Public bug reported:

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset (ported from v4.14.36 and v4.16.4)
       from git://git.kernel.org/

HID: i2c-hid: fix inverted return value from i2c_hid_command()
device-dax: allow MAP_SYNC to succeed
libnvdimm, dimm: handle EACCES failures from label reads
drm/i915: Fix hibernation with ACPI S0 target state
s390: add support for IBM z14 Model ZR1
HID: i2c-hid: Fix resume issue on Raydium touchscreen device
pwm: mediatek: Improve precision in rate calculation
pwm: mediatek: Fix up PWM4 and PWM5 malfunction on MT7623
clk: tegra: Mark HCLK, SCLK and EMC as critical
trace_uprobe: Use %lx to display offset
drm/amd/display: HDMI has no sound after Panel power off/on
mmc: core: Prevent bus reference leak in mmc_blk_init()
drivers/infiniband/ulp/srpt/ib_srpt.c: fix build with gcc-4.4.4
drivers/infiniband/core/verbs.c: fix build with gcc-4.4.4
IB/srpt: Fix an out-of-bounds stack access in srpt_zerolength_write()
xprtrdma: Fix corner cases when handling device removal
xprtrdma: Fix latency regression on NUMA NFS/RDMA clients
RDMA/core: Avoid that ib_drain_qp() triggers an out-of-bounds stack access
ext4: force revalidation of directory pointer after seekdir(2)
ext4: fix offset overflow on 32-bit archs in ext4_iomap_begin()
ceph: always update atime/mtime/ctime for new inode
powerpc/64s: Fix pkey support in dt_cpu_ftrs, add CPU_FTR_PKEY bit
acpi, nfit: rework NVDIMM leaf method detection
media: rc: oops in ir_timer_keyup after device unplug
mm: hwpoison: disable memory error handling on 1GB hugepage
Bluetooth: hci_bcm: Add irq_polarity module option
writeback: safer lock nesting
media: staging: lirc_zilog: incorrect reference counting
Revert "media: lirc_zilog: driver only sends LIRCCODE"
mm/filemap.c: fix NULL pointer in page_cache_tree_insert()
autofs: mount point create should honour passed in mode
Don't leak MNT_INTERNAL away from internal mounts
rpc_pipefs: fix double-dput()
orangefs_kill_sb(): deal with allocation failures
hypfs_kill_super(): deal with failed allocations
jffs2_kill_sb(): deal with failed allocations
drm/i915: Correctly handle limited range YCbCr data on VLV/CHV
mmc: sdhci-pci: Only do AMD tuning for HS200
fanotify: fix logic of events on child
udf: Fix leak of UTF-16 surrogates into encoded strings
powerpc/lib: Fix off-by-one in alternate feature patching
powerpc/eeh: Fix enabling bridge MMIO windows
MIPS: memset.S: Fix clobber of v1 in last_fixup
MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup
MIPS: memset.S: EVA & fault support for small_memset
MIPS: uaccess: Add micromips clobbers to bzero invocation
HID: wacom: bluetooth: send exit report for recent Bluetooth devices
HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device
HID: input: fix battery level reporting on BT mice
random: add new ioctl RNDRESEEDCRNG
random: crng_reseed() should lock the crng instance that it is modifying
random: use a different mixing algorithm for add_device_randomness()
random: fix crng_ready() test
ALSA: hda - New VIA controller suppor no-snoop path
ALSA: rawmidi: Fix missing input substream checks in compat ioctls
ALSA: line6: Use correct endpoint type for midi output
drm/radeon: Fix PCIe lane width calculation
drm/radeon: add PX quirk for Asus K73TK
drm/rockchip: Clear all interrupts before requesting the IRQ
drm/amdgpu/si: implement get/set pcie_lanes asic callback
drm/amdgpu: Fix PCIe lane width calculation
drm/amdgpu/sdma: fix mask in emit_pipeline_sync
drm/amdgpu: Fix always_valid bos multiple LRU insertions.
drm/amdgpu: Add an ATPX quirk for hybrid laptop
ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls
ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams
ALSA: pcm: Avoid potential races between OSS ioctls and read/write
ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation
watchdog: f71808e_wdt: Fix WD_EN register read
dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4
thermal: imx: Fix race condition in imx_thermal_probe()
pwm: rcar: Fix a condition to prevent mismatch value setting to duty
clk: bcm2835: De-assert/assert PLL reset signal when appropriate
clk: mediatek: fix PWM clock source by adding a fixed-factor clock
clk: fix false-positive Wmaybe-uninitialized warning
clk: mvebu: armada-38x: add support for missing clocks
PCI: Mark Broadcom HT1100 and HT2000 Root Port Extended Tags as broken
mmc: tmio: Fix error handling when issuing CMD23
mmc: jz4740: Fix race condition in IRQ mask update
iommu/vt-d: Fix a potential memory leak
um: Use POSIX ucontext_t instead of struct ucontext
um: Compile with modern headers
ring-buffer: Check if memory is available before allocation
nfit: skip region registration for incomplete control regions
nfit, address-range-scrub: fix scrub in-progress reporting
libnvdimm, namespace: use a safe lookup for dimm device name
libnvdimm, dimm: fix dpa reservation vs uninitialized label area
tpm: self test failure should not cause suspend to fail
cxl: Fix possible deadlock when processing page faults from cxllib
dmaengine: at_xdmac: fix rare residue corruption
IB/srp: Fix completion vector assignment algorithm
IB/srp: Fix srp_abort()
ALSA: pcm: Fix UAF at PCM release via PCM timer access
RDMA/rxe: Fix an out-of-bounds read
RDMA/mlx5: Protect from NULL pointer derefence
RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device
dm crypt: limit the number of allocated pages
ext4: add extra checks to ext4_xattr_block_get()
ext4: add bounds checking to ext4_xattr_find_entry()
ext4: move call to ext4_error() into ext4_xattr_check_block()
ext4: don't allow r/w mounts if metadata blocks overlap the superblock
ext4: always initialize the crc32c checksum driver
ext4: limit xattr size to INT_MAX
ext4: protect i_disksize update by i_data_sem in direct write path
ext4: don't update checksum of new initialized bitmaps
ext4: pass -ESHUTDOWN code to jbd2 layer
ext4: eliminate sleep from shutdown ioctl
ext4: shutdown should not prevent get_write_access
jbd2: if the journal is aborted then don't allow update of the log tail
block: use 32-bit blk_status_t on Alpha
extcon: intel-cht-wc: Set direction and drv flags for V5 boost GPIO
random: use a tighter cap in credit_entropy_bits_safe()
irqchip/gic: Take lock when updating irq type
ASoC: topology: Fix kcontrol name string handling
ASoC: ssm2602: Replace reg_default_raw with reg_default
soc: mediatek: fix the mistaken pointer accessed when subdomains are added
HID: core: Fix size as type u32
HID: Fix hid_report_len usage
powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops
powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops
powerpc/kexec_file: Fix error code when trying to load kdump kernel
powerpc/kprobes: Fix call trace due to incorrect preempt count
powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently
powerpc/64: Call H_REGISTER_PROC_TBL when running as a HPT guest on POWER9
powerpc/64s: Fix dt_cpu_ftrs to have restore_cpu clear unwanted LPCR bits
CIFS: fix sha512 check in cifs_crypto_secmech_release
CIFS: add sha512 secmech
CIFS: refactor crypto shash/sdesc allocation&free
i2c: i801: Restore configuration at shutdown
i2c: i801: Save register SMBSLVCMD value only once
HID: i2c-hid: fix size check and type usage
smb3: Fix root directory when server returns inode number of zero
fix smb3-encryption breakage when CONFIG_DEBUG_SG=y
cifs: fix memory leak in SMB2_open()
usb: dwc3: gadget: never call ->complete() from ->ep_queue()
usb: dwc3: pci: Properly cleanup resource
usb: dwc3: prevent setting PRTCAP to OTG from debugfs
USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw
USB: gadget: f_midi: fixing a possible double-free in f_midi
ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status()
ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E
regmap: Fix reversed bounds check in regmap_raw_write()
x86/xen: Delay get_cpu_cap until stack canary is established
media: vsp1: Fix BRx conditional path in WPF
media: vivid: check if the cec_adapter is valid
media: atomisp_fops.c: disable atomisp_compat_ioctl32
spi: Fix unregistration of controller with fixed SPI bus number
spi: Fix scatterlist elements size in spi_map_buf
spi: atmel: init FIFOs before spi enable
ARM: dts: at91: sama5d4: fix pinctrl compatible string
ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250
ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property
arm: dts: mt7623: fix USB initialization fails on bananapi-r2
ARM: EXYNOS: Fix coupled CPU idle freeze on Exynos4210
KVM: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list
ARM64: dts: meson: reduce odroid-c2 eMMC maximum rate
usb: gadget: udc: core: update usb_ep_queue() documentation
phy: allwinner: sun4i-usb: poll vbus changes on A23/A33 when driving VBUS
usb: musb: gadget: misplaced out of bounds check
mm, slab: reschedule cache_reap() on the same CPU
ipc/shm: fix use-after-free of shm file via remap_file_pages()
resource: fix integer overflow at reallocation
fs/reiserfs/journal.c: add missing resierfs_warning() arg
task_struct: only use anon struct under randstruct plugin
mm/hmm: hmm_pfns_bad() was accessing wrong struct
mm/ksm.c: fix inconsistent accounting of zero pages
ubi: Reject MLC NAND
ubi: Fix error for write access
ubi: fastmap: Don't flush fastmap work on detach
ubifs: Check ubifs_wbuf_sync() return code
cpufreq: CPPC: Use transition_delay_us depending transition_latency
tty: make n_tty_read() always abort if hangup is in progress

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: linux (Ubuntu Bionic)
     Importance: Undecided
     Assignee: Kamal Mostafa (kamalmostafa)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Bionic)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu Bionic)
     Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)

** Changed in: linux (Ubuntu Bionic)
       Status: New => In Progress

** Description changed:

+ SRU Justification
  
-     SRU Justification
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from a mainline/stable Linux tree or
+        a minimally backported form of that patch. The following upstream
+        stable patches should be included in the Ubuntu kernel:
  
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from a mainline/stable Linux tree or
-        a minimally backported form of that patch. The following upstream
-        stable patches should be included in the Ubuntu kernel:
+        upstream stable patchset (from v4.14.36 and v4.16.4)
+        from git://git.kernel.org/
  
-        upstream stable patchset
-        from git://git.kernel.org/
+ HID: i2c-hid: fix inverted return value from i2c_hid_command()
+ device-dax: allow MAP_SYNC to succeed
+ libnvdimm, dimm: handle EACCES failures from label reads
+ drm/i915: Fix hibernation with ACPI S0 target state
+ s390: add support for IBM z14 Model ZR1
+ HID: i2c-hid: Fix resume issue on Raydium touchscreen device
+ pwm: mediatek: Improve precision in rate calculation
+ pwm: mediatek: Fix up PWM4 and PWM5 malfunction on MT7623
+ clk: tegra: Mark HCLK, SCLK and EMC as critical
+ trace_uprobe: Use %lx to display offset
+ drm/amd/display: HDMI has no sound after Panel power off/on
+ mmc: core: Prevent bus reference leak in mmc_blk_init()
+ drivers/infiniband/ulp/srpt/ib_srpt.c: fix build with gcc-4.4.4
+ drivers/infiniband/core/verbs.c: fix build with gcc-4.4.4
+ IB/srpt: Fix an out-of-bounds stack access in srpt_zerolength_write()
+ xprtrdma: Fix corner cases when handling device removal
+ xprtrdma: Fix latency regression on NUMA NFS/RDMA clients
+ RDMA/core: Avoid that ib_drain_qp() triggers an out-of-bounds stack access
+ ext4: force revalidation of directory pointer after seekdir(2)
+ ext4: fix offset overflow on 32-bit archs in ext4_iomap_begin()
+ ceph: always update atime/mtime/ctime for new inode
+ powerpc/64s: Fix pkey support in dt_cpu_ftrs, add CPU_FTR_PKEY bit
+ acpi, nfit: rework NVDIMM leaf method detection
+ media: rc: oops in ir_timer_keyup after device unplug
+ mm: hwpoison: disable memory error handling on 1GB hugepage
+ Bluetooth: hci_bcm: Add irq_polarity module option
+ writeback: safer lock nesting
+ media: staging: lirc_zilog: incorrect reference counting
+ Revert "media: lirc_zilog: driver only sends LIRCCODE"
+ mm/filemap.c: fix NULL pointer in page_cache_tree_insert()
+ autofs: mount point create should honour passed in mode
+ Don't leak MNT_INTERNAL away from internal mounts
+ rpc_pipefs: fix double-dput()
+ orangefs_kill_sb(): deal with allocation failures
+ hypfs_kill_super(): deal with failed allocations
+ jffs2_kill_sb(): deal with failed allocations
+ drm/i915: Correctly handle limited range YCbCr data on VLV/CHV
+ mmc: sdhci-pci: Only do AMD tuning for HS200
+ fanotify: fix logic of events on child
+ udf: Fix leak of UTF-16 surrogates into encoded strings
+ powerpc/lib: Fix off-by-one in alternate feature patching
+ powerpc/eeh: Fix enabling bridge MMIO windows
+ MIPS: memset.S: Fix clobber of v1 in last_fixup
+ MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup
+ MIPS: memset.S: EVA & fault support for small_memset
+ MIPS: uaccess: Add micromips clobbers to bzero invocation
+ HID: wacom: bluetooth: send exit report for recent Bluetooth devices
+ HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device
+ HID: input: fix battery level reporting on BT mice
+ random: add new ioctl RNDRESEEDCRNG
+ random: crng_reseed() should lock the crng instance that it is modifying
+ random: use a different mixing algorithm for add_device_randomness()
+ random: fix crng_ready() test
+ ALSA: hda - New VIA controller suppor no-snoop path
+ ALSA: rawmidi: Fix missing input substream checks in compat ioctls
+ ALSA: line6: Use correct endpoint type for midi output
+ drm/radeon: Fix PCIe lane width calculation
+ drm/radeon: add PX quirk for Asus K73TK
+ drm/rockchip: Clear all interrupts before requesting the IRQ
+ drm/amdgpu/si: implement get/set pcie_lanes asic callback
+ drm/amdgpu: Fix PCIe lane width calculation
+ drm/amdgpu/sdma: fix mask in emit_pipeline_sync
+ drm/amdgpu: Fix always_valid bos multiple LRU insertions.
+ drm/amdgpu: Add an ATPX quirk for hybrid laptop
+ ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
+ ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls
+ ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams
+ ALSA: pcm: Avoid potential races between OSS ioctls and read/write
+ ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation
+ watchdog: f71808e_wdt: Fix WD_EN register read
+ dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4
+ thermal: imx: Fix race condition in imx_thermal_probe()
+ pwm: rcar: Fix a condition to prevent mismatch value setting to duty
+ clk: bcm2835: De-assert/assert PLL reset signal when appropriate
+ clk: mediatek: fix PWM clock source by adding a fixed-factor clock
+ clk: fix false-positive Wmaybe-uninitialized warning
+ clk: mvebu: armada-38x: add support for missing clocks
+ PCI: Mark Broadcom HT1100 and HT2000 Root Port Extended Tags as broken
+ mmc: tmio: Fix error handling when issuing CMD23
+ mmc: jz4740: Fix race condition in IRQ mask update
+ iommu/vt-d: Fix a potential memory leak
+ um: Use POSIX ucontext_t instead of struct ucontext
+ um: Compile with modern headers
+ ring-buffer: Check if memory is available before allocation
+ nfit: skip region registration for incomplete control regions
+ nfit, address-range-scrub: fix scrub in-progress reporting
+ libnvdimm, namespace: use a safe lookup for dimm device name
+ libnvdimm, dimm: fix dpa reservation vs uninitialized label area
+ tpm: self test failure should not cause suspend to fail
+ cxl: Fix possible deadlock when processing page faults from cxllib
+ dmaengine: at_xdmac: fix rare residue corruption
+ IB/srp: Fix completion vector assignment algorithm
+ IB/srp: Fix srp_abort()
+ ALSA: pcm: Fix UAF at PCM release via PCM timer access
+ RDMA/rxe: Fix an out-of-bounds read
+ RDMA/mlx5: Protect from NULL pointer derefence
+ RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device
+ dm crypt: limit the number of allocated pages
+ ext4: add extra checks to ext4_xattr_block_get()
+ ext4: add bounds checking to ext4_xattr_find_entry()
+ ext4: move call to ext4_error() into ext4_xattr_check_block()
+ ext4: don't allow r/w mounts if metadata blocks overlap the superblock
+ ext4: always initialize the crc32c checksum driver
+ ext4: limit xattr size to INT_MAX
+ ext4: protect i_disksize update by i_data_sem in direct write path
+ ext4: don't update checksum of new initialized bitmaps
+ ext4: pass -ESHUTDOWN code to jbd2 layer
+ ext4: eliminate sleep from shutdown ioctl
+ ext4: shutdown should not prevent get_write_access
+ jbd2: if the journal is aborted then don't allow update of the log tail
+ block: use 32-bit blk_status_t on Alpha
+ extcon: intel-cht-wc: Set direction and drv flags for V5 boost GPIO
+ random: use a tighter cap in credit_entropy_bits_safe()
+ irqchip/gic: Take lock when updating irq type
+ ASoC: topology: Fix kcontrol name string handling
+ ASoC: ssm2602: Replace reg_default_raw with reg_default
+ soc: mediatek: fix the mistaken pointer accessed when subdomains are added
+ HID: core: Fix size as type u32
+ HID: Fix hid_report_len usage
+ powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops
+ powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops
+ powerpc/kexec_file: Fix error code when trying to load kdump kernel
+ powerpc/kprobes: Fix call trace due to incorrect preempt count
+ powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently
+ powerpc/64: Call H_REGISTER_PROC_TBL when running as a HPT guest on POWER9
+ powerpc/64s: Fix dt_cpu_ftrs to have restore_cpu clear unwanted LPCR bits
+ CIFS: fix sha512 check in cifs_crypto_secmech_release
+ CIFS: add sha512 secmech
+ CIFS: refactor crypto shash/sdesc allocation&free
+ i2c: i801: Restore configuration at shutdown
+ i2c: i801: Save register SMBSLVCMD value only once
+ HID: i2c-hid: fix size check and type usage
+ smb3: Fix root directory when server returns inode number of zero
+ fix smb3-encryption breakage when CONFIG_DEBUG_SG=y
+ cifs: fix memory leak in SMB2_open()
+ usb: dwc3: gadget: never call ->complete() from ->ep_queue()
+ usb: dwc3: pci: Properly cleanup resource
+ usb: dwc3: prevent setting PRTCAP to OTG from debugfs
+ USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw
+ USB: gadget: f_midi: fixing a possible double-free in f_midi
+ ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status()
+ ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E
+ regmap: Fix reversed bounds check in regmap_raw_write()
+ x86/xen: Delay get_cpu_cap until stack canary is established
+ media: vsp1: Fix BRx conditional path in WPF
+ media: vivid: check if the cec_adapter is valid
+ media: atomisp_fops.c: disable atomisp_compat_ioctl32
+ spi: Fix unregistration of controller with fixed SPI bus number
+ spi: Fix scatterlist elements size in spi_map_buf
+ spi: atmel: init FIFOs before spi enable
+ ARM: dts: at91: sama5d4: fix pinctrl compatible string
+ ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250
+ ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property
+ arm: dts: mt7623: fix USB initialization fails on bananapi-r2
+ ARM: EXYNOS: Fix coupled CPU idle freeze on Exynos4210
+ KVM: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list
+ ARM64: dts: meson: reduce odroid-c2 eMMC maximum rate
+ usb: gadget: udc: core: update usb_ep_queue() documentation
+ phy: allwinner: sun4i-usb: poll vbus changes on A23/A33 when driving VBUS
+ usb: musb: gadget: misplaced out of bounds check
+ mm, slab: reschedule cache_reap() on the same CPU
+ ipc/shm: fix use-after-free of shm file via remap_file_pages()
+ resource: fix integer overflow at reallocation
+ fs/reiserfs/journal.c: add missing resierfs_warning() arg
+ task_struct: only use anon struct under randstruct plugin
+ mm/hmm: hmm_pfns_bad() was accessing wrong struct
+ mm/ksm.c: fix inconsistent accounting of zero pages
+ ubi: Reject MLC NAND
+ ubi: Fix error for write access
+ ubi: fastmap: Don't flush fastmap work on detach
+ ubifs: Check ubifs_wbuf_sync() return code
+ cpufreq: CPPC: Use transition_delay_us depending transition_latency
+ tty: make n_tty_read() always abort if hangup is in progress

** Description changed:

  SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
-        upstream stable patchset (from v4.14.36 and v4.16.4)
+        upstream stable patchset (ported from v4.14.36 and v4.16.4)
         from git://git.kernel.org/
  
  HID: i2c-hid: fix inverted return value from i2c_hid_command()
  device-dax: allow MAP_SYNC to succeed
  libnvdimm, dimm: handle EACCES failures from label reads
  drm/i915: Fix hibernation with ACPI S0 target state
  s390: add support for IBM z14 Model ZR1
  HID: i2c-hid: Fix resume issue on Raydium touchscreen device
  pwm: mediatek: Improve precision in rate calculation
  pwm: mediatek: Fix up PWM4 and PWM5 malfunction on MT7623
  clk: tegra: Mark HCLK, SCLK and EMC as critical
  trace_uprobe: Use %lx to display offset
  drm/amd/display: HDMI has no sound after Panel power off/on
  mmc: core: Prevent bus reference leak in mmc_blk_init()
  drivers/infiniband/ulp/srpt/ib_srpt.c: fix build with gcc-4.4.4
  drivers/infiniband/core/verbs.c: fix build with gcc-4.4.4
  IB/srpt: Fix an out-of-bounds stack access in srpt_zerolength_write()
  xprtrdma: Fix corner cases when handling device removal
  xprtrdma: Fix latency regression on NUMA NFS/RDMA clients
  RDMA/core: Avoid that ib_drain_qp() triggers an out-of-bounds stack access
  ext4: force revalidation of directory pointer after seekdir(2)
  ext4: fix offset overflow on 32-bit archs in ext4_iomap_begin()
  ceph: always update atime/mtime/ctime for new inode
  powerpc/64s: Fix pkey support in dt_cpu_ftrs, add CPU_FTR_PKEY bit
  acpi, nfit: rework NVDIMM leaf method detection
  media: rc: oops in ir_timer_keyup after device unplug
  mm: hwpoison: disable memory error handling on 1GB hugepage
  Bluetooth: hci_bcm: Add irq_polarity module option
  writeback: safer lock nesting
  media: staging: lirc_zilog: incorrect reference counting
  Revert "media: lirc_zilog: driver only sends LIRCCODE"
  mm/filemap.c: fix NULL pointer in page_cache_tree_insert()
  autofs: mount point create should honour passed in mode
  Don't leak MNT_INTERNAL away from internal mounts
  rpc_pipefs: fix double-dput()
  orangefs_kill_sb(): deal with allocation failures
  hypfs_kill_super(): deal with failed allocations
  jffs2_kill_sb(): deal with failed allocations
  drm/i915: Correctly handle limited range YCbCr data on VLV/CHV
  mmc: sdhci-pci: Only do AMD tuning for HS200
  fanotify: fix logic of events on child
  udf: Fix leak of UTF-16 surrogates into encoded strings
  powerpc/lib: Fix off-by-one in alternate feature patching
  powerpc/eeh: Fix enabling bridge MMIO windows
  MIPS: memset.S: Fix clobber of v1 in last_fixup
  MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup
  MIPS: memset.S: EVA & fault support for small_memset
  MIPS: uaccess: Add micromips clobbers to bzero invocation
  HID: wacom: bluetooth: send exit report for recent Bluetooth devices
  HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device
  HID: input: fix battery level reporting on BT mice
  random: add new ioctl RNDRESEEDCRNG
  random: crng_reseed() should lock the crng instance that it is modifying
  random: use a different mixing algorithm for add_device_randomness()
  random: fix crng_ready() test
  ALSA: hda - New VIA controller suppor no-snoop path
  ALSA: rawmidi: Fix missing input substream checks in compat ioctls
  ALSA: line6: Use correct endpoint type for midi output
  drm/radeon: Fix PCIe lane width calculation
  drm/radeon: add PX quirk for Asus K73TK
  drm/rockchip: Clear all interrupts before requesting the IRQ
  drm/amdgpu/si: implement get/set pcie_lanes asic callback
  drm/amdgpu: Fix PCIe lane width calculation
  drm/amdgpu/sdma: fix mask in emit_pipeline_sync
  drm/amdgpu: Fix always_valid bos multiple LRU insertions.
  drm/amdgpu: Add an ATPX quirk for hybrid laptop
  ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
  ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls
  ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams
  ALSA: pcm: Avoid potential races between OSS ioctls and read/write
  ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation
  watchdog: f71808e_wdt: Fix WD_EN register read
  dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4
  thermal: imx: Fix race condition in imx_thermal_probe()
  pwm: rcar: Fix a condition to prevent mismatch value setting to duty
  clk: bcm2835: De-assert/assert PLL reset signal when appropriate
  clk: mediatek: fix PWM clock source by adding a fixed-factor clock
  clk: fix false-positive Wmaybe-uninitialized warning
  clk: mvebu: armada-38x: add support for missing clocks
  PCI: Mark Broadcom HT1100 and HT2000 Root Port Extended Tags as broken
  mmc: tmio: Fix error handling when issuing CMD23
  mmc: jz4740: Fix race condition in IRQ mask update
  iommu/vt-d: Fix a potential memory leak
  um: Use POSIX ucontext_t instead of struct ucontext
  um: Compile with modern headers
  ring-buffer: Check if memory is available before allocation
  nfit: skip region registration for incomplete control regions
  nfit, address-range-scrub: fix scrub in-progress reporting
  libnvdimm, namespace: use a safe lookup for dimm device name
  libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  tpm: self test failure should not cause suspend to fail
  cxl: Fix possible deadlock when processing page faults from cxllib
  dmaengine: at_xdmac: fix rare residue corruption
  IB/srp: Fix completion vector assignment algorithm
  IB/srp: Fix srp_abort()
  ALSA: pcm: Fix UAF at PCM release via PCM timer access
  RDMA/rxe: Fix an out-of-bounds read
  RDMA/mlx5: Protect from NULL pointer derefence
  RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device
  dm crypt: limit the number of allocated pages
  ext4: add extra checks to ext4_xattr_block_get()
  ext4: add bounds checking to ext4_xattr_find_entry()
  ext4: move call to ext4_error() into ext4_xattr_check_block()
  ext4: don't allow r/w mounts if metadata blocks overlap the superblock
  ext4: always initialize the crc32c checksum driver
  ext4: limit xattr size to INT_MAX
  ext4: protect i_disksize update by i_data_sem in direct write path
  ext4: don't update checksum of new initialized bitmaps
  ext4: pass -ESHUTDOWN code to jbd2 layer
  ext4: eliminate sleep from shutdown ioctl
  ext4: shutdown should not prevent get_write_access
  jbd2: if the journal is aborted then don't allow update of the log tail
  block: use 32-bit blk_status_t on Alpha
  extcon: intel-cht-wc: Set direction and drv flags for V5 boost GPIO
  random: use a tighter cap in credit_entropy_bits_safe()
  irqchip/gic: Take lock when updating irq type
  ASoC: topology: Fix kcontrol name string handling
  ASoC: ssm2602: Replace reg_default_raw with reg_default
  soc: mediatek: fix the mistaken pointer accessed when subdomains are added
  HID: core: Fix size as type u32
  HID: Fix hid_report_len usage
  powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops
  powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops
  powerpc/kexec_file: Fix error code when trying to load kdump kernel
  powerpc/kprobes: Fix call trace due to incorrect preempt count
  powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently
  powerpc/64: Call H_REGISTER_PROC_TBL when running as a HPT guest on POWER9
  powerpc/64s: Fix dt_cpu_ftrs to have restore_cpu clear unwanted LPCR bits
  CIFS: fix sha512 check in cifs_crypto_secmech_release
  CIFS: add sha512 secmech
  CIFS: refactor crypto shash/sdesc allocation&free
  i2c: i801: Restore configuration at shutdown
  i2c: i801: Save register SMBSLVCMD value only once
  HID: i2c-hid: fix size check and type usage
  smb3: Fix root directory when server returns inode number of zero
  fix smb3-encryption breakage when CONFIG_DEBUG_SG=y
  cifs: fix memory leak in SMB2_open()
  usb: dwc3: gadget: never call ->complete() from ->ep_queue()
  usb: dwc3: pci: Properly cleanup resource
  usb: dwc3: prevent setting PRTCAP to OTG from debugfs
  USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw
  USB: gadget: f_midi: fixing a possible double-free in f_midi
  ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status()
  ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E
  regmap: Fix reversed bounds check in regmap_raw_write()
  x86/xen: Delay get_cpu_cap until stack canary is established
  media: vsp1: Fix BRx conditional path in WPF
  media: vivid: check if the cec_adapter is valid
  media: atomisp_fops.c: disable atomisp_compat_ioctl32
  spi: Fix unregistration of controller with fixed SPI bus number
  spi: Fix scatterlist elements size in spi_map_buf
  spi: atmel: init FIFOs before spi enable
  ARM: dts: at91: sama5d4: fix pinctrl compatible string
  ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250
  ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property
  arm: dts: mt7623: fix USB initialization fails on bananapi-r2
  ARM: EXYNOS: Fix coupled CPU idle freeze on Exynos4210
  KVM: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list
  ARM64: dts: meson: reduce odroid-c2 eMMC maximum rate
  usb: gadget: udc: core: update usb_ep_queue() documentation
  phy: allwinner: sun4i-usb: poll vbus changes on A23/A33 when driving VBUS
  usb: musb: gadget: misplaced out of bounds check
  mm, slab: reschedule cache_reap() on the same CPU
  ipc/shm: fix use-after-free of shm file via remap_file_pages()
  resource: fix integer overflow at reallocation
  fs/reiserfs/journal.c: add missing resierfs_warning() arg
  task_struct: only use anon struct under randstruct plugin
  mm/hmm: hmm_pfns_bad() was accessing wrong struct
  mm/ksm.c: fix inconsistent accounting of zero pages
  ubi: Reject MLC NAND
  ubi: Fix error for write access
  ubi: fastmap: Don't flush fastmap work on detach
  ubifs: Check ubifs_wbuf_sync() return code
  cpufreq: CPPC: Use transition_delay_us depending transition_latency
  tty: make n_tty_read() always abort if hangup is in progress

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1773233

Title:
  Bionic update: upstream stable patchset

Status in linux package in Ubuntu:
  New
Status in linux source package in Bionic:
  In Progress

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         upstream stable patchset (ported from v4.14.36 and v4.16.4)
         from git://git.kernel.org/

  HID: i2c-hid: fix inverted return value from i2c_hid_command()
  device-dax: allow MAP_SYNC to succeed
  libnvdimm, dimm: handle EACCES failures from label reads
  drm/i915: Fix hibernation with ACPI S0 target state
  s390: add support for IBM z14 Model ZR1
  HID: i2c-hid: Fix resume issue on Raydium touchscreen device
  pwm: mediatek: Improve precision in rate calculation
  pwm: mediatek: Fix up PWM4 and PWM5 malfunction on MT7623
  clk: tegra: Mark HCLK, SCLK and EMC as critical
  trace_uprobe: Use %lx to display offset
  drm/amd/display: HDMI has no sound after Panel power off/on
  mmc: core: Prevent bus reference leak in mmc_blk_init()
  drivers/infiniband/ulp/srpt/ib_srpt.c: fix build with gcc-4.4.4
  drivers/infiniband/core/verbs.c: fix build with gcc-4.4.4
  IB/srpt: Fix an out-of-bounds stack access in srpt_zerolength_write()
  xprtrdma: Fix corner cases when handling device removal
  xprtrdma: Fix latency regression on NUMA NFS/RDMA clients
  RDMA/core: Avoid that ib_drain_qp() triggers an out-of-bounds stack access
  ext4: force revalidation of directory pointer after seekdir(2)
  ext4: fix offset overflow on 32-bit archs in ext4_iomap_begin()
  ceph: always update atime/mtime/ctime for new inode
  powerpc/64s: Fix pkey support in dt_cpu_ftrs, add CPU_FTR_PKEY bit
  acpi, nfit: rework NVDIMM leaf method detection
  media: rc: oops in ir_timer_keyup after device unplug
  mm: hwpoison: disable memory error handling on 1GB hugepage
  Bluetooth: hci_bcm: Add irq_polarity module option
  writeback: safer lock nesting
  media: staging: lirc_zilog: incorrect reference counting
  Revert "media: lirc_zilog: driver only sends LIRCCODE"
  mm/filemap.c: fix NULL pointer in page_cache_tree_insert()
  autofs: mount point create should honour passed in mode
  Don't leak MNT_INTERNAL away from internal mounts
  rpc_pipefs: fix double-dput()
  orangefs_kill_sb(): deal with allocation failures
  hypfs_kill_super(): deal with failed allocations
  jffs2_kill_sb(): deal with failed allocations
  drm/i915: Correctly handle limited range YCbCr data on VLV/CHV
  mmc: sdhci-pci: Only do AMD tuning for HS200
  fanotify: fix logic of events on child
  udf: Fix leak of UTF-16 surrogates into encoded strings
  powerpc/lib: Fix off-by-one in alternate feature patching
  powerpc/eeh: Fix enabling bridge MMIO windows
  MIPS: memset.S: Fix clobber of v1 in last_fixup
  MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup
  MIPS: memset.S: EVA & fault support for small_memset
  MIPS: uaccess: Add micromips clobbers to bzero invocation
  HID: wacom: bluetooth: send exit report for recent Bluetooth devices
  HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device
  HID: input: fix battery level reporting on BT mice
  random: add new ioctl RNDRESEEDCRNG
  random: crng_reseed() should lock the crng instance that it is modifying
  random: use a different mixing algorithm for add_device_randomness()
  random: fix crng_ready() test
  ALSA: hda - New VIA controller suppor no-snoop path
  ALSA: rawmidi: Fix missing input substream checks in compat ioctls
  ALSA: line6: Use correct endpoint type for midi output
  drm/radeon: Fix PCIe lane width calculation
  drm/radeon: add PX quirk for Asus K73TK
  drm/rockchip: Clear all interrupts before requesting the IRQ
  drm/amdgpu/si: implement get/set pcie_lanes asic callback
  drm/amdgpu: Fix PCIe lane width calculation
  drm/amdgpu/sdma: fix mask in emit_pipeline_sync
  drm/amdgpu: Fix always_valid bos multiple LRU insertions.
  drm/amdgpu: Add an ATPX quirk for hybrid laptop
  ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
  ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls
  ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams
  ALSA: pcm: Avoid potential races between OSS ioctls and read/write
  ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation
  watchdog: f71808e_wdt: Fix WD_EN register read
  dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4
  thermal: imx: Fix race condition in imx_thermal_probe()
  pwm: rcar: Fix a condition to prevent mismatch value setting to duty
  clk: bcm2835: De-assert/assert PLL reset signal when appropriate
  clk: mediatek: fix PWM clock source by adding a fixed-factor clock
  clk: fix false-positive Wmaybe-uninitialized warning
  clk: mvebu: armada-38x: add support for missing clocks
  PCI: Mark Broadcom HT1100 and HT2000 Root Port Extended Tags as broken
  mmc: tmio: Fix error handling when issuing CMD23
  mmc: jz4740: Fix race condition in IRQ mask update
  iommu/vt-d: Fix a potential memory leak
  um: Use POSIX ucontext_t instead of struct ucontext
  um: Compile with modern headers
  ring-buffer: Check if memory is available before allocation
  nfit: skip region registration for incomplete control regions
  nfit, address-range-scrub: fix scrub in-progress reporting
  libnvdimm, namespace: use a safe lookup for dimm device name
  libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  tpm: self test failure should not cause suspend to fail
  cxl: Fix possible deadlock when processing page faults from cxllib
  dmaengine: at_xdmac: fix rare residue corruption
  IB/srp: Fix completion vector assignment algorithm
  IB/srp: Fix srp_abort()
  ALSA: pcm: Fix UAF at PCM release via PCM timer access
  RDMA/rxe: Fix an out-of-bounds read
  RDMA/mlx5: Protect from NULL pointer derefence
  RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device
  dm crypt: limit the number of allocated pages
  ext4: add extra checks to ext4_xattr_block_get()
  ext4: add bounds checking to ext4_xattr_find_entry()
  ext4: move call to ext4_error() into ext4_xattr_check_block()
  ext4: don't allow r/w mounts if metadata blocks overlap the superblock
  ext4: always initialize the crc32c checksum driver
  ext4: limit xattr size to INT_MAX
  ext4: protect i_disksize update by i_data_sem in direct write path
  ext4: don't update checksum of new initialized bitmaps
  ext4: pass -ESHUTDOWN code to jbd2 layer
  ext4: eliminate sleep from shutdown ioctl
  ext4: shutdown should not prevent get_write_access
  jbd2: if the journal is aborted then don't allow update of the log tail
  block: use 32-bit blk_status_t on Alpha
  extcon: intel-cht-wc: Set direction and drv flags for V5 boost GPIO
  random: use a tighter cap in credit_entropy_bits_safe()
  irqchip/gic: Take lock when updating irq type
  ASoC: topology: Fix kcontrol name string handling
  ASoC: ssm2602: Replace reg_default_raw with reg_default
  soc: mediatek: fix the mistaken pointer accessed when subdomains are added
  HID: core: Fix size as type u32
  HID: Fix hid_report_len usage
  powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops
  powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops
  powerpc/kexec_file: Fix error code when trying to load kdump kernel
  powerpc/kprobes: Fix call trace due to incorrect preempt count
  powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently
  powerpc/64: Call H_REGISTER_PROC_TBL when running as a HPT guest on POWER9
  powerpc/64s: Fix dt_cpu_ftrs to have restore_cpu clear unwanted LPCR bits
  CIFS: fix sha512 check in cifs_crypto_secmech_release
  CIFS: add sha512 secmech
  CIFS: refactor crypto shash/sdesc allocation&free
  i2c: i801: Restore configuration at shutdown
  i2c: i801: Save register SMBSLVCMD value only once
  HID: i2c-hid: fix size check and type usage
  smb3: Fix root directory when server returns inode number of zero
  fix smb3-encryption breakage when CONFIG_DEBUG_SG=y
  cifs: fix memory leak in SMB2_open()
  usb: dwc3: gadget: never call ->complete() from ->ep_queue()
  usb: dwc3: pci: Properly cleanup resource
  usb: dwc3: prevent setting PRTCAP to OTG from debugfs
  USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw
  USB: gadget: f_midi: fixing a possible double-free in f_midi
  ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status()
  ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E
  regmap: Fix reversed bounds check in regmap_raw_write()
  x86/xen: Delay get_cpu_cap until stack canary is established
  media: vsp1: Fix BRx conditional path in WPF
  media: vivid: check if the cec_adapter is valid
  media: atomisp_fops.c: disable atomisp_compat_ioctl32
  spi: Fix unregistration of controller with fixed SPI bus number
  spi: Fix scatterlist elements size in spi_map_buf
  spi: atmel: init FIFOs before spi enable
  ARM: dts: at91: sama5d4: fix pinctrl compatible string
  ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250
  ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property
  arm: dts: mt7623: fix USB initialization fails on bananapi-r2
  ARM: EXYNOS: Fix coupled CPU idle freeze on Exynos4210
  KVM: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list
  ARM64: dts: meson: reduce odroid-c2 eMMC maximum rate
  usb: gadget: udc: core: update usb_ep_queue() documentation
  phy: allwinner: sun4i-usb: poll vbus changes on A23/A33 when driving VBUS
  usb: musb: gadget: misplaced out of bounds check
  mm, slab: reschedule cache_reap() on the same CPU
  ipc/shm: fix use-after-free of shm file via remap_file_pages()
  resource: fix integer overflow at reallocation
  fs/reiserfs/journal.c: add missing resierfs_warning() arg
  task_struct: only use anon struct under randstruct plugin
  mm/hmm: hmm_pfns_bad() was accessing wrong struct
  mm/ksm.c: fix inconsistent accounting of zero pages
  ubi: Reject MLC NAND
  ubi: Fix error for write access
  ubi: fastmap: Don't flush fastmap work on detach
  ubifs: Check ubifs_wbuf_sync() return code
  cpufreq: CPPC: Use transition_delay_us depending transition_latency
  tty: make n_tty_read() always abort if hangup is in progress

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1773233/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to