-mic doesn't work on two Dell laptops. (LP: #1825272)
        - ALSA: hda/realtek - add two more pin configuration sets to quirk table
    
      * CVE-2019-3887
        - KVM: x86: nVMX: close leak of L0's x2APIC MSRs (CVE-2019-3887)
        - KVM: x86: nVMX: fix x2APIC VTPR read intercept
    
      * CVE-2019-3874
        - sctp: implement memory accounting on tx path
        - sctp: implement memory accounting on rx path
    
      * CVE-2019-1999
        - binder: fix race between munmap() and direct reclaim
    
      * apparmor does not start in Disco LXD containers (LP: #1824812)
        - SAUCE: shiftfs: use separate llseek method for directories
    
     -- Stefan Bader <email address hidden>  Wed, 24 Apr 2019 15:07:28 +0200
  • linux (5.0.0-13.14) disco; urgency=medium
    
      * linux: 5.0.0-13.14 -proposed tracker (LP: #1824819)
    
      * Display only has 640x480 (LP: #1824677)
        - Revert "UBUNTU: SAUCE: drm/nouveau: Disable nouveau driver by default"
    
      * shiftfs: use after free when checking mount options (LP: #1824735)
        - SAUCE: shiftfs: prevent use-after-free when verifying mount options
    
    linux (5.0.0-12.13) disco; urgency=medium
    
      * linux: 5.0.0-12.13 -proposed tracker (LP: #1824726)
    
      * Linux 5.0 black screen on boot, display flickers (i915 regression with
        certain laptop panels) (LP: #1824216)
        - drm/i915/dp: revert back to max link rate and lane count on eDP
    
      * kernel BUG at fs/attr.c:287 when using shiftfs (LP: #1824717)
        - SAUCE: shiftfs: fix passing of attrs to underaly for setattr
    
     -- Seth Forshee <email address hidden>  Mon, 15 Apr 2019 09:11:23 -0500
  • linux (5.0.0-11.12) disco; urgency=medium
    
      * linux: 5.0.0-11.12 -proposed tracker (LP: #1824383)
    
      * hns3: PPU_PF_ABNORMAL_INT_ST over_8bd_no_fe found [error status=0x1]
        (LP: #1824194)
        - net: hns3: fix for not calculating tx bd num correctly
    
      * disco: unable to use iptables/enable ufw under -virtual kernel
        (LP: #1823862)
        - [Packaging] add bpfilter to linux-modules
    
      * Make shiftfs a module rather than built-in (LP: #1824354)
        - [Config] CONFIG_SHIFT_FS=m
    
      * shiftfs: chown sets untranslated ids in lower fs (LP: #1824350)
        - SAUCE: shiftfs: use translated ids when chaning lower fs attrs
    
      * [Hyper-V] KVP daemon fails to start on first boot of disco VM (LP: #1820063)
        - [Packaging] bind hv_kvp_daemon startup to hv_kvp device
    
    linux (5.0.0-10.11) disco; urgency=medium
    
      * linux: 5.0.0-10.11 -proposed tracker (LP: #1823936)
    
      * Apparmor enforcement failure in lxc selftests (LP: #1823379)
        - SAUCE: apparmor: Restore Y/N in /sys for apparmor's "enabled"
    
      * systemd cause kernel trace "BUG: unable to handle kernel paging request at
        6db23a14" on Cosmic i386 (LP: #1813244)
        - openvswitch: fix flow actions reallocation
    
    linux (5.0.0-9.10) disco; urgency=medium
    
      * linux: 5.0.0-9.10 -proposed tracker (LP: #1823228)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] resync git-ubuntu-log
        - [Packaging] update helper scripts
        - [Packaging] resync retpoline extraction
    
      * Huawei Hi1822 NIC has poor performance (LP: #1820187)
        - net-next/hinic: replace disable_irq_nosync/enable_irq
    
      * Add uid shifting overlay filesystem (shiftfs) (LP: #1823186)
        - shiftfs: uid/gid shifting bind mount
        - shiftfs: rework and extend
        - shiftfs: support some btrfs ioctls
        - [Config] enable shiftfs
    
      * Cannot boot or install - have to use nomodeset (LP: #1821820)
        - Revert "drm/i915/fbdev: Actually configure untiled displays"
    
      * Disco update: v5.0.6 upstream stable release (LP: #1823060)
        - netfilter: nf_tables: fix set double-free in abort path
        - dccp: do not use ipv6 header for ipv4 flow
        - genetlink: Fix a memory leak on error path
        - gtp: change NET_UDP_TUNNEL dependency to select
        - ipv6: make ip6_create_rt_rcu return ip6_null_entry instead of NULL
        - mac8390: Fix mmio access size probe
        - mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S
        - net: aquantia: fix rx checksum offload for UDP/TCP over IPv6
        - net: datagram: fix unbounded loop in __skb_try_recv_datagram()
        - net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec
        - net: phy: meson-gxl: fix interrupt support
        - net: rose: fix a possible stack overflow
        - net: stmmac: fix memory corruption with large MTUs
        - net-sysfs: call dev_hold if kobject_init_and_add success
        - net: usb: aqc111: Extend HWID table by QNAP device
        - packets: Always register packet sk in the same order
        - rhashtable: Still do rehash when we get EEXIST
        - sctp: get sctphdr by offset in sctp_compute_cksum
        - sctp: use memdup_user instead of vmemdup_user
        - tcp: do not use ipv6 header for ipv4 flow
        - tipc: allow service ranges to be connect()'ed on RDM/DGRAM
        - tipc: change to check tipc_own_id to return in tipc_net_stop
        - tipc: fix cancellation of topology subscriptions
        - tun: properly test for IFF_UP
        - vrf: prevent adding upper devices
        - vxlan: Don't call gro_cells_destroy() before device is unregistered
        - thunderx: enable page recycling for non-XDP case
        - thunderx: eliminate extra calls to put_page() for pages held for recycling
        - net: dsa: mv88e6xxx: fix few issues in mv88e6390x_port_set_cmode
        - net: mii: Fix PAUSE cap advertisement from linkmode_adv_to_lcl_adv_t()
          helper
        - net: phy: don't clear BMCR in genphy_soft_reset
        - r8169: fix cable re-plugging issue
        - ila: Fix rhashtable walker list corruption
        - tun: add a missing rcu_read_unlock() in error path
        - powerpc/fsl: Fix the flush of branch predictor.
        - Btrfs: fix incorrect file size after shrinking truncate and fsync
        - btrfs: remove WARN_ON in log_dir_items
        - btrfs: don't report readahead errors and don't update statistics
        - btrfs: Fix bound checking in qgroup_trace_new_subtree_blocks
        - btrfs: Avoid possible qgroup_rsv_size overflow in
          btrfs_calculate_inode_block_rsv_size
        - Btrfs: fix assertion failure on fsync with NO_HOLES enabled
        - locks: wake any locks blocked on request before deadlock check
        - tracing: initialize variable in create_dyn_event()
        - ARM: imx6q: cpuidle: fix bug that CPU might not wake up at expected time
        - powerpc: bpf: Fix generation of load/store DW instructions
        - vfio: ccw: only free cp on final interrupt
        - NFS: Fix nfs4_lock_state refcounting in nfs4_alloc_{lock,unlock}data()
        - NFS: fix mount/umount race in nlmclnt.
        - NFSv4.1 don't free interrupted slot on open
        - net: dsa: qca8k: remove leftover phy accessors
        - ALSA: rawmidi: Fix potential Spectre v1 vulnerability
        - ALSA: seq: oss: Fix Spectre v1 vulnerability
        - ALSA: pcm: Fix possible OOB access in PCM oss plugins
        - ALSA: pcm: Don't suspend stream in unrecoverable PCM state
        - ALSA: hda/realtek - Fixed Headset Mic JD not stable
        - ALSA: hda/realtek: merge alc_fixup_headset_jack to alc295_fixup_chromebook
        - ALSA: hda/realtek - Add support headset mode for DELL WYSE AIO
        - ALSA: hda/realtek - Add support headset mode for New DELL WYSE NB
        - ALSA: hda/realtek: Enable headset MIC of Acer AIO with ALC286
        - ALSA: hda/realtek: Enable headset MIC of Acer Aspire Z24-890 with ALC286
        - ALSA: hda/realtek - Add support for Acer Aspire E5-523G/ES1-432 headset mic
        - ALSA: hda/realtek: Enable ASUS X441MB and X705FD headset MIC with ALC256
        - ALSA: hda/realtek: Enable headset mic of ASUS P5440FF with ALC256
        - ALSA: hda/realtek: Enable headset MIC of ASUS X430UN and X512DK with ALC256
        - ALSA: hda/realtek - Fix speakers on Acer Predator Helios 500 Ryzen laptops
        - kbuild: modversions: Fix relative CRC byte order interpretation
        - fs/open.c: allow opening only regular files during execve()
        - ocfs2: fix inode bh swapping mixup in ocfs2_reflink_inodes_lock
        - scsi: sd: Fix a race between closing an sd device and sd I/O
        - scsi: sd: Quiesce warning if device does not report optimal I/O size
        - scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host
        - scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP
          devices
        - drm/rockchip: vop: reset scale mode when win is disabled
        - tty/serial: atmel: Add is_half_duplex helper
        - tty/serial: atmel: RS485 HD w/DMA: enable RX after TX is stopped
        - tty: mxs-auart: fix a potential NULL pointer dereference
        - tty: atmel_serial: fix a potential NULL pointer dereference
        - tty: serial: qcom_geni_serial: Initialize baud in qcom_geni_console_setup
        - staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest
        - staging: olpc_dcon_xo_1: add missing 'const' qualifier
        - staging: speakup_soft: Fix alternate speech with other synths
        - staging: vt6655: Remove vif check from vnt_interrupt
        - staging: vt6655: Fix interrupt race condition on device start up.
        - staging: erofs: fix to handle error path of erofs_vmap()
        - staging: erofs: fix error handling when failed to read compresssed data
        - staging: erofs: keep corrupted fs from crashing kernel in erofs_readdir()
        - serial: max310x: Fix to avoid potential NULL pointer dereference
        - serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference
        - serial: sh-sci: Fix setting SCSCR_TIE while transferring data
        - USB: serial: cp210x: add new device id
        - USB: serial: ftdi_sio: add additional NovaTech products
        - USB: serial: mos7720: fix mos_parport refcount imbalance on error path
        - USB: serial: option: set driver_info for SIM5218 and compatibles
        - USB: serial: option: add support for Quectel EM12
        - USB: serial: option: add Olicard 600
        - ACPI / CPPC: Fix guaranteed performance handling
        - Disable kgdboc failed by echo space to /sys/module/kgdboc/parameters/kgdboc
        - fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links
        - drivers/block/zram/zram_drv.c: fix idle/writeback string compare
        - blk-mq: fix sbitmap ws_active for shared tags
        - cpufreq: intel_pstate: Also use CPPC nominal_perf for base_frequency
        - cpufreq: scpi: Fix use after free
        - drm/vgem: fix use-after-free when drm_gem_handle_create() fails
        - drm/vkms: fix use-after-free when drm_gem_handle_create() fails
        - drm/i915: Mark AML 0x87CA as ULX
        - drm/i915/gvt: Fix MI_FLUSH_DW parsing with correct index check
        - drm/i915/icl: Fix the TRANS_DDI_FUNC_CTL2 bitfield macro
        - gpio: exar: add a check for the return value of ida_simple_get fails
        - gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input
        - phy: sun4i-usb: Support set_mode to USB_HOST for non-OTG PHYs
        - usb: mtu3: fix EXTCON dependency
        - USB: gadget: f_hid: fix deadlock in f_hidg_write()
        - usb: common: Consider only available nodes for dr_mode
        - mm/memory.c: fix modifying of page protection by insert_pfn()
        - usb: host: xhci-rcar: Add XHCI_TRUST_TX_LENGTH quirk
        - xhci: Fix port resume done detection for SS ports with LPM enabled
        - usb: xhci: dbc: Don't free all memory with spinlock held
        - xhci: Don't let USB3 ports stuck in polling state prevent suspend
        - usb: cdc-acm: fix race during wakeup blocking TX traffic
        - usb: typec: tcpm: Try PD-2.0 if sink does not respond to 3.0 source-caps
        - usb: typec: Fix unchecked return value
        - mm/hotplug: fix offline undo_isolate_page_range()
        - mm: add support for kmem caches in DMA32 zone
        - iommu/io-pgtable-arm-v7s: request DMA32 memory, and improve debugging
        - mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified
        - mm/debug.c: fix __dump_page when mapping->host is not set
        - mm/memory_hotplug.c: fix notification in offline error path
        - mm/page_isolation.c: fix a wrong flag in set_migratetype_isolate()
        - mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate
        - perf pmu: Fix parser error for uncore event alias
        - perf intel-pt: Fix TSC slip
        - objtool: Query pkg-config for libelf location
        - powerpc/pseries/energy: Use OF accessor functions to read ibm,drc-indexes
        - powerpc/64: Fix memcmp reading past the end of src/dest
        - powerpc/pseries/mce: Fix misleading print for TLB mutlihit
        - watchdog: Respect watchdog cpumask on CPU hotplug
        - cpu/hotplug: Prevent crash when CPU bringup fails on CONFIG_HOTPLUG_CPU=n
        - x86/smp: Enforce CONFIG_HOTPLUG_CPU when SMP=y
        - KVM: Reject device ioctls from processes other than the VM's creator
        - KVM: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts
        - KVM: x86: update %rip after emulating IO
        - bpf: do not restore dst_reg when cur_state is freed
        - mt76x02u: use usb_bulk_msg to upload firmware
        - Linux 5.0.6
    
      * RDMA/hns updates for disco (LP: #1822897)
        - RDMA/hns: Fix the bug with updating rq head pointer when flush cqe
        - RDMA/hns: Bugfix for the scene without receiver queue
        - RDMA/hns: Add constraint on the setting of local ACK timeout
        - RDMA/hns: Modify the pbl ba page size for hip08
        - RDMA/hns: RDMA/hns: Assign rq head pointer when enable rq record db
        - RDMA/hns: Add the process of AEQ overflow for hip08
        - RDMA/hns: Add SCC context allocation support for hip08
        - RDMA/hns: Add SCC context clr support for hip08
        - RDMA/hns: Add timer allocation support for hip08
        - RDMA/hns: Remove set but not used variable 'rst'
        - RDMA/hns: Make some function static
        - RDMA/hns: Fix the Oops during rmmod or insmod ko when reset occurs
        - RDMA/hns: Fix the chip hanging caused by sending mailbox&CMQ during reset
        - RDMA/hns: Fix the chip hanging caused by sending doorbell during reset
        - RDMA/hns: Limit minimum ROCE CQ depth to 64
        - RDMA/hns: Fix the state of rereg mr
        - RDMA/hns: Set allocated memory to zero for wrid
        - RDMA/hns: Delete useful prints for aeq subtype event
        - RDMA/hns: Configure capacity of hns device
        - RDMA/hns: Modify qp&cq&pd specification according to UM
        - RDMA/hns: Bugfix for set hem of SCC
        - RDMA/hns: Use GFP_ATOMIC in hns_roce_v2_modify_qp
    
      * autopkgtests run too often, too much and don't skip enough (LP: #1823056)
        - Set +x on rebuild testcase.
        - Skip rebuild test, for regression-suite deps.
        - Make ubuntu-regression-suite skippable on unbootable kernels.
        - make rebuild use skippable error codes when skipping.
        - Only run regression-suite, if requested to.
    
      * touchpad not working on lenovo yoga 530 (LP: #1787775)
        - Revert "UBUNTU: SAUCE: i2c:amd Depends on ACPI"
        - Revert "UBUNTU: SAUCE: i2c:amd move out pointer in union i2c_event_base"
        - i2c: add extra check to safe DMA buffer helper
        - i2c: Add drivers for the AMD PCIe MP2 I2C controller
        - [Config] Update config for AMD MP2 I2C driver
    
      * Detect SMP PHY control command errors (LP: #1822680)
        - scsi: libsas: Check SMP PHY control function result
    
      * disable a.out support (LP: #1818552)
        - [Config] Disable a.out support
        - [Config] remove binfmt_aout from abi for i386 lowlatency
    
      * bionic: fork out linux-snapdragon into its own topic kernel (LP: #1820868)
        - [Packaging] remove snapdragon flavour support
        - Revert "UBUNTU: SAUCE: (snapdragon) drm/msm/adv7511: wrap hacks under
          CONFIG_ADV7511_SNAPDRAGON_HACKS #ifdefs"
        - Revert "UBUNTU: SAUCE: (snapdragon) media: ov5645: skip address change if dt
          addr == default addr"
        - Revert "UBUNTU: SAUCE: (snapdragon) DT: leds: Add Qualcomm Light Pulse
          Generator binding"
        - Revert "UBUNTU: SAUCE: (snapdragon) MAINTAINERS: Add Qualcomm Camera Control
          Interface driver"
        - Revert "UBUNTU: SAUCE: (snapdragon) dt-bindings: media: Binding document for
          Qualcomm Camera Control Interface driver"
        - Revert "UBUNTU: SAUCE: (snapdragon) leds: Add driver for Qualcomm LPG"
        - Revert "UBUNTU: SAUCE: (snapdragon) HACK: drm/msm/adv7511: Don't rely on
          interrupts for EDID parsing"
        - Revert "UBUNTU: SAUCE: (snapdragon) drm/bridge/adv7511: Delay clearing of
          HPD interrupt status"
        - Revert "UBUNTU: SAUCE: (snapdragon) media: ov5645: Fix I2C address"
        - Revert "UBUNTU: SAUCE: (snapdragon) i2c-qcom-cci: Fix I2C address bug"
        - Revert "UBUNTU: SAUCE: (snapdragon) i2c-qcom-cci: Fix run queue completion
          timeout"
        - Revert "UBUNTU: SAUCE: (snapdragon) camss: Do not register if no cameras are
          present"
        - Revert "UBUNTU: SAUCE: (snapdragon) i2c: Add Qualcomm Camera Control
          Interface driver"
        - Revert "UBUNTU: SAUCE: (snapdragon) ov5645: I2C address change"
        - Revert "UBUNTU: SAUCE: (snapdragon) regulator: smd: Allow
          REGULATOR_QCOM_SMD_RPM=m"
        - Revert "UBUNTU: SAUCE: (snapdragon) cpufreq: Add apq8016 to cpufreq-dt-
          platdev blacklist"
        - Revert "UBUNTU: SAUCE: (snapdragon) PM / OPP: Add a helper to get an opp
          regulator for device"
        - Revert "UBUNTU: SAUCE: (snapdragon) PM / OPP: HACK: Allow to set regulator
          without opp_list"
        - Revert "UBUNTU: SAUCE: (snapdragon) PM / OPP: Drop RCU usage in
          dev_pm_opp_adjust_voltage()"
        - Revert "UBUNTU: SAUCE: (snapdragon) PM / OPP: Support adjusting OPP voltages
          at runtime"
        - Revert "UBUNTU: SAUCE: (snapdragon) regulator: smd: Add floor and corner
          operations"
        - Revert "UBUNTU: SAUCE: (snapdragon) power: avs: cpr: Register with cpufreq-
          dt"
        - Revert "UBUNTU: SAUCE: (snapdragon) power: avs: cpr: fix with new
          reg_sequence structures"
        - Revert "UBUNTU: SAUCE: (snapdragon) power: avs: cpr: Use raw mem access for
          qfprom"
        - Revert "UBUNTU: SAUCE: (snapdragon) power: avs: Add support for CPR (Core
          Power Reduction)"
        - Revert "UBUNTU: SAUCE: (snapdragon) HACK: drm/msm/iommu: Remove runtime_put
          calls in map/unmap"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: enable LEDS_QCOM_LPG"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: distro.config: enable 'BBR' TCP
          congestion algorithm"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: distro.config: enable 'fq' and
          'fq_codel' qdiscs"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: distro.config: enable
          'schedutil' CPUfreq governor"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: configs: set USB_CONFIG_F_FS in
          distro.config"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: enable
          CONFIG_USB_CONFIGFS_F_FS by default"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: configs: add freq stat to sysfs"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: configs: Enable camera drivers"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: disable ANALOG_TV and
          DIGITAL_TV"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: configs: add more USB net
          drivers"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: configs: enable BT_QCOMSMD"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: enable
          CFG80211_DEFAULT_PS by default"
        - Revert "UBUNTU: SAUCE: (snapdragon) Force the SMD regulator driver to be
          compiled-in"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: configs: enable dm_mod and
          dm_crypt"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: Enable a53/apcs and
          avs"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: configs: enable QCOM Venus"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: distro.config: enable debug
          friendly USB network adpater"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: configs: enable WCN36xx"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: configs; add distro.config"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: enable QCOM audio
          drivers for APQ8016 and DB410c"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: enable REMOTEPROC"
        - [Config] fix abi for remove i2c-qcom-cci module
        - [Config] update annotations
        - [Config] update configs following snapdragon removal
    
      * Disco update: v5.0.5 upstream stable release (LP: #1822671)
        - Revert "ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec"
        - ALSA: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist
        - ALSA: firewire-motu: use 'version' field of unit directory to identify model
        - mmc: pxamci: fix enum type confusion
        - mmc: alcor: fix DMA reads
        - mmc: mxcmmc: "Revert mmc: mxcmmc: handle highmem pages"
        - mmc: renesas_sdhi: limit block count to 16 bit for old revisions
        - drm/amdgpu: fix invalid use of change_bit
        - drm/vmwgfx: Don't double-free the mode stored in par->set_mode
        - drm/vmwgfx: Return 0 when gmrid::get_node runs out of ID's
        - iommu/amd: fix sg->dma_address for sg->offset bigger than PAGE_SIZE
        - iommu/iova: Fix tracking of recently failed iova address
        - libceph: wait for latest osdmap in ceph_monc_blacklist_add()
        - udf: Fix crash on IO error during truncate
        - mips: loongson64: lemote-2f: Add IRQF_NO_SUSPEND to "cascade" irqaction.
        - MIPS: Ensure ELF appended dtb is relocated
        - MIPS: Fix kernel crash for R6 in jump label branch function
        - powerpc/vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038
        - powerpc/security: Fix spectre_v2 reporting
        - net/mlx5: Fix DCT creation bad flow
        - scsi: core: Avoid that a kernel warning appears during system resume
        - scsi: qla2xxx: Fix FC-AL connection target discovery
        - scsi: ibmvscsi: Protect ibmvscsi_head from concurrent modificaiton
        - scsi: ibmvscsi: Fix empty event pool access during host removal
        - futex: Ensure that futex address is aligned in handle_futex_death()
        - perf probe: Fix getting the kernel map
        - objtool: Move objtool_file struct off the stack
        - irqchip/gic-v3-its: Fix comparison logic in lpi_range_cmp
        - clocksource/drivers/riscv: Fix clocksource mask
        - ALSA: ac97: Fix of-node refcount unbalance
        - ext4: fix NULL pointer dereference while journal is aborted
        - ext4: fix data corruption caused by unaligned direct AIO
        - ext4: brelse all indirect buffer in ext4_ind_remove_space()
        - media: v4l2-ctrls.c/uvc: zero v4l2_event
        - Bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf()
        - Bluetooth: Fix decrementing reference count twice in releasing socket
        - Bluetooth: hci_ldisc: Initialize hci_dev before open()
        - Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in
          hci_uart_set_proto()
        - drm/vkms: Fix flush_work() without INIT_WORK().
        - RDMA/cma: Rollback source IP address if failing to acquire device
        - f2fs: fix to avoid deadlock of atomic file operations
        - aio: simplify - and fix - fget/fput for io_submit()
        - netfilter: ebtables: remove BUGPRINT messages
        - loop: access lo_backing_file only when the loop device is Lo_bound
        - x86/unwind: Handle NULL pointer calls better in frame unwinder
        - x86/unwind: Add hardcoded ORC entry for NULL
        - locking/lockdep: Add debug_locks check in __lock_downgrade()
        - ALSA: hda - Record the current power state before suspend/resume calls
        - ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec
        - Linux 5.0.5
    
      * hisi_sas updates for disco (LP: #1822385)
        - scsi: hisi_sas: send primitive NOTIFY to SSP situation only
        - scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned
        - scsi: hisi_sas: remove the check of sas_dev status in
          hisi_sas_I_T_nexus_reset()
        - scsi: hisi_sas: Remove unused parameter of function hisi_sas_alloc()
        - scsi: hisi_sas: Reject setting programmed minimum linkrate > 1.5G
        - scsi: hisi_sas: Fix losing directly attached disk when hot-plug
        - scsi: hisi_sas: Correct memory allocation size for DQ debugfs
        - scsi: hisi_sas: Some misc tidy-up
        - scsi: hisi_sas: Fix to only call scsi_get_prot_op() for non-NULL scsi_cmnd
        - scsi: hisi_sas: Add missing seq_printf() call in hisi_sas_show_row_32()
        - scsi: hisi_sas: Add support for DIX feature for v3 hw
        - scsi: hisi_sas: Add manual trigger for debugfs dump
        - scsi: hisi_sas: change queue depth from 512 to 4096
        - scsi: hisi_sas: Issue internal abort on all relevant queues
        - scsi: hisi_sas: Use pci_irq_get_affinity() for v3 hw as experimental
        - scsi: hisi_sas: Do some more tidy-up
        - scsi: hisi_sas: Change return variable type in phy_up_v3_hw()
        - scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO
        - scsi: hisi_sas: print PHY RX errors count for later revision of v3 hw
        - scsi: hisi_sas: Set PHY linkrate when disconnected
        - scsi: hisi_sas: Send HARD RESET to clear the previous affiliation of STP
          target port
        - scsi: hisi_sas: Change SERDES_CFG init value to increase reliability of
          HiLink
        - scsi: hisi_sas: Add softreset in hisi_sas_I_T_nexus_reset()
    
      * [Patch][Raven 2] kernel 5.0.0 cannot boot because of psp response
        (LP: #1822267)
        - drm/amdgpu/psp: Fix can't detect psp INVOKE command failed
        - drm/amdgpu/psp: ignore psp response status
    
      * 3b080b2564287be91605bfd1d5ee985696e61d3c in ubuntu_btrfs_kernel_fixes
        triggers system hang on i386 (LP: #1812845)
        - btrfs: raid56: properly unmap parity page in finish_parity_scrub()
    
      * enable CONFIG_DRM_BOCHS (LP: #1795857)
        - [Config] Reenable DRM_BOCHS as module
    
      * [Dell Precision 7530/5530 with Nvidia Quadro P1000] Live USB freezes or
        cannot complete install when nouveau driver is loaded (crashing in GP100
        code) (LP: #1822026)
        - SAUCE: drm/nouveau: Disable nouveau driver by default
    
      * Need to add Intel CML related pci-id's (LP: #1821863)
        - drm/i915/cml: Add CML PCI IDS
        - drm/i915/cml: Introduce Comet Lake PCH
    
      * ARM: Add support for the SDEI interface (LP: #1822005)
        - ACPI / APEI: Don't wait to serialise with oops messages when panic()ing
        - ACPI / APEI: Remove silent flag from ghes_read_estatus()
        - ACPI / APEI: Switch estatus pool to use vmalloc memory
        - ACPI / APEI: Make hest.c manage the estatus memory pool
        - ACPI / APEI: Make estatus pool allocation a static size
        - ACPI / APEI: Don't store CPER records physical address in struct ghes
        - ACPI / APEI: Remove spurious GHES_TO_CLEAR check
        - ACPI / APEI: Don't update struct ghes' flags in read/clear estatus
        - ACPI / APEI: Generalise the estatus queue's notify code
        - ACPI / APEI: Don't allow ghes_ack_error() to mask earlier errors
        - ACPI / APEI: Move NOTIFY_SEA between the estatus-queue and NOTIFY_NMI
        - ACPI / APEI: Switch NOTIFY_SEA to use the estatus queue
        - KVM: arm/arm64: Add kvm_ras.h to collect kvm specific RAS plumbing
        - arm64: KVM/mm: Move SEA handling behind a single 'claim' interface
        - ACPI / APEI: Move locking to the notification helper
        - ACPI / APEI: Let the notification helper specify the fixmap slot
        - ACPI / APEI: Pass ghes and estatus separately to avoid a later copy
        - ACPI / APEI: Make GHES estatus header validation more user friendly
        - ACPI / APEI: Split ghes_read_estatus() to allow a peek at the CPER length
        - ACPI / APEI: Only use queued estatus entry during in_nmi_queue_one_entry()
        - ACPI / APEI: Use separate fixmap pages for arm64 NMI-like notifications
        - firmware: arm_sdei: Add ACPI GHES registration helper
        - ACPI / APEI: Add support for the SDEI GHES Notification type
    
      * CVE-2019-9857
        - inotify: Fix fsnotify_mark refcount leak in inotify_update_existing_watch()
    
      * scsi: libsas: Support SATA PHY connection rate unmatch fixing during
        discovery (LP: #1821408)
        - scsi: libsas: Support SATA PHY connection rate unmatch fixing during
          discovery
    
      * Qualcomm Atheros QCA9377 wireless does not work (LP: #1818204)
        - platform/x86: ideapad-laptop: Add Ideapad 530S-14ARR to no_hw_rfkill list
    
      * Lenovo ideapad 330-15ICH Wifi rfkill hard blocked (LP: #1811815)
        - platform/x86: ideapad: Add ideapad 330-15ICH to no_hw_rfkill
    
      * hid-sensor-hub spamming dmesg in 4.20 (LP: #1818547)
        - HID: Increase maximum report size allowed by hid_field_extract()
    
      * [disco] [5.0.0-7.8] can't mount guest cifs share (LP: #1821053)
        - cifs: allow guest mounts to work for smb3.11
        - SMB3: Fix SMB3.1.1 guest mounts to Samba
    
      * Add HiSilicon SoC quirk for cpufreq (LP: #1821620)
        - ACPI / CPPC: Add a helper to get desired performance
        - cpufreq / cppc: Work around for Hisilicon CPPC cpufreq
    
      * Disco update: v5.0.4 upstream stable release (LP: #1821607)
        - 9p: use inode->i_lock to protect i_size_write() under 32-bit
        - 9p/net: fix memory leak in p9_client_create
        - ASoC: fsl_esai: fix register setting issue in RIGHT_J mode
        - ASoC: codecs: pcm186x: fix wrong usage of DECLARE_TLV_DB_SCALE()
        - ASoC: codecs: pcm186x: Fix energysense SLEEP bit
        - iio: adc: exynos-adc: Fix NULL pointer exception on unbind
        - iio: adc: exynos-adc: Use proper number of channels for Exynos4x12
        - mei: hbm: clean the feature flags on link reset
        - mei: bus: move hw module get/put to probe/release
        - stm class: Prevent division by zero
        - stm class: Fix an endless loop in channel allocation
        - crypto: caam - fix hash context DMA unmap size
        - crypto: ccree - fix missing break in switch statement
        - crypto: caam - fixed handling of sg list
        - crypto: caam - fix DMA mapping of stack memory
        - crypto: ccree - fix free of unallocated mlli buffer
        - crypto: ccree - unmap buffer before copying IV
        - crypto: ccree - don't copy zero size ciphertext
        - crypto: cfb - add missing 'chunksize' property
        - crypto: cfb - remove bogus memcpy() with src == dest
        - crypto: ofb - fix handling partial blocks and make thread-safe
        - crypto: ahash - fix another early termination in hash walk
        - crypto: rockchip - fix scatterlist nents error
        - crypto: rockchip - update new iv to device in multiple operations
        - dax: Flush partial PMDs correctly
        - nfit: Fix nfit_intel_shutdown_status() command submission
        - nfit: acpi_nfit_ctl(): Check out_obj->type in the right place
        - acpi/nfit: Fix bus command validation
        - nfit/ars: Attempt a short-ARS whenever the ARS state is idle at boot
        - nfit/ars: Attempt short-ARS even in the no_init_ars case
        - libnvdimm/label: Clear 'updating' flag after label-set update
        - libnvdimm, pfn: Fix over-trim in trim_pfn_device()
        - libnvdimm/pmem: Honor force_raw for legacy pmem regions
        - libnvdimm: Fix altmap reservation size calculation
        - fix cgroup_do_mount() handling of failure exits
        - crypto: aead - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
        - crypto: aegis - fix handling chunked inputs
        - crypto: arm/crct10dif - revert to C code for short inputs
        - crypto: arm64/aes-neonbs - fix returning final keystream block
        - crypto: arm64/crct10dif - revert to C code for short inputs
        - crypto: hash - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
        - crypto: morus - fix handling chunked inputs
        - crypto: pcbc - remove bogus memcpy()s with src == dest
        - crypto: skcipher - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
        - crypto: testmgr - skip crc32c context test for ahash algorithms
        - crypto: x86/aegis - fix handling chunked inputs and MAY_SLEEP
        - crypto: x86/aesni-gcm - fix crash on empty plaintext
        - crypto: x86/morus - fix handling chunked inputs and MAY_SLEEP
        - crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling
        - crypto: arm64/aes-ccm - fix bugs in non-NEON fallback routine
        - CIFS: Fix leaking locked VFS cache pages in writeback retry
        - CIFS: Do not reset lease state to NONE on lease break
        - CIFS: Do not skip SMB2 message IDs on send failures
        - CIFS: Fix read after write for files with read caching
        - smb3: make default i/o size for smb3 mounts larger
        - tracing: Use strncpy instead of memcpy for string keys in hist triggers
        - tracing: Do not free iter->trace in fail path of tracing_open_pipe()
        - tracing/perf: Use strndup_user() instead of buggy open-coded version
        - vmw_balloon: release lock on error in vmballoon_reset()
        - xen: fix dom0 boot on huge systems
        - ACPI / device_sysfs: Avoid OF modalias creation for removed device
        - mmc: sdhci-esdhc-imx: fix HS400 timing issue
        - mmc: renesas_sdhi: Fix card initialization failure in high speed mode
        - mmc:fix a bug when max_discard is 0
        - spi: ti-qspi: Fix mmap read when more than one CS in use
        - spi: pxa2xx: Setup maximum supported DMA transfer length
        - spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch
        - spi: spi-gpio: fix SPI_CS_HIGH capability
        - regulator: s2mps11: Fix steps for buck7, buck8 and LDO35
        - regulator: max77620: Initialize values for DT properties
        - regulator: s2mpa01: Fix step values for some LDOs
        - mt76: fix corrupted software generated tx CCMP PN
        - clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR
        - clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown
        - clocksource/drivers/arch_timer: Workaround for Allwinner A64 timer
          instability
        - s390: vfio_ap: link the vfio_ap devices to the vfio_ap bus subsystem
        - s390/setup: fix early warning messages
        - s390/virtio: handle find on invalid queue gracefully
        - scsi: virtio_scsi: don't send sc payload with tmfs
        - scsi: aacraid: Fix performance issue on logical drives
        - scsi: sd: Optimal I/O size should be a multiple of physical block size
        - scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
        - scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware
        - scsi: qla2xxx: Avoid PCI IRQ affinity mapping when multiqueue is not
          supported
        - scsi: qla2xxx: Use complete switch scan for RSCN events
        - fs/devpts: always delete dcache dentry-s in dput()
        - splice: don't merge into linked buffers
        - ovl: During copy up, first copy up data and then xattrs
        - ovl: Do not lose security.capability xattr over metadata file copy-up
        - m68k: Add -ffreestanding to CFLAGS
        - Btrfs: setup a nofs context for memory allocation at btrfs_create_tree()
        - Btrfs: setup a nofs context for memory allocation at __btrfs_set_acl
        - btrfs: scrub: fix circular locking dependency warning
        - btrfs: drop the lock on error in btrfs_dev_replace_cancel
        - btrfs: ensure that a DUP or RAID1 block group has exactly two stripes
        - btrfs: init csum_list before possible free
        - Btrfs: fix corruption reading shared and compressed extents after hole
          punching
        - Btrfs: fix deadlock between clone/dedupe and rename
        - soc: qcom: rpmh: Avoid accessing freed memory from batch API
        - libertas_tf: don't set URB_ZERO_PACKET on IN USB transfer
        - irqchip/gic-v3-its: Avoid parsing _indirect_ twice for Device table
        - irqchip/brcmstb-l2: Use _irqsave locking variants in non-interrupt code
        - x86/kprobes: Prohibit probing on optprobe template code
        - cpufreq: kryo: Release OPP tables on module removal
        - cpufreq: tegra124: add missing of_node_put()
        - cpufreq: pxa2xx: remove incorrect __init annotation
        - ext4: fix check of inode in swap_inode_boot_loader
        - ext4: cleanup pagecache before swap i_data
        - mm: hwpoison: fix thp split handing in soft_offline_in_use_page()
        - mm/vmalloc: fix size check for remap_vmalloc_range_partial()
        - mm/memory.c: do_fault: avoid usage of stale vm_area_struct
        - kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv
        - nvmem: core: don't check the return value of notifier chain call
        - device property: Fix the length used in PROPERTY_ENTRY_STRING()
        - intel_th: Don't reference unassigned outputs
        - parport_pc: fix find_superio io compare code, should use equal test.
        - i2c: tegra: fix maximum transfer size
        - i2c: tegra: update maximum transfer size
        - media: i2c: ov5640: Fix post-reset delay
        - gpio: pca953x: Fix dereference of irq data in shutdown
        - ext4: update quota information while swapping boot loader inode
        - ext4: add mask of ext4 flags to swap
        - ext4: fix crash during online resizing
        - dma: Introduce dma_max_mapping_size()
        - swiotlb: Introduce swiotlb_max_mapping_size()
        - swiotlb: Add is_swiotlb_active() function
        - PCI/ASPM: Use LTR if already enabled by platform
        - PCI/DPC: Fix print AER status in DPC event handling
        - PCI: qcom: Don't deassert reset GPIO during probe
        - PCI: dwc: skip MSI init if MSIs have been explicitly disabled
        - PCI: pci-bridge-emul: Create per-bridge copy of register behavior
        - PCI: pci-bridge-emul: Extend pci_bridge_emul_init() with flags
        - IB/hfi1: Close race condition on user context disable and close
        - IB/rdmavt: Fix loopback send with invalidate ordering
        - IB/rdmavt: Fix concurrency panics in QP post_send and modify to error
        - cxl: Wrap iterations over afu slices inside 'afu_list_lock'
        - ext2: Fix underflow in ext2_max_size()
        - clk: uniphier: Fix update register for CPU-gear
        - clk: clk-twl6040: Fix imprecise external abort for pdmclk
        - clk: samsung: exynos5: Fix possible NULL pointer exception on
          platform_device_alloc() failure
        - clk: samsung: exynos5: Fix kfree() of const memory on setting
          driver_override
        - clk: ingenic: Fix round_rate misbehaving with non-integer dividers
        - clk: ingenic: Fix doc of ingenic_cgu_div_info
        - usb: chipidea: tegra: Fix missed ci_hdrc_remove_device()
        - usb: typec: tps6598x: handle block writes separately with plain-I2C adapters
        - dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit
        - serial: uartps: Fix stuck ISR if RX disabled with non-empty FIFO
        - serial: 8250_of: assume reg-shift of 2 for mrvl,mmp-uart
        - serial: 8250_pci: Fix number of ports for ACCES serial cards
        - serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954
          chip use the pci_pericom_setup()
        - jbd2: clear dirty flag when revoking a buffer from an older transaction
        - jbd2: fix compile warning when using JBUFFER_TRACE
        - selinux: add the missing walk_size + len check in selinux_sctp_bind_connect
        - security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblock
        - powerpc/32: Clear on-stack exception marker upon exception return
        - powerpc/wii: properly disable use of BATs when requested.
        - powerpc/powernv: Make opal log only readable by root
        - powerpc/83xx: Also save/restore SPRG4-7 during suspend
        - powerpc/kvm: Save and restore host AMR/IAMR/UAMOR
        - powerpc/powernv: Don't reprogram SLW image on every KVM guest entry/exit
        - powerpc/64s/hash: Fix assert_slb_presence() use of the slbfee. instruction
        - powerpc: Fix 32-bit KVM-PR lockup and host crash with MacOS guest
        - powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning
        - powerpc/hugetlb: Don't do runtime allocation of 16G pages in LPAR
          configuration
        - powerpc/smp: Fix NMI IPI timeout
        - powerpc/smp: Fix NMI IPI xmon timeout
        - powerpc/traps: fix recoverability of machine check handling on book3s/32
        - powerpc/traps: Fix the message printed when stack overflows
        - ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify
        - arm64: Fix HCR.TGE status for NMI contexts
        - arm64: debug: Don't propagate UNKNOWN FAR into si_code for debug signals
        - arm64: debug: Ensure debug handlers check triggering exception level
        - arm64: KVM: Fix architecturally invalid reset value for FPEXC32_EL2
        - Revert "KVM/MMU: Flush tlb directly in the kvm_zap_gfn_range()"
        - ipmi_si: Fix crash when using hard-coded device
        - ipmi_si: fix use-after-free of resource->name
        - dm: fix to_sector() for 32bit
        - dm integrity: limit the rate of error messages
        - media: cx25840: mark pad sig_types to fix cx231xx init
        - mfd: sm501: Fix potential NULL pointer dereference
        - cpcap-charger: generate events for userspace
        - cpuidle: governor: Add new governors to cpuidle_governors again
        - NFS: Fix I/O request leakages
        - NFS: Fix an I/O request leakage in nfs_do_recoalesce
        - NFS: Don't recoalesce on error in nfs_pageio_complete_mirror()
        - nfsd: fix performance-limiting session calculation
        - nfsd: fix memory corruption caused by readdir
        - nfsd: fix wrong check in write_v4_end_grace()
        - NFSv4.1: Reinitialise sequence results before retransmitting a request
        - svcrpc: fix UDP on servers with lots of threads
        - PM / wakeup: Rework wakeup source timer cancellation
        - PM / OPP: Update performance state when freq == old_freq
        - bcache: treat stale && dirty keys as bad keys
        - bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata
        - stable-kernel-rules.rst: add link to networking patch queue
        - vt: perform safe console erase in the right order
        - x86/unwind/orc: Fix ORC unwind table alignment
        - perf intel-pt: Fix CYC timestamp calculation after OVF
        - perf tools: Fix split_kallsyms_for_kcore() for trampoline symbols
        - perf auxtrace: Define auxtrace record alignment
        - perf intel-pt: Fix overlap calculation for padding
        - perf/x86/intel/uncore: Fix client IMC events return huge result
        - perf intel-pt: Fix divide by zero when TSC is not available
        - md: Fix failed allocation of md_register_thread
        - x86/kvmclock: set offset for kvm unstable clock
        - x86/ftrace: Fix warning and considate ftrace_jmp_replace() and
          ftrace_call_replace()
        - tpm/tpm_crb: Avoid unaligned reads in crb_recv()
        - tpm: Unify the send callback behaviour
        - rcu: Do RCU GP kthread self-wakeup from softirq and interrupt
        - media: imx: prpencvf: Stop upstream before disabling IDMA channel
        - media: lgdt330x: fix lock status reporting
        - media: sun6i: Fix CSI regmap's max_register
        - media: uvcvideo: Avoid NULL pointer dereference at the end of streaming
        - media: vimc: Add vimc-streamer for stream control
        - media: imx-csi: Input connections to CSI should be optional
        - media: imx: csi: Disable CSI immediately after last EOF
        - media: imx: csi: Stop upstream before disabling IDMA channel
        - drm/fb-helper: generic: Fix drm_fbdev_client_restore()
        - drm/radeon/evergreen_cs: fix missing break in switch statement
        - drm/amd/powerplay: correct power reading on fiji
        - drm/amd/display: don't call dm_pp_ function from an fpu block
        - KVM: Call kvm_arch_memslots_updated() before updating memslots
        - KVM: VMX: Compare only a single byte for VMCS' "launched" in vCPU-run
        - KVM: VMX: Zero out *all* general purpose registers after VM-Exit
        - KVM: x86/mmu: Detect MMIO generation wrap in any address space
        - KVM: x86/mmu: Do not cache MMIO accesses while memslots are in flux
        - KVM: nVMX: Sign extend displacements of VMX instr's mem operands
        - KVM: nVMX: Apply addr size mask to effective address for VMX instructions
        - KVM: nVMX: Ignore limit checks on VMX instructions using flat segments
        - KVM: nVMX: Check a single byte for VMCS "launched" in nested early checks
        - net: dsa: lantiq_gswip: fix use-after-free on failed probe
        - net: dsa: lantiq_gswip: fix OF child-node lookups
        - s390/setup: fix boot crash for machine without EDAT-1
        - SUNRPC: Prevent thundering herd when the socket is not connected
        - SUNRPC: Fix up RPC back channel transmission
        - SUNRPC: Respect RPC call timeouts when retrying transmission
        - Linux 5.0.4
        - [Config] update configs for 5.0.4 stable update
    
      * New Intel Wireless-AC 9260 [8086:2526] card not correctly probed in Ubuntu
        system (LP: #1821271)
        - iwlwifi: add new card for 9260 series
    
      * [CONFIG] please enable highdpi font FONT_TER16x32 (LP: #1819881)
        - [Config]: enable highdpi Terminus 16x32 font support
    
      * [SRU][B/B-OEM/C/D] Fix AMD IOMMU NULL dereference (LP: #1820990)
        - iommu/amd: Fix NULL dereference bug in match_hid_uid
    
      * some codecs stop working after S3 (LP: #1820930)
        - ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec
        - ALSA: hda - Don't trigger jackpoll_work in azx_resume
    
      * tcm_loop.ko: move from modules-extra into main modules package
        (LP: #1817786)
        - [Packaging] move tcm_loop.lo to main linux-modules package
    
      * C++ demangling support missing from perf (LP: #1396654)
        - [Packaging] fix a mistype
    
      * r8169 doesn't get woken up by ethernet cable plugging, no PME generated
        (LP: #1817676)
        - PCI: pciehp: Disable Data Link Layer State Changed event on suspend
    
      * Disco update: v5.0.3 upstream stable release (LP: #1821074)
        - connector: fix unsafe usage of ->real_parent
        - fou, fou6: avoid uninit-value in gue_err() and gue6_err()
        - gro_cells: make sure device is up in gro_cells_receive()
        - ipv4/route: fail early when inet dev is missing
        - l2tp: fix infoleak in l2tp_ip6_recvmsg()
        - lan743x: Fix RX Kernel Panic
        - lan743x: Fix TX Stall Issue
        - net: hsr: fix memory leak in hsr_dev_finalize()
        - net/hsr: fix possible crash in add_timer()
        - net: sit: fix UBSAN Undefined behaviour in check_6rd
        - net/x25: fix use-after-free in x25_device_event()
        - net/x25: reset state in x25_connect()
        - pptp: dst_release sk_dst_cache in pptp_sock_destruct
        - ravb: Decrease TxFIFO depth of Q3 and Q2 to one
        - route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race
        - rxrpc: Fix client call queueing, waiting for channel
        - sctp: remove sched init from sctp_stream_init
        - tcp: do not report TCP_CM_INQ of 0 for closed connections
        - tcp: Don't access TCP_SKB_CB before initializing it
        - tcp: handle inet_csk_reqsk_queue_add() failures
        - vxlan: Fix GRO cells race condition between receive and link delete
        - vxlan: test dev->flags & IFF_UP before calling gro_cells_receive()
        - net/mlx4_core: Fix reset flow when in command polling mode
        - net/mlx4_core: Fix locking in SRIOV mode when switching between events and
          polling
        - net/mlx4_core: Fix qp mtt size calculation
        - net: dsa: mv88e6xxx: Set correct interface mode for CPU/DSA ports
        - vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock
        - net: sched: flower: insert new filter to idr after setting its mask
        - f2fs: wait on atomic writes to count F2FS_CP_WB_DATA
        - perf/x86: Fixup typo in stub functions
        - ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against
          Liquid Saffire 56
        - ALSA: firewire-motu: fix construction of PCM frame for capture direction
        - ALSA: hda: Extend i915 component bind timeout
        - ALSA: hda - add more quirks for HP Z2 G4 and HP Z240
        - ALSA: hda/realtek: Enable audio jacks of ASUS UX362FA with ALC294
        - ALSA: hda/realtek - Reduce click noise on Dell Precision 5820 headphone
        - ALSA: hda/realtek: Enable headset MIC of Acer TravelMate X514-51T with
          ALC255
        - perf/x86/intel: Fix memory corruption
        - perf/x86/intel: Make dev_attr_allow_tsx_force_abort static
        - It's wrong to add len to sector_nr in raid10 reshape twice
        - drm: Block fb changes for async plane updates
        - Linux 5.0.3
    
      * Disco update: v5.0.2 upstream stable release (LP: #1820318)
        - media: uvcvideo: Fix 'type' check leading to overflow
        - Input: wacom_serial4 - add support for Wacom ArtPad II tablet
        - Input: elan_i2c - add id for touchpad found in Lenovo s21e-20
        - iscsi_ibft: Fix missing break in switch statement
        - scsi: aacraid: Fix missing break in switch statement
        - x86/PCI: Fixup RTIT_BAR of Intel Denverton Trace Hub
        - arm64: dts: zcu100-revC: Give wifi some time after power-on
        - arm64: dts: hikey: Give wifi some time after power-on
        - arm64: dts: hikey: Revert "Enable HS200 mode on eMMC"
        - ARM: dts: exynos: Fix pinctrl definition for eMMC RTSN line on Odroid X2/U3
        - ARM: dts: exynos: Add minimal clkout parameters to Exynos3250 PMU
        - ARM: dts: exynos: Fix max voltage for buck8 regulator on Odroid XU3/XU4
        - drm: disable uncached DMA optimization for ARM and arm64
        - media: Revert "media: rc: some events are dropped by userspace"
        - Revert "PCI/PME: Implement runtime PM callbacks"
        - bpf: Stop the psock parser before canceling its work
        - gfs2: Fix missed wakeups in find_insert_glock
        - staging: erofs: keep corrupted fs from crashing kernel in erofs_namei()
        - staging: erofs: compressed_pages should not be accessed again after freed
        - scripts/gdb: replace flags (MS_xyz -> SB_xyz)
        - ath9k: Avoid OF no-EEPROM quirks without qca,no-eeprom
        - perf/x86/intel: Make cpuc allocations consistent
        - perf/x86/intel: Generalize dynamic constraint creation
        - x86: Add TSX Force Abort CPUID/MSR
        - perf/x86/intel: Implement support for TSX Force Abort
        - Linux 5.0.2
    
      * Linux security module stacking support
        - LSM: Introduce LSM_FLAG_LEGACY_MAJOR
        - LSM: Provide separate ordered initialization
        - LSM: Plumb visibility into optional "enabled" state
        - LSM: Lift LSM selection out of individual LSMs
        - LSM: Build ordered list of LSMs to initialize
        - LSM: Introduce CONFIG_LSM
        - LSM: Introduce "lsm=" for boottime LSM selection
        - LSM: Tie enabling logic to presence in ordered list
        - LSM: Prepare for reorganizing "security=" logic
        - LSM: Refactor "security=" in terms of enable/disable
        - LSM: Separate idea of "major" LSM from "exclusive" LSM
        - apparmor: Remove SECURITY_APPARMOR_BOOTPARAM_VALUE
        - selinux: Remove SECURITY_SELINUX_BOOTPARAM_VALUE
        - LSM: Add all exclusive LSMs to ordered initialization
        - LSM: Split LSM preparation from initialization
        - LoadPin: Initialize as ordered LSM
        - Yama: Initialize as ordered LSM
        - LSM: Introduce enum lsm_order
        - capability: Initialize as LSM_ORDER_FIRST
        - procfs: add smack subdir to attrs
        - Smack: Abstract use of cred security blob
        - SELinux: Abstract use of cred security blob
        - SELinux: Remove cred security blob poisoning
        - SELinux: Remove unused selinux_is_enabled
        - AppArmor: Abstract use of cred security blob
        - TOMOYO: Abstract use of cred security blob
        - Infrastructure management of the cred security blob
        - SELinux: Abstract use of file security blob
        - Smack: Abstract use of file security blob
        - LSM: Infrastructure management of the file security
        - SELinux: Abstract use of inode security blob
        - Smack: Abstract use of inode security blob
        - LSM: Infrastructure management of the inode security
        - LSM: Infrastructure management of the task security
        - SELinux: Abstract use of ipc security blobs
        - Smack: Abstract use of ipc security blobs
        - LSM: Infrastructure management of the ipc security blob
        - TOMOYO: Update LSM flags to no longer be exclusive
        - LSM: generalize flag passing to security_capable
        - LSM: Make lsm_early_cred() and lsm_early_task() local functions.
        - LSM: Make some functions static
        - apparmor: Adjust offset when accessing task blob.
        - LSM: Ignore "security=" when "lsm=" is specified
        - LSM: Update list of SECURITYFS users in Kconfig
        - apparmor: delete the dentry in aafs_remove() to avoid a leak
        - apparmor: fix double free when unpack of secmark rules fails
        - SAUCE: LSM: Infrastructure management of the sock security
        - SAUCE: LSM: Limit calls to certain module hooks
        - SAUCE: LSM: Special handling for secctx lsm hooks
        - SAUCE: LSM: Specify which LSM to display with /proc/self/attr/display
        - SAUCE: Fix-up af_unix mediation for sock infrastructure management
        - SAUCE: Revert "apparmor: Fix warning about unused function
          apparmor_ipv6_postroute"
        - SAUCE: Revert "apparmor: fix checkpatch error in Parse secmark policy"
        - SAUCE: Revert "apparmor: add #ifdef checks for secmark filtering"
        - SAUCE: Revert "apparmor: Allow filtering based on secmark policy"
        - SAUCE: Revert "apparmor: Parse secmark policy"
        - SAUCE: Revert "apparmor: Add a wildcard secid"
        - SAUCE: Revert "apparmor: fix bad debug check in apparmor_secid_to_secctx()"
        - SAUCE: Revert "apparmor: fixup secid map conversion to using IDR"
        - SAUCE: Revert "apparmor: Use an IDR to allocate apparmor secids"
        - SAUCE: Revert "apparmor: Fix memory leak of rule on error exit path"
        - SAUCE: Revert "apparmor: modify audit rule support to support profile
          stacks"
        - SAUCE: Revert "apparmor: Add support for audit rule filtering"
        - SAUCE: Revert "apparmor: add the ability to get a task's secid"
        - SAUCE: Revert "apparmor: add support for mapping secids and using secctxes"
        - SAUCE: apparmor: add proc subdir to attrs
        - SAUCE: apparmor: add an apparmorfs entry to access current attrs
        - SAUCE: apparmor: update flags to no longer be exclusive
        - SAUCE: update configs and annotations for LSM stacking
    
      * Miscellaneous Ubuntu changes
        - [Config] CONFIG_EARLY_PRINTK_USB_XDBC=y
        - SAUCE: (efi-lockdown) bpf: Restrict kernel image access functions when the
          kernel is locked down
        - [Config] CONFIG_RANDOM_TRUST_CPU=y
        - [Config] refresh annotations for recent config changes
        - ubuntu: vbox -- update to 6.0.4-dfsg-7
        - Revert "UBUNTU: SAUCE: i2c:amd I2C Driver based on PCI Interface for
          upcoming platform"
    
     -- Seth Forshee <email address hidden>  Thu, 11 Apr 2019 10:17:19 -0500
  • linux (5.0.0-10.11) disco; urgency=medium
    
      * linux: 5.0.0-10.11 -proposed tracker (LP: #1823936)
    
      * Apparmor enforcement failure in lxc selftests (LP: #1823379)
        - SAUCE: apparmor: Restore Y/N in /sys for apparmor's "enabled"
    
      * systemd cause kernel trace "BUG: unable to handle kernel paging request at
        6db23a14" on Cosmic i386 (LP: #1813244)
        - openvswitch: fix flow actions reallocation
    
    linux (5.0.0-9.10) disco; urgency=medium
    
      * linux: 5.0.0-9.10 -proposed tracker (LP: #1823228)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] resync git-ubuntu-log
        - [Packaging] update helper scripts
        - [Packaging] resync retpoline extraction
    
      * Huawei Hi1822 NIC has poor performance (LP: #1820187)
        - net-next/hinic: replace disable_irq_nosync/enable_irq
    
      * Add uid shifting overlay filesystem (shiftfs) (LP: #1823186)
        - shiftfs: uid/gid shifting bind mount
        - shiftfs: rework and extend
        - shiftfs: support some btrfs ioctls
        - [Config] enable shiftfs
    
      * Cannot boot or install - have to use nomodeset (LP: #1821820)
        - Revert "drm/i915/fbdev: Actually configure untiled displays"
    
      * Disco update: v5.0.6 upstream stable release (LP: #1823060)
        - netfilter: nf_tables: fix set double-free in abort path
        - dccp: do not use ipv6 header for ipv4 flow
        - genetlink: Fix a memory leak on error path
        - gtp: change NET_UDP_TUNNEL dependency to select
        - ipv6: make ip6_create_rt_rcu return ip6_null_entry instead of NULL
        - mac8390: Fix mmio access size probe
        - mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S
        - net: aquantia: fix rx checksum offload for UDP/TCP over IPv6
        - net: datagram: fix unbounded loop in __skb_try_recv_datagram()
        - net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec
        - net: phy: meson-gxl: fix interrupt support
        - net: rose: fix a possible stack overflow
        - net: stmmac: fix memory corruption with large MTUs
        - net-sysfs: call dev_hold if kobject_init_and_add success
        - net: usb: aqc111: Extend HWID table by QNAP device
        - packets: Always register packet sk in the same order
        - rhashtable: Still do rehash when we get EEXIST
        - sctp: get sctphdr by offset in sctp_compute_cksum
        - sctp: use memdup_user instead of vmemdup_user
        - tcp: do not use ipv6 header for ipv4 flow
        - tipc: allow service ranges to be connect()'ed on RDM/DGRAM
        - tipc: change to check tipc_own_id to return in tipc_net_stop
        - tipc: fix cancellation of topology subscriptions
        - tun: properly test for IFF_UP
        - vrf: prevent adding upper devices
        - vxlan: Don't call gro_cells_destroy() before device is unregistered
        - thunderx: enable page recycling for non-XDP case
        - thunderx: eliminate extra calls to put_page() for pages held for recycling
        - net: dsa: mv88e6xxx: fix few issues in mv88e6390x_port_set_cmode
        - net: mii: Fix PAUSE cap advertisement from linkmode_adv_to_lcl_adv_t()
          helper
        - net: phy: don't clear BMCR in genphy_soft_reset
        - r8169: fix cable re-plugging issue
        - ila: Fix rhashtable walker list corruption
        - tun: add a missing rcu_read_unlock() in error path
        - powerpc/fsl: Fix the flush of branch predictor.
        - Btrfs: fix incorrect file size after shrinking truncate and fsync
        - btrfs: remove WARN_ON in log_dir_items
        - btrfs: don't report readahead errors and don't update statistics
        - btrfs: Fix bound checking in qgroup_trace_new_subtree_blocks
        - btrfs: Avoid possible qgroup_rsv_size overflow in
          btrfs_calculate_inode_block_rsv_size
        - Btrfs: fix assertion failure on fsync with NO_HOLES enabled
        - locks: wake any locks blocked on request before deadlock check
        - tracing: initialize variable in create_dyn_event()
        - ARM: imx6q: cpuidle: fix bug that CPU might not wake up at expected time
        - powerpc: bpf: Fix generation of load/store DW instructions
        - vfio: ccw: only free cp on final interrupt
        - NFS: Fix nfs4_lock_state refcounting in nfs4_alloc_{lock,unlock}data()
        - NFS: fix mount/umount race in nlmclnt.
        - NFSv4.1 don't free interrupted slot on open
        - net: dsa: qca8k: remove leftover phy accessors
        - ALSA: rawmidi: Fix potential Spectre v1 vulnerability
        - ALSA: seq: oss: Fix Spectre v1 vulnerability
        - ALSA: pcm: Fix possible OOB access in PCM oss plugins
        - ALSA: pcm: Don't suspend stream in unrecoverable PCM state
        - ALSA: hda/realtek - Fixed Headset Mic JD not stable
        - ALSA: hda/realtek: merge alc_fixup_headset_jack to alc295_fixup_chromebook
        - ALSA: hda/realtek - Add support headset mode for DELL WYSE AIO
        - ALSA: hda/realtek - Add support headset mode for New DELL WYSE NB
        - ALSA: hda/realtek: Enable headset MIC of Acer AIO with ALC286
        - ALSA: hda/realtek: Enable headset MIC of Acer Aspire Z24-890 with ALC286
        - ALSA: hda/realtek - Add support for Acer Aspire E5-523G/ES1-432 headset mic
        - ALSA: hda/realtek: Enable ASUS X441MB and X705FD headset MIC with ALC256
        - ALSA: hda/realtek: Enable headset mic of ASUS P5440FF with ALC256
        - ALSA: hda/realtek: Enable headset MIC of ASUS X430UN and X512DK with ALC256
        - ALSA: hda/realtek - Fix speakers on Acer Predator Helios 500 Ryzen laptops
        - kbuild: modversions: Fix relative CRC byte order interpretation
        - fs/open.c: allow opening only regular files during execve()
        - ocfs2: fix inode bh swapping mixup in ocfs2_reflink_inodes_lock
        - scsi: sd: Fix a race between closing an sd device and sd I/O
        - scsi: sd: Quiesce warning if device does not report optimal I/O size
        - scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host
        - scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP
          devices
        - drm/rockchip: vop: reset scale mode when win is disabled
        - tty/serial: atmel: Add is_half_duplex helper
        - tty/serial: atmel: RS485 HD w/DMA: enable RX after TX is stopped
        - tty: mxs-auart: fix a potential NULL pointer dereference
        - tty: atmel_serial: fix a potential NULL pointer dereference
        - tty: serial: qcom_geni_serial: Initialize baud in qcom_geni_console_setup
        - staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest
        - staging: olpc_dcon_xo_1: add missing 'const' qualifier
        - staging: speakup_soft: Fix alternate speech with other synths
        - staging: vt6655: Remove vif check from vnt_interrupt
        - staging: vt6655: Fix interrupt race condition on device start up.
        - staging: erofs: fix to handle error path of erofs_vmap()
        - staging: erofs: fix error handling when failed to read compresssed data
        - staging: erofs: keep corrupted fs from crashing kernel in erofs_readdir()
        - serial: max310x: Fix to avoid potential NULL pointer dereference
        - serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference
        - serial: sh-sci: Fix setting SCSCR_TIE while transferring data
        - USB: serial: cp210x: add new device id
        - USB: serial: ftdi_sio: add additional NovaTech products
        - USB: serial: mos7720: fix mos_parport refcount imbalance on error path
        - USB: serial: option: set driver_info for SIM5218 and compatibles
        - USB: serial: option: add support for Quectel EM12
        - USB: serial: option: add Olicard 600
        - ACPI / CPPC: Fix guaranteed performance handling
        - Disable kgdboc failed by echo space to /sys/module/kgdboc/parameters/kgdboc
        - fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links
        - drivers/block/zram/zram_drv.c: fix idle/writeback string compare
        - blk-mq: fix sbitmap ws_active for shared tags
        - cpufreq: intel_pstate: Also use CPPC nominal_perf for base_frequency
        - cpufreq: scpi: Fix use after free
        - drm/vgem: fix use-after-free when drm_gem_handle_create() fails
        - drm/vkms: fix use-after-free when drm_gem_handle_create() fails
        - drm/i915: Mark AML 0x87CA as ULX
        - drm/i915/gvt: Fix MI_FLUSH_DW parsing with correct index check
        - drm/i915/icl: Fix the TRANS_DDI_FUNC_CTL2 bitfield macro
        - gpio: exar: add a check for the return value of ida_simple_get fails
        - gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input
        - phy: sun4i-usb: Support set_mode to USB_HOST for non-OTG PHYs
        - usb: mtu3: fix EXTCON dependency
        - USB: gadget: f_hid: fix deadlock in f_hidg_write()
        - usb: common: Consider only available nodes for dr_mode
        - mm/memory.c: fix modifying of page protection by insert_pfn()
        - usb: host: xhci-rcar: Add XHCI_TRUST_TX_LENGTH quirk
        - xhci: Fix port resume done detection for SS ports with LPM enabled
        - usb: xhci: dbc: Don't free all memory with spinlock held
        - xhci: Don't let USB3 ports stuck in polling state prevent suspend
        - usb: cdc-acm: fix race during wakeup blocking TX traffic
        - usb: typec: tcpm: Try PD-2.0 if sink does not respond to 3.0 source-caps
        - usb: typec: Fix unchecked return value
        - mm/hotplug: fix offline undo_isolate_page_range()
        - mm: add support for kmem caches in DMA32 zone
        - iommu/io-pgtable-arm-v7s: request DMA32 memory, and improve debugging
        - mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified
        - mm/debug.c: fix __dump_page when mapping->host is not set
        - mm/memory_hotplug.c: fix notification in offline error path
        - mm/page_isolation.c: fix a wrong flag in set_migratetype_isolate()
        - mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate
        - perf pmu: Fix parser error for uncore event alias
        - perf intel-pt: Fix TSC slip
        - objtool: Query pkg-config for libelf location
        - powerpc/pseries/energy: Use OF accessor functions to read ibm,drc-indexes
        - powerpc/64: Fix memcmp reading past the end of src/dest
        - powerpc/pseries/mce: Fix misleading print for TLB mutlihit
        - watchdog: Respect watchdog cpumask on CPU hotplug
        - cpu/hotplug: Prevent crash when CPU bringup fails on CONFIG_HOTPLUG_CPU=n
        - x86/smp: Enforce CONFIG_HOTPLUG_CPU when SMP=y
        - KVM: Reject device ioctls from processes other than the VM's creator
        - KVM: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts
        - KVM: x86: update %rip after emulating IO
        - bpf: do not restore dst_reg when cur_state is freed
        - mt76x02u: use usb_bulk_msg to upload firmware
        - Linux 5.0.6
    
      * RDMA/hns updates for disco (LP: #1822897)
        - RDMA/hns: Fix the bug with updating rq head pointer when flush cqe
        - RDMA/hns: Bugfix for the scene without receiver queue
        - RDMA/hns: Add constraint on the setting of local ACK timeout
        - RDMA/hns: Modify the pbl ba page size for hip08
        - RDMA/hns: RDMA/hns: Assign rq head pointer when enable rq record db
        - RDMA/hns: Add the process of AEQ overflow for hip08
        - RDMA/hns: Add SCC context allocation support for hip08
        - RDMA/hns: Add SCC context clr support for hip08
        - RDMA/hns: Add timer allocation support for hip08
        - RDMA/hns: Remove set but not used variable 'rst'
        - RDMA/hns: Make some function static
        - RDMA/hns: Fix the Oops during rmmod or insmod ko when reset occurs
        - RDMA/hns: Fix the chip hanging caused by sending mailbox&CMQ during reset
        - RDMA/hns: Fix the chip hanging caused by sending doorbell during reset
        - RDMA/hns: Limit minimum ROCE CQ depth to 64
        - RDMA/hns: Fix the state of rereg mr
        - RDMA/hns: Set allocated memory to zero for wrid
        - RDMA/hns: Delete useful prints for aeq subtype event
        - RDMA/hns: Configure capacity of hns device
        - RDMA/hns: Modify qp&cq&pd specification according to UM
        - RDMA/hns: Bugfix for set hem of SCC
        - RDMA/hns: Use GFP_ATOMIC in hns_roce_v2_modify_qp
    
      * autopkgtests run too often, too much and don't skip enough (LP: #1823056)
        - Set +x on rebuild testcase.
        - Skip rebuild test, for regression-suite deps.
        - Make ubuntu-regression-suite skippable on unbootable kernels.
        - make rebuild use skippable error codes when skipping.
        - Only run regression-suite, if requested to.
    
      * touchpad not working on lenovo yoga 530 (LP: #1787775)
        - Revert "UBUNTU: SAUCE: i2c:amd Depends on ACPI"
        - Revert "UBUNTU: SAUCE: i2c:amd move out pointer in union i2c_event_base"
        - i2c: add extra check to safe DMA buffer helper
        - i2c: Add drivers for the AMD PCIe MP2 I2C controller
        - [Config] Update config for AMD MP2 I2C driver
    
      * Detect SMP PHY control command errors (LP: #1822680)
        - scsi: libsas: Check SMP PHY control function result
    
      * disable a.out support (LP: #1818552)
        - [Config] Disable a.out support
        - [Config] remove binfmt_aout from abi for i386 lowlatency
    
      * bionic: fork out linux-snapdragon into its own topic kernel (LP: #1820868)
        - [Packaging] remove snapdragon flavour support
        - Revert "UBUNTU: SAUCE: (snapdragon) drm/msm/adv7511: wrap hacks under
          CONFIG_ADV7511_SNAPDRAGON_HACKS #ifdefs"
        - Revert "UBUNTU: SAUCE: (snapdragon) media: ov5645: skip address change if dt
          addr == default addr"
        - Revert "UBUNTU: SAUCE: (snapdragon) DT: leds: Add Qualcomm Light Pulse
          Generator binding"
        - Revert "UBUNTU: SAUCE: (snapdragon) MAINTAINERS: Add Qualcomm Camera Control
          Interface driver"
        - Revert "UBUNTU: SAUCE: (snapdragon) dt-bindings: media: Binding document for
          Qualcomm Camera Control Interface driver"
        - Revert "UBUNTU: SAUCE: (snapdragon) leds: Add driver for Qualcomm LPG"
        - Revert "UBUNTU: SAUCE: (snapdragon) HACK: drm/msm/adv7511: Don't rely on
          interrupts for EDID parsing"
        - Revert "UBUNTU: SAUCE: (snapdragon) drm/bridge/adv7511: Delay clearing of
          HPD interrupt status"
        - Revert "UBUNTU: SAUCE: (snapdragon) media: ov5645: Fix I2C address"
        - Revert "UBUNTU: SAUCE: (snapdragon) i2c-qcom-cci: Fix I2C address bug"
        - Revert "UBUNTU: SAUCE: (snapdragon) i2c-qcom-cci: Fix run queue completion
          timeout"
        - Revert "UBUNTU: SAUCE: (snapdragon) camss: Do not register if no cameras are
          present"
        - Revert "UBUNTU: SAUCE: (snapdragon) i2c: Add Qualcomm Camera Control
          Interface driver"
        - Revert "UBUNTU: SAUCE: (snapdragon) ov5645: I2C address change"
        - Revert "UBUNTU: SAUCE: (snapdragon) regulator: smd: Allow
          REGULATOR_QCOM_SMD_RPM=m"
        - Revert "UBUNTU: SAUCE: (snapdragon) cpufreq: Add apq8016 to cpufreq-dt-
          platdev blacklist"
        - Revert "UBUNTU: SAUCE: (snapdragon) PM / OPP: Add a helper to get an opp
          regulator for device"
        - Revert "UBUNTU: SAUCE: (snapdragon) PM / OPP: HACK: Allow to set regulator
          without opp_list"
        - Revert "UBUNTU: SAUCE: (snapdragon) PM / OPP: Drop RCU usage in
          dev_pm_opp_adjust_voltage()"
        - Revert "UBUNTU: SAUCE: (snapdragon) PM / OPP: Support adjusting OPP voltages
          at runtime"
        - Revert "UBUNTU: SAUCE: (snapdragon) regulator: smd: Add floor and corner
          operations"
        - Revert "UBUNTU: SAUCE: (snapdragon) power: avs: cpr: Register with cpufreq-
          dt"
        - Revert "UBUNTU: SAUCE: (snapdragon) power: avs: cpr: fix with new
          reg_sequence structures"
        - Revert "UBUNTU: SAUCE: (snapdragon) power: avs: cpr: Use raw mem access for
          qfprom"
        - Revert "UBUNTU: SAUCE: (snapdragon) power: avs: Add support for CPR (Core
          Power Reduction)"
        - Revert "UBUNTU: SAUCE: (snapdragon) HACK: drm/msm/iommu: Remove runtime_put
          calls in map/unmap"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: enable LEDS_QCOM_LPG"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: distro.config: enable 'BBR' TCP
          congestion algorithm"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: distro.config: enable 'fq' and
          'fq_codel' qdiscs"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: distro.config: enable
          'schedutil' CPUfreq governor"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: configs: set USB_CONFIG_F_FS in
          distro.config"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: enable
          CONFIG_USB_CONFIGFS_F_FS by default"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: configs: add freq stat to sysfs"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: configs: Enable camera drivers"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: disable ANALOG_TV and
          DIGITAL_TV"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: configs: add more USB net
          drivers"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: configs: enable BT_QCOMSMD"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: enable
          CFG80211_DEFAULT_PS by default"
        - Revert "UBUNTU: SAUCE: (snapdragon) Force the SMD regulator driver to be
          compiled-in"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: configs: enable dm_mod and
          dm_crypt"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: Enable a53/apcs and
          avs"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: configs: enable QCOM Venus"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: distro.config: enable debug
          friendly USB network adpater"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: configs: enable WCN36xx"
        - Revert "UBUNTU: SAUCE: (snapdragon) kernel: configs; add distro.config"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: enable QCOM audio
          drivers for APQ8016 and DB410c"
        - Revert "UBUNTU: SAUCE: (snapdragon) arm64: defconfig: enable REMOTEPROC"
        - [Config] fix abi for remove i2c-qcom-cci module
        - [Config] update annotations
        - [Config] update configs following snapdragon removal
    
      * Disco update: v5.0.5 upstream stable release (LP: #1822671)
        - Revert "ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec"
        - ALSA: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist
        - ALSA: firewire-motu: use 'version' field of unit directory to identify model
        - mmc: pxamci: fix enum type confusion
        - mmc: alcor: fix DMA reads
        - mmc: mxcmmc: "Revert mmc: mxcmmc: handle highmem pages"
        - mmc: renesas_sdhi: limit block count to 16 bit for old revisions
        - drm/amdgpu: fix invalid use of change_bit
        - drm/vmwgfx: Don't double-free the mode stored in par->set_mode
        - drm/vmwgfx: Return 0 when gmrid::get_node runs out of ID's
        - iommu/amd: fix sg->dma_address for sg->offset bigger than PAGE_SIZE
        - iommu/iova: Fix tracking of recently failed iova address
        - libceph: wait for latest osdmap in ceph_monc_blacklist_add()
        - udf: Fix crash on IO error during truncate
        - mips: loongson64: lemote-2f: Add IRQF_NO_SUSPEND to "cascade" irqaction.
        - MIPS: Ensure ELF appended dtb is relocated
        - MIPS: Fix kernel crash for R6 in jump label branch function
        - powerpc/vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038
        - powerpc/security: Fix spectre_v2 reporting
        - net/mlx5: Fix DCT creation bad flow
        - scsi: core: Avoid that a kernel warning appears during system resume
        - scsi: qla2xxx: Fix FC-AL connection target discovery
        - scsi: ibmvscsi: Protect ibmvscsi_head from concurrent modificaiton
        - scsi: ibmvscsi: Fix empty event pool access during host removal
        - futex: Ensure that futex address is aligned in handle_futex_death()
        - perf probe: Fix getting the kernel map
        - objtool: Move objtool_file struct off the stack
        - irqchip/gic-v3-its: Fix comparison logic in lpi_range_cmp
        - clocksource/drivers/riscv: Fix clocksource mask
        - ALSA: ac97: Fix of-node refcount unbalance
        - ext4: fix NULL pointer dereference while journal is aborted
        - ext4: fix data corruption caused by unaligned direct AIO
        - ext4: brelse all indirect buffer in ext4_ind_remove_space()
        - media: v4l2-ctrls.c/uvc: zero v4l2_event
        - Bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf()
        - Bluetooth: Fix decrementing reference count twice in releasing socket
        - Bluetooth: hci_ldisc: Initialize hci_dev before open()
        - Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in
          hci_uart_set_proto()
        - drm/vkms: Fix flush_work() without INIT_WORK().
        - RDMA/cma: Rollback source IP address if failing to acquire device
        - f2fs: fix to avoid deadlock of atomic file operations
        - aio: simplify - and fix - fget/fput for io_submit()
        - netfilter: ebtables: remove BUGPRINT messages
        - loop: access lo_backing_file only when the loop device is Lo_bound
        - x86/unwind: Handle NULL pointer calls better in frame unwinder
        - x86/unwind: Add hardcoded ORC entry for NULL
        - locking/lockdep: Add debug_locks check in __lock_downgrade()
        - ALSA: hda - Record the current power state before suspend/resume calls
        - ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec
        - Linux 5.0.5
    
      * hisi_sas updates for disco (LP: #1822385)
        - scsi: hisi_sas: send primitive NOTIFY to SSP situation only
        - scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned
        - scsi: hisi_sas: remove the check of sas_dev status in
          hisi_sas_I_T_nexus_reset()
        - scsi: hisi_sas: Remove unused parameter of function hisi_sas_alloc()
        - scsi: hisi_sas: Reject setting programmed minimum linkrate > 1.5G
        - scsi: hisi_sas: Fix losing directly attached disk when hot-plug
        - scsi: hisi_sas: Correct memory allocation size for DQ debugfs
        - scsi: hisi_sas: Some misc tidy-up
        - scsi: hisi_sas: Fix to only call scsi_get_prot_op() for non-NULL scsi_cmnd
        - scsi: hisi_sas: Add missing seq_printf() call in hisi_sas_show_row_32()
        - scsi: hisi_sas: Add support for DIX feature for v3 hw
        - scsi: hisi_sas: Add manual trigger for debugfs dump
        - scsi: hisi_sas: change queue depth from 512 to 4096
        - scsi: hisi_sas: Issue internal abort on all relevant queues
        - scsi: hisi_sas: Use pci_irq_get_affinity() for v3 hw as experimental
        - scsi: hisi_sas: Do some more tidy-up
        - scsi: hisi_sas: Change return variable type in phy_up_v3_hw()
        - scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO
        - scsi: hisi_sas: print PHY RX errors count for later revision of v3 hw
        - scsi: hisi_sas: Set PHY linkrate when disconnected
        - scsi: hisi_sas: Send HARD RESET to clear the previous affiliation of STP
          target port
        - scsi: hisi_sas: Change SERDES_CFG init value to increase reliability of
          HiLink
        - scsi: hisi_sas: Add softreset in hisi_sas_I_T_nexus_reset()
    
      * [Patch][Raven 2] kernel 5.0.0 cannot boot because of psp response
        (LP: #1822267)
        - drm/amdgpu/psp: Fix can't detect psp INVOKE command failed
        - drm/amdgpu/psp: ignore psp response status
    
      * 3b080b2564287be91605bfd1d5ee985696e61d3c in ubuntu_btrfs_kernel_fixes
        triggers system hang on i386 (LP: #1812845)
        - btrfs: raid56: properly unmap parity page in finish_parity_scrub()
    
      * enable CONFIG_DRM_BOCHS (LP: #1795857)
        - [Config] Reenable DRM_BOCHS as module
    
      * [Dell Precision 7530/5530 with Nvidia Quadro P1000] Live USB freezes or
        cannot complete install when nouveau driver is loaded (crashing in GP100
        code) (LP: #1822026)
        - SAUCE: drm/nouveau: Disable nouveau driver by default
    
      * Need to add Intel CML related pci-id's (LP: #1821863)
        - drm/i915/cml: Add CML PCI IDS
        - drm/i915/cml: Introduce Comet Lake PCH
    
      * ARM: Add support for the SDEI interface (LP: #1822005)
        - ACPI / APEI: Don't wait to serialise with oops messages when panic()ing
        - ACPI / APEI: Remove silent flag from ghes_read_estatus()
        - ACPI / APEI: Switch estatus pool to use vmalloc memory
        - ACPI / APEI: Make hest.c manage the estatus memory pool
        - ACPI / APEI: Make estatus pool allocation a static size
        - ACPI / APEI: Don't store CPER records physical address in struct ghes
        - ACPI / APEI: Remove spurious GHES_TO_CLEAR check
        - ACPI / APEI: Don't update struct ghes' flags in read/clear estatus
        - ACPI / APEI: Generalise the estatus queue's notify code
        - ACPI / APEI: Don't allow ghes_ack_error() to mask earlier errors
        - ACPI / APEI: Move NOTIFY_SEA between the estatus-queue and NOTIFY_NMI
        - ACPI / APEI: Switch NOTIFY_SEA to use the estatus queue
        - KVM: arm/arm64: Add kvm_ras.h to collect kvm specific RAS plumbing
        - arm64: KVM/mm: Move SEA handling behind a single 'claim' interface
        - ACPI / APEI: Move locking to the notification helper
        - ACPI / APEI: Let the notification helper specify the fixmap slot
        - ACPI / APEI: Pass ghes and estatus separately to avoid a later copy
        - ACPI / APEI: Make GHES estatus header validation more user friendly
        - ACPI / APEI: Split ghes_read_estatus() to allow a peek at the CPER length
        - ACPI / APEI: Only use queued estatus entry during in_nmi_queue_one_entry()
        - ACPI / APEI: Use separate fixmap pages for arm64 NMI-like notifications
        - firmware: arm_sdei: Add ACPI GHES registration helper
        - ACPI / APEI: Add support for the SDEI GHES Notification type
    
      * CVE-2019-9857
        - inotify: Fix fsnotify_mark refcount leak in inotify_update_existing_watch()
    
      * scsi: libsas: Support SATA PHY connection rate unmatch fixing during
        discovery (LP: #1821408)
        - scsi: libsas: Support SATA PHY connection rate unmatch fixing during
          discovery
    
      * Qualcomm Atheros QCA9377 wireless does not work (LP: #1818204)
        - platform/x86: ideapad-laptop: Add Ideapad 530S-14ARR to no_hw_rfkill list
    
      * Lenovo ideapad 330-15ICH Wifi rfkill hard blocked (LP: #1811815)
        - platform/x86: ideapad: Add ideapad 330-15ICH to no_hw_rfkill
    
      * hid-sensor-hub spamming dmesg in 4.20 (LP: #1818547)
        - HID: Increase maximum report size allowed by hid_field_extract()
    
      * [disco] [5.0.0-7.8] can't mount guest cifs share (LP: #1821053)
        - cifs: allow guest mounts to work for smb3.11
        - SMB3: Fix SMB3.1.1 guest mounts to Samba
    
      * Add HiSilicon SoC quirk for cpufreq (LP: #1821620)
        - ACPI / CPPC: Add a helper to get desired performance
        - cpufreq / cppc: Work around for Hisilicon CPPC cpufreq
    
      * Disco update: v5.0.4 upstream stable release (LP: #1821607)
        - 9p: use inode->i_lock to protect i_size_write() under 32-bit
        - 9p/net: fix memory leak in p9_client_create
        - ASoC: fsl_esai: fix register setting issue in RIGHT_J mode
        - ASoC: codecs: pcm186x: fix wrong usage of DECLARE_TLV_DB_SCALE()
        - ASoC: codecs: pcm186x: Fix energysense SLEEP bit
        - iio: adc: exynos-adc: Fix NULL pointer exception on unbind
        - iio: adc: exynos-adc: Use proper number of channels for Exynos4x12
        - mei: hbm: clean the feature flags on link reset
        - mei: bus: move hw module get/put to probe/release
        - stm class: Prevent division by zero
        - stm class: Fix an endless loop in channel allocation
        - crypto: caam - fix hash context DMA unmap size
        - crypto: ccree - fix missing break in switch statement
        - crypto: caam - fixed handling of sg list
        - crypto: caam - fix DMA mapping of stack memory
        - crypto: ccree - fix free of unallocated mlli buffer
        - crypto: ccree - unmap buffer before copying IV
        - crypto: ccree - don't copy zero size ciphertext
        - crypto: cfb - add missing 'chunksize' property
        - crypto: cfb - remove bogus memcpy() with src == dest
        - crypto: ofb - fix handling partial blocks and make thread-safe
        - crypto: ahash - fix another early termination in hash walk
        - crypto: rockchip - fix scatterlist nents error
        - crypto: rockchip - update new iv to device in multiple operations
        - dax: Flush partial PMDs correctly
        - nfit: Fix nfit_intel_shutdown_status() command submission
        - nfit: acpi_nfit_ctl(): Check out_obj->type in the right place
        - acpi/nfit: Fix bus command validation
        - nfit/ars: Attempt a short-ARS whenever the ARS state is idle at boot
        - nfit/ars: Attempt short-ARS even in the no_init_ars case
        - libnvdimm/label: Clear 'updating' flag after label-set update
        - libnvdimm, pfn: Fix over-trim in trim_pfn_device()
        - libnvdimm/pmem: Honor force_raw for legacy pmem regions
        - libnvdimm: Fix altmap reservation size calculation
        - fix cgroup_do_mount() handling of failure exits
        - crypto: aead - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
        - crypto: aegis - fix handling chunked inputs
        - crypto: arm/crct10dif - revert to C code for short inputs
        - crypto: arm64/aes-neonbs - fix returning final keystream block
        - crypto: arm64/crct10dif - revert to C code for short inputs
        - crypto: hash - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
        - crypto: morus - fix handling chunked inputs
        - crypto: pcbc - remove bogus memcpy()s with src == dest
        - crypto: skcipher - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
        - crypto: testmgr - skip crc32c context test for ahash algorithms
        - crypto: x86/aegis - fix handling chunked inputs and MAY_SLEEP
        - crypto: x86/aesni-gcm - fix crash on empty plaintext
        - crypto: x86/morus - fix handling chunked inputs and MAY_SLEEP
        - crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling
        - crypto: arm64/aes-ccm - fix bugs in non-NEON fallback routine
        - CIFS: Fix leaking locked VFS cache pages in writeback retry
        - CIFS: Do not reset lease state to NONE on lease break
        - CIFS: Do not skip SMB2 message IDs on send failures
        - CIFS: Fix read after write for files with read caching
        - smb3: make default i/o size for smb3 mounts larger
        - tracing: Use strncpy instead of memcpy for string keys in hist triggers
        - tracing: Do not free iter->trace in fail path of tracing_open_pipe()
        - tracing/perf: Use strndup_user() instead of buggy open-coded version
        - vmw_balloon: release lock on error in vmballoon_reset()
        - xen: fix dom0 boot on huge systems
        - ACPI / device_sysfs: Avoid OF modalias creation for removed device
        - mmc: sdhci-esdhc-imx: fix HS400 timing issue
        - mmc: renesas_sdhi: Fix card initialization failure in high speed mode
        - mmc:fix a bug when max_discard is 0
        - spi: ti-qspi: Fix mmap read when more than one CS in use
        - spi: pxa2xx: Setup maximum supported DMA transfer length
        - spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch
        - spi: spi-gpio: fix SPI_CS_HIGH capability
        - regulator: s2mps11: Fix steps for buck7, buck8 and LDO35
        - regulator: max77620: Initialize values for DT properties
        - regulator: s2mpa01: Fix step values for some LDOs
        - mt76: fix corrupted software generated tx CCMP PN
        - clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR
        - clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown
        - clocksource/drivers/arch_timer: Workaround for Allwinner A64 timer
          instability
        - s390: vfio_ap: link the vfio_ap devices to the vfio_ap bus subsystem
        - s390/setup: fix early warning messages
        - s390/virtio: handle find on invalid queue gracefully
        - scsi: virtio_scsi: don't send sc payload with tmfs
        - scsi: aacraid: Fix performance issue on logical drives
        - scsi: sd: Optimal I/O size should be a multiple of physical block size
        - scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
        - scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware
        - scsi: qla2xxx: Avoid PCI IRQ affinity mapping when multiqueue is not
          supported
        - scsi: qla2xxx: Use complete switch scan for RSCN events
        - fs/devpts: always delete dcache dentry-s in dput()
        - splice: don't merge into linked buffers
        - ovl: During copy up, first copy up data and then xattrs
        - ovl: Do not lose security.capability xattr over metadata file copy-up
        - m68k: Add -ffreestanding to CFLAGS
        - Btrfs: setup a nofs context for memory allocation at btrfs_create_tree()
        - Btrfs: setup a nofs context for memory allocation at __btrfs_set_acl
        - btrfs: scrub: fix circular locking dependency warning
        - btrfs: drop the lock on error in btrfs_dev_replace_cancel
        - btrfs: ensure that a DUP or RAID1 block group has exactly two stripes
        - btrfs: init csum_list before possible free
        - Btrfs: fix corruption reading shared and compressed extents after hole
          punching
        - Btrfs: fix deadlock between clone/dedupe and rename
        - soc: qcom: rpmh: Avoid accessing freed memory from batch API
        - libertas_tf: don't set URB_ZERO_PACKET on IN USB transfer
        - irqchip/gic-v3-its: Avoid parsing _indirect_ twice for Device table
        - irqchip/brcmstb-l2: Use _irqsave locking variants in non-interrupt code
        - x86/kprobes: Prohibit probing on optprobe template code
        - cpufreq: kryo: Release OPP tables on module removal
        - cpufreq: tegra124: add missing of_node_put()
        - cpufreq: pxa2xx: remove incorrect __init annotation
        - ext4: fix check of inode in swap_inode_boot_loader
        - ext4: cleanup pagecache before swap i_data
        - mm: hwpoison: fix thp split handing in soft_offline_in_use_page()
        - mm/vmalloc: fix size check for remap_vmalloc_range_partial()
        - mm/memory.c: do_fault: avoid usage of stale vm_area_struct
        - kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv
        - nvmem: core: don't check the return value of notifier chain call
        - device property: Fix the length used in PROPERTY_ENTRY_STRING()
        - intel_th: Don't reference unassigned outputs
        - parport_pc: fix find_superio io compare code, should use equal test.
        - i2c: tegra: fix maximum transfer size
        - i2c: tegra: update maximum transfer size
        - media: i2c: ov5640: Fix post-reset delay
        - gpio: pca953x: Fix dereference of irq data in shutdown
        - ext4: update quota information while swapping boot loader inode
        - ext4: add mask of ext4 flags to swap
        - ext4: fix crash during online resizing
        - dma: Introduce dma_max_mapping_size()
        - swiotlb: Introduce swiotlb_max_mapping_size()
        - swiotlb: Add is_swiotlb_active() function
        - PCI/ASPM: Use LTR if already enabled by platform
        - PCI/DPC: Fix print AER status in DPC event handling
        - PCI: qcom: Don't deassert reset GPIO during probe
        - PCI: dwc: skip MSI init if MSIs have been explicitly disabled
        - PCI: pci-bridge-emul: Create per-bridge copy of register behavior
        - PCI: pci-bridge-emul: Extend pci_bridge_emul_init() with flags
        - IB/hfi1: Close race condition on user context disable and close
        - IB/rdmavt: Fix loopback send with invalidate ordering
        - IB/rdmavt: Fix concurrency panics in QP post_send and modify to error
        - cxl: Wrap iterations over afu slices inside 'afu_list_lock'
        - ext2: Fix underflow in ext2_max_size()
        - clk: uniphier: Fix update register for CPU-gear
        - clk: clk-twl6040: Fix imprecise external abort for pdmclk
        - clk: samsung: exynos5: Fix possible NULL pointer exception on
          platform_device_alloc() failure
        - clk: samsung: exynos5: Fix kfree() of const memory on setting
          driver_override
        - clk: ingenic: Fix round_rate misbehaving with non-integer dividers
        - clk: ingenic: Fix doc of ingenic_cgu_div_info
        - usb: chipidea: tegra: Fix missed ci_hdrc_remove_device()
        - usb: typec: tps6598x: handle block writes separately with plain-I2C adapters
        - dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit
        - serial: uartps: Fix stuck ISR if RX disabled with non-empty FIFO
        - serial: 8250_of: assume reg-shift of 2 for mrvl,mmp-uart
        - serial: 8250_pci: Fix number of ports for ACCES serial cards
        - serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954
          chip use the pci_pericom_setup()
        - jbd2: clear dirty flag when revoking a buffer from an older transaction
        - jbd2: fix compile warning when using JBUFFER_TRACE
        - selinux: add the missing walk_size + len check in selinux_sctp_bind_connect
        - security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblock
        - powerpc/32: Clear on-stack exception marker upon exception return
        - powerpc/wii: properly disable use of BATs when requested.
        - powerpc/powernv: Make opal log only readable by root
        - powerpc/83xx: Also save/restore SPRG4-7 during suspend
        - powerpc/kvm: Save and restore host AMR/IAMR/UAMOR
        - powerpc/powernv: Don't reprogram SLW image on every KVM guest entry/exit
        - powerpc/64s/hash: Fix assert_slb_presence() use of the slbfee. instruction
        - powerpc: Fix 32-bit KVM-PR lockup and host crash with MacOS guest
        - powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning
        - powerpc/hugetlb: Don't do runtime allocation of 16G pages in LPAR
          configuration
        - powerpc/smp: Fix NMI IPI timeout
        - powerpc/smp: Fix NMI IPI xmon timeout
        - powerpc/traps: fix recoverability of machine check handling on book3s/32
        - powerpc/traps: Fix the message printed when stack overflows
        - ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify
        - arm64: Fix HCR.TGE status for NMI contexts
        - arm64: debug: Don't propagate UNKNOWN FAR into si_code for debug signals
        - arm64: debug: Ensure debug handlers check triggering exception level
        - arm64: KVM: Fix architecturally invalid reset value for FPEXC32_EL2
        - Revert "KVM/MMU: Flush tlb directly in the kvm_zap_gfn_range()"
        - ipmi_si: Fix crash when using hard-coded device
        - ipmi_si: fix use-after-free of resource->name
        - dm: fix to_sector() for 32bit
        - dm integrity: limit the rate of error messages
        - media: cx25840: mark pad sig_types to fix cx231xx init
        - mfd: sm501: Fix potential NULL pointer dereference
        - cpcap-charger: generate events for userspace
        - cpuidle: governor: Add new governors to cpuidle_governors again
        - NFS: Fix I/O request leakages
        - NFS: Fix an I/O request leakage in nfs_do_recoalesce
        - NFS: Don't recoalesce on error in nfs_pageio_complete_mirror()
        - nfsd: fix performance-limiting session calculation
        - nfsd: fix memory corruption caused by readdir
        - nfsd: fix wrong check in write_v4_end_grace()
        - NFSv4.1: Reinitialise sequence results before retransmitting a request
        - svcrpc: fix UDP on servers with lots of threads
        - PM / wakeup: Rework wakeup source timer cancellation
        - PM / OPP: Update performance state when freq == old_freq
        - bcache: treat stale && dirty keys as bad keys
        - bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata
        - stable-kernel-rules.rst: add link to networking patch queue
        - vt: perform safe console erase in the right order
        - x86/unwind/orc: Fix ORC unwind table alignment
        - perf intel-pt: Fix CYC timestamp calculation after OVF
        - perf tools: Fix split_kallsyms_for_kcore() for trampoline symbols
        - perf auxtrace: Define auxtrace record alignment
        - perf intel-pt: Fix overlap calculation for padding
        - perf/x86/intel/uncore: Fix client IMC events return huge result
        - perf intel-pt: Fix divide by zero when TSC is not available
        - md: Fix failed allocation of md_register_thread
        - x86/kvmclock: set offset for kvm unstable clock
        - x86/ftrace: Fix warning and considate ftrace_jmp_replace() and
          ftrace_call_replace()
        - tpm/tpm_crb: Avoid unaligned reads in crb_recv()
        - tpm: Unify the send callback behaviour
        - rcu: Do RCU GP kthread self-wakeup from softirq and interrupt
        - media: imx: prpencvf: Stop upstream before disabling IDMA channel
        - media: lgdt330x: fix lock status reporting
        - media: sun6i: Fix CSI regmap's max_register
        - media: uvcvideo: Avoid NULL pointer dereference at the end of streaming
        - media: vimc: Add vimc-streamer for stream control
        - media: imx-csi: Input connections to CSI should be optional
        - media: imx: csi: Disable CSI immediately after last EOF
        - media: imx: csi: Stop upstream before disabling IDMA channel
        - drm/fb-helper: generic: Fix drm_fbdev_client_restore()
        - drm/radeon/evergreen_cs: fix missing break in switch statement
        - drm/amd/powerplay: correct power reading on fiji
        - drm/amd/display: don't call dm_pp_ function from an fpu block
        - KVM: Call kvm_arch_memslots_updated() before updating memslots
        - KVM: VMX: Compare only a single byte for VMCS' "launched" in vCPU-run
        - KVM: VMX: Zero out *all* general purpose registers after VM-Exit
        - KVM: x86/mmu: Detect MMIO generation wrap in any address space
        - KVM: x86/mmu: Do not cache MMIO accesses while memslots are in flux
        - KVM: nVMX: Sign extend displacements of VMX instr's mem operands
        - KVM: nVMX: Apply addr size mask to effective address for VMX instructions
        - KVM: nVMX: Ignore limit checks on VMX instructions using flat segments
        - KVM: nVMX: Check a single byte for VMCS "launched" in nested early checks
        - net: dsa: lantiq_gswip: fix use-after-free on failed probe
        - net: dsa: lantiq_gswip: fix OF child-node lookups
        - s390/setup: fix boot crash for machine without EDAT-1
        - SUNRPC: Prevent thundering herd when the socket is not connected
        - SUNRPC: Fix up RPC back channel transmission
        - SUNRPC: Respect RPC call timeouts when retrying transmission
        - Linux 5.0.4
        - [Config] update configs for 5.0.4 stable update
    
      * New Intel Wireless-AC 9260 [8086:2526] card not correctly probed in Ubuntu
        system (LP: #1821271)
        - iwlwifi: add new card for 9260 series
    
      * [CONFIG] please enable highdpi font FONT_TER16x32 (LP: #1819881)
        - [Config]: enable highdpi Terminus 16x32 font support
    
      * [SRU][B/B-OEM/C/D] Fix AMD IOMMU NULL dereference (LP: #1820990)
        - iommu/amd: Fix NULL dereference bug in match_hid_uid
    
      * some codecs stop working after S3 (LP: #1820930)
        - ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec
        - ALSA: hda - Don't trigger jackpoll_work in azx_resume
    
      * tcm_loop.ko: move from modules-extra into main modules package
        (LP: #1817786)
        - [Packaging] move tcm_loop.lo to main linux-modules package
    
      * C++ demangling support missing from perf (LP: #1396654)
        - [Packaging] fix a mistype
    
      * r8169 doesn't get woken up by ethernet cable plugging, no PME generated
        (LP: #1817676)
        - PCI: pciehp: Disable Data Link Layer State Changed event on suspend
    
      * Disco update: v5.0.3 upstream stable release (LP: #1821074)
        - connector: fix unsafe usage of ->real_parent
        - fou, fou6: avoid uninit-value in gue_err() and gue6_err()
        - gro_cells: make sure device is up in gro_cells_receive()
        - ipv4/route: fail early when inet dev is missing
        - l2tp: fix infoleak in l2tp_ip6_recvmsg()
        - lan743x: Fix RX Kernel Panic
        - lan743x: Fix TX Stall Issue
        - net: hsr: fix memory leak in hsr_dev_finalize()
        - net/hsr: fix possible crash in add_timer()
        - net: sit: fix UBSAN Undefined behaviour in check_6rd
        - net/x25: fix use-after-free in x25_device_event()
        - net/x25: reset state in x25_connect()
        - pptp: dst_release sk_dst_cache in pptp_sock_destruct
        - ravb: Decrease TxFIFO depth of Q3 and Q2 to one
        - route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race
        - rxrpc: Fix client call queueing, waiting for channel
        - sctp: remove sched init from sctp_stream_init
        - tcp: do not report TCP_CM_INQ of 0 for closed connections
        - tcp: Don't access TCP_SKB_CB before initializing it
        - tcp: handle inet_csk_reqsk_queue_add() failures
        - vxlan: Fix GRO cells race condition between receive and link delete
        - vxlan: test dev->flags & IFF_UP before calling gro_cells_receive()
        - net/mlx4_core: Fix reset flow when in command polling mode
        - net/mlx4_core: Fix locking in SRIOV mode when switching between events and
          polling
        - net/mlx4_core: Fix qp mtt size calculation
        - net: dsa: mv88e6xxx: Set correct interface mode for CPU/DSA ports
        - vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock
        - net: sched: flower: insert new filter to idr after setting its mask
        - f2fs: wait on atomic writes to count F2FS_CP_WB_DATA
        - perf/x86: Fixup typo in stub functions
        - ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against
          Liquid Saffire 56
        - ALSA: firewire-motu: fix construction of PCM frame for capture direction
        - ALSA: hda: Extend i915 component bind timeout
        - ALSA: hda - add more quirks for HP Z2 G4 and HP Z240
        - ALSA: hda/realtek: Enable audio jacks of ASUS UX362FA with ALC294
        - ALSA: hda/realtek - Reduce click noise on Dell Precision 5820 headphone
        - ALSA: hda/realtek: Enable headset MIC of Acer TravelMate X514-51T with
          ALC255
        - perf/x86/intel: Fix memory corruption
        - perf/x86/intel: Make dev_attr_allow_tsx_force_abort static
        - It's wrong to add len to sector_nr in raid10 reshape twice
        - drm: Block fb changes for async plane updates
        - Linux 5.0.3
    
      * Disco update: v5.0.2 upstream stable release (LP: #1820318)
        - media: uvcvideo: Fix 'type' check leading to overflow
        - Input: wacom_serial4 - add support for Wacom ArtPad II tablet
        - Input: elan_i2c - add id for touchpad found in Lenovo s21e-20
        - iscsi_ibft: Fix missing break in switch statement
        - scsi: aacraid: Fix missing break in switch statement
        - x86/PCI: Fixup RTIT_BAR of Intel Denverton Trace Hub
        - arm64: dts: zcu100-revC: Give wifi some time after power-on
        - arm64: dts: hikey: Give wifi some time after power-on
        - arm64: dts: hikey: Revert "Enable HS200 mode on eMMC"
        - ARM: dts: exynos: Fix pinctrl definition for eMMC RTSN line on Odroid X2/U3
        - ARM: dts: exynos: Add minimal clkout parameters to Exynos3250 PMU
        - ARM: dts: exynos: Fix max voltage for buck8 regulator on Odroid XU3/XU4
        - drm: disable uncached DMA optimization for ARM and arm64
        - media: Revert "media: rc: some events are dropped by userspace"
        - Revert "PCI/PME: Implement runtime PM callbacks"
        - bpf: Stop the psock parser before canceling its work
        - gfs2: Fix missed wakeups in find_insert_glock
        - staging: erofs: keep corrupted fs from crashing kernel in erofs_namei()
        - staging: erofs: compressed_pages should not be accessed again after freed
        - scripts/gdb: replace flags (MS_xyz -> SB_xyz)
        - ath9k: Avoid OF no-EEPROM quirks without qca,no-eeprom
        - perf/x86/intel: Make cpuc allocations consistent
        - perf/x86/intel: Generalize dynamic constraint creation
        - x86: Add TSX Force Abort CPUID/MSR
        - perf/x86/intel: Implement support for TSX Force Abort
        - Linux 5.0.2
    
      * Linux security module stacking support
        - LSM: Introduce LSM_FLAG_LEGACY_MAJOR
        - LSM: Provide separate ordered initialization
        - LSM: Plumb visibility into optional "enabled" state
        - LSM: Lift LSM selection out of individual LSMs
        - LSM: Build ordered list of LSMs to initialize
        - LSM: Introduce CONFIG_LSM
        - LSM: Introduce "lsm=" for boottime LSM selection
        - LSM: Tie enabling logic to presence in ordered list
        - LSM: Prepare for reorganizing "security=" logic
        - LSM: Refactor "security=" in terms of enable/disable
        - LSM: Separate idea of "major" LSM from "exclusive" LSM
        - apparmor: Remove SECURITY_APPARMOR_BOOTPARAM_VALUE
        - selinux: Remove SECURITY_SELINUX_BOOTPARAM_VALUE
        - LSM: Add all exclusive LSMs to ordered initialization
        - LSM: Split LSM preparation from initialization
        - LoadPin: Initialize as ordered LSM
        - Yama: Initialize as ordered LSM
        - LSM: Introduce enum lsm_order
        - capability: Initialize as LSM_ORDER_FIRST
        - procfs: add smack subdir to attrs
        - Smack: Abstract use of cred security blob
        - SELinux: Abstract use of cred security blob
        - SELinux: Remove cred security blob poisoning
        - SELinux: Remove unused selinux_is_enabled
        - AppArmor: Abstract use of cred security blob
        - TOMOYO: Abstract use of cred security blob
        - Infrastructure management of the cred security blob
        - SELinux: Abstract use of file security blob
        - Smack: Abstract use of file security blob
        - LSM: Infrastructure management of the file security
        - SELinux: Abstract use of inode security blob
        - Smack: Abstract use of inode security blob
        - LSM: Infrastructure management of the inode security
        - LSM: Infrastructure management of the task security
        - SELinux: Abstract use of ipc security blobs
        - Smack: Abstract use of ipc security blobs
        - LSM: Infrastructure management of the ipc security blob
        - TOMOYO: Update LSM flags to no longer be exclusive
        - LSM: generalize flag passing to security_capable
        - LSM: Make lsm_early_cred() and lsm_early_task() local functions.
        - LSM: Make some functions static
        - apparmor: Adjust offset when accessing task blob.
        - LSM: Ignore "security=" when "lsm=" is specified
        - LSM: Update list of SECURITYFS users in Kconfig
        - apparmor: delete the dentry in aafs_remove() to avoid a leak
        - apparmor: fix double free when unpack of secmark rules fails
        - SAUCE: LSM: Infrastructure management of the sock security
        - SAUCE: LSM: Limit calls to certain module hooks
        - SAUCE: LSM: Special handling for secctx lsm hooks
        - SAUCE: LSM: Specify which LSM to display with /proc/self/attr/display
        - SAUCE: Fix-up af_unix mediation for sock infrastructure management
        - SAUCE: Revert "apparmor: Fix warning about unused function
          apparmor_ipv6_postroute"
        - SAUCE: Revert "apparmor: fix checkpatch error in Parse secmark policy"
        - SAUCE: Revert "apparmor: add #ifdef checks for secmark filtering"
        - SAUCE: Revert "apparmor: Allow filtering based on secmark policy"
        - SAUCE: Revert "apparmor: Parse secmark policy"
        - SAUCE: Revert "apparmor: Add a wildcard secid"
        - SAUCE: Revert "apparmor: fix bad debug check in apparmor_secid_to_secctx()"
        - SAUCE: Revert "apparmor: fixup secid map conversion to using IDR"
        - SAUCE: Revert "apparmor: Use an IDR to allocate apparmor secids"
        - SAUCE: Revert "apparmor: Fix memory leak of rule on error exit path"
        - SAUCE: Revert "apparmor: modify audit rule support to support profile
          stacks"
        - SAUCE: Revert "apparmor: Add support for audit rule filtering"
        - SAUCE: Revert "apparmor: add the ability to get a task's secid"
        - SAUCE: Revert "apparmor: add support for mapping secids and using secctxes"
        - SAUCE: apparmor: add proc subdir to attrs
        - SAUCE: apparmor: add an apparmorfs entry to access current attrs
        - SAUCE: apparmor: update flags to no longer be exclusive
        - SAUCE: update configs and annotations for LSM stacking
    
      * Miscellaneous Ubuntu changes
        - [Config] CONFIG_EARLY_PRINTK_USB_XDBC=y
        - SAUCE: (efi-lockdown) bpf: Restrict kernel image access functions when the
          kernel is locked down
        - [Config] CONFIG_RANDOM_TRUST_CPU=y
        - [Config] refresh annotations for recent config changes
        - ubuntu: vbox -- update to 6.0.4-dfsg-7
        - Revert "UBUNTU: SAUCE: i2c:amd I2C Driver based on PCI Interface for
          upcoming platform"
    
     -- Seth Forshee <email address hidden>  Tue, 09 Apr 2019 08:30:38 -0500
  • linux (5.0.0-8.9) disco; urgency=medium
    
      * linux: 5.0.0-8.9 -proposed tracker (LP: #1819759)
    
      * hisi_sas: add debugfs support (LP: #1819500)
        - scsi: hisi_sas: Create root and device debugfs directories
        - scsi: hisi_sas: Alloc debugfs snapshot buffer memory for all registers
        - scsi: hisi_sas: Take debugfs snapshot for all regs
        - scsi: hisi_sas: Debugfs global register create file and add file operations
        - scsi: hisi_sas: Add debugfs for port registers
        - scsi: hisi_sas: Add debugfs CQ file and add file operations
        - scsi: hisi_sas: Add debugfs DQ file and add file operations
        - scsi: hisi_sas: Add debugfs IOST file and add file operations
        - scsi: hisi_sas: No need to check return value of debugfs_create functions
        - scsi: hisi_sas: Fix type casting and missing static qualifier in debugfs
          code
        - scsi: hisi_sas: Add debugfs ITCT file and add file operations
    
      * [disco] hns driver updates from 5.1 merge window (LP: #1819535)
        - net: hns: Use struct_size() in devm_kzalloc()
        - net: hns3: modify enet reinitialization interface
        - net: hns3: remove unused member in struct hns3_enet_ring
        - net: hns3: remove unnecessary hns3_adjust_tqps_num
        - net: hns3: reuse reinitialization interface in the hns3_set_channels
        - net: hns3: add interface hclge_tm_bp_setup
        - net: hns3: modify parameter checks in the hns3_set_channels
        - net: hns3: remove redundant codes in hclge_knic_setup
        - net: hns3: fix user configuration loss for ethtool -L
        - net: hns3: adjust the use of alloc_tqps and num_tqps
        - net: hns3: fix wrong combined count returned by ethtool -l
        - net: hns3: do reinitialization while ETS configuration changed
        - net: hns3: add HNAE3_RESTORE_CLIENT interface in enet module
        - net: hns3: add calling roce callback function when link status change
        - net: hns3: add rx multicast packets statistic
        - net: hns3: refactor the statistics updating for netdev
        - net: hns3: fix rss configuration lost problem when setting channel
        - net: hns3: fix for shaper not setting when TC num changes
        - net: hns3: fix bug of ethtool_ops.get_channels for VF
        - net: hns3: clear param in ring when free ring
        - net: hns3: Change fw error code NOT_EXEC to NOT_SUPPORTED
        - net: hns3: do not return GE PFC setting err when initializing
        - net: hns3: add ETS TC weight setting in SSU module
        - net: hns3: add statistics for PFC frames and MAC control frames
        - net: hns3: fix PFC not setting problem for DCB module
        - net: hns3: don't update packet statistics for packets dropped by hardware
        - net: hns3: clear pci private data when unload hns3 driver
        - net: hns3: add error handling in hclge_ieee_setets
        - net: hns3: fix return value handle issue for hclge_set_loopback()
        - net: hns3: fix broadcast promisc issue for revision 0x20
        - net: hns3: After setting the loopback, add the status of getting MAC
        - net: hns3: do reinitialization while mqprio configuration changed
        - net: hns3: remove dcb_ops->map_update in hclge_dcb
        - net: hns3: call hns3_nic_set_real_num_queue with netdev down
        - net: hns3: add 8 BD limit for tx flow
        - net: hns3: add initialization for nic state
        - net: hns3: don't allow vf to enable promisc mode
        - net: hns3: reuse the definition of l3 and l4 header info union
        - net: hns3: fix VF dump register issue
        - net: hns3: use the correct interface to stop|open port
        - net: hns3: change hnae3_register_ae_dev() to int
        - net: hns3: only support tc 0 for VF
        - net: hns3: Fix NULL deref when unloading driver
        - net: hns3: fix netif_napi_del() not do problem when unloading
        - net: hns3: fix for rss result nonuniform
        - net: hns3: fix improper error handling in the hclge_init_ae_dev()
        - net: hns3: fix an issue for hclgevf_ae_get_hdev
        - net: hns3: stop sending keep alive msg to PF when VF is resetting
        - net: hns3: keep flow director state unchanged when reset
        - net: hns3: Check for allocation failure
        - net: hns3: fix a code style issue for hns3_update_new_int_gl()
        - net: hns3: fix an issue for hns3_update_new_int_gl
        - net: hns3: Modify parameter type from int to bool in set_gro_en
        - net: hns3: code optimization for hclge_rx_buffer_calc
        - net: hns3: add hclge_cmd_check_retval() to parse comman's return value
        - net: hns3: move some set_bit statement into hclge_prepare_mac_addr
        - net: hns3: fix a wrong checking in the hclge_tx_buffer_calc()
        - net: hns3: fix the problem that the supported port is empty
        - net: hns3: optimize the maximum TC macro
        - net: hns3: don't allow user to change vlan filter state
        - net: hns3: modify the upper limit judgment condition
        - net: hns3: MAC table entry count function increases operation 0 value
          protection measures
        - net: hns3: make function hclge_set_all_vf_rst() static
        - net: hns3: add pointer checking at the beginning of the exported functions.
        - net: hns3: Check variable is valid before assigning it to another
        - net: hns3: convert mac advertize and supported from u32 to link mode
        - net: hns3: fix port info query issue for copper port
        - net: hns3: modify print message of ssu common ecc errors
        - net: hns3: some bugfix of ppu(rcb) ras errors
        - net: hns3: enable 8~11th bit of mac common msi-x error
        - net: hns3: fix 6th bit of ppp mpf abnormal errors
        - net: hns3: Record VF unicast and multicast tables
        - net: hns3: Record VF vlan tables
        - net: hns3: uninitialize command queue while unloading PF driver
        - net: hns3: clear command queue's registers when unloading VF driver
        - net: hns3: add xps setting support for hns3 driver
        - net: hns3: avoid mult + div op in critical data path
        - net: hns3: limit some variable scope in critical data path
        - net: hns3: remove some ops in struct hns3_nic_ops
        - net: hns3: add unlikely for error handling in data path
        - net: hns3: replace hnae3_set_bit and hnae3_set_field in data path
        - net: hns3: remove hnae3_get_bit in data path
        - net: hns3: add support to config depth for tx|rx ring separately
        - net: hns3: enable VF VLAN filter for each VF when initializing
        - net: hns3: fix get VF RSS issue
        - net: hns3: fix setting of the hns reset_type for rdma hw errors
        - net: hns3: fix improper error handling for hns3_client_start
        - net: hns: use struct_size() in devm_kzalloc()
        - net: hns3: Fix a logical vs bitwise typo
        - net: hns3: add dma_rmb() for rx description
        - net: hns3: fix to stop multiple HNS reset due to the AER changes
    
      * Build Nvidia drivers in conjunction with kernel (LP: #1764792)
        - [Packaging] dkms-build -- support building against packages in PPAs
        - [Packaging] dkms-build: do not redownload files on subsequent passes
        - [Packaging] dkms-build -- elide partial Built-Using information
        - [Packaging] dkms-build -- remove retpoline data from final binary packages
        - [Packaging] dkms-build--nvidia* -- check gcc version against primary build
        - [Packaging] dkms-build -- add support for unversioned overrides
        - [Packaging] dkms-build--nvidia-* -- convert to generic -N form
        - [Packaging] fix-filenames -- handle exact string removal
        - [Packaging] dkms-build--nvidia-N -- remove GCC versions
    
      * Disco update: v5.0.1 upstream stable release (LP: #1819515)
        - cpufreq: Use struct kobj_attribute instead of struct global_attr
        - staging: erofs: fix mis-acted TAIL merging behavior
        - binder: create node flag to request sender's security context
        - USB: serial: option: add Telit ME910 ECM composition
        - USB: serial: cp210x: add ID for Ingenico 3070
        - USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485
        - driver core: Postpone DMA tear-down until after devres release
        - staging: erofs: fix fast symlink w/o xattr when fs xattr is on
        - staging: erofs: fix memleak of inode's shared xattr array
        - staging: erofs: fix race of initializing xattrs of a inode at the same time
        - staging: erofs: fix illegal address access under memory pressure
        - staging: comedi: ni_660x: fix missing break in switch statement
        - staging: wilc1000: fix to set correct value for 'vif_num'
        - staging: android: ion: fix sys heap pool's gfp_flags
        - staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
        - staging: android: ashmem: Avoid range_alloc() allocation with ashmem_mutex
          held.
        - ip6mr: Do not call __IP6_INC_STATS() from preemptible context
        - net: dsa: mv88e6xxx: add call to mv88e6xxx_ports_cmode_init to probe for new
          DSA framework
        - net: dsa: mv88e6xxx: handle unknown duplex modes gracefully in
          mv88e6xxx_port_set_duplex
        - net: dsa: mv8e6xxx: fix number of internal PHYs for 88E6x90 family
        - net: mscc: Enable all ports in QSGMII
        - net: sched: put back q.qlen into a single location
        - net-sysfs: Fix mem leak in netdev_register_kobject
        - qmi_wwan: Add support for Quectel EG12/EM12
        - sctp: call iov_iter_revert() after sending ABORT
        - team: Free BPF filter when unregistering netdev
        - tipc: fix RDM/DGRAM connect() regression
        - x86/CPU/AMD: Set the CPB bit unconditionally on F17h
        - x86/boot/compressed/64: Do not read legacy ROM on EFI system
        - tracing: Fix event filters and triggers to handle negative numbers
        - xhci: tegra: Prevent error pointer dereference
        - usb: xhci: Fix for Enabling USB ROLE SWITCH QUIRK on
          INTEL_SUNRISEPOINT_LP_XHCI
        - applicom: Fix potential Spectre v1 vulnerabilities
        - alpha: wire up io_pgetevents system call
        - MIPS: irq: Allocate accurate order pages for irq stack
        - aio: Fix locking in aio_poll()
        - xtensa: fix get_wchan
        - gnss: sirf: fix premature wakeup interrupt enable
        - USB: serial: cp210x: fix GPIO in autosuspend
        - Revert "selftests: firmware: add CONFIG_FW_LOADER_USER_HELPER_FALLBACK to
          config"
        - Revert "selftests: firmware: remove use of non-standard diff -Z option"
        - selftests: firmware: fix verify_reqs() return value
        - Bluetooth: btrtl: Restore old logic to assume firmware is already loaded
        - Bluetooth: Fix locking in bt_accept_enqueue() for BH context
        - Linux 5.0.1
    
      * sky2 ethernet card doesn't work after returning from suspend
        (LP: #1807259) // sky2 ethernet card link not up after suspend
        (LP: #1809843) // Disco update: v5.0.1 upstream stable release
        (LP: #1819515)
        - sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79
    
      * tls selftest failures/hangs on i386 (LP: #1813607)
        - [Config] CONFIG_TLS=n for i386
    
      * CVE-2019-8980
        - exec: Fix mem leak in kernel_read_file
    
      * Miscellaneous Ubuntu changes
        - SAUCE: selftests: net: Use 'ipproto ipv6-icmp' to match ICMPv6 headers
        - [Config] enable nvidia build
        - [Config] update gcc version to 8.3
    
      * Miscellaneous upstream changes
        - Revert "UBUNTU: SAUCE: selftests: pmtu: disable accept_dad for tests"
    
     -- Thadeu Lima de Souza Cascardo <email address hidden>  Tue, 12 Mar 2019 16:15:44 -0300
  • linux (5.0.0-7.8) disco; urgency=medium
    
      * linux: 5.0.0-7.8 -proposed tracker (LP: #1818519)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] update helper scripts
    
      * unnecessary request_queue freeze (LP: #1815733)
        - block: avoid setting nr_requests to current value
        - block: avoid setting none scheduler if it's already none
    
      * Miscellaneous Ubuntu changes
        - SAUCE: selftests: net: Don't fail test_vxlan_under_vrf on xfail
        - update dkms package versions
    
      [ Upstream Kernel Changes ]
    
      * Rebase to v5.0
    
     -- Seth Forshee <email address hidden>  Mon, 04 Mar 2019 08:46:10 -0600
  • linux (4.19.0-13.14) disco; urgency=medium
    
      * linux: 4.19.0-13.14 -proposed tracker (LP: #1815103)
    
      * linux-buildinfo: pull out ABI information into its own package
        (LP: #1806380)
        - [Packaging] autoreconstruct -- base tag is always primary mainline version
    
      * [Packaging] Allow overlay of config annotations (LP: #1752072)
        - [Packaging] config-check: Add an include directive
    
      * Disco update: 4.19.20 upstream stable release (LP: #1815090)
        - Fix "net: ipv4: do not handle duplicate fragments as overlapping"
        - drm/msm/gpu: fix building without debugfs
        - ipv6: Consider sk_bound_dev_if when binding a socket to an address
        - ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation
        - ipvlan, l3mdev: fix broken l3s mode wrt local routes
        - l2tp: copy 4 more bytes to linear part if necessary
        - l2tp: fix reading optional fields of L2TPv3
        - net: ip_gre: always reports o_key to userspace
        - net: ip_gre: use erspan key field for tunnel lookup
        - net/mlx4_core: Add masking for a few queries on HCA caps
        - netrom: switch to sock timer API
        - net/rose: fix NULL ax25_cb kernel panic
        - net: set default network namespace in init_dummy_netdev()
        - ravb: expand rx descriptor data to accommodate hw checksum
        - sctp: improve the events for sctp stream reset
        - tun: move the call to tun_set_real_num_queues
        - ucc_geth: Reset BQL queue when stopping device
        - net: ip6_gre: always reports o_key to userspace
        - sctp: improve the events for sctp stream adding
        - net/mlx5e: Allow MAC invalidation while spoofchk is ON
        - ip6mr: Fix notifiers call on mroute_clean_tables()
        - Revert "net/mlx5e: E-Switch, Initialize eswitch only if eswitch manager"
        - sctp: set chunk transport correctly when it's a new asoc
        - sctp: set flow sport from saddr only when it's 0
        - virtio_net: Don't enable NAPI when interface is down
        - virtio_net: Don't call free_old_xmit_skbs for xdp_frames
        - virtio_net: Fix not restoring real_num_rx_queues
        - virtio_net: Fix out of bounds access of sq
        - virtio_net: Don't process redirected XDP frames when XDP is disabled
        - virtio_net: Use xdp_return_frame to free xdp_frames on destroying vqs
        - virtio_net: Differentiate sk_buff and xdp_frame on freeing
        - CIFS: Do not count -ENODATA as failure for query directory
        - CIFS: Fix trace command logging for SMB2 reads and writes
        - CIFS: Do not consider -ENODATA as stat failure for reads
        - fs/dcache: Fix incorrect nr_dentry_unused accounting in shrink_dcache_sb()
        - iommu/vt-d: Fix memory leak in intel_iommu_put_resv_regions()
        - selftests/seccomp: Enhance per-arch ptrace syscall skip tests
        - NFS: Fix up return value on fatal errors in nfs_page_async_flush()
        - ARM: cns3xxx: Fix writing to wrong PCI config registers after alignment
        - arm64: kaslr: ensure randomized quantities are clean also when kaslr is off
        - arm64: Do not issue IPIs for user executable ptes
        - arm64: hyp-stub: Forbid kprobing of the hyp-stub
        - arm64: hibernate: Clean the __hyp_text to PoC after resume
        - gpio: altera-a10sr: Set proper output level for direction_output
        - gpiolib: fix line event timestamps for nested irqs
        - gpio: pcf857x: Fix interrupts on multiple instances
        - gpio: sprd: Fix the incorrect data register
        - gpio: sprd: Fix incorrect irq type setting for the async EIC
        - gfs2: Revert "Fix loop in gfs2_rbm_find"
        - mmc: bcm2835: Fix DMA channel leak on probe error
        - mmc: mediatek: fix incorrect register setting of hs400_cmd_int_delay
        - ALSA: usb-audio: Add Opus #3 to quirks for native DSD support
        - ALSA: hda/realtek - Fixed hp_pin no value
        - IB/hfi1: Remove overly conservative VM_EXEC flag check
        - platform/x86: asus-nb-wmi: Map 0x35 to KEY_SCREENLOCK
        - platform/x86: asus-nb-wmi: Drop mapping of 0x33 and 0x34 scan codes
        - mmc: sdhci-iproc: handle mmc_of_parse() errors during probe
        - Btrfs: fix deadlock when allocating tree block during leaf/node split
        - btrfs: On error always free subvol_name in btrfs_mount
        - kernel/exit.c: release ptraced tasks before zap_pid_ns_processes
        - mm/hugetlb.c: teach follow_hugetlb_page() to handle FOLL_NOWAIT
        - oom, oom_reaper: do not enqueue same task twice
        - mm,memory_hotplug: fix scan_movable_pages() for gigantic hugepages
        - mm, oom: fix use-after-free in oom_kill_process
        - mm: hwpoison: use do_send_sig_info() instead of force_sig()
        - mm: migrate: don't rely on __PageMovable() of newpage after unlocking it
        - of: Convert to using %pOFn instead of device_node.name
        - of: overlay: add tests to validate kfrees from overlay removal
        - of: overlay: add missing of_node_get() in __of_attach_node_sysfs
        - of: overlay: use prop add changeset entry for property in new nodes
        - of: overlay: do not duplicate properties from overlay for new nodes
        - md/raid5: fix 'out of memory' during raid cache recovery
        - cifs: Always resolve hostname before reconnecting
        - Linux 4.19.20
    
      * CONFIG_TEST_BPF is disabled (LP: #1813955)
        - [Config]: Reenable TEST_BPF
    
      * CVE-2018-16880
        - vhost: fix OOB in get_rx_bufs()
    
      * Disco update: v4.19.19 upstream stable release (LP: #1814170)
        - amd-xgbe: Fix mdio access for non-zero ports and clause 45 PHYs
        - net: bridge: Fix ethernet header pointer before check skb forwardable
        - net: Fix usage of pskb_trim_rcsum
        - net: phy: marvell: Errata for mv88e6390 internal PHYs
        - net: phy: mdio_bus: add missing device_del() in mdiobus_register() error
          handling
        - net/sched: act_tunnel_key: fix memory leak in case of action replace
        - net_sched: refetch skb protocol for each filter
        - openvswitch: Avoid OOB read when parsing flow nlattrs
        - vhost: log dirty page correctly
        - mlxsw: pci: Increase PCI SW reset timeout
        - net: ipv4: Fix memory leak in network namespace dismantle
        - mlxsw: spectrum_fid: Update dummy FID index
        - mlxsw: pci: Ring CQ's doorbell before RDQ's
        - net/sched: cls_flower: allocate mask dynamically in fl_change()
        - udp: with udp_segment release on error path
        - erspan: build the header with the right proto according to erspan_ver
        - net: phy: marvell: Fix deadlock from wrong locking
        - ip6_gre: update version related info when changing link
        - tcp: allow MSG_ZEROCOPY transmission also in CLOSE_WAIT state
        - mei: me: mark LBG devices as having dma support
        - mei: me: add denverton innovation engine device IDs
        - USB: leds: fix regression in usbport led trigger
        - USB: serial: simple: add Motorola Tetra TPG2200 device id
        - USB: serial: pl2303: add new PID to support PL2303TB
        - ceph: clear inode pointer when snap realm gets dropped by its inode
        - ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages
        - ASoC: rt5514-spi: Fix potential NULL pointer dereference
        - ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode
        - clk: socfpga: stratix10: fix rate calculation for pll clocks
        - clk: socfpga: stratix10: fix naming convention for the fixed-clocks
        - inotify: Fix fd refcount leak in inotify_add_watch().
        - ALSA: hda/realtek - Fix typo for ALC225 model
        - ARCv2: lib: memeset: fix doing prefetchw outside of buffer
        - ARC: adjust memblock_reserve of kernel memory
        - ARC: perf: map generic branches to correct hardware condition
        - s390/mm: always force a load of the primary ASCE on context switch
        - s390/early: improve machine detection
        - s390/smp: fix CPU hotplug deadlock with CPU rescan
        - misc: ibmvsm: Fix potential NULL pointer dereference
        - char/mwave: fix potential Spectre v1 vulnerability
        - mmc: dw_mmc-bluefield: : Fix the license information
        - mmc: meson-gx: Free irq in release() callback
        - staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1
        - tty: Handle problem if line discipline does not have receive_buf
        - uart: Fix crash in uart_write and uart_put_char
        - tty/n_hdlc: fix __might_sleep warning
        - hv_balloon: avoid touching uninitialized struct page during tail onlining
        - Drivers: hv: vmbus: Check for ring when getting debug info
        - vgacon: unconfuse vc_origin when using soft scrollback
        - CIFS: Fix possible hang during async MTU reads and writes
        - CIFS: Fix credits calculations for reads with errors
        - CIFS: Fix credit calculation for encrypted reads with errors
        - CIFS: Do not reconnect TCP session in add_credits()
        - smb3: add credits we receive from oplock/break PDUs
        - Input: xpad - add support for SteelSeries Stratus Duo
        - Input: input_event - provide override for sparc64
        - Input: uinput - fix undefined behavior in uinput_validate_absinfo()
        - acpi/nfit: Block function zero DSMs
        - acpi/nfit: Fix command-supported detection
        - scsi: ufs: Use explicit access size in ufshcd_dump_regs
        - dm thin: fix passdown_double_checking_shared_status()
        - dm crypt: fix parsing of extended IV arguments
        - drm/amdgpu: Add APTX quirk for Lenovo laptop
        - KVM: x86: Fix single-step debugging
        - KVM: x86: Fix PV IPIs for 32-bit KVM host
        - KVM: x86: WARN_ONCE if sending a PV IPI returns a fatal error
        - kvm: x86/vmx: Use kzalloc for cached_vmcs12
        - KVM/nVMX: Do not validate that posted_intr_desc_addr is page aligned
        - x86/pkeys: Properly copy pkey state at fork()
        - x86/selftests/pkeys: Fork() to check for state being preserved
        - x86/kaslr: Fix incorrect i8254 outb() parameters
        - x86/entry/64/compat: Fix stack switching for XEN PV
        - net: sun: cassini: Cleanup license conflict
        - irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size
        - can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by
          removing it
        - can: bcm: check timer values before ktime conversion
        - can: flexcan: fix NULL pointer exception during bringup
        - vt: make vt_console_print() compatible with the unicode screen buffer
        - vt: always call notifier with the console lock held
        - vt: invoke notifier on screen size change
        - drm/meson: Fix atomic mode switching regression
        - bpf: improve verifier branch analysis
        - bpf: add per-insn complexity limit
        - bpf: move {prev_,}insn_idx into verifier env
        - bpf: move tmp variable into ax register in interpreter
        - bpf: enable access to ax register also from verifier rewrite
        - bpf: restrict map value pointer arithmetic for unprivileged
        - bpf: restrict stack pointer arithmetic for unprivileged
        - bpf: restrict unknown scalars of mixed signed bounds for unprivileged
        - bpf: fix check_map_access smin_value test when pointer contains offset
        - bpf: prevent out of bounds speculation on pointer arithmetic
        - bpf: fix sanitation of alu op with pointer / scalar type from different
          paths
        - bpf: fix inner map masking to prevent oob under speculation
        - s390/smp: Fix calling smp_call_ipl_cpu() from ipl CPU
        - nvmet-rdma: Add unlikely for response allocated check
        - nvmet-rdma: fix null dereference under heavy load
        - Revert "mm, memory_hotplug: initialize struct pages for the full memory
          section"
        - usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup
        - ide: fix a typo in the settings proc file name
        - Input: input_event - fix the CONFIG_SPARC64 mixup
        - Linux 4.19.19
    
      * HP ProBook 470 G5, LED's in Hotkeys f5, f8 and f11 without function
        (LP: #1811254) // Disco update: v4.19.19 upstream stable release
        (LP: #1814170)
        - ALSA: hda - Add mute LED support for HP ProBook 470 G5
    
      * Vsock connect fails with ENODEV for large CID (LP: #1813934)
        - vhost/vsock: fix vhost vsock cid hashing inconsistent
    
      * Ignore "incomplete report" from Elan touchpanels (LP: #1813733)
        - HID: i2c-hid: Ignore input report if there's no data present on Elan
          touchpanels
    
      * SecureBoot support for arm64 (LP: #1804481)
        - Build signed kernels for arm64
    
      * ip6_gre: fix tunnel list corruption for x-netns (LP: #1812875)
        - ip6_gre: fix tunnel list corruption for x-netns
    
      * Miscellaneous Ubuntu changes
        - SAUCE: selftests: net: fix "from" match test in fib_rule_tests.sh
        - [Packaging] remove handoff check for uefi signing
        - [Packaging] decompress gzipped efi images in signing tarball
    
      * Miscellaneous upstream changes
        - selftests/bpf: Test narrow loads with off > 0 in test_verifier
        - bpf: add various test cases to selftests
        - bpf: improve verifier branch analysis
    
     -- Seth Forshee <email address hidden>  Thu, 07 Feb 2019 12:12:10 -0600
  • linux (4.19.0-12.13) disco; urgency=medium
    
      * linux: 4.19.0-12.13 -proposed tracker (LP: #1813664)
    
      * kernel oops in bcache module (LP: #1793901)
        - SAUCE: bcache: never writeback a discard operation
    
      * Disco update: 4.19.18 upstream stable release (LP: #1813611)
        - ipv6: Consider sk_bound_dev_if when binding a socket to a v4 mapped address
        - mlxsw: spectrum: Disable lag port TX before removing it
        - mlxsw: spectrum_switchdev: Set PVID correctly during VLAN deletion
        - net: dsa: mv88x6xxx: mv88e6390 errata
        - net, skbuff: do not prefer skb allocation fails early
        - qmi_wwan: add MTU default to qmap network interface
        - ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses
        - net: clear skb->tstamp in bridge forwarding path
        - netfilter: ipset: Allow matching on destination MAC address for mac and
          ipmac sets
        - gpio: pl061: Move irq_chip definition inside struct pl061
        - drm/amd/display: Guard against null stream_state in set_crc_source
        - drm/amdkfd: fix interrupt spin lock
        - ixgbe: allow IPsec Tx offload in VEPA mode
        - platform/x86: asus-wmi: Tell the EC the OS will handle the display off
          hotkey
        - e1000e: allow non-monotonic SYSTIM readings
        - usb: typec: tcpm: Do not disconnect link for self powered devices
        - selftests/bpf: enable (uncomment) all tests in test_libbpf.sh
        - of: overlay: add missing of_node_put() after add new node to changeset
        - writeback: don't decrement wb->refcnt if !wb->bdi
        - serial: set suppress_bind_attrs flag only if builtin
        - bpf: Allow narrow loads with offset > 0
        - ALSA: oxfw: add support for APOGEE duet FireWire
        - x86/mce: Fix -Wmissing-prototypes warnings
        - MIPS: SiByte: Enable swiotlb for SWARM, LittleSur and BigSur
        - crypto: ecc - regularize scalar for scalar multiplication
        - arm64: perf: set suppress_bind_attrs flag to true
        - drm/atomic-helper: Complete fake_commit->flip_done potentially earlier
        - clk: meson: meson8b: fix incorrect divider mapping in cpu_scale_table
        - samples: bpf: fix: error handling regarding kprobe_events
        - usb: gadget: udc: renesas_usb3: add a safety connection way for
          forced_b_device
        - fpga: altera-cvp: fix probing for multiple FPGAs on the bus
        - selinux: always allow mounting submounts
        - ASoC: pcm3168a: Don't disable pcm3168a when CONFIG_PM defined
        - scsi: qedi: Check for session online before getting iSCSI TLV data.
        - drm/amdgpu: Reorder uvd ring init before uvd resume
        - rxe: IB_WR_REG_MR does not capture MR's iova field
        - efi/libstub: Disable some warnings for x86{,_64}
        - jffs2: Fix use of uninitialized delayed_work, lockdep breakage
        - clk: imx: make mux parent strings const
        - pstore/ram: Do not treat empty buffers as valid
        - media: uvcvideo: Refactor teardown of uvc on USB disconnect
        - powerpc/xmon: Fix invocation inside lock region
        - powerpc/pseries/cpuidle: Fix preempt warning
        - media: firewire: Fix app_info parameter type in avc_ca{,_app}_info
        - ASoC: use dma_ops of parent device for acp_audio_dma
        - media: venus: core: Set dma maximum segment size
        - staging: erofs: fix use-after-free of on-stack `z_erofs_vle_unzip_io'
        - net: call sk_dst_reset when set SO_DONTROUTE
        - scsi: target: use consistent left-aligned ASCII INQUIRY data
        - scsi: target/core: Make sure that target_wait_for_sess_cmds() waits long
          enough
        - selftests: do not macro-expand failed assertion expressions
        - arm64: kasan: Increase stack size for KASAN_EXTRA
        - clk: imx6q: reset exclusive gates on init
        - arm64: Fix minor issues with the dcache_by_line_op macro
        - bpf: relax verifier restriction on BPF_MOV | BPF_ALU
        - kconfig: fix file name and line number of warn_ignored_character()
        - kconfig: fix memory leak when EOF is encountered in quotation
        - mmc: atmel-mci: do not assume idle after atmci_request_end
        - btrfs: volumes: Make sure there is no overlap of dev extents at mount time
        - btrfs: alloc_chunk: fix more DUP stripe size handling
        - btrfs: fix use-after-free due to race between replace start and cancel
        - btrfs: improve error handling of btrfs_add_link
        - tty/serial: do not free trasnmit buffer page under port lock
        - perf intel-pt: Fix error with config term "pt=0"
        - perf tests ARM: Disable breakpoint tests 32-bit
        - perf svghelper: Fix unchecked usage of strncpy()
        - perf parse-events: Fix unchecked usage of strncpy()
        - perf vendor events intel: Fix Load_Miss_Real_Latency on SKL/SKX
        - netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is set
        - netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine
        - netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine
        - x86/topology: Use total_cpus for max logical packages calculation
        - dm crypt: use u64 instead of sector_t to store iv_offset
        - dm kcopyd: Fix bug causing workqueue stalls
        - perf stat: Avoid segfaults caused by negated options
        - tools lib subcmd: Don't add the kernel sources to the include path
        - dm snapshot: Fix excessive memory usage and workqueue stalls
        - perf cs-etm: Correct packets swapping in cs_etm__flush()
        - perf tools: Add missing sigqueue() prototype for systems lacking it
        - perf tools: Add missing open_memstream() prototype for systems lacking it
        - quota: Lock s_umount in exclusive mode for Q_XQUOTA{ON,OFF} quotactls.
        - clocksource/drivers/integrator-ap: Add missing of_node_put()
        - dm: Check for device sector overflow if CONFIG_LBDAF is not set
        - Bluetooth: btusb: Add support for Intel bluetooth device 8087:0029
        - ALSA: bebob: fix model-id of unit for Apogee Ensemble
        - sysfs: Disable lockdep for driver bind/unbind files
        - IB/usnic: Fix potential deadlock
        - scsi: mpt3sas: fix memory ordering on 64bit writes
        - scsi: smartpqi: correct lun reset issues
        - ath10k: fix peer stats null pointer dereference
        - scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown()
        - scsi: megaraid: fix out-of-bound array accesses
        - iomap: don't search past page end in iomap_is_partially_uptodate
        - ocfs2: fix panic due to unrecovered local alloc
        - mm/page-writeback.c: don't break integrity writeback on ->writepage() error
        - mm/swap: use nr_node_ids for avail_lists in swap_info_struct
        - userfaultfd: clear flag if remap event not enabled
        - mm, proc: be more verbose about unstable VMA flags in /proc/<pid>/smaps
        - iwlwifi: mvm: Send LQ command as async when necessary
        - Bluetooth: Fix unnecessary error message for HCI request completion
        - ipmi: fix use-after-free of user->release_barrier.rda
        - ipmi: msghandler: Fix potential Spectre v1 vulnerabilities
        - ipmi: Prevent use-after-free in deliver_response
        - ipmi:ssif: Fix handling of multi-part return messages
        - ipmi: Don't initialize anything in the core until something uses it
        - Linux 4.19.18
    
      * tls selftest failures/hangs on i386 (LP: #1813607)
        - [Config] CONFIG_TLS=n for i386
    
      * Intel XL710 - i40e driver does not work with kernel 4.15 (Ubuntu 18.04)
        (LP: #1779756)
        - i40e: prevent overlapping tx_timeout recover
    
      * Disco update: 4.19.17 upstream stable release (LP: #1813016)
        - tty/ldsem: Wake up readers after timed out down_write()
        - tty: Don't hold ldisc lock in tty_reopen() if ldisc present
        - can: gw: ensure DLC boundaries after CAN frame modification
        - netfilter: nf_conncount: replace CONNCOUNT_LOCK_SLOTS with CONNCOUNT_SLOTS
        - netfilter: nf_conncount: split gc in two phases
        - netfilter: nf_conncount: restart search when nodes have been erased
        - netfilter: nf_conncount: merge lookup and add functions
        - netfilter: nf_conncount: move all list iterations under spinlock
        - netfilter: nf_conncount: speculative garbage collection on empty lists
        - netfilter: nf_conncount: fix argument order to find_next_bit
        - mmc: sdhci-msm: Disable CDR function on TX
        - Revert "scsi: target: iscsi: cxgbit: fix csk leak"
        - scsi: target: iscsi: cxgbit: fix csk leak
        - scsi: target: iscsi: cxgbit: fix csk leak
        - arm64/kvm: consistently handle host HCR_EL2 flags
        - arm64: Don't trap host pointer auth use to EL2
        - ipv6: fix kernel-infoleak in ipv6_local_error()
        - net: bridge: fix a bug on using a neighbour cache entry without checking its
          state
        - packet: Do not leak dev refcounts on error exit
        - tcp: change txhash on SYN-data timeout
        - tun: publish tfile after it's fully initialized
        - lan743x: Remove phy_read from link status change function
        - smc: move unhash as early as possible in smc_release()
        - r8169: don't try to read counters if chip is in a PCI power-save state
        - bonding: update nest level on unlink
        - ip: on queued skb use skb_header_pointer instead of pskb_may_pull
        - r8169: load Realtek PHY driver module before r8169
        - crypto: sm3 - fix undefined shift by >= width of value
        - crypto: caam - fix zero-length buffer DMA mapping
        - crypto: authencesn - Avoid twice completion call in decrypt path
        - crypto: ccree - convert to use crypto_authenc_extractkeys()
        - crypto: bcm - convert to use crypto_authenc_extractkeys()
        - crypto: authenc - fix parsing key with misaligned rta_len
        - crypto: talitos - reorder code in talitos_edesc_alloc()
        - crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK
        - xen: Fix x86 sched_clock() interface for xen
        - Revert "btrfs: balance dirty metadata pages in btrfs_finish_ordered_io"
        - btrfs: wait on ordered extents on abort cleanup
        - Yama: Check for pid death before checking ancestry
        - scsi: core: Synchronize request queue PM status only on successful resume
        - scsi: sd: Fix cache_type_store()
        - mips: fix n32 compat_ipc_parse_version
        - MIPS: BCM47XX: Setup struct device for the SoC
        - MIPS: lantiq: Fix IPI interrupt handling
        - drm/i915/gvt: Fix mmap range check
        - OF: properties: add missing of_node_put
        - mfd: tps6586x: Handle interrupts on suspend
        - media: v4l: ioctl: Validate num_planes for debug messages
        - RDMA/nldev: Don't expose unsafe global rkey to regular user
        - RDMA/vmw_pvrdma: Return the correct opcode when creating WR
        - kbuild: Disable LD_DEAD_CODE_DATA_ELIMINATION with ftrace & GCC <= 4.7
        - net: dsa: realtek-smi: fix OF child-node lookup
        - pstore/ram: Avoid allocation and leak of platform data
        - arm64: kaslr: ensure randomized quantities are clean to the PoC
        - arm64: dts: marvell: armada-ap806: reserve PSCI area
        - Disable MSI also when pcie-octeon.pcie_disable on
        - fix int_sqrt64() for very large numbers
        - omap2fb: Fix stack memory disclosure
        - media: vivid: fix error handling of kthread_run
        - media: vivid: set min width/height to a value > 0
        - bpf: in __bpf_redirect_no_mac pull mac only if present
        - ipv6: make icmp6_send() robust against null skb->dev
        - LSM: Check for NULL cred-security on free
        - media: vb2: vb2_mmap: move lock up
        - sunrpc: handle ENOMEM in rpcb_getport_async
        - netfilter: ebtables: account ebt_table_info to kmemcg
        - block: use rcu_work instead of call_rcu to avoid sleep in softirq
        - selinux: fix GPF on invalid policy
        - blockdev: Fix livelocks on loop device
        - sctp: allocate sctp_sockaddr_entry with kzalloc
        - tipc: fix uninit-value in in tipc_conn_rcv_sub
        - tipc: fix uninit-value in tipc_nl_compat_link_reset_stats
        - tipc: fix uninit-value in tipc_nl_compat_bearer_enable
        - tipc: fix uninit-value in tipc_nl_compat_link_set
        - tipc: fix uninit-value in tipc_nl_compat_name_table_dump
        - tipc: fix uninit-value in tipc_nl_compat_doit
        - block/loop: Don't grab "struct file" for vfs_getattr() operation.
        - block/loop: Use global lock for ioctl() operation.
        - loop: Fold __loop_release into loop_release
        - loop: Get rid of loop_index_mutex
        - loop: Push lo_ctl_mutex down into individual ioctls
        - loop: Split setting of lo_state from loop_clr_fd
        - loop: Push loop_ctl_mutex down into loop_clr_fd()
        - loop: Push loop_ctl_mutex down to loop_get_status()
        - loop: Push loop_ctl_mutex down to loop_set_status()
        - loop: Push loop_ctl_mutex down to loop_set_fd()
        - loop: Push loop_ctl_mutex down to loop_change_fd()
        - loop: Move special partition reread handling in loop_clr_fd()
        - loop: Move loop_reread_partitions() out of loop_ctl_mutex
        - loop: Fix deadlock when calling blkdev_reread_part()
        - loop: Avoid circular locking dependency between loop_ctl_mutex and bd_mutex
        - loop: Get rid of 'nested' acquisition of loop_ctl_mutex
        - loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl()
        - loop: drop caches if offset or block_size are changed
        - drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock
        - selftests: Fix test errors related to lib.mk khdr target
        - media: vb2: be sure to unlock mutex on errors
        - nbd: Use set_blocksize() to set device blocksize
        - Linux 4.19.17
    
      * Enable sound card power saving by default (LP: #1804265)
        - [Config] CONFIG_SND_HDA_POWER_SAVE_DEFAULT=1
    
      * Fix non-working QCA Rome Bluetooth after S3 (LP: #1812812)
        - USB: Add new USB LPM helpers
        - USB: Consolidate LPM checks to avoid enabling LPM twice
    
      * [SRU] Fix Xorg crash with nomodeset when BIOS enable 64-bit fb addr
        (LP: #1812797)
        - vgaarb: Add support for 64-bit frame buffer address
        - vgaarb: Keep adding VGA device in queue
    
      * bluetooth controller not detected with 4.15 kernel (LP: #1810797)
        - SAUCE: btqcomsmd: introduce BT_QCOMSMD_HACK
        - [Config] arm64: snapdragon: BT_QCOMSMD_HACK=y
    
      * [19.04 FEAT| Enable virtio-gpu for s390x (LP: #1799467)
        - [Config] enable virtio-gpu for s390x
    
      * Miscellaneous Ubuntu changes
        - Revert "UBUNTU: SAUCE: selftests: disable some failing networking tests"
        - SAUCE: selftests: net: replace AF_MAX with INT_MAX in socket.c
        - SAUCE: selftests/ftrace: Fix tab expansion in trace_marker snapshot trigger
          test
        - update dkms package versions
    
      * Miscellaneous upstream changes
        - selftests/ftrace: Fix checkbashisms errors
        - selftests/powerpc/pmu: Link ebb tests with -no-pie
    
     -- Seth Forshee <email address hidden>  Mon, 28 Jan 2019 15:38:30 -0600
  • linux (4.19.0-11.12) disco; urgency=medium
    
      * linux: 4.19.0-11.12 -proposed tracker (LP: #1812447)
    
      * Disco update: 4.19.16 upstream stable release (LP: #1812427)
        - Btrfs: fix deadlock when using free space tree due to block group creation
        - staging: rtl8188eu: Fix module loading from tasklet for CCMP encryption
        - staging: rtl8188eu: Fix module loading from tasklet for WEP encryption
        - cpufreq: scmi: Fix frequency invariance in slow path
        - ALSA: hda/realtek - Add unplug function into unplug state of Headset Mode
          for ALC225
        - ALSA: hda/realtek - Disable headset Mic VREF for headset mode of ALC225
        - CIFS: Fix adjustment of credits for MTU requests
        - CIFS: Do not set credits to 1 if the server didn't grant anything
        - CIFS: Do not hide EINTR after sending network packets
        - CIFS: Fix credit computation for compounded requests
        - cifs: Fix potential OOB access of lock element array
        - usb: cdc-acm: send ZLP for Telit 3G Intel based modems
        - USB: storage: don't insert sane sense for SPC3+ when bad sense specified
        - USB: storage: add quirk for SMI SM3350
        - USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB
        - slab: alien caches must not be initialized if the allocation of the alien
          cache failed
        - mm/usercopy.c: no check page span for stack objects
        - mm, memcg: fix reclaim deadlock with writeback
        - ACPI: power: Skip duplicate power resource references in _PRx
        - ACPI / PMIC: xpower: Fix TS-pin current-source handling
        - ACPI/IORT: Fix rc_dma_get_range()
        - i2c: dev: prevent adapter retries and timeout being set as minus value
        - mtd: rawnand: qcom: fix memory corruption that causes panic
        - vfio/type1: Fix unmap overflow off-by-one
        - drm/amdgpu: Add new VegaM pci id
        - PCI: dwc: Use interrupt masking instead of disabling
        - PCI: dwc: Take lock when ACKing an interrupt
        - PCI: dwc: Move interrupt acking into the proper callback
        - drm/amd/display: Fix MST dp_blank REG_WAIT timeout
        - drm/fb_helper: Allow leaking fbdev smem_start
        - drm/fb-helper: Partially bring back workaround for bugs of SDL 1.2
        - drm/i915: Unwind failure on pinning the gen7 ppgtt
        - drm/amdgpu: Don't ignore rc from drm_dp_mst_topology_mgr_resume()
        - drm/amdgpu: Don't fail resume process if resuming atomic state fails
        - rbd: don't return 0 on unmap if RBD_DEV_FLAG_REMOVING is set
        - ext4: make sure enough credits are reserved for dioread_nolock writes
        - ext4: fix a potential fiemap/page fault deadlock w/ inline_data
        - ext4: avoid kernel warning when writing the superblock to a dead device
        - ext4: use ext4_write_inode() when fsyncing w/o a journal
        - ext4: track writeback errors using the generic tracking infrastructure
        - ext4: fix special inode number checks in __ext4_iget()
        - mm: page_mapped: don't assume compound page is huge or THP
        - sunrpc: use-after-free in svc_process_common()
        - KVM: arm/arm64: Fix VMID alloc race by reverting to lock-less
        - arm64: compat: Don't pull syscall number from regs in arm_compat_syscall
        - Btrfs: fix access to available allocation bits when starting balance
        - Btrfs: fix deadlock when enabling quotas due to concurrent snapshot creation
        - Btrfs: use nofs context when initializing security xattrs to avoid deadlock
        - Linux 4.19.16
        - [Config] updateconfigs for 4.19.16 stable update
    
      * Crash on "ip link add foo type ipip" (LP: #1811803)
        - SAUCE: fan: Fix NULL pointer dereference
    
      * X1 Extreme: only one of the two SSDs is loaded (LP: #1811755)
        - nvme-core: rework a NQN copying operation
        - nvme: pad fake subsys NQN vid and ssvid with zeros
        - nvme: introduce NVME_QUIRK_IGNORE_DEV_SUBNQN
    
      * Fix not working Goodix touchpad (LP: #1811929)
        - HID: i2c-hid: Disable runtime PM on Goodix touchpad
    
      * kvm_stat : missing python dependency (LP: #1798776)
        - tools/kvm_stat: switch to python3
    
      * RTL8822BE WiFi Disabled in Kernel 4.18.0-12 (LP: #1806472)
        - SAUCE: staging: rtlwifi: allow RTLWIFI_DEBUG_ST to be disabled
        - [Config] CONFIG_RTLWIFI_DEBUG_ST=n
        - SAUCE: Add r8822be to signature inclusion list
    
      * Disco update: 4.19.15 upstream stable release (LP: #1811834)
        - ARM: dts: sun8i: a83t: bananapi-m3: increase vcc-pd voltage to 3.3V
        - pinctrl: meson: fix pull enable register calculation
        - arm64: dts: mt7622: fix no more console output on rfb1
        - powerpc: Fix COFF zImage booting on old powermacs
        - powerpc/mm: Fix linux page tables build with some configs
        - HID: ite: Add USB id match for another ITE based keyboard rfkill key quirk
        - ARM: dts: imx7d-pico: Describe the Wifi clock
        - ARM: imx: update the cpu power up timing setting on i.mx6sx
        - ARM: dts: imx7d-nitrogen7: Fix the description of the Wifi clock
        - IB/mlx5: Block DEVX umem from the non applicable cases
        - Input: restore EV_ABS ABS_RESERVED
        - powerpc/mm: Fallback to RAM if the altmap is unusable
        - drm/amdgpu: Fix DEBUG_LOCKS_WARN_ON(depth <= 0) in amdgpu_ctx.lock
        - IB/core: Fix oops in netdev_next_upper_dev_rcu()
        - checkstack.pl: fix for aarch64
        - xfrm: Fix error return code in xfrm_output_one()
        - xfrm: Fix bucket count reported to userspace
        - xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force clears
          the dst_entry.
        - ieee802154: hwsim: fix off-by-one in parse nested
        - netfilter: nf_tables: fix suspicious RCU usage in nft_chain_stats_replace()
        - netfilter: seqadj: re-load tcp header pointer after possible head
          reallocation
        - Revert "scsi: qla2xxx: Fix NVMe Target discovery"
        - scsi: bnx2fc: Fix NULL dereference in error handling
        - Input: omap-keypad - fix idle configuration to not block SoC idle states
        - Input: synaptics - enable RMI on ThinkPad T560
        - ibmvnic: Convert reset work item mutex to spin lock
        - ibmvnic: Fix non-atomic memory allocation in IRQ context
        - ieee802154: ca8210: fix possible u8 overflow in ca8210_rx_done
        - x86/mm: Fix guard hole handling
        - x86/dump_pagetables: Fix LDT remap address marker
        - i40e: fix mac filter delete when setting mac address
        - ixgbe: Fix race when the VF driver does a reset
        - netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel
        - netfilter: nat: can't use dst_hold on noref dst
        - netfilter: nf_conncount: use rb_link_node_rcu() instead of rb_link_node()
        - bnx2x: Clear fip MAC when fcoe offload support is disabled
        - bnx2x: Remove configured vlans as part of unload sequence.
        - bnx2x: Send update-svid ramrod with retry/poll flags enabled
        - scsi: target: iscsi: cxgbit: fix csk leak
        - scsi: target: iscsi: cxgbit: add missing spin_lock_init()
        - mt76: fix potential NULL pointer dereference in mt76_stop_tx_queues
        - x86, hyperv: remove PCI dependency
        - drivers: net: xgene: Remove unnecessary forward declarations
        - net/tls: Init routines in create_ctx
        - w90p910_ether: remove incorrect __init annotation
        - mac80211: fix a kernel panic when TXing after TXQ teardown
        - SUNRPC: Fix a race with XPRT_CONNECTING
        - qed: Fix an error code qed_ll2_start_xmit()
        - net: macb: fix random memory corruption on RX with 64-bit DMA
        - net: macb: fix dropped RX frames due to a race
        - net: macb: add missing barriers when reading descriptors
        - lan743x: Expand phy search for LAN7431
        - lan78xx: Resolve issue with changing MAC address
        - vxge: ensure data0 is initialized in when fetching firmware version
          information
        - nl80211: fix memory leak if validate_pae_over_nl80211() fails
        - mac80211: free skb fraglist before freeing the skb
        - kbuild: fix false positive warning/error about missing libelf
        - m68k: Fix memblock-related crashes
        - virtio: fix test build after uio.h change
        - lan743x: Remove MAC Reset from initialization
        - gpio: mvebu: only fail on missing clk if pwm is actually to be used
        - Input: synaptics - enable SMBus for HP EliteBook 840 G4
        - net: netxen: fix a missing check and an uninitialized use
        - qmi_wwan: Fix qmap header retrieval in qmimux_rx_fixup
        - serial/sunsu: fix refcount leak
        - auxdisplay: charlcd: fix x/y command parsing
        - scsi: zfcp: fix posting too many status read buffers leading to adapter
          shutdown
        - scsi: lpfc: do not set queue->page_count to 0 if pc_sli4_params.wqpcnt is
          invalid
        - fork: record start_time late
        - zram: fix double free backing device
        - hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined
        - mm, devm_memremap_pages: mark devm_memremap_pages() EXPORT_SYMBOL_GPL
        - mm, devm_memremap_pages: kill mapping "System RAM" support
        - mm, devm_memremap_pages: fix shutdown handling
        - mm, devm_memremap_pages: add MEMORY_DEVICE_PRIVATE support
        - mm, hmm: use devm semantics for hmm_devmem_{add, remove}
        - mm, hmm: mark hmm_devmem_{add, add_resource} EXPORT_SYMBOL_GPL
        - mm, swap: fix swapoff with KSM pages
        - memcg, oom: notify on oom killer invocation from the charge path
        - sunrpc: fix cache_head leak due to queued request
        - sunrpc: use SVC_NET() in svcauth_gss_* functions
        - powerpc: remove old GCC version checks
        - powerpc: consolidate -mno-sched-epilog into FTRACE flags
        - powerpc: avoid -mno-sched-epilog on GCC 4.9 and newer
        - powerpc: Disable -Wbuiltin-requires-header when setjmp is used
        - kbuild: add -no-integrated-as Clang option unconditionally
        - kbuild: consolidate Clang compiler flags
        - Makefile: Export clang toolchain variables
        - powerpc/boot: Set target when cross-compiling for clang
        - raid6/ppc: Fix build for clang
        - dma-direct: do not include SME mask in the DMA supported check
        - mt76x0: init hw capabilities
        - media: cx23885: only reset DMA on problematic CPUs
        - ALSA: cs46xx: Potential NULL dereference in probe
        - ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit()
        - ALSA: usb-audio: Check mixer unit descriptors more strictly
        - ALSA: usb-audio: Fix an out-of-bound read in create_composite_quirks
        - ALSA: usb-audio: Always check descriptor sizes in parser code
        - srcu: Lock srcu_data structure in srcu_gp_start()
        - driver core: Add missing dev->bus->need_parent_lock checks
        - Fix failure path in alloc_pid()
        - block: deactivate blk_stat timer in wbt_disable_default()
        - block: mq-deadline: Fix write completion handling
        - dlm: fixed memory leaks after failed ls_remove_names allocation
        - dlm: possible memory leak on error path in create_lkb()
        - dlm: lost put_lkb on error path in receive_convert() and receive_unlock()
        - dlm: memory leaks on error path in dlm_user_request()
        - gfs2: Get rid of potential double-freeing in gfs2_create_inode
        - gfs2: Fix loop in gfs2_rbm_find
        - b43: Fix error in cordic routine
        - selinux: policydb - fix byte order and alignment issues
        - PCI / PM: Allow runtime PM without callback functions
        - lockd: Show pid of lockd for remote locks
        - nfsd4: zero-length WRITE should succeed
        - arm64: drop linker script hack to hide __efistub_ symbols
        - arm64: relocatable: fix inconsistencies in linker script and options
        - leds: pwm: silently error out on EPROBE_DEFER
        - Revert "powerpc/tm: Unset MSR[TS] if not recheckpointing"
        - powerpc/tm: Set MSR[TS] just prior to recheckpoint
        - iio: dac: ad5686: fix bit shift read register
        - 9p/net: put a lower bound on msize
        - rxe: fix error completion wr_id and qp_num
        - RDMA/srpt: Fix a use-after-free in the channel release code
        - iommu/vt-d: Handle domain agaw being less than iommu agaw
        - sched/fair: Fix infinite loop in update_blocked_averages() by reverting
          a9e7f6544b9c
        - ceph: don't update importing cap's mseq when handing cap export
        - video: fbdev: pxafb: Fix "WARNING: invalid free of devm_ allocated data"
        - drivers/perf: hisi: Fixup one DDRC PMU register offset
        - genwqe: Fix size check
        - intel_th: msu: Fix an off-by-one in attribute store
        - power: supply: olpc_battery: correct the temperature units
        - of: of_node_get()/of_node_put() nodes held in phandle cache
        - of: __of_detach_node() - remove node from phandle cache
        - lib: fix build failure in CONFIG_DEBUG_VIRTUAL test
        - drm/nouveau/drm/nouveau: Check rc from drm_dp_mst_topology_mgr_resume()
        - drm/vc4: Set ->is_yuv to false when num_planes == 1
        - drm/rockchip: psr: do not dereference encoder before it is null checked.
        - drm/amd/display: Fix unintialized max_bpc state values
        - bnx2x: Fix NULL pointer dereference in bnx2x_del_all_vlans() on some hw
        - Linux 4.19.15
    
      * glibc tst-cputimer regressions with 4.19.0-10.11 (LP: #1811690)
        - SAUCE: posix-cpu-timers: Unbreak timer rearming
    
      * Miscellaneous Ubuntu changes
        - SAUCE: selftests: disable some failing networking tests
        - [Packaging] disable nvidia dkms builds for mainline
    
     -- Seth Forshee <email address hidden>  Fri, 18 Jan 2019 16:03:05 -0600
  • linux (4.19.0-9.10) disco; urgency=medium
    
      * Drivers: hv: vmbus: Offload the handling of channels to two workqueues
        (LP: #1807757)
        - Drivers: hv: vmbus: Offload the handling of channels to two workqueues
    
      * Add support for 0cf3:535b QCA_ROME device (LP: #1807333)
        - Bluetooth: btusb: Add support for 0cf3:535b QCA_ROME device
    
      * [Regression] crashkernel fails on HiSilicon D05 (LP: #1806766)
        - efi: honour memory reservations passed via a linux specific config table
        - efi/arm: libstub: add a root memreserve config table
        - efi: add API to reserve memory persistently across kexec reboot
        - irqchip/gic-v3-its: Change initialization ordering for LPIs
        - irqchip/gic-v3-its: Simplify LPI_PENDBASE_SZ usage
        - irqchip/gic-v3-its: Split property table clearing from allocation
        - irqchip/gic-v3-its: Move pending table allocation to init time
        - irqchip/gic-v3-its: Keep track of property table's PA and VA
        - irqchip/gic-v3-its: Allow use of pre-programmed LPI tables
        - irqchip/gic-v3-its: Use pre-programmed redistributor tables with kdump
          kernels
        - irqchip/gic-v3-its: Check that all RDs have the same property table
        - irqchip/gic-v3-its: Register LPI tables with EFI config table
        - irqchip/gic-v3-its: Allow use of LPI tables in reserved memory
        - arm64: memblock: don't permit memblock resizing until linear mapping is up
        - efi/arm: Defer persistent reservations until after paging_init()
        - efi: Permit calling efi_mem_reserve_persistent() from atomic context
        - efi: Prevent GICv3 WARN() by mapping the memreserve table before first use
    
      * Power leakage at S5 with Qualcomm Atheros QCA9377 802.11ac Wireless Network
        Adapter (LP: #1805607)
        - SAUCE: ath10k: provide reset function for QCA9377 chip
    
      * zfs/spl build in conjunction with the kernel from DKMS source (LP: #1807378)
        - [Packaging] dkms -- dkms package build packaging support
        - [Packaging] dkms -- save build objects artifacts for validation
        - [Packaging] dkms -- add general Built-Using: support
        - [Packaging] simplify Provides comma handling
        - [Packaging] zfs/spl -- remove packaging support for incorporated source
        - [Packaging] zfs/spl -- remove incorporated source
        - [Packaging] zfs/spl -- build via dkms
        - [Packaging] zfs/spl -- make zfs package version explicit
        - [Packaging] update-version-dkms -- sync archive versions to package
    
      * Disco update: 4.19.8 upstream stable release (LP: #1807706)
        - test_hexdump: use memcpy instead of strncpy
        - unifdef: use memcpy instead of strncpy
        - iser: set sector for ambiguous mr status errors
        - uprobes: Fix handle_swbp() vs. unregister() + register() race once more
        - mtd: nand: Fix memory allocation in nanddev_bbt_init()
        - arm64: ftrace: Fix to enable syscall events on arm64
        - sched, trace: Fix prev_state output in sched_switch tracepoint
        - tracepoint: Use __idx instead of idx in DO_TRACE macro to make it unique
        - MIPS: ralink: Fix mt7620 nd_sd pinmux
        - mips: fix mips_get_syscall_arg o32 check
        - IB/mlx5: Avoid load failure due to unknown link width
        - tracing/fgraph: Fix set_graph_function from showing interrupts
        - drm/ast: Fix incorrect free on ioregs
        - drm/amd/dm: Don't forget to attach MST encoders
        - drm: set is_master to 0 upon drm_new_set_master() failure
        - drm/meson: Fixes for drm_crtc_vblank_on/off support
        - drm/meson: Enable fast_io in meson_dw_hdmi_regmap_config
        - drm/meson: Fix OOB memory accesses in meson_viu_set_osd_lut()
        - userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails
        - userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem
        - userfaultfd: shmem: add i_size checks
        - userfaultfd: shmem: UFFDIO_COPY: set the page dirty if VM_WRITE is not set
        - kgdboc: Fix restrict error
        - kgdboc: Fix warning with module build
        - svm: Add mutex_lock to protect apic_access_page_done on AMD systems
        - selinux: add support for RTM_NEWCHAIN, RTM_DELCHAIN, and RTM_GETCHAIN
        - i40e: Fix deletion of MAC filters
        - scsi: lpfc: fix block guard enablement on SLI3 adapters
        - Input: xpad - quirk all PDP Xbox One gamepads
        - Input: synaptics - add PNP ID for ThinkPad P50 to SMBus
        - Input: matrix_keypad - check for errors from of_get_named_gpio()
        - Input: cros_ec_keyb - fix button/switch capability reports
        - Input: elan_i2c - add ELAN0620 to the ACPI table
        - Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR
        - Input: elan_i2c - add support for ELAN0621 touchpad
        - btrfs: tree-checker: Don't check max block group size as current max chunk
          size limit is unreliable
        - ARC: change defconfig defaults to ARCv2
        - arc: [devboards] Add support of NFSv3 ACL
        - tipc: use destination length for copy string
        - blk-mq: punt failed direct issue to dispatch list
        - Linux 4.19.8
    
      * Disco update: 4.19.7 upstream stable release (LP: #1807705)
        - mm/huge_memory: rename freeze_page() to unmap_page()
        - mm/huge_memory: splitting set mapping+index before unfreeze
        - mm/huge_memory: fix lockdep complaint on 32-bit i_size_read()
        - mm/khugepaged: collapse_shmem() stop if punched or truncated
        - mm/khugepaged: fix crashes due to misaccounted holes
        - mm/khugepaged: collapse_shmem() remember to clear holes
        - mm/khugepaged: minor reorderings in collapse_shmem()
        - mm/khugepaged: collapse_shmem() without freezing new_page
        - mm/khugepaged: collapse_shmem() do not crash on Compound
        - lan743x: Enable driver to work with LAN7431
        - lan743x: fix return value for lan743x_tx_napi_poll
        - net: don't keep lonely packets forever in the gro hash
        - net: gemini: Fix copy/paste error
        - net: thunderx: set tso_hdrs pointer to NULL in nicvf_free_snd_queue
        - packet: copy user buffers before orphan or clone
        - rapidio/rionet: do not free skb before reading its length
        - s390/qeth: fix length check in SNMP processing
        - usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2
        - net: thunderx: set xdp_prog to NULL if bpf_prog_add fails
        - net: skb_scrub_packet(): Scrub offload_fwd_mark
        - virtio-net: disable guest csum during XDP set
        - virtio-net: fail XDP set if guest csum is negotiated
        - net/dim: Update DIM start sample after each DIM iteration
        - tcp: defer SACK compression after DupThresh
        - net: phy: add workaround for issue where PHY driver doesn't bind to the
          device
        - tipc: fix lockdep warning during node delete
        - x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation
        - x86/speculation: Apply IBPB more strictly to avoid cross-process data leak
        - x86/speculation: Propagate information about RSB filling mitigation to sysfs
        - x86/speculation: Add RETPOLINE_AMD support to the inline asm CALL_NOSPEC
          variant
        - x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support
        - x86/retpoline: Remove minimal retpoline support
        - x86/speculation: Update the TIF_SSBD comment
        - x86/speculation: Clean up spectre_v2_parse_cmdline()
        - x86/speculation: Remove unnecessary ret variable in cpu_show_common()
        - x86/speculation: Move STIPB/IBPB string conditionals out of
          cpu_show_common()
        - x86/speculation: Disable STIBP when enhanced IBRS is in use
        - x86/speculation: Rename SSBD update functions
        - x86/speculation: Reorganize speculation control MSRs update
        - sched/smt: Make sched_smt_present track topology
        - x86/Kconfig: Select SCHED_SMT if SMP enabled
        - sched/smt: Expose sched_smt_present static key
        - x86/speculation: Rework SMT state change
        - x86/l1tf: Show actual SMT state
        - x86/speculation: Reorder the spec_v2 code
        - x86/speculation: Mark string arrays const correctly
        - x86/speculataion: Mark command line parser data __initdata
        - x86/speculation: Unify conditional spectre v2 print functions
        - x86/speculation: Add command line control for indirect branch speculation
        - x86/speculation: Prepare for per task indirect branch speculation control
        - x86/process: Consolidate and simplify switch_to_xtra() code
        - x86/speculation: Avoid __switch_to_xtra() calls
        - x86/speculation: Prepare for conditional IBPB in switch_mm()
        - ptrace: Remove unused ptrace_may_access_sched() and MODE_IBRS
        - x86/speculation: Split out TIF update
        - x86/speculation: Prevent stale SPEC_CTRL msr content
        - x86/speculation: Prepare arch_smt_update() for PRCTL mode
        - x86/speculation: Add prctl() control for indirect branch speculation
        - x86/speculation: Enable prctl mode for spectre_v2_user
        - x86/speculation: Add seccomp Spectre v2 user space protection mode
        - x86/speculation: Provide IBPB always command line options
        - userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas
        - kvm: mmu: Fix race in emulated page table writes
        - kvm: svm: Ensure an IBPB on all affected CPUs when freeing a vmcb
        - KVM: nVMX/nSVM: Fix bug which sets vcpu->arch.tsc_offset to L1 tsc_offset
        - KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall
        - KVM: LAPIC: Fix pv ipis use-before-initialization
        - KVM: VMX: re-add ple_gap module parameter
        - xtensa: enable coprocessors that are being flushed
        - xtensa: fix coprocessor context offset definitions
        - xtensa: fix coprocessor part of ptrace_{get,set}xregs
        - udf: Allow mounting volumes with incorrect identification strings
        - btrfs: Always try all copies when reading extent buffers
        - Btrfs: ensure path name is null terminated at btrfs_control_ioctl
        - Btrfs: fix rare chances for data loss when doing a fast fsync
        - Btrfs: fix race between enabling quotas and subvolume creation
        - btrfs: relocation: set trans to be NULL after ending transaction
        - PCI: layerscape: Fix wrong invocation of outbound window disable accessor
        - PCI: dwc: Fix MSI-X EP framework address calculation bug
        - PCI: Fix incorrect value returned from pcie_get_speed_cap()
        - arm64: dts: rockchip: Fix PCIe reset polarity for rk3399-puma-haikou.
        - x86/MCE/AMD: Fix the thresholding machinery initialization order
        - x86/fpu: Disable bottom halves while loading FPU registers
        - perf/x86/intel: Move branch tracing setup to the Intel-specific source file
        - perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts()
        - perf/x86/intel: Disallow precise_ip on BTS events
        - fs: fix lost error code in dio_complete
        - ALSA: wss: Fix invalid snd_free_pages() at error path
        - ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write
        - ALSA: control: Fix race between adding and removing a user element
        - ALSA: sparc: Fix invalid snd_free_pages() at error path
        - ALSA: hda: Add ASRock N68C-S UCC the power_save blacklist
        - ALSA: hda/realtek - Support ALC300
        - ALSA: hda/realtek - fix headset mic detection for MSI MS-B171
        - ALSA: hda/realtek - Add auto-mute quirk for HP Spectre x360 laptop
        - function_graph: Create function_graph_enter() to consolidate architecture
          code
        - ARM: function_graph: Simplify with function_graph_enter()
        - microblaze: function_graph: Simplify with function_graph_enter()
        - x86/function_graph: Simplify with function_graph_enter()
        - nds32: function_graph: Simplify with function_graph_enter()
        - powerpc/function_graph: Simplify with function_graph_enter()
        - sh/function_graph: Simplify with function_graph_enter()
        - sparc/function_graph: Simplify with function_graph_enter()
        - parisc: function_graph: Simplify with function_graph_enter()
        - riscv/function_graph: Simplify with function_graph_enter()
        - s390/function_graph: Simplify with function_graph_enter()
        - arm64: function_graph: Simplify with function_graph_enter()
        - MIPS: function_graph: Simplify with function_graph_enter()
        - function_graph: Make ftrace_push_return_trace() static
        - function_graph: Use new curr_ret_depth to manage depth instead of
          curr_ret_stack
        - function_graph: Have profiler use curr_ret_stack and not depth
        - function_graph: Move return callback before update of curr_ret_stack
        - function_graph: Reverse the order of pushing the ret_stack and the callback
        - binder: fix race that allows malicious free of live buffer
        - ext2: initialize opts.s_mount_opt as zero before using it
        - ext2: fix potential use after free
        - ASoC: intel: cht_bsw_max98090_ti: Add quirk for boards using pmc_plt_clk_0
        - ASoC: pcm186x: Fix device reset-registers trigger value
        - ARM: dts: rockchip: Remove @0 from the veyron memory node
        - dmaengine: at_hdmac: fix memory leak in at_dma_xlate()
        - dmaengine: at_hdmac: fix module unloading
        - staging: most: use format specifier "%s" in snprintf
        - staging: vchiq_arm: fix compat VCHIQ_IOC_AWAIT_COMPLETION
        - staging: mt7621-dma: fix potentially dereferencing uninitialized 'tx_desc'
        - staging: mt7621-pinctrl: fix uninitialized variable ngroups
        - staging: rtl8723bs: Fix incorrect sense of ether_addr_equal
        - staging: rtl8723bs: Add missing return for cfg80211_rtw_get_station
        - USB: usb-storage: Add new IDs to ums-realtek
        - usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series
        - Revert "usb: dwc3: gadget: skip Set/Clear Halt when invalid"
        - iio/hid-sensors: Fix IIO_CHAN_INFO_RAW returning wrong values for signed
          numbers
        - iio:st_magn: Fix enable device after trigger
        - lib/test_kmod.c: fix rmmod double free
        - mm: cleancache: fix corruption on missed inode invalidation
        - mm: use swp_offset as key in shmem_replace_page()
        - Drivers: hv: vmbus: check the creation_status in vmbus_establish_gpadl()
        - misc: mic/scif: fix copy-paste error in scif_create_remote_lookup
        - Linux 4.19.7
    
      * Packaging resync (LP: #1786013)
        - [Packaging] buildinfo -- switch getabis configuration to new package
        - [Packaging] update helper scripts
    
     -- Seth Forshee <email address hidden>  Mon, 10 Dec 2018 15:52:38 -0600
  • linux (4.19.0-8.9) disco; urgency=medium
    
      * linux: 4.19.0-8.9 -proposed tracker (LP: #1806952)
    
      * Workaround CSS timeout on AMD SNPS 3.0 xHC (LP: #1806838)
        - xhci: workaround CSS timeout on AMD SNPS 3.0 xHC
    
      * Fix Intel I210 doesn't work when ethernet cable gets plugged (LP: #1806818)
        - igb: Fix an issue that PME is not enabled during runtime suspend
    
      * The line-out on the Dell Dock station can't work (LP: #1806532)
        - ALSA: usb-audio: Add vendor and product name for Dell WD19 Dock
    
      * CVE-2018-19407
        - KVM: X86: Fix scan ioapic use-before-initialization
    
      * PC SN720 NVMe WDC 256GB consumes more power in S2Idle than during long idle
        (LP: #1805775)
        - SAUCE: pci/nvme: prevent WDC PC SN720 NVMe from entering D3 and being
          disabled
    
      * Disco update: 4.19.6 upstream stable release (LP: #1806909)
        - HID: steam: remove input device when a hid client is running.
        - efi/libstub: arm: support building with clang
        - usb: core: Fix hub port connection events lost
        - usb: dwc3: gadget: fix ISOC TRB type on unaligned transfers
        - usb: dwc3: gadget: Properly check last unaligned/zero chain TRB
        - usb: dwc3: core: Clean up ULPI device
        - usb: dwc3: Fix NULL pointer exception in dwc3_pci_remove()
        - xhci: Fix leaking USB3 shared_hcd at xhci removal
        - xhci: handle port status events for removed USB3 hcd
        - xhci: Add check for invalid byte size error when UAS devices are connected.
        - usb: xhci: fix uninitialized completion when USB3 port got wrong status
        - usb: xhci: fix timeout for transition from RExit to U0
        - xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc
        - usb: xhci: Prevent bus suspend if a port connect change or polling state is
          detected
        - ALSA: oss: Use kvzalloc() for local buffer allocations
        - MAINTAINERS: Add Sasha as a stable branch maintainer
        - Documentation/security-bugs: Clarify treatment of embargoed information
        - Documentation/security-bugs: Postpone fix publication in exceptional cases
        - mmc: sdhci-pci: Try "cd" for card-detect lookup before using NULL
        - mmc: sdhci-pci: Workaround GLK firmware failing to restore the tuning value
        - gpio: don't free unallocated ida on gpiochip_add_data_with_key() error path
        - iwlwifi: fix wrong WGDS_WIFI_DATA_SIZE
        - iwlwifi: mvm: support sta_statistics() even on older firmware
        - iwlwifi: mvm: fix regulatory domain update when the firmware starts
        - iwlwifi: mvm: don't use SAR Geo if basic SAR is not used
        - brcmfmac: fix reporting support for 160 MHz channels
        - opp: ti-opp-supply: Dynamically update u_volt_min
        - opp: ti-opp-supply: Correct the supply in _get_optimal_vdd_voltage call
        - tools/power/cpupower: fix compilation with STATIC=true
        - v9fs_dir_readdir: fix double-free on p9stat_read error
        - selinux: Add __GFP_NOWARN to allocation at str_read()
        - Input: synaptics - avoid using uninitialized variable when probing
        - bfs: add sanity check at bfs_fill_super()
        - sctp: clear the transport of some out_chunk_list chunks in
          sctp_assoc_rm_peer
        - gfs2: Don't leave s_fs_info pointing to freed memory in init_sbd
        - llc: do not use sk_eat_skb()
        - mm: don't warn about large allocations for slab
        - mm/memory.c: recheck page table entry with page table lock held
        - tcp: do not release socket ownership in tcp_close()
        - drm/fb-helper: Blacklist writeback when adding connectors to fbdev
        - drm/amdgpu: Add missing firmware entry for HAINAN
        - drm/vc4: Set ->legacy_cursor_update to false when doing non-async updates
        - drm/amdgpu: Fix oops when pp_funcs->switch_power_profile is unset
        - drm/i915: Disable LP3 watermarks on all SNB machines
        - drm/ast: change resolution may cause screen blurred
        - drm/ast: fixed cursor may disappear sometimes
        - drm/ast: Remove existing framebuffers before loading driver
        - can: flexcan: Unlock the MB unconditionally
        - can: dev: can_get_echo_skb(): factor out non sending code to
          __can_get_echo_skb()
        - can: dev: __can_get_echo_skb(): replace struct can_frame by canfd_frame to
          access frame length
        - can: dev: __can_get_echo_skb(): Don't crash the kernel if can_priv::echo_skb
          is accessed out of bounds
        - can: dev: __can_get_echo_skb(): print error message, if trying to echo non
          existing skb
        - can: rx-offload: introduce can_rx_offload_get_echo_skb() and
          can_rx_offload_queue_sorted() functions
        - can: rx-offload: rename can_rx_offload_irq_queue_err_skb() to
          can_rx_offload_queue_tail()
        - can: flexcan: use can_rx_offload_queue_sorted() for flexcan_irq_bus_*()
        - can: flexcan: handle tx-complete CAN frames via rx-offload infrastructure
        - can: raw: check for CAN FD capable netdev in raw_sendmsg()
        - can: hi311x: Use level-triggered interrupt
        - can: flexcan: Always use last mailbox for TX
        - can: flexcan: remove not needed struct flexcan_priv::tx_mb and struct
          flexcan_priv::tx_mb_idx
        - ACPICA: AML interpreter: add region addresses in global list during
          initialization
        - IB/hfi1: Eliminate races in the SDMA send error path
        - fsnotify: generalize handling of extra event flags
        - fanotify: fix handling of events on child sub-directory
        - pinctrl: meson: fix pinconf bias disable
        - pinctrl: meson: fix gxbb ao pull register bits
        - pinctrl: meson: fix gxl ao pull register bits
        - pinctrl: meson: fix meson8 ao pull register bits
        - pinctrl: meson: fix meson8b ao pull register bits
        - tools/testing/nvdimm: Fix the array size for dimm devices.
        - scsi: lpfc: fix remoteport access
        - scsi: hisi_sas: Remove set but not used variable 'dq_list'
        - KVM: PPC: Move and undef TRACE_INCLUDE_PATH/FILE
        - cpufreq: imx6q: add return value check for voltage scale
        - rtc: cmos: Do not export alarm rtc_ops when we do not support alarms
        - rtc: pcf2127: fix a kmemleak caused in pcf2127_i2c_gather_write
        - crypto: simd - correctly take reqsize of wrapped skcipher into account
        - floppy: fix race condition in __floppy_read_block_0()
        - powerpc/io: Fix the IO workarounds code to work with Radix
        - sched/fair: Fix cpu_util_wake() for 'execl' type workloads
        - perf/x86/intel/uncore: Add more IMC PCI IDs for KabyLake and CoffeeLake CPUs
        - block: copy ioprio in __bio_clone_fast() and bounce
        - SUNRPC: Fix a bogus get/put in generic_key_to_expire()
        - riscv: add missing vdso_install target
        - RISC-V: Silence some module warnings on 32-bit
        - drm/amdgpu: fix bug with IH ring setup
        - kdb: Use strscpy with destination buffer size
        - NFSv4: Fix an Oops during delegation callbacks
        - powerpc/numa: Suppress "VPHN is not supported" messages
        - efi/arm: Revert deferred unmap of early memmap mapping
        - z3fold: fix possible reclaim races
        - mm, memory_hotplug: check zone_movable in has_unmovable_pages
        - tmpfs: make lseek(SEEK_DATA/SEK_HOLE) return ENXIO with a negative offset
        - mm, page_alloc: check for max order in hot path
        - dax: Avoid losing wakeup in dax_lock_mapping_entry
        - include/linux/pfn_t.h: force '~' to be parsed as an unary operator
        - tty: wipe buffer.
        - tty: wipe buffer if not echoing data
        - gfs2: Fix iomap buffer head reference counting bug
        - rcu: Make need_resched() respond to urgent RCU-QS needs
        - media: ov5640: Re-work MIPI startup sequence
        - media: ov5640: Fix timings setup code
        - media: ov5640: fix exposure regression
        - media: ov5640: fix auto gain & exposure when changing mode
        - media: ov5640: fix wrong binning value in exposure calculation
        - media: ov5640: fix auto controls values when switching to manual mode
        - Linux 4.19.6
    
      * linux-buildinfo: pull out ABI information into its own package
        (LP: #1806380)
        - [Packaging] limit preparation to linux-libc-dev in headers
        - [Packaging] commonise debhelper invocation
        - [Packaging] ABI -- accumulate abi information at the end of the build
        - [Packaging] buildinfo -- add basic build information
        - [Packaging] buildinfo -- add firmware information to the flavour ABI
        - [Packaging] buildinfo -- add compiler information to the flavour ABI
        - [Packaging] buildinfo -- add buildinfo support to getabis
        - [Packaging] getabis -- handle all known package combinations
        - [Packaging] getabis -- support parsing a simple version
    
      * linux packages should own /usr/lib/linux/triggers (LP: #1770256)
        - [Packaging] own /usr/lib/linux/triggers
    
      * Miscellaneous upstream changes
        - blk-mq: fix corruption with direct issue
    
     -- Seth Forshee <email address hidden>  Wed, 05 Dec 2018 09:18:30 -0600
  • linux (4.19.0-7.8) disco; urgency=medium
    
      * linux: 4.19.0-7.8 -proposed tracker (LP: #1805465)
    
      * Fix and issue that LG I2C touchscreen stops working after reboot
        (LP: #1805085)
        - HID: i2c-hid: Disable runtime PM for LG touchscreen
    
      * click/pop noise in the headphone on several lenovo laptops (LP: #1805079) //
        click/pop noise in the headphone on several lenovo laptops (LP: #1805079)
        - ALSA: hda/realtek - fix the pop noise on headphone for lenovo laptops
    
      * Regression: hinic performance degrades over time (LP: #1805248)
        - Revert "net-next/hinic: add checksum offload and TSO support"
    
      * Disco update: 4.19.5 upstream stable release (LP: #1805461)
        - drm/i915: Replace some PAGE_SIZE with I915_GTT_PAGE_SIZE
        - cifs: don't dereference smb_file_target before null check
        - cifs: fix return value for cifs_listxattr
        - arm64: kprobe: make page to RO mode when allocate it
        - block: brd: associate with queue until adding disk
        - net: hns3: bugfix for rtnl_lock's range in the hclgevf_reset()
        - net: hns3: bugfix for rtnl_lock's range in the hclge_reset()
        - net: hns3: bugfix for handling mailbox while the command queue reinitialized
        - net: hns3: bugfix for the initialization of command queue's spin lock
        - ixgbe: fix MAC anti-spoofing filter after VFLR
        - reiserfs: propagate errors from fill_with_dentries() properly
        - hfs: prevent btree data loss on root split
        - hfsplus: prevent btree data loss on root split
        - perf unwind: Take pgoff into account when reporting elf to libdwfl
        - um: Give start_idle_thread() a return code
        - drm/edid: Add 6 bpc quirk for BOE panel.
        - afs: Handle EIO from delivery function
        - platform/x86: intel_telemetry: report debugfs failure
        - clk: fixed-rate: fix of_node_get-put imbalance
        - perf symbols: Set PLT entry/header sizes properly on Sparc
        - fs/exofs: fix potential memory leak in mount option parsing
        - clk: samsung: exynos5420: Enable PERIS clocks for suspend
        - apparmor: Fix uninitialized value in aa_split_fqname
        - x86/earlyprintk: Add a force option for pciserial device
        - platform/x86: acerhdf: Add BIOS entry for Gateway LT31 v1.3307
        - clk: meson-axg: pcie: drop the mpll3 clock parent
        - arm64: percpu: Initialize ret in the default case
        - clk: meson: clk-pll: drop CLK_GET_RATE_NOCACHE where unnecessary
        - clk: renesas: r9a06g032: Fix UART34567 clock rate
        - clk: ti: fix OF child-node lookup
        - serial: sh-sci: Fix receive on SCIFA/SCIFB variants with DMA
        - netfilter: ipv6: fix oops when defragmenting locally generated fragments
        - netfilter: bridge: define INT_MIN & INT_MAX in userspace
        - s390/decompressor: add missing FORCE to build targets
        - s390/vdso: add missing FORCE to build targets
        - HID: i2c-hid: Add a small delay after sleep command for Raydium touchpanel
        - Revert "HID: add NOGET quirk for Eaton Ellipse MAX UPS"
        - HID: alps: allow incoming reports when only the trackstick is opened
        - Revert "netfilter: nft_numgen: add map lookups for numgen random operations"
        - netfilter: ipset: list:set: Decrease refcount synchronously on deletion and
          replace
        - netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net
        - netfilter: ipset: fix ip_set_list allocation failure
        - s390/mm: fix mis-accounting of pgtable_bytes
        - s390/mm: Fix ERROR: "__node_distance" undefined!
        - bpf: fix bpf_prog_get_info_by_fd to return 0 func_lens for unpriv
        - netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment()
        - netfilter: xt_IDLETIMER: add sysfs filename checking routine
        - netfilter: ipset: Fix calling ip_set() macro at dumping
        - netfilter: nft_compat: ebtables 'nat' table is normal chain type
        - s390/qeth: fix HiperSockets sniffer
        - s390/qeth: unregister netdevice only when registered
        - net: hns3: Fix for out-of-bounds access when setting pfc back pressure
        - hwmon: (ibmpowernv) Remove bogus __init annotations
        - ARM: dts: imx6sll: fix typo for fsl,imx6sll-i2c node
        - ARM: dts: fsl: Fix improperly quoted stdout-path values
        - Revert "drm/exynos/decon5433: implement frame counter"
        - arm64: dts: renesas: r8a7795: add missing dma-names on hscif2
        - arm64: dts: renesas: condor: switch from EtherAVB to GEther
        - xen/grant-table: Fix incorrect gnttab_dma_free_pages() pr_debug message
        - clk: fixed-factor: fix of_node_get-put imbalance
        - mtd: nand: Fix nanddev_pos_next_page() kernel-doc header
        - lib/raid6: Fix arm64 test build
        - drm/amd/display: Stop leaking planes
        - block: Clear kernel memory before copying to user
        - drm/amd/display: Drop reusing drm connector for MST
        - drm/amd/amdgpu/dm: Fix dm_dp_create_fake_mst_encoder()
        - s390/perf: Change CPUM_CF return code in event init function
        - ceph: quota: fix null pointer dereference in quota check
        - of/device: Really only set bus DMA mask when appropriate
        - nvme: make sure ns head inherits underlying device limits
        - i2c: omap: Enable for ARCH_K3
        - i2c: qcom-geni: Fix runtime PM mismatch with child devices
        - sched/core: Take the hotplug lock in sched_init_smp()
        - perf tools: Fix undefined symbol scnprintf in libperf-jvmti.so
        - perf tools: Do not zero sample_id_all for group members
        - ice: Fix dead device link issue with flow control
        - ice: Fix the bytecount sent to netdev_tx_sent_queue
        - ice: Change req_speeds to be u16
        - i40e: restore NETIF_F_GSO_IPXIP[46] to netdev features
        - qed: Fix memory/entry leak in qed_init_sp_request()
        - qed: Fix blocking/unlimited SPQ entries leak
        - qed: Fix SPQ entries not returned to pool in error flows
        - qed: Fix potential memory corruption
        - net: stmmac: Fix RX packet size > 8191
        - net: aquantia: fix potential IOMMU fault after driver unbind
        - net: aquantia: fixed enable unicast on 32 macvlan
        - net: aquantia: invalid checksumm offload implementation
        - kbuild: deb-pkg: fix too low build version number
        - Revert "scripts/setlocalversion: git: Make -dirty check more robust"
        - SUNRPC: drop pointless static qualifier in xdr_get_next_encode_buffer()
        - x86/mm: Move LDT remap out of KASLR region on 5-level paging
        - x86/ldt: Unmap PTEs for the slot before freeing LDT pages
        - x86/ldt: Remove unused variable in map_ldt_struct()
        - media: v4l: event: Add subscription to list before calling "add" operation
        - MIPS: OCTEON: cavium_octeon_defconfig: re-enable OCTEON USB driver
        - RISC-V: Fix raw_copy_{to,from}_user()
        - uio: Fix an Oops on load
        - ALSA: hda/realtek - Add quirk entry for HP Pavilion 15
        - ALSA: hda/ca0132 - Call pci_iounmap() instead of iounmap()
        - can: kvaser_usb: Fix accessing freed memory in kvaser_usb_start_xmit()
        - can: kvaser_usb: Fix potential uninitialized variable use
        - usb: cdc-acm: add entry for Hiro (Conexant) modem
        - USB: Wait for extra delay time after USB_PORT_FEAT_RESET for quirky hub
        - usb: quirks: Add delay-init quirk for Corsair K70 LUX RGB
        - misc: atmel-ssc: Fix section annotation on atmel_ssc_get_driver_data
        - USB: misc: appledisplay: add 20" Apple Cinema Display
        - gnss: serial: fix synchronous write timeout
        - gnss: sirf: fix synchronous write timeout
        - mtd: rawnand: atmel: fix OF child-node lookup
        - drivers/misc/sgi-gru: fix Spectre v1 vulnerability
        - ACPI / platform: Add SMB0001 HID to forbidden_id_list
        - HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges
        - HID: Add quirk for Primax PIXART OEM mice
        - HID: Add quirk for Microsoft PIXART OEM mouse
        - libceph: fall back to sendmsg for slab pages
        - mt76x0: run vco calibration for each channel configuration
        - Linux 4.19.5
    
      * Miscellaneous Ubuntu changes
        - Revert "UBUNTU: Build signed kernels for arm64"
    
     -- Seth Forshee <email address hidden>  Tue, 27 Nov 2018 10:38:34 -0600
  • linux (4.18.0-12.13) cosmic; urgency=medium
    
      * linux: 4.18.0-12.13 -proposed tracker (LP: #1802743)
    
      * [FEAT] Guest-dedicated Crypto Adapters (LP: #1787405)
        - s390/zcrypt: Add ZAPQ inline function.
        - s390/zcrypt: Review inline assembler constraints.
        - s390/zcrypt: Integrate ap_asm.h into include/asm/ap.h.
        - s390/zcrypt: fix ap_instructions_available() returncodes
        - KVM: s390: vsie: simulate VCPU SIE entry/exit
        - KVM: s390: introduce and use KVM_REQ_VSIE_RESTART
        - KVM: s390: refactor crypto initialization
        - s390: vfio-ap: base implementation of VFIO AP device driver
        - s390: vfio-ap: register matrix device with VFIO mdev framework
        - s390: vfio-ap: sysfs interfaces to configure adapters
        - s390: vfio-ap: sysfs interfaces to configure domains
        - s390: vfio-ap: sysfs interfaces to configure control domains
        - s390: vfio-ap: sysfs interface to view matrix mdev matrix
        - KVM: s390: interface to clear CRYCB masks
        - s390: vfio-ap: implement mediated device open callback
        - s390: vfio-ap: implement VFIO_DEVICE_GET_INFO ioctl
        - s390: vfio-ap: zeroize the AP queues
        - s390: vfio-ap: implement VFIO_DEVICE_RESET ioctl
        - KVM: s390: Clear Crypto Control Block when using vSIE
        - KVM: s390: vsie: Do the CRYCB validation first
        - KVM: s390: vsie: Make use of CRYCB FORMAT2 clear
        - KVM: s390: vsie: Allow CRYCB FORMAT-2
        - KVM: s390: vsie: allow CRYCB FORMAT-1
        - KVM: s390: vsie: allow CRYCB FORMAT-0
        - KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-1
        - KVM: s390: vsie: allow guest FORMAT-1 CRYCB on host FORMAT-2
        - KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-2
        - KVM: s390: device attrs to enable/disable AP interpretation
        - KVM: s390: CPU model support for AP virtualization
        - s390: doc: detailed specifications for AP virtualization
        - KVM: s390: fix locking for crypto setting error path
        - KVM: s390: Tracing APCB changes
        - s390: vfio-ap: setup APCB mask using KVM dedicated function
        - [Config:] Enable CONFIG_S390_AP_IOMMU and set CONFIG_VFIO_AP to module.
    
      * Bypass of mount visibility through userns + mount propagation (LP: #1789161)
        - mount: Retest MNT_LOCKED in do_umount
        - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts
    
      *  CVE-2018-18955: nested user namespaces with more than five extents
        incorrectly grant privileges over inode (LP: #1801924) // CVE-2018-18955
        - userns: also map extents in the reverse map to kernel IDs
    
      * kdump fail due to an IRQ storm (LP: #1797990)
        - SAUCE: x86/PCI: Export find_cap() to be used in early PCI code
        - SAUCE: x86/quirks: Add parameter to clear MSIs early on boot
        - SAUCE: x86/quirks: Scan all busses for early PCI quirks
    
      * crash in ENA driver on removing an interface (LP: #1802341)
        - SAUCE: net: ena: fix crash during ena_remove()
    
      * Ubuntu 18.04.1 - [s390x] Kernel panic while stressing network bonding
        (LP: #1797367)
        - s390/qeth: reduce hard-coded access to ccw channels
        - s390/qeth: sanitize strings in debug messages
    
      * Add checksum offload and TSO support for HiNIC adapters (LP: #1800664)
        - net-next/hinic: add checksum offload and TSO support
    
      * smartpqi updates for ubuntu 18.04.2 (LP: #1798208)
        - scsi: smartpqi: improve handling for sync requests
        - scsi: smartpqi: improve error checking for sync requests
        - scsi: smartpqi: add inspur advantech ids
        - scsi: smartpqi: fix critical ARM issue reading PQI index registers
        - scsi: smartpqi: bump driver version to 1.1.4-130
    
      * [GLK/CLX] Enhanced IBRS (LP: #1786139)
        - x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation
        - x86/speculation: Support Enhanced IBRS on future CPUs
    
      * Enable keyboard wakeup for S2Idle laptops (LP: #1798552)
        - Input: i8042 - enable keyboard wakeups by default when s2idle is used
    
      * Overlayfs in user namespace leaks directory content of inaccessible
        directories (LP: #1793458) // CVE-2018-6559
        - SAUCE: overlayfs: ensure mounter privileges when reading directories
    
      * Update ENA driver to version 2.0.1K (LP: #1798182)
        - net: ena: remove ndo_poll_controller
        - net: ena: fix auto casting to boolean
        - net: ena: minor performance improvement
        - net: ena: complete host info to match latest ENA spec
        - net: ena: introduce Low Latency Queues data structures according to ENA spec
        - net: ena: add functions for handling Low Latency Queues in ena_com
        - net: ena: add functions for handling Low Latency Queues in ena_netdev
        - net: ena: use CSUM_CHECKED device indication to report skb's checksum status
        - net: ena: explicit casting and initialization, and clearer error handling
        - net: ena: limit refill Rx threshold to 256 to avoid latency issues
        - net: ena: change rx copybreak default to reduce kernel memory pressure
        - net: ena: remove redundant parameter in ena_com_admin_init()
        - net: ena: update driver version to 2.0.1
        - net: ena: fix indentations in ena_defs for better readability
        - net: ena: Fix Kconfig dependency on X86
        - net: ena: enable Low Latency Queues
        - net: ena: fix compilation error in xtensa architecture
    
      * Cosmic update: 4.18.17 upstream stable release (LP: #1802119)
        - xfrm: Validate address prefix lengths in the xfrm selector.
        - xfrm6: call kfree_skb when skb is toobig
        - xfrm: reset transport header back to network header after all input
          transforms ahave been applied
        - xfrm: reset crypto_done when iterating over multiple input xfrms
        - mac80211: Always report TX status
        - cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
        - mac80211: fix pending queue hang due to TX_DROP
        - cfg80211: Address some corner cases in scan result channel updating
        - mac80211: TDLS: fix skb queue/priority assignment
        - mac80211: fix TX status reporting for ieee80211s
        - ARM: 8799/1: mm: fix pci_ioremap_io() offset check
        - xfrm: validate template mode
        - drm/i2c: tda9950: fix timeout counter check
        - drm/i2c: tda9950: set MAX_RETRIES for errors only
        - netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev
        - netfilter: conntrack: get rid of double sizeof
        - arm64: hugetlb: Fix handling of young ptes
        - ARM: dts: BCM63xx: Fix incorrect interrupt specifiers
        - net: macb: Clean 64b dma addresses if they are not detected
        - soc: fsl: qbman: qman: avoid allocating from non existing gen_pool
        - soc: fsl: qe: Fix copy/paste bug in ucc_get_tdm_sync_shift()
        - nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT
        - mac80211_hwsim: fix locking when iterating radios during ns exit
        - mac80211_hwsim: fix race in radio destruction from netlink notifier
        - mac80211_hwsim: do not omit multicast announce of first added radio
        - Bluetooth: SMP: fix crash in unpairing
        - pxa168fb: prepare the clock
        - qed: Avoid implicit enum conversion in qed_set_tunn_cls_info
        - qed: Fix mask parameter in qed_vf_prep_tunn_req_tlv
        - qed: Avoid implicit enum conversion in qed_roce_mode_to_flavor
        - qed: Avoid constant logical operation warning in qed_vf_pf_acquire
        - qed: Avoid implicit enum conversion in qed_iwarp_parse_rx_pkt
        - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
        - scsi: qedi: Initialize the stats mutex lock
        - rxrpc: Fix checks as to whether we should set up a new call
        - rxrpc: Fix RTT gathering
        - rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket
        - rxrpc: Fix error distribution
        - netfilter: nft_set_rbtree: add missing rb_erase() in GC routine
        - netfilter: avoid erronous array bounds warning
        - asix: Check for supported Wake-on-LAN modes
        - ax88179_178a: Check for supported Wake-on-LAN modes
        - lan78xx: Check for supported Wake-on-LAN modes
        - sr9800: Check for supported Wake-on-LAN modes
        - r8152: Check for supported Wake-on-LAN Modes
        - smsc75xx: Check for Wake-on-LAN modes
        - smsc95xx: Check for Wake-on-LAN modes
        - cfg80211: fix use-after-free in reg_process_hint()
        - KVM: nVMX: Do not expose MPX VMX controls when guest MPX disabled
        - KVM: x86: Do not use kvm_x86_ops->mpx_supported() directly
        - KVM: nVMX: Fix emulation of VM_ENTRY_LOAD_BNDCFGS
        - perf/core: Fix perf_pmu_unregister() locking
        - perf/x86/intel/uncore: Use boot_cpu_data.phys_proc_id instead of hardcorded
          physical package ID 0
        - perf/ring_buffer: Prevent concurent ring buffer access
        - perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX
        - perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events
        - thunderbolt: Do not handle ICM events after domain is stopped
        - thunderbolt: Initialize after IOMMUs
        - net: fec: fix rare tx timeout
        - declance: Fix continuation with the adapter identification message
        - RISCV: Fix end PFN for low memory
        - Revert "serial: 8250_dw: Fix runtime PM handling"
        - locking/ww_mutex: Fix runtime warning in the WW mutex selftest
        - drm/amd/display: Signal hw_done() after waiting for flip_done()
        - be2net: don't flip hw_features when VXLANs are added/deleted
        - powerpc/numa: Skip onlining a offline node in kdump path
        - net: cxgb3_main: fix a missing-check bug
        - yam: fix a missing-check bug
        - ocfs2: fix crash in ocfs2_duplicate_clusters_by_page()
        - mm/gup_benchmark: fix unsigned comparison to zero in __gup_benchmark_ioctl
        - mm/migrate.c: split only transparent huge pages when allocation fails
        - x86/paravirt: Fix some warning messages
        - clk: mvebu: armada-37xx-periph: Remove unused var num_parents
        - libertas: call into generic suspend code before turning off power
        - perf report: Don't try to map ip to invalid map
        - tls: Fix improper revert in zerocopy_from_iter
        - HID: i2c-hid: Remove RESEND_REPORT_DESCR quirk and its handling
        - compiler.h: Allow arch-specific asm/compiler.h
        - ARM: dts: imx53-qsb: disable 1.2GHz OPP
        - perf python: Use -Wno-redundant-decls to build with PYTHON=python3
        - perf record: Use unmapped IP for inline callchain cursors
        - rxrpc: Don't check RXRPC_CALL_TX_LAST after calling rxrpc_rotate_tx_window()
        - rxrpc: Carry call state out of locked section in rxrpc_rotate_tx_window()
        - rxrpc: Only take the rwind and mtu values from latest ACK
        - rxrpc: Fix connection-level abort handling
        - KVM: x86: support CONFIG_KVM_AMD=y with CONFIG_CRYPTO_DEV_CCP_DD=m
        - net: ena: fix warning in rmmod caused by double iounmap
        - net: ena: fix rare bug when failed restart/resume is followed by driver
          removal
        - net: ena: fix NULL dereference due to untimely napi initialization
        - gpio: Assign gpio_irq_chip::parents to non-stack pointer
        - IB/mlx5: Unmap DMA addr from HCA before IOMMU
        - rds: RDS (tcp) hangs on sendto() to unresponding address
        - selftests: rtnetlink.sh explicitly requires bash.
        - selftests: udpgso_bench.sh explicitly requires bash
        - vmlinux.lds.h: Fix incomplete .text.exit discards
        - vmlinux.lds.h: Fix linker warnings about orphan .LPBX sections
        - afs: Fix cell proc list
        - fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters()
        - Revert "mm: slowly shrink slabs with a relatively small number of objects"
        - Revert "netfilter: ipv6: nf_defrag: drop skb dst before queueing"
        - perf tools: Disable parallelism for 'make clean'
        - bridge: do not add port to router list when receives query with source
          0.0.0.0
        - ipv6: mcast: fix a use-after-free in inet6_mc_check
        - ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are
          called
        - ipv6: rate-limit probes for neighbourless routes
        - llc: set SOCK_RCU_FREE in llc_sap_add_socket()
        - net: fec: don't dump RX FIFO register when not available
        - net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs
        - net/mlx5e: fix csum adjustments caused by RXFCS
        - net: sched: gred: pass the right attribute to gred_change_table_def()
        - net: socket: fix a missing-check bug
        - net: stmmac: Fix stmmac_mdio_reset() when building stmmac as modules
        - net: udp: fix handling of CHECKSUM_COMPLETE packets
        - r8169: fix NAPI handling under high load
        - rtnetlink: Disallow FDB configuration for non-Ethernet device
        - sctp: fix race on sctp_id2asoc
        - tipc: fix unsafe rcu locking when accessing publication list
        - udp6: fix encap return code for resubmitting
        - vhost: Fix Spectre V1 vulnerability
        - virtio_net: avoid using netif_tx_disable() for serializing tx routine
        - ethtool: fix a privilege escalation bug
        - bonding: fix length of actor system
        - ip6_tunnel: Fix encapsulation layout
        - openvswitch: Fix push/pop ethernet validation
        - net: ipmr: fix unresolved entry dumps
        - net/mlx5: Take only bit 24-26 of wqe.pftype_wq for page fault type
        - net: bcmgenet: Poll internal PHY for GENETv5
        - net: sched: Fix for duplicate class dump
        - net/sched: cls_api: add missing validation of netlink attributes
        - net/ipv6: Allow onlink routes to have a device mismatch if it is the default
          route
        - sctp: fix the data size calculation in sctp_data_size
        - sctp: not free the new asoc when sctp_wait_for_connect returns err
        - net/mlx5: Fix memory leak when setting fpga ipsec caps
        - net/smc: fix smc_buf_unuse to use the lgr pointer
        - mlxsw: spectrum_switchdev: Don't ignore deletions of learned MACs
        - net: bpfilter: use get_pid_task instead of pid_task
        - net: drop skb on failure in ip_check_defrag()
        - net: fix pskb_trim_rcsum_slow() with odd trim offset
        - mlxsw: core: Fix devlink unregister flow
        - sparc64: Export __node_distance.
        - sparc64: Make corrupted user stacks more debuggable.
        - sparc64: Make proc_id signed.
        - sparc64: Set %l4 properly on trap return after handling signals.
        - sparc64: Wire up compat getpeername and getsockname.
        - sparc: Fix single-pcr perf event counter management.
        - sparc: Fix syscall fallback bugs in VDSO.
        - sparc: Throttle perf events properly.
        - net: bridge: remove ipv6 zero address check in mcast queries
        - Linux 4.18.17
    
      * Cosmic update: 4.18.16 upstream stable release (LP: #1802100)
        - soundwire: Fix duplicate stream state assignment
        - soundwire: Fix incorrect exit after configuring stream
        - soundwire: Fix acquiring bus lock twice during master release
        - media: af9035: prevent buffer overflow on write
        - spi: gpio: Fix copy-and-paste error
        - batman-adv: Avoid probe ELP information leak
        - batman-adv: Fix segfault when writing to throughput_override
        - batman-adv: Fix segfault when writing to sysfs elp_interval
        - batman-adv: Prevent duplicated gateway_node entry
        - batman-adv: Prevent duplicated nc_node entry
        - batman-adv: Prevent duplicated softif_vlan entry
        - batman-adv: Prevent duplicated global TT entry
        - batman-adv: Prevent duplicated tvlv handler
        - batman-adv: fix backbone_gw refcount on queue_work() failure
        - batman-adv: fix hardif_neigh refcount on queue_work() failure
        - cxgb4: fix abort_req_rss6 struct
        - clocksource/drivers/ti-32k: Add CLOCK_SOURCE_SUSPEND_NONSTOP flag for non-
          am43 SoCs
        - scsi: ibmvscsis: Fix a stringop-overflow warning
        - scsi: ibmvscsis: Ensure partition name is properly NUL terminated
        - intel_th: pci: Add Ice Lake PCH support
        - Input: atakbd - fix Atari keymap
        - Input: atakbd - fix Atari CapsLock behaviour
        - selftests: pmtu: properly redirect stderr to /dev/null
        - net: emac: fix fixed-link setup for the RTL8363SB switch
        - ravb: do not write 1 to reserved bits
        - net/smc: fix non-blocking connect problem
        - net/smc: fix sizeof to int comparison
        - qed: Fix populating the invalid stag value in multi function mode.
        - qed: Do not add VLAN 0 tag to untagged frames in multi-function mode.
        - PCI: dwc: Fix scheduling while atomic issues
        - RDMA/uverbs: Fix validity check for modify QP
        - scsi: lpfc: Synchronize access to remoteport via rport
        - drm: mali-dp: Call drm_crtc_vblank_reset on device init
        - scsi: ipr: System hung while dlpar adding primary ipr adapter back
        - scsi: sd: don't crash the host on invalid commands
        - bpf: sockmap only allow ESTABLISHED sock state
        - bpf: sockmap, fix transition through disconnect without close
        - bpf: test_maps, only support ESTABLISHED socks
        - net/mlx4: Use cpumask_available for eq->affinity_mask
        - clocksource/drivers/fttmr010: Fix set_next_event handler
        - RDMA/bnxt_re: Fix system crash during RDMA resource initialization
        - RISC-V: include linux/ftrace.h in asm-prototypes.h
        - iommu/rockchip: Free irqs in shutdown handler
        - pinctrl/amd: poll InterruptEnable bits in amd_gpio_irq_set_type
        - powerpc/tm: Fix userspace r13 corruption
        - powerpc/tm: Avoid possible userspace r1 corruption on reclaim
        - powerpc/numa: Use associativity if VPHN hcall is successful
        - iommu/amd: Return devid as alias for ACPI HID devices
        - x86/boot: Fix kexec booting failure in the SEV bit detection code
        - Revert "vfs: fix freeze protection in mnt_want_write_file() for overlayfs"
        - mremap: properly flush TLB before releasing the page
        - ARC: build: Get rid of toolchain check
        - ARC: build: Don't set CROSS_COMPILE in arch's Makefile
        - Linux 4.18.16
    
      * Cosmic update: 4.18.15 upstream stable release (LP: #1802082)
        - bnxt_en: Fix TX timeout during netpoll.
        - bnxt_en: free hwrm resources, if driver probe fails.
        - bonding: avoid possible dead-lock
        - ip6_tunnel: be careful when accessing the inner header
        - ip_tunnel: be careful when accessing the inner header
        - ipv4: fix use-after-free in ip_cmsg_recv_dstaddr()
        - ipv6: take rcu lock in rawv6_send_hdrinc()
        - net: dsa: bcm_sf2: Call setup during switch resume
        - net: hns: fix for unmapping problem when SMMU is on
        - net: ipv4: update fnhe_pmtu when first hop's MTU changes
        - net/ipv6: Display all addresses in output of /proc/net/if_inet6
        - netlabel: check for IPV4MASK in addrinfo_get
        - net: mvpp2: Extract the correct ethtype from the skb for tx csum offload
        - net: mvpp2: fix a txq_done race condition
        - net: sched: Add policy validation for tc attributes
        - net: sched: cls_u32: fix hnode refcounting
        - net: systemport: Fix wake-up interrupt race during resume
        - net/usb: cancel pending work when unbinding smsc75xx
        - qlcnic: fix Tx descriptor corruption on 82xx devices
        - qmi_wwan: Added support for Gemalto's Cinterion ALASxx WWAN interface
        - rtnl: limit IFLA_NUM_TX_QUEUES and IFLA_NUM_RX_QUEUES to 4096
        - sctp: update dst pmtu with the correct daddr
        - team: Forbid enslaving team device to itself
        - tipc: fix flow control accounting for implicit connect
        - udp: Unbreak modules that rely on external __skb_recv_udp() availability
        - net: qualcomm: rmnet: Skip processing loopback packets
        - net: qualcomm: rmnet: Fix incorrect allocation flag in transmit
        - net: qualcomm: rmnet: Fix incorrect allocation flag in receive path
        - tun: remove unused parameters
        - tun: initialize napi_mutex unconditionally
        - tun: napi flags belong to tfile
        - net: stmmac: Fixup the tail addr setting in xmit path
        - net/packet: fix packet drop as of virtio gso
        - net: dsa: bcm_sf2: Fix unbind ordering
        - net/mlx5e: Set vlan masks for all offloaded TC rules
        - net: aquantia: memory corruption on jumbo frames
        - net/mlx5: E-Switch, Fix out of bound access when setting vport rate
        - bonding: pass link-local packets to bonding master also.
        - bonding: fix warning message
        - net: stmmac: Rework coalesce timer and fix multi-queue races
        - nfp: avoid soft lockups under control message storm
        - bnxt_en: don't try to offload VLAN 'modify' action
        - net-ethtool: ETHTOOL_GUFO did not and should not require CAP_NET_ADMIN
        - net: phy: phylink: fix SFP interface autodetection
        - sfp: fix oops with ethtool -m
        - tcp/dccp: fix lockdep issue when SYN is backlogged
        - inet: make sure to grab rcu_read_lock before using ireq->ireq_opt
        - net: dsa: b53: Keep CPU port as tagged in all VLANs
        - rtnetlink: Fail dump if target netnsid is invalid
        - bnxt_en: Fix VNIC reservations on the PF.
        - net: ipv4: don't let PMTU updates increase route MTU
        - net/mlx5: Check for SQ and not RQ state when modifying hairpin SQ
        - bnxt_en: Fix enables field in HWRM_QUEUE_COS2BW_CFG request
        - bnxt_en: get the reduced max_irqs by the ones used by RDMA
        - net/ipv6: Remove extra call to ip6_convert_metrics for multipath case
        - net/ipv6: stop leaking percpu memory in fib6 info
        - net: mscc: fix the frame extraction into the skb
        - qed: Fix shmem structure inconsistency between driver and the mfw.
        - r8169: fix network stalls due to missing bit TXCFG_AUTO_FIFO
        - r8169: set RX_MULTI_EN bit in RxConfig for 8168F-family chips
        - vxlan: fill ttl inherit info
        - ASoC: dapm: Fix NULL pointer deference on CODEC to CODEC DAIs
        - ASoC: max98373: Added speaker FS gain cotnrol register to volatile.
        - ASoC: rt5514: Fix the issue of the delay volume applied again
        - selftests: android: move config up a level
        - selftests: kselftest: Remove outdated comment
        - ASoC: max98373: Added 10ms sleep after amp software reset
        - ASoC: wm8804: Add ACPI support
        - ASoC: sigmadsp: safeload should not have lower byte limit
        - ASoC: q6routing: initialize data correctly
        - selftests: add headers_install to lib.mk
        - selftests/efivarfs: add required kernel configs
        - selftests: memory-hotplug: add required configs
        - ASoC: rsnd: adg: care clock-frequency size
        - ASoC: rsnd: don't fallback to PIO mode when -EPROBE_DEFER
        - hwmon: (nct6775) Fix access to fan pulse registers
        - Fix cg_read_strcmp()
        - ASoC: AMD: Ensure reset bit is cleared before configuring
        - drm/pl111: Make sure of_device_id tables are NULL terminated
        - Bluetooth: SMP: Fix trying to use non-existent local OOB data
        - Bluetooth: Use correct tfm to generate OOB data
        - Bluetooth: hci_ldisc: Free rw_semaphore on close
        - mfd: omap-usb-host: Fix dts probe of children
        - KVM: PPC: Book3S HV: Don't use compound_order to determine host mapping size
        - scsi: iscsi: target: Don't use stack buffer for scatterlist
        - scsi: qla2xxx: Fix an endian bug in fcpcmd_is_corrupted()
        - sound: enable interrupt after dma buffer initialization
        - sound: don't call skl_init_chip() to reset intel skl soc
        - bpf: btf: Fix end boundary calculation for type section
        - bpf: use __GFP_COMP while allocating page
        - hwmon: (nct6775) Fix virtual temperature sources for NCT6796D
        - hwmon: (nct6775) Fix RPM output for fan7 on NCT6796D
        - stmmac: fix valid numbers of unicast filter entries
        - hwmon: (nct6775) Use different register to get fan RPM for fan7
        - net: ethernet: ti: add missing GENERIC_ALLOCATOR dependency
        - net: macb: disable scatter-gather for macb on sama5d3
        - ARM: dts: at91: add new compatibility string for macb on sama5d3
        - PCI: hv: support reporting serial number as slot information
        - clk: x86: add "ether_clk" alias for Bay Trail / Cherry Trail
        - clk: x86: Stop marking clocks as CLK_IS_CRITICAL
        - pinctrl: cannonlake: Fix gpio base for GPP-E
        - x86/kvm/lapic: always disable MMIO interface in x2APIC mode
        - drm/amdgpu: Fix SDMA HQD destroy error on gfx_v7
        - drm/amdkfd: Change the control stack MTYPE from UC to NC on GFX9
        - drm/amdkfd: Fix ATS capablity was not reported correctly on some APUs
        - mm: slowly shrink slabs with a relatively small number of objects
        - mm/vmstat.c: fix outdated vmstat_text
        - afs: Fix afs_server struct leak
        - afs: Fix clearance of reply
        - MIPS: Fix CONFIG_CMDLINE handling
        - MIPS: VDSO: Always map near top of user memory
        - mach64: detect the dot clock divider correctly on sparc
        - vsprintf: Fix off-by-one bug in bstr_printf() processing dereferenced
          pointers
        - percpu: stop leaking bitmap metadata blocks
        - perf script python: Fix export-to-postgresql.py occasional failure
        - perf script python: Fix export-to-sqlite.py sample columns
        - s390/cio: Fix how vfio-ccw checks pinned pages
        - dm cache: destroy migration_cache if cache target registration failed
        - dm: fix report zone remapping to account for partition offset
        - dm linear: eliminate linear_end_io call if CONFIG_DM_ZONED disabled
        - dm linear: fix linear_end_io conditional definition
        - cgroup: Fix dom_cgrp propagation when enabling threaded mode
        - Input: xpad - add support for Xbox1 PDP Camo series gamepad
        - drm/nouveau/drm/nouveau: Grab runtime PM ref in nv50_mstc_detect()
        - mmc: block: avoid multiblock reads for the last sector in SPI mode
        - pinctrl: mcp23s08: fix irq and irqchip setup order
        - arm64: perf: Reject stand-alone CHAIN events for PMUv3
        - mm/mmap.c: don't clobber partially overlapping VMA with MAP_FIXED_NOREPLACE
        - mm/thp: fix call to mmu_notifier in set_pmd_migration_entry() v2
        - filesystem-dax: Fix dax_layout_busy_page() livelock
        - mm: Preserve _PAGE_DEVMAP across mprotect() calls
        - i2c: i2c-scmi: fix for i2c_smbus_write_block_data
        - KVM: PPC: Book3S HV: Avoid crash from THP collapse during radix page fault
        - Linux 4.18.15
    
      * Cosmic update: 4.18.14 upstream stable release (LP: #1801986)
        - perf/core: Add sanity check to deal with pinned event failure
        - mm: migration: fix migration of huge PMD shared pages
        - mm, thp: fix mlocking THP page with migration enabled
        - mm/vmstat.c: skip NR_TLB_REMOTE_FLUSH* properly
        - KVM: VMX: check for existence of secondary exec controls before accessing
        - blk-mq: I/O and timer unplugs are inverted in blktrace
        - pstore/ram: Fix failure-path memory leak in ramoops_init
        - clocksource/drivers/timer-atmel-pit: Properly handle error cases
        - fbdev/omapfb: fix omapfb_memory_read infoleak
        - mmc: core: Fix debounce time to use microseconds
        - mmc: slot-gpio: Fix debounce time to use miliseconds again
        - mac80211: allocate TXQs for active monitor interfaces
        - drm/amdgpu: Fix vce work queue was not cancelled when suspend
        - drm: fix use-after-free read in drm_mode_create_lease_ioctl()
        - x86/vdso: Fix asm constraints on vDSO syscall fallbacks
        - selftests/x86: Add clock_gettime() tests to test_vdso
        - x86/vdso: Only enable vDSO retpolines when enabled and supported
        - x86/vdso: Fix vDSO syscall fallback asm constraint regression
        - Revert "UBUNTU: SAUCE: PCI: Reprogram bridge prefetch registers on resume"
        - PCI: Reprogram bridge prefetch registers on resume
        - mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys
        - PM / core: Clear the direct_complete flag on errors
        - dm mpath: fix attached_handler_name leak and dangling hw_handler_name
          pointer
        - dm cache metadata: ignore hints array being too small during resize
        - dm cache: fix resize crash if user doesn't reload cache table
        - xhci: Add missing CAS workaround for Intel Sunrise Point xHCI
        - usb: xhci-mtk: resume USB3 roothub first
        - USB: serial: simple: add Motorola Tetra MTP6550 id
        - USB: serial: option: improve Quectel EP06 detection
        - USB: serial: option: add two-endpoints device-id flag
        - usb: cdc_acm: Do not leak URB buffers
        - tty: Drop tty->count on tty_reopen() failure
        - of: unittest: Disable interrupt node tests for old world MAC systems
        - powerpc: Avoid code patching freed init sections
        - powerpc/lib: fix book3s/32 boot failure due to code patching
        - ARC: clone syscall to setp r25 as thread pointer
        - f2fs: fix invalid memory access
        - tipc: call start and done ops directly in __tipc_nl_compat_dumpit()
        - ucma: fix a use-after-free in ucma_resolve_ip()
        - ubifs: Check for name being NULL while mounting
        - rds: rds_ib_recv_alloc_cache() should call alloc_percpu_gfp() instead
        - ath10k: fix scan crash due to incorrect length calculation
        - Linux 4.18.14
    
      * Cosmic update: 4.18.13 upstream stable release (LP: #1801931)
        - rseq/selftests: fix parametrized test with -fpie
        - mac80211: Run TXQ teardown code before de-registering interfaces
        - mac80211_hwsim: require at least one channel
        - Btrfs: fix unexpected failure of nocow buffered writes after snapshotting
          when low on space
        - KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function
        - cfg80211: remove division by size of sizeof(struct ieee80211_wmm_rule)
        - btrfs: btrfs_shrink_device should call commit transaction at the end
        - scsi: csiostor: add a check for NULL pointer after kmalloc()
        - scsi: csiostor: fix incorrect port capabilities
        - scsi: libata: Add missing newline at end of file
        - scsi: aacraid: fix a signedness bug
        - bpf, sockmap: fix potential use after free in bpf_tcp_close
        - bpf, sockmap: fix psock refcount leak in bpf_tcp_recvmsg
        - bpf: sockmap, decrement copied count correctly in redirect error case
        - mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
        - mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
        - cfg80211: make wmm_rule part of the reg_rule structure
        - mac80211_hwsim: Fix possible Spectre-v1 for hwsim_world_regdom_custom
        - nl80211: Fix nla_put_u8 to u16 for NL80211_WMMR_TXOP
        - nl80211: Pass center frequency in kHz instead of MHz
        - bpf: fix several offset tests in bpf_msg_pull_data
        - gpio: adp5588: Fix sleep-in-atomic-context bug
        - mac80211: mesh: fix HWMP sequence numbering to follow standard
        - mac80211: avoid kernel panic when building AMSDU from non-linear SKB
        - gpiolib: acpi: Switch to cansleep version of GPIO library call
        - gpiolib-acpi: Register GpioInt ACPI event handlers from a late_initcall
        - gpio: dwapb: Fix error handling in dwapb_gpio_probe()
        - bpf: fix msg->data/data_end after sg shift repair in bpf_msg_pull_data
        - bpf: fix shift upon scatterlist ring wrap-around in bpf_msg_pull_data
        - bpf: fix sg shift repair start offset in bpf_msg_pull_data
        - tipc: switch to rhashtable iterator
        - sh_eth: Add R7S9210 support
        - net: mvpp2: initialize port of_node pointer
        - tc-testing: add test-cases for numeric and invalid control action
        - cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE
        - mac80211: do not convert to A-MSDU if frag/subframe limited
        - mac80211: always account for A-MSDU header changes
        - tools/kvm_stat: fix python3 issues
        - tools/kvm_stat: fix handling of invalid paths in debugfs provider
        - tools/kvm_stat: fix updates for dead guests
        - gpio: Fix crash due to registration race
        - ARC: atomics: unbork atomic_fetch_##op()
        - Revert "blk-throttle: fix race between blkcg_bio_issue_check() and
          cgroup_rmdir()"
        - md/raid5-cache: disable reshape completely
        - RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0
        - selftests: pmtu: maximum MTU for vti4 is 2^16-1-20
        - selftests: pmtu: detect correct binary to ping ipv6 addresses
        - ibmvnic: Include missing return code checks in reset function
        - bpf: Fix bpf_msg_pull_data()
        - bpf: avoid misuse of psock when TCP_ULP_BPF collides with another ULP
        - i2c: uniphier: issue STOP only for last message or I2C_M_STOP
        - i2c: uniphier-f: issue STOP only for last message or I2C_M_STOP
        - net: cadence: Fix a sleep-in-atomic-context bug in macb_halt_tx()
        - fs/cifs: don't translate SFM_SLASH (U+F026) to backslash
        - mac80211: fix an off-by-one issue in A-MSDU max_subframe computation
        - cfg80211: fix a type issue in ieee80211_chandef_to_operating_class()
        - mac80211: fix WMM TXOP calculation
        - mac80211: fix a race between restart and CSA flows
        - mac80211: Fix station bandwidth setting after channel switch
        - mac80211: don't Tx a deauth frame if the AP forbade Tx
        - mac80211: shorten the IBSS debug messages
        - fsnotify: fix ignore mask logic in fsnotify()
        - net/ibm/emac: wrong emac_calc_base call was used by typo
        - nds32: fix logic for module
        - nds32: add NULL entry to the end of_device_id array
        - nds32: Fix empty call trace
        - nds32: Fix get_user/put_user macro expand pointer problem
        - nds32: fix build error because of wrong semicolon
        - tools/vm/slabinfo.c: fix sign-compare warning
        - tools/vm/page-types.c: fix "defined but not used" warning
        - nds32: linker script: GCOV kernel may refers data in __exit
        - ceph: avoid a use-after-free in ceph_destroy_options()
        - firmware: arm_scmi: fix divide by zero when sustained_perf_level is zero
        - afs: Fix cell specification to permit an empty address list
        - mm: madvise(MADV_DODUMP): allow hugetlbfs pages
        - bpf: 32-bit RSH verification must truncate input before the ALU op
        - netfilter: xt_cluster: add dependency on conntrack module
        - netfilter: xt_checksum: ignore gso skbs
        - HID: intel-ish-hid: Enable Sunrise Point-H ish driver
        - HID: add support for Apple Magic Keyboards
        - usb: gadget: fotg210-udc: Fix memory leak of fotg210->ep[i]
        - HID: hid-saitek: Add device ID for RAT 7 Contagion
        - scsi: iscsi: target: Set conn->sess to NULL when iscsi_login_set_conn_values
          fails
        - scsi: iscsi: target: Fix conn_ops double free
        - scsi: qedi: Add the CRC size within iSCSI NVM image
        - perf annotate: Properly interpret indirect call
        - perf evsel: Fix potential null pointer dereference in perf_evsel__new_idx()
        - perf util: Fix bad memory access in trace info.
        - perf probe powerpc: Ignore SyS symbols irrespective of endianness
        - perf annotate: Fix parsing aarch64 branch instructions after objdump update
        - netfilter: kconfig: nat related expression depend on nftables core
        - netfilter: nf_tables: release chain in flushing set
        - Revert "iio: temperature: maxim_thermocouple: add MAX31856 part"
        - iio: imu: st_lsm6dsx: take into account ts samples in wm configuration
        - RDMA/ucma: check fd type in ucma_migrate_id()
        - riscv: Do not overwrite initrd_start and initrd_end
        - HID: sensor-hub: Restore fixup for Lenovo ThinkPad Helix 2 sensor hub report
        - usb: host: xhci-plat: Iterate over parent nodes for finding quirks
        - USB: yurex: Check for truncation in yurex_read()
        - nvmet-rdma: fix possible bogus dereference under heavy load
        - bnxt_re: Fix couple of memory leaks that could lead to IOMMU call traces
        - net/mlx5: Consider PCI domain in search for next dev
        - dm raid: fix reshape race on small devices
        - drm/nouveau: fix oops in client init failure path
        - drm/nouveau/mmu: don't attempt to dereference vmm without valid instance
          pointer
        - drm/nouveau/TBDdevinit: don't fail when PMU/PRE_OS is missing from VBIOS
        - drm/nouveau/disp: fix DP disable race
        - drm/nouveau/disp/gm200-: enforce identity-mapped SOR assignment for LVDS/eDP
          panels
        - dm raid: fix stripe adding reshape deadlock
        - dm raid: fix rebuild of specific devices by updating superblock
        - dm raid: fix RAID leg rebuild errors
        - r8169: set TxConfig register after TX / RX is enabled, just like RxConfig
        - fs/cifs: suppress a string overflow warning
        - perf/x86/intel: Add support/quirk for the MISPREDICT bit on Knights Landing
          CPUs
        - sched/topology: Set correct NUMA topology type
        - dm thin metadata: try to avoid ever aborting transactions
        - netfilter: nfnetlink_queue: Solve the NFQUEUE/conntrack clash for NF_REPEAT
        - netfilter: xt_hashlimit: use s->file instead of s->private
        - arch/hexagon: fix kernel/dma.c build warning
        - hexagon: modify ffs() and fls() to return int
        - drm/amdgpu: Fix SDMA hang in prt mode v2
        - arm64: jump_label.h: use asm_volatile_goto macro instead of "asm goto"
        - drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk
        - r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED
        - s390/qeth: don't dump past end of unknown HW header
        - cifs: read overflow in is_valid_oplock_break()
        - asm-generic: io: Fix ioport_map() for !CONFIG_GENERIC_IOMAP &&
          CONFIG_INDIRECT_PIO
        - xen/manage: don't complain about an empty value in control/sysrq node
        - xen: avoid crash in disable_hotplug_cpu
        - xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage
        - x86/APM: Fix build warning when PROC_FS is not enabled
        - new primitive: discard_new_inode()
        - vfs: don't evict uninitialized inode
        - ovl: set I_CREATING on inode being created
        - ovl: fix access beyond unterminated strings
        - ovl: fix memory leak on unlink of indexed file
        - ovl: fix format of setxattr debug
        - sysfs: Do not return POSIX ACL xattrs via listxattr
        - b43: fix DMA error related regression with proprietary firmware
        - firmware: Fix security issue with request_firmware_into_buf()
        - firmware: Always initialize the fw_priv list object
        - cpufreq: qcom-kryo: Fix section annotations
        - smb2: fix missing files in root share directory listing
        - iommu/amd: Clear memory encryption mask from physical address
        - crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
        - crypto: chelsio - Fix memory corruption in DMA Mapped buffers.
        - crypto: mxs-dcp - Fix wait logic on chan threads
        - crypto: caam/jr - fix ablkcipher_edesc pointer arithmetic
        - gpiolib: Free the last requested descriptor
        - Drivers: hv: vmbus: Use get/put_cpu() in vmbus_connect()
        - tools: hv: fcopy: set 'error' in case an unknown operation was requested
        - proc: restrict kernel stack dumps to root
        - ocfs2: fix locking for res->tracking and dlm->tracking_list
        - HID: i2c-hid: disable runtime PM operations on hantick touchpad
        - ixgbe: check return value of napi_complete_done()
        - dm thin metadata: fix __udivdi3 undefined on 32-bit
        - Revert "drm/amd/pp: Send khz clock values to DC for smu7/8"
        - Linux 4.18.13
    
      * Volume control not working Dell XPS 27 (7760) (LP: #1775068) // Cosmic
        update: 4.18.13 upstream stable release (LP: #1801931)
        - ALSA: hda/realtek - Cannot adjust speaker's volume on Dell XPS 27 7760
    
      * [Bionic][Cosmic]  ipmi: Fix timer race with module unload (LP: #1799281)
        - ipmi: Fix timer race with module unload
    
      * [Bionic][Cosmic] Fix to ipmi to support vendor specific messages greater
        than 255 bytes (LP: #1799794)
        - ipmi:ssif: Add support for multi-part transmit messages > 2 parts
    
      * 18.10 kernel does not appear to validate kernel module signatures correctly
        (LP: #1798863) // CVE-2018-18653
        - SAUCE: (efi-lockdown) module: remove support for deferring module signature
          verification to IMA
    
      * 18.10 kernel does not appear to validate kernel module signatures correctly
        (LP: #1798863)
        - SAUCE: (efi-lockdown) module: trust keys from secondary keyring for module
          signing
    
      * [Ubuntu] net/af_iucv: fix skb leaks for HiperTransport (LP: #1800639)
        - net/af_iucv: drop inbound packets with invalid flags
        - net/af_iucv: fix skb handling on HiperTransport xmit error
    
      * Power consumption during s2idle is higher than long idle(sk hynix)
        (LP: #1801875)
        - SAUCE: pci: prevent sk hynix nvme from entering D3
        - SAUCE: nvme: add quirk to not call disable function when suspending
    
      * NULL pointer dereference at 0000000000000020 when access
        dst_orig->ops->family in function  xfrm_lookup_with_ifid() (LP: #1801878)
        - xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry.
    
      * hns3: map tx ring to tc (LP: #1802023)
        - net: hns3: Set tx ring' tc info when netdev is up
    
      * [Ubuntu] qeth: Fix potential array overrun in cmd/rc lookup (LP: #1800641)
        - s390: qeth_core_mpc: Use ARRAY_SIZE instead of reimplementing its function
        - s390: qeth: Fix potential array overrun in cmd/rc lookup
    
      * Mellanox CX5 stops pinging with rx_wqe_err (mlx5_core) (LP: #1799393)
        - net/mlx5: WQ, fixes for fragmented WQ buffers API
    
      * Vulkan applications cause permanent memory leak with Intel GPU
        (LP: #1798165)
        - drm/syncobj: Don't leak fences when WAIT_FOR_SUBMIT is set
    
      * Packaging resync (LP: #1786013)
        - [Package] add support for specifying the primary makefile
    
     -- Thadeu Lima de Souza Cascardo <email address hidden>  Wed, 14 Nov 2018 11:30:22 -0200
  • linux (4.18.0-11.12) cosmic; urgency=medium
    
      * linux: 4.18.0-11.12 -proposed tracker (LP: #1799445)
    
      * arm64: snapdragon: WARNING: CPU: 0 PID: 1 arch/arm64/kernel/setup.c:271
        reserve_memblock_reserved_regions (LP: #1797139)
        - SAUCE: arm64: Fix /proc/iomem for reserved but not memory regions
    
      * arm64: snapdragon: WARNING: CPU: 0 PID: 1 at drivers/irqchip/irq-gic.c:1016
        gic_irq_domain_translate (LP: #1797143)
        - SAUCE: arm64: dts: msm8916: camms: fix gic_irq_domain_translate warnings
    
      * The front MIC can't work on the Lenovo M715 (LP: #1797292)
        - ALSA: hda/realtek - Fix the problem of the front MIC on the Lenovo M715
    
      * Provide mode where all vCPUs on a core must be the same VM (LP: #1792957)
        - KVM: PPC: Book3S HV: Provide mode where all vCPUs on a core must be the same
          VM
    
      * fscache: bad refcounting in fscache_op_complete leads to OOPS (LP: #1797314)
        - SAUCE: fscache: Fix race in decrementing refcount of op->npages
    
      * hns3: autoneg settings get lost on down/up (LP: #1797654)
        - net: hns3: Fix for information of phydev lost problem when down/up
    
      * not able to unwind the stack from within __kernel_clock_gettime in the Linux
        vDSO (LP: #1797963)
        - powerpc/vdso: Correct call frame information
    
      * Signal 7 error when running GPFS tracing in cluster (LP: #1792195)
        - powerpc/mm/books3s: Add new pte bit to mark pte temporarily invalid.
        - powerpc/mm/radix: Only need the Nest MMU workaround for R -> RW transition
    
      * Support Edge Gateway's WIFI LED (LP: #1798330)
        - SAUCE: mwifiex: Switch WiFi LED state according to the device status
    
      * Support Edge Gateway's Bluetooth LED (LP: #1798332)
        - SAUCE: Bluetooth: Support for LED on Edge Gateways
    
      * kvm doesn't work on 36 physical bits systems (LP: #1798427)
        - KVM: x86: fix L1TF's MMIO GFN calculation
    
      * CVE-2018-15471
        - xen-netback: fix input validation in xenvif_set_hash_mapping()
    
      * regression in 'ip --family bridge neigh' since linux v4.12 (LP: #1796748)
        - rtnetlink: fix rtnl_fdb_dump() for ndmsg header
    
     -- Stefan Bader <email address hidden>  Tue, 23 Oct 2018 18:59:15 +0200
  • linux (4.18.0-10.11) cosmic; urgency=medium
    
      * linux: 4.18.0-10.11 -proposed tracker (LP: #1797379)
    
      * the machine of lenovo M715 with the AMD GPU (Radeon Vega 8 Mobile, rev ca,
        1002:15dd) often hangs randomly (LP: #1796789)
        - drm/amd: Add missing fields in atom_integrated_system_info_v1_11
    
      * Miscellaneous Ubuntu changes
        - [Config] CONFIG_VBOXGUEST=n
        - ubuntu: vbox -- update to 5.2.18-dfsg-2
        - ubuntu: enable vbox build
    
     -- Seth Forshee <email address hidden>  Thu, 11 Oct 2018 08:24:45 -0500