Public bug reported:

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2019-07-09

       Ported from the following upstream stable releases:
          v4.14.68, v4.18.6,
          v4.14.69, v4.18.7,
          v4.14.70, v4.18.8

       from git://git.kernel.org/

vti6: fix PMTU caching and reporting on xmit
xfrm: fix missing dst_release() after policy blocking lbcast and multicast
xfrm: free skb if nlsk pointer is NULL
esp6: fix memleak on error path in esp6_input
mac80211: add stations tied to AP_VLANs during hw reconfig
ext4: clear mmp sequence number when remounting read-only
nl80211: Add a missing break in parse_station_flags
drm/bridge: adv7511: Reset registers on hotplug
scsi: target: iscsi: cxgbit: fix max iso npdu calculation
scsi: libiscsi: fix possible NULL pointer dereference in case of TMF
drm/imx: imx-ldb: disable LDB on driver bind
drm/imx: imx-ldb: check if channel is enabled before printing warning
nbd: don't requeue the same request twice.
nbd: handle unexpected replies better
usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in 
init_controller()
usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in 
r8a66597_queue()
usb: gadget: f_uac2: fix error handling in afunc_bind (again)
usb: gadget: u_audio: fix pcm/card naming in g_audio_setup()
usb: gadget: u_audio: update hw_ptr in iso_complete after data copied
usb: gadget: u_audio: remove caching of stream buffer parameters
usb: gadget: u_audio: remove cached period bytes value
usb: gadget: u_audio: protect stream runtime fields with stream spinlock
usb/phy: fix PPC64 build errors in phy-fsl-usb.c
tools: usb: ffs-test: Fix build on big endian systems
usb: gadget: f_uac2: fix endianness of 'struct cntrl_*_lay3'
netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy()
bpf, ppc64: fix unexpected r0=0 exit path inside bpf_xadd
netfilter: nf_tables: fix memory leaks on chain rename
netfilter: nf_tables: don't allow to rename to already-pending name
KVM: vmx: use local variable for current_vmptr when emulating VMPTRST
tools/power turbostat: fix -S on UP systems
net: caif: Add a missing rcu_read_unlock() in caif_flow_cb
qed: Fix link flap issue due to mismatching EEE capabilities.
qed: Fix possible race for the link state value.
qed: Correct Multicast API to reflect existence of 256 approximate buckets.
atl1c: reserve min skb headroom
net: prevent ISA drivers from building on PPC32
can: mpc5xxx_can: check of_iomap return before use
can: m_can: Move accessing of message ram to after clocks are enabled
i2c: davinci: Avoid zero value of CLKH
perf/x86/amd/ibs: Don't access non-started event
media: staging: omap4iss: Include asm/cacheflush.h after generic includes
bnx2x: Fix invalid memory access in rss hash config path.
net: axienet: Fix double deregister of mdio
locking/rtmutex: Allow specifying a subclass for nested locking
i2c/mux, locking/core: Annotate the nested rt_mutex usage
sched/rt: Restore rt_runtime after disabling RT_RUNTIME_SHARE
x86/boot: Fix if_changed build flip/flop bug
selftests/ftrace: Add snapshot and tracing_on test case
ipc/sem.c: prevent queue.status tearing in semop
zswap: re-check zswap_is_full() after do zswap_shrink()
tools/power turbostat: Read extended processor family from CPUID
ARC: dma [non-IOC] setup SMP_CACHE_BYTES and cache_line_size
bpf: use GFP_ATOMIC instead of GFP_KERNEL in bpf_parse_prog()
nfp: flower: fix port metadata conversion bug
enic: handle mtu change for vf properly
ARC: [plat-eznps] Add missing struct nps_host_reg_aux_dpc
arc: [plat-eznps] fix data type errors in platform headers
arc: [plat-eznps] fix printk warning in arc/plat-eznps/mtm.c
arc: fix build errors in arc/include/asm/delay.h
arc: fix type warnings in arc/mm/cache.c
sparc/time: Add missing __init to init_tick_ops()
sparc: use asm-generic version of msi.h
enic: do not call enic_change_mtu in enic_probe
mm: delete historical BUG from zap_pmd_range()
drivers: net: lmc: fix case value for target abort error
memcg: remove memcg_cgroup::id from IDR on mem_cgroup_css_alloc() failure
gpiolib-acpi: make sure we trigger edge events at least once on boot
scsi: fcoe: fix use-after-free in fcoe_ctlr_els_send
scsi: fcoe: drop frames in ELS LOGO error path
scsi: vmw_pvscsi: Return DID_RESET for status SAM_STAT_COMMAND_TERMINATED
mm/memory.c: check return value of ioremap_prot
mei: don't update offset in write
cifs: add missing debug entries for kconfig options
cifs: check kmalloc before use
smb3: enumerating snapshots was leaving part of the data off end
smb3: Do not send SMB3 SET_INFO if nothing changed
smb3: don't request leases in symlink creation and query
smb3: fill in statfs fsid and correct namelen
btrfs: use correct compare function of dirty_metadata_bytes
btrfs: don't leak ret from do_chunk_alloc
Btrfs: fix btrfs_write_inode vs delayed iput deadlock
iommu/arm-smmu: Error out only if not enough context interrupts
printk: Split the code for storing a message into the log buffer
printk: Create helper function to queue deferred console handling
printk/nmi: Prevent deadlock when accessing the main log buffer in NMI
kprobes/arm64: Fix %p uses in error messages
arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid()
arm64: dts: rockchip: corrected uart1 clock-names for rk3328
KVM: arm/arm64: Skip updating PMD entry if no change
KVM: arm/arm64: Skip updating PTE entry if no change
stop_machine: Reflow cpu_stop_queue_two_works()
ext4: check for NUL characters in extended attribute's name
ext4: sysfs: print ext4_super_block fields as little-endian
ext4: reset error code in ext4_find_entry in fallback
platform/x86: ideapad-laptop: Apply no_hw_rfkill to Y20-15IKBM, too
x86/vdso: Fix vDSO build if a retpoline is emitted
x86/process: Re-export start_thread()
x86/kvm/vmx: Remove duplicate l1d flush definitions
fuse: Add missed unlock_page() to fuse_readpages_fill()
udl-kms: change down_interruptible to down
udl-kms: handle allocation failure
udl-kms: fix crash due to uninitialized memory
udl-kms: avoid division
b43legacy/leds: Ensure NUL-termination of LED name string
b43/leds: Ensure NUL-termination of LED name string
ASoC: dpcm: don't merge format from invalid codec dai
ASoC: zte: Fix incorrect PCM format bit usages
ASoC: sirf: Fix potential NULL pointer dereference
pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show()
x86/vdso: Fix lsl operand order
x86/irqflags: Mark native_restore_fl extern inline
x86/entry/64: Wipe KASAN stack shadow before rewind_stack_do_exit()
s390/mm: fix addressing exception after suspend/resume
s390/numa: move initial setup of node_to_cpumask_map
kprobes/arm: Fix %p uses in error messages
kprobes: Make list and blacklist root user read only
MIPS: Correct the 64-bit DSP accumulator register size
MIPS: Always use -march=<arch>, not -<arch> shortcuts
MIPS: Change definition of cpu_relax() for Loongson-3
MIPS: lib: Provide MIPS64r6 __multi3() for GCC < 7
tpm: Return the actual size when receiving an unsupported command
scsi: mpt3sas: Fix _transport_smp_handler() error path
scsi: sysfs: Introduce sysfs_{un,}break_active_protection()
scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock
clk: rockchip: fix clk_i2sout parent selection bits on rk3399
PM / clk: signedness bug in of_pm_clk_add_clks()
power: generic-adc-battery: fix out-of-bounds write when copying channel 
properties
power: generic-adc-battery: check for duplicate properties copied from iio 
channels
watchdog: Mark watchdog touch functions as notrace
gcc-plugins: Add include required by GCC release 8
gcc-plugins: Use dynamic initializers
Btrfs: fix send failure when root has deleted files still open
Btrfs: send, fix incorrect file layout after hole punching beyond eof
hwmon: (k10temp) 27C Offset needed for Threadripper2
KVM: arm/arm64: Fix potential loss of ptimer interrupts
KVM: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked
perf kvm: Fix subcommands on s390
ext4: use ext4_warning() for sb_getblk failure
platform/x86: wmi: Do not mix pages and kmalloc
KVM: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd
lib/vsprintf: Do not handle %pO[^F] as %px
soc: qcom: rmtfs-mem: fix memleak in probe error paths
kprobes: Show blacklist addresses as same as kallsyms does
kprobes: Replace %p with other pointer types
MIPS: memset.S: Fix byte_fixup for MIPSr6
mtd: rawnand: qcom: wait for desc completion in all BAM channels
net: 6lowpan: fix reserved space for single frames
net: mac802154: tx: expand tailroom if necessary
9p/net: Fix zero-copy path in the 9p virtio transport
spi: davinci: fix a NULL pointer dereference
spi: pxa2xx: Add support for Intel Ice Lake
spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe
spi: cadence: Change usleep_range() to udelay(), for atomic context
mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS
readahead: stricter check for bdi io_pages
block: blk_init_allocated_queue() set q->fq as NULL in the fail case
block: really disable runtime-pm for blk-mq
drm/i915/userptr: reject zero user_size
libertas: fix suspend and resume for SDIO connected cards
media: Revert "[media] tvp5150: fix pad format frame height"
mailbox: xgene-slimpro: Fix potential NULL pointer dereference
Replace magic for trusting the secondary keyring with #define
powerpc/fadump: handle crash memory ranges array index overflow
powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
PCI: Add wrappers for dev_printk()
cxl: Fix wrong comparison in cxl_adapter_context_get()
ib_srpt: Fix a use-after-free in srpt_close_ch()
RDMA/rxe: Set wqe->status correctly if an unexpected response is received
9p: fix multiple NULL-pointer-dereferences
fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
9p/virtio: fix off-by-one error in sg list bounds check
net/9p/client.c: version pointer uninitialized
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
dm integrity: change 'suspending' variable from bool to int
dm thin: stop no_space_timeout worker when switching to write-mode
dm cache metadata: save in-core policy_hint_size to on-disk superblock
dm cache metadata: set dirty on all cache blocks after a crash
dm crypt: don't decrease device limits
uart: fix race between uart_put_char() and uart_shutdown()
Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind()
iio: sca3000: Fix missing return in switch
iio: ad9523: Fix displayed phase
iio: ad9523: Fix return value for ad952x_store()
extcon: Release locking when sending the notification of connector state
vmw_balloon: fix inflation of 64-bit GFNs
vmw_balloon: do not use 2MB without batching
vmw_balloon: VMCI_DOORBELL_SET does not check status
vmw_balloon: fix VMCI use when balloon built into kernel
rtc: omap: fix potential crash on power off
tracing: Do not call start/stop() functions when tracing_on does not change
tracing/blktrace: Fix to allow setting same value
printk/tracing: Do not trace printk_nmi_enter()
livepatch: Validate module/old func name length
uprobes: Use synchronize_rcu() not synchronize_sched()
mfd: hi655x: Fix regmap area declared size for hi655x
ovl: fix wrong use of impure dir cache in ovl_iterate()
drivers/block/zram/zram_drv.c: fix bug storing backing_dev
cpufreq: governor: Avoid accessing invalid governor_data
PM / sleep: wakeup: Fix build error caused by missing SRCU support
KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages
xtensa: limit offsets in __loop_cache_{all,page}
xtensa: increase ranges in ___invalidate_{i,d}cache_all
block, bfq: return nbytes and not zero from struct cftype .write() method
pnfs/blocklayout: off by one in bl_map_stripe()
NFSv4 client live hangs after live data migration recovery
NFSv4: Fix locking in pnfs_generic_recover_commit_reqs
NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()
ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
iommu/vt-d: Add definitions for PFSID
iommu/vt-d: Fix dev iotlb pfsid use
sys: don't hold uts_sem while accessing userspace memory
userns: move user access out of the mutex
ubifs: Fix memory leak in lprobs self-check
ubifs: Check data node size before truncate
ubifs: Fix synced_i_size calculation for xattr inodes
pwm: tiehrpwm: Don't use emulation mode bits to control PWM output
pwm: tiehrpwm: Fix disabling of output of PWMs
fb: fix lost console when the user unplugs a USB adapter
udlfb: set optimal write delay
libnvdimm: fix ars_status output length calculation
bcache: release dc->writeback_lock properly in bch_writeback_thread()
perf auxtrace: Fix queue resize
crypto: caam - fix DMA mapping direction for RSA forms 2 & 3
crypto: caam/jr - fix descriptor DMA unmapping
crypto: caam/qi - fix error path in xts setkey
arm64: mm: always enable CONFIG_HOLES_IN_ZONE
mmc: renesas_sdhi_internal_dmac: mask DMAC interrupts
blkcg: Introduce blkg_root_lookup()
powerpc64/ftrace: Include ftrace.h needed for enable/disable calls
IB/mlx5: Fix leaking stack memory to userspace
rtc: omap: fix resource leak in registration error path
ACPICA: AML Parser: skip opcodes that open a scope upon parse failure
ALSA: ac97: fix device initialization in the compat layer
ALSA: ac97: fix check of pm_runtime_get_sync failure
ALSA: ac97: fix unbalanced pm_runtime_enable
nfsd: fix leaked file lock with nfs exported overlayfs
ubifs: Fix directory size calculation for symlinks
mm, dev_pagemap: Do not clear ->mapping on final put
act_ife: fix a potential use-after-free
ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT state
net: bcmgenet: use MAC link status for fixed phy
net: macb: do not disable MDIO bus at open/close time
qlge: Fix netdev features configuration.
r8169: add support for NCube 8168 network card
tcp: do not restart timewait timer on rst reception
vti6: remove !skb->ignore_df check from vti6_xmit()
net/sched: act_pedit: fix dump of extended layered op
tipc: fix a missing rhashtable_walk_exit()
nfp: wait for posted reconfigs when disabling the device
sctp: hold transport before accessing its asoc in sctp_transport_get_next
mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge
vhost: correctly check the iova range when waking virtqueue
hv_netvsc: ignore devices that are not PCI
act_ife: move tcfa_lock down to where necessary
act_ife: fix a potential deadlock
net: sched: action_ife: take reference to meta module
cifs: check if SMB2 PDU size has been padded and suppress the warning
hfsplus: don't return 0 when fill_super() failed
hfs: prevent crash on exit from failed search
sunrpc: Don't use stack buffer with scatterlist
fork: don't copy inconsistent signal handler state to child
reiserfs: change j_timestamp type to time64_t
hfsplus: fix NULL dereference in hfsplus_lookup()
fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries
fat: validate ->i_start before using
scripts: modpost: check memory allocation results
virtio: pci-legacy: Validate queue pfn
x86/mce: Add notifier_block forward declaration
IB/hfi1: Invalid NUMA node information can cause a divide by zero
pwm: meson: Fix mux clock names
mm/fadvise.c: fix signed overflow UBSAN complaint
fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot()
platform/x86: intel_punit_ipc: fix build errors
netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
s390/kdump: Fix memleak in nt_vmcoreinfo
ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
mfd: sm501: Set coherent_dma_mask when creating subdevices
platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360
netfilter: fix memory leaks on netlink_dump_start error
tcp, ulp: add alias for all ulp modules
RDMA/hns: Fix usage of bitmap allocation functions return values
net: hns3: Fix for command format parsing error in hclge_is_all_function_id_zero
perf tools: Check for null when copying nsinfo.
irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP
net/9p/trans_fd.c: fix race by holding the lock
net/9p: fix error path of p9_virtio_probe
powerpc/uaccess: Enable get_user(u64, *p) on 32-bit
powerpc: Fix size calculation using resource_size()
perf probe powerpc: Fix trace event post-processing
block: bvec_nr_vecs() returns value for wrong slab
s390/dasd: fix hanging offline processing due to canceled worker
s390/dasd: fix panic for failed online processing
ACPI / scan: Initialize status to ACPI_STA_DEFAULT
scsi: aic94xx: fix an error code in aic94xx_init()
NFSv4: Fix error handling in nfs4_sp4_select_mode()
Input: do not use WARN() in input_alloc_absinfo()
xen/balloon: fix balloon initialization for PVH Dom0
PCI: mvebu: Fix I/O space end address calculation
dm kcopyd: avoid softlockup in run_complete_job
staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice
ASoC: rt5677: Fix initialization of rt5677_of_match.data
iommu/omap: Fix cache flushes on L2 table entries
selftests/powerpc: Kill child processes on SIGINT
RDS: IB: fix 'passing zero to ERR_PTR()' warning
cfq: Suppress compiler warnings about comparisons
smb3: fix reset of bytes read and written stats
SMB3: Number of requests sent should be displayed for SMB3 not just CIFS
powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning
powerpc/64s: Make rfi_flush_fallback a little more robust
powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX.
clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399
KVM: vmx: track host_state.loaded using a loaded_vmcs pointer
kvm: nVMX: Fix fault vector for VMX operation at CPL > 0
btrfs: Exit gracefully when chunk map cannot be inserted to the tree
btrfs: replace: Reset on-disk dev stats value after replace
btrfs: relocation: Only remove reloc rb_trees if reloc control has been 
initialized
btrfs: Don't remove block group that still has pinned down bytes
arm64: rockchip: Force CONFIG_PM on Rockchip systems
ARM: rockchip: Force CONFIG_PM on Rockchip systems
drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks"
drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode
drm/amd/pp/Polaris12: Fix a chunk of registers missed to program
drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80
drm/amdgpu: update tmr mc address
drm/amdgpu:add tmr mc address into amdgpu_firmware_info
drm/amdgpu:add new firmware id for VCN
drm/amdgpu:add VCN support in PSP driver
drm/amdgpu:add VCN booting with firmware loaded by PSP
debugobjects: Make stack check warning more informative
mm: Fix devm_memremap_pages() collision handling
HID: add quirk for another PIXART OEM mouse used by HP
usb: dwc3: core: Fix ULPI PHYs and prevent phy_get/ulpi_init during 
suspend/resume
x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear
x86/xen: don't write ptes directly in 32-bit PV guests
drm/i915: Increase LSPCON timeout
kbuild: make missing $DEPMOD a Warning instead of an Error
kvm: x86: Set highest physical address bits in non-present/reserved SPTEs
x86: kvm: avoid unused variable warning
arm64: cpu_errata: include required headers
ASoC: wm8994: Fix missing break in switch
arm64: Fix mismatched cache line size detection
arm64: Handle mismatched cache type
tipc: fix the big/little endian issue in tipc_dest
ip6_vti: fix a null pointer deference when destroy vti6 tunnel
workqueue: skip lockdep wq dependency in cancel_work_sync()
workqueue: re-add lockdep dependencies for flushing
apparmor: fix an error code in __aa_create_ns()
tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach
netfilter: x_tables: do not fail xt_alloc_table_info too easilly
ACPICA: ACPICA: add status check for acpi_hw_read before assigning return value
PCI: Match Root Port's MPS to endpoint's MPSS as necessary
coccicheck: return proper error code on fail
RISC-V: Use KBUILD_CFLAGS instead of KCFLAGS when building the vDSO
blk-mq: count the hctx as active before allocating tag
selinux: cleanup dentry and inodes on error in selinuxfs
drm/amd/display: Read back max backlight value at boot
btrfs: check-integrity: Fix NULL pointer dereference for degraded mount
btrfs: lift uuid_mutex to callers of btrfs_open_devices
btrfs: Fix a C compliance issue
drm/i915: Nuke the LVDS lid notifier
drm/edid: Quirk Vive Pro VR headset non-desktop.
drm/amd/display: fix type of variable
drm/amd/display: Don't share clk source between DP and HDMI
drm/amd/display: update clk for various HDMI color depths
drm/amd/display: Use requested HDMI aspect ratio
drm/rockchip: lvds: add missing of_node_put
drm/amd/display: Pass connector id when executing VBIOS CT
drm/amd/display: Check if clock source in use before disabling
drm/amdgpu: fix incorrect use of fcheck
drm/amdgpu: fix incorrect use of drm_file->pid
drm/i915: set DP Main Stream Attribute for color range on DDI platforms
x86/tsc: Prevent result truncation on 32bit

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Affects: linux (Ubuntu Bionic)
     Importance: Undecided
     Assignee: Kamal Mostafa (kamalmostafa)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Bionic)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1835972

Title:
  Bionic update: upstream stable patchset 2019-07-09

Status in linux package in Ubuntu:
  Confirmed
Status in linux source package in Bionic:
  In Progress

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         upstream stable patchset 2019-07-09

         Ported from the following upstream stable releases:
            v4.14.68, v4.18.6,
            v4.14.69, v4.18.7,
            v4.14.70, v4.18.8

         from git://git.kernel.org/

  vti6: fix PMTU caching and reporting on xmit
  xfrm: fix missing dst_release() after policy blocking lbcast and multicast
  xfrm: free skb if nlsk pointer is NULL
  esp6: fix memleak on error path in esp6_input
  mac80211: add stations tied to AP_VLANs during hw reconfig
  ext4: clear mmp sequence number when remounting read-only
  nl80211: Add a missing break in parse_station_flags
  drm/bridge: adv7511: Reset registers on hotplug
  scsi: target: iscsi: cxgbit: fix max iso npdu calculation
  scsi: libiscsi: fix possible NULL pointer dereference in case of TMF
  drm/imx: imx-ldb: disable LDB on driver bind
  drm/imx: imx-ldb: check if channel is enabled before printing warning
  nbd: don't requeue the same request twice.
  nbd: handle unexpected replies better
  usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in 
init_controller()
  usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in 
r8a66597_queue()
  usb: gadget: f_uac2: fix error handling in afunc_bind (again)
  usb: gadget: u_audio: fix pcm/card naming in g_audio_setup()
  usb: gadget: u_audio: update hw_ptr in iso_complete after data copied
  usb: gadget: u_audio: remove caching of stream buffer parameters
  usb: gadget: u_audio: remove cached period bytes value
  usb: gadget: u_audio: protect stream runtime fields with stream spinlock
  usb/phy: fix PPC64 build errors in phy-fsl-usb.c
  tools: usb: ffs-test: Fix build on big endian systems
  usb: gadget: f_uac2: fix endianness of 'struct cntrl_*_lay3'
  netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy()
  bpf, ppc64: fix unexpected r0=0 exit path inside bpf_xadd
  netfilter: nf_tables: fix memory leaks on chain rename
  netfilter: nf_tables: don't allow to rename to already-pending name
  KVM: vmx: use local variable for current_vmptr when emulating VMPTRST
  tools/power turbostat: fix -S on UP systems
  net: caif: Add a missing rcu_read_unlock() in caif_flow_cb
  qed: Fix link flap issue due to mismatching EEE capabilities.
  qed: Fix possible race for the link state value.
  qed: Correct Multicast API to reflect existence of 256 approximate buckets.
  atl1c: reserve min skb headroom
  net: prevent ISA drivers from building on PPC32
  can: mpc5xxx_can: check of_iomap return before use
  can: m_can: Move accessing of message ram to after clocks are enabled
  i2c: davinci: Avoid zero value of CLKH
  perf/x86/amd/ibs: Don't access non-started event
  media: staging: omap4iss: Include asm/cacheflush.h after generic includes
  bnx2x: Fix invalid memory access in rss hash config path.
  net: axienet: Fix double deregister of mdio
  locking/rtmutex: Allow specifying a subclass for nested locking
  i2c/mux, locking/core: Annotate the nested rt_mutex usage
  sched/rt: Restore rt_runtime after disabling RT_RUNTIME_SHARE
  x86/boot: Fix if_changed build flip/flop bug
  selftests/ftrace: Add snapshot and tracing_on test case
  ipc/sem.c: prevent queue.status tearing in semop
  zswap: re-check zswap_is_full() after do zswap_shrink()
  tools/power turbostat: Read extended processor family from CPUID
  ARC: dma [non-IOC] setup SMP_CACHE_BYTES and cache_line_size
  bpf: use GFP_ATOMIC instead of GFP_KERNEL in bpf_parse_prog()
  nfp: flower: fix port metadata conversion bug
  enic: handle mtu change for vf properly
  ARC: [plat-eznps] Add missing struct nps_host_reg_aux_dpc
  arc: [plat-eznps] fix data type errors in platform headers
  arc: [plat-eznps] fix printk warning in arc/plat-eznps/mtm.c
  arc: fix build errors in arc/include/asm/delay.h
  arc: fix type warnings in arc/mm/cache.c
  sparc/time: Add missing __init to init_tick_ops()
  sparc: use asm-generic version of msi.h
  enic: do not call enic_change_mtu in enic_probe
  mm: delete historical BUG from zap_pmd_range()
  drivers: net: lmc: fix case value for target abort error
  memcg: remove memcg_cgroup::id from IDR on mem_cgroup_css_alloc() failure
  gpiolib-acpi: make sure we trigger edge events at least once on boot
  scsi: fcoe: fix use-after-free in fcoe_ctlr_els_send
  scsi: fcoe: drop frames in ELS LOGO error path
  scsi: vmw_pvscsi: Return DID_RESET for status SAM_STAT_COMMAND_TERMINATED
  mm/memory.c: check return value of ioremap_prot
  mei: don't update offset in write
  cifs: add missing debug entries for kconfig options
  cifs: check kmalloc before use
  smb3: enumerating snapshots was leaving part of the data off end
  smb3: Do not send SMB3 SET_INFO if nothing changed
  smb3: don't request leases in symlink creation and query
  smb3: fill in statfs fsid and correct namelen
  btrfs: use correct compare function of dirty_metadata_bytes
  btrfs: don't leak ret from do_chunk_alloc
  Btrfs: fix btrfs_write_inode vs delayed iput deadlock
  iommu/arm-smmu: Error out only if not enough context interrupts
  printk: Split the code for storing a message into the log buffer
  printk: Create helper function to queue deferred console handling
  printk/nmi: Prevent deadlock when accessing the main log buffer in NMI
  kprobes/arm64: Fix %p uses in error messages
  arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid()
  arm64: dts: rockchip: corrected uart1 clock-names for rk3328
  KVM: arm/arm64: Skip updating PMD entry if no change
  KVM: arm/arm64: Skip updating PTE entry if no change
  stop_machine: Reflow cpu_stop_queue_two_works()
  ext4: check for NUL characters in extended attribute's name
  ext4: sysfs: print ext4_super_block fields as little-endian
  ext4: reset error code in ext4_find_entry in fallback
  platform/x86: ideapad-laptop: Apply no_hw_rfkill to Y20-15IKBM, too
  x86/vdso: Fix vDSO build if a retpoline is emitted
  x86/process: Re-export start_thread()
  x86/kvm/vmx: Remove duplicate l1d flush definitions
  fuse: Add missed unlock_page() to fuse_readpages_fill()
  udl-kms: change down_interruptible to down
  udl-kms: handle allocation failure
  udl-kms: fix crash due to uninitialized memory
  udl-kms: avoid division
  b43legacy/leds: Ensure NUL-termination of LED name string
  b43/leds: Ensure NUL-termination of LED name string
  ASoC: dpcm: don't merge format from invalid codec dai
  ASoC: zte: Fix incorrect PCM format bit usages
  ASoC: sirf: Fix potential NULL pointer dereference
  pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show()
  x86/vdso: Fix lsl operand order
  x86/irqflags: Mark native_restore_fl extern inline
  x86/entry/64: Wipe KASAN stack shadow before rewind_stack_do_exit()
  s390/mm: fix addressing exception after suspend/resume
  s390/numa: move initial setup of node_to_cpumask_map
  kprobes/arm: Fix %p uses in error messages
  kprobes: Make list and blacklist root user read only
  MIPS: Correct the 64-bit DSP accumulator register size
  MIPS: Always use -march=<arch>, not -<arch> shortcuts
  MIPS: Change definition of cpu_relax() for Loongson-3
  MIPS: lib: Provide MIPS64r6 __multi3() for GCC < 7
  tpm: Return the actual size when receiving an unsupported command
  scsi: mpt3sas: Fix _transport_smp_handler() error path
  scsi: sysfs: Introduce sysfs_{un,}break_active_protection()
  scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock
  clk: rockchip: fix clk_i2sout parent selection bits on rk3399
  PM / clk: signedness bug in of_pm_clk_add_clks()
  power: generic-adc-battery: fix out-of-bounds write when copying channel 
properties
  power: generic-adc-battery: check for duplicate properties copied from iio 
channels
  watchdog: Mark watchdog touch functions as notrace
  gcc-plugins: Add include required by GCC release 8
  gcc-plugins: Use dynamic initializers
  Btrfs: fix send failure when root has deleted files still open
  Btrfs: send, fix incorrect file layout after hole punching beyond eof
  hwmon: (k10temp) 27C Offset needed for Threadripper2
  KVM: arm/arm64: Fix potential loss of ptimer interrupts
  KVM: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked
  perf kvm: Fix subcommands on s390
  ext4: use ext4_warning() for sb_getblk failure
  platform/x86: wmi: Do not mix pages and kmalloc
  KVM: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd
  lib/vsprintf: Do not handle %pO[^F] as %px
  soc: qcom: rmtfs-mem: fix memleak in probe error paths
  kprobes: Show blacklist addresses as same as kallsyms does
  kprobes: Replace %p with other pointer types
  MIPS: memset.S: Fix byte_fixup for MIPSr6
  mtd: rawnand: qcom: wait for desc completion in all BAM channels
  net: 6lowpan: fix reserved space for single frames
  net: mac802154: tx: expand tailroom if necessary
  9p/net: Fix zero-copy path in the 9p virtio transport
  spi: davinci: fix a NULL pointer dereference
  spi: pxa2xx: Add support for Intel Ice Lake
  spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe
  spi: cadence: Change usleep_range() to udelay(), for atomic context
  mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS
  readahead: stricter check for bdi io_pages
  block: blk_init_allocated_queue() set q->fq as NULL in the fail case
  block: really disable runtime-pm for blk-mq
  drm/i915/userptr: reject zero user_size
  libertas: fix suspend and resume for SDIO connected cards
  media: Revert "[media] tvp5150: fix pad format frame height"
  mailbox: xgene-slimpro: Fix potential NULL pointer dereference
  Replace magic for trusting the secondary keyring with #define
  powerpc/fadump: handle crash memory ranges array index overflow
  powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
  PCI: Add wrappers for dev_printk()
  cxl: Fix wrong comparison in cxl_adapter_context_get()
  ib_srpt: Fix a use-after-free in srpt_close_ch()
  RDMA/rxe: Set wqe->status correctly if an unexpected response is received
  9p: fix multiple NULL-pointer-dereferences
  fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
  9p/virtio: fix off-by-one error in sg list bounds check
  net/9p/client.c: version pointer uninitialized
  net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
  dm integrity: change 'suspending' variable from bool to int
  dm thin: stop no_space_timeout worker when switching to write-mode
  dm cache metadata: save in-core policy_hint_size to on-disk superblock
  dm cache metadata: set dirty on all cache blocks after a crash
  dm crypt: don't decrease device limits
  uart: fix race between uart_put_char() and uart_shutdown()
  Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind()
  iio: sca3000: Fix missing return in switch
  iio: ad9523: Fix displayed phase
  iio: ad9523: Fix return value for ad952x_store()
  extcon: Release locking when sending the notification of connector state
  vmw_balloon: fix inflation of 64-bit GFNs
  vmw_balloon: do not use 2MB without batching
  vmw_balloon: VMCI_DOORBELL_SET does not check status
  vmw_balloon: fix VMCI use when balloon built into kernel
  rtc: omap: fix potential crash on power off
  tracing: Do not call start/stop() functions when tracing_on does not change
  tracing/blktrace: Fix to allow setting same value
  printk/tracing: Do not trace printk_nmi_enter()
  livepatch: Validate module/old func name length
  uprobes: Use synchronize_rcu() not synchronize_sched()
  mfd: hi655x: Fix regmap area declared size for hi655x
  ovl: fix wrong use of impure dir cache in ovl_iterate()
  drivers/block/zram/zram_drv.c: fix bug storing backing_dev
  cpufreq: governor: Avoid accessing invalid governor_data
  PM / sleep: wakeup: Fix build error caused by missing SRCU support
  KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages
  xtensa: limit offsets in __loop_cache_{all,page}
  xtensa: increase ranges in ___invalidate_{i,d}cache_all
  block, bfq: return nbytes and not zero from struct cftype .write() method
  pnfs/blocklayout: off by one in bl_map_stripe()
  NFSv4 client live hangs after live data migration recovery
  NFSv4: Fix locking in pnfs_generic_recover_commit_reqs
  NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()
  ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
  iommu/vt-d: Add definitions for PFSID
  iommu/vt-d: Fix dev iotlb pfsid use
  sys: don't hold uts_sem while accessing userspace memory
  userns: move user access out of the mutex
  ubifs: Fix memory leak in lprobs self-check
  ubifs: Check data node size before truncate
  ubifs: Fix synced_i_size calculation for xattr inodes
  pwm: tiehrpwm: Don't use emulation mode bits to control PWM output
  pwm: tiehrpwm: Fix disabling of output of PWMs
  fb: fix lost console when the user unplugs a USB adapter
  udlfb: set optimal write delay
  libnvdimm: fix ars_status output length calculation
  bcache: release dc->writeback_lock properly in bch_writeback_thread()
  perf auxtrace: Fix queue resize
  crypto: caam - fix DMA mapping direction for RSA forms 2 & 3
  crypto: caam/jr - fix descriptor DMA unmapping
  crypto: caam/qi - fix error path in xts setkey
  arm64: mm: always enable CONFIG_HOLES_IN_ZONE
  mmc: renesas_sdhi_internal_dmac: mask DMAC interrupts
  blkcg: Introduce blkg_root_lookup()
  powerpc64/ftrace: Include ftrace.h needed for enable/disable calls
  IB/mlx5: Fix leaking stack memory to userspace
  rtc: omap: fix resource leak in registration error path
  ACPICA: AML Parser: skip opcodes that open a scope upon parse failure
  ALSA: ac97: fix device initialization in the compat layer
  ALSA: ac97: fix check of pm_runtime_get_sync failure
  ALSA: ac97: fix unbalanced pm_runtime_enable
  nfsd: fix leaked file lock with nfs exported overlayfs
  ubifs: Fix directory size calculation for symlinks
  mm, dev_pagemap: Do not clear ->mapping on final put
  act_ife: fix a potential use-after-free
  ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT state
  net: bcmgenet: use MAC link status for fixed phy
  net: macb: do not disable MDIO bus at open/close time
  qlge: Fix netdev features configuration.
  r8169: add support for NCube 8168 network card
  tcp: do not restart timewait timer on rst reception
  vti6: remove !skb->ignore_df check from vti6_xmit()
  net/sched: act_pedit: fix dump of extended layered op
  tipc: fix a missing rhashtable_walk_exit()
  nfp: wait for posted reconfigs when disabling the device
  sctp: hold transport before accessing its asoc in sctp_transport_get_next
  mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge
  vhost: correctly check the iova range when waking virtqueue
  hv_netvsc: ignore devices that are not PCI
  act_ife: move tcfa_lock down to where necessary
  act_ife: fix a potential deadlock
  net: sched: action_ife: take reference to meta module
  cifs: check if SMB2 PDU size has been padded and suppress the warning
  hfsplus: don't return 0 when fill_super() failed
  hfs: prevent crash on exit from failed search
  sunrpc: Don't use stack buffer with scatterlist
  fork: don't copy inconsistent signal handler state to child
  reiserfs: change j_timestamp type to time64_t
  hfsplus: fix NULL dereference in hfsplus_lookup()
  fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries
  fat: validate ->i_start before using
  scripts: modpost: check memory allocation results
  virtio: pci-legacy: Validate queue pfn
  x86/mce: Add notifier_block forward declaration
  IB/hfi1: Invalid NUMA node information can cause a divide by zero
  pwm: meson: Fix mux clock names
  mm/fadvise.c: fix signed overflow UBSAN complaint
  fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot()
  platform/x86: intel_punit_ipc: fix build errors
  netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
  s390/kdump: Fix memleak in nt_vmcoreinfo
  ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  mfd: sm501: Set coherent_dma_mask when creating subdevices
  platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360
  netfilter: fix memory leaks on netlink_dump_start error
  tcp, ulp: add alias for all ulp modules
  RDMA/hns: Fix usage of bitmap allocation functions return values
  net: hns3: Fix for command format parsing error in 
hclge_is_all_function_id_zero
  perf tools: Check for null when copying nsinfo.
  irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP
  net/9p/trans_fd.c: fix race by holding the lock
  net/9p: fix error path of p9_virtio_probe
  powerpc/uaccess: Enable get_user(u64, *p) on 32-bit
  powerpc: Fix size calculation using resource_size()
  perf probe powerpc: Fix trace event post-processing
  block: bvec_nr_vecs() returns value for wrong slab
  s390/dasd: fix hanging offline processing due to canceled worker
  s390/dasd: fix panic for failed online processing
  ACPI / scan: Initialize status to ACPI_STA_DEFAULT
  scsi: aic94xx: fix an error code in aic94xx_init()
  NFSv4: Fix error handling in nfs4_sp4_select_mode()
  Input: do not use WARN() in input_alloc_absinfo()
  xen/balloon: fix balloon initialization for PVH Dom0
  PCI: mvebu: Fix I/O space end address calculation
  dm kcopyd: avoid softlockup in run_complete_job
  staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice
  ASoC: rt5677: Fix initialization of rt5677_of_match.data
  iommu/omap: Fix cache flushes on L2 table entries
  selftests/powerpc: Kill child processes on SIGINT
  RDS: IB: fix 'passing zero to ERR_PTR()' warning
  cfq: Suppress compiler warnings about comparisons
  smb3: fix reset of bytes read and written stats
  SMB3: Number of requests sent should be displayed for SMB3 not just CIFS
  powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning
  powerpc/64s: Make rfi_flush_fallback a little more robust
  powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX.
  clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399
  KVM: vmx: track host_state.loaded using a loaded_vmcs pointer
  kvm: nVMX: Fix fault vector for VMX operation at CPL > 0
  btrfs: Exit gracefully when chunk map cannot be inserted to the tree
  btrfs: replace: Reset on-disk dev stats value after replace
  btrfs: relocation: Only remove reloc rb_trees if reloc control has been 
initialized
  btrfs: Don't remove block group that still has pinned down bytes
  arm64: rockchip: Force CONFIG_PM on Rockchip systems
  ARM: rockchip: Force CONFIG_PM on Rockchip systems
  drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks"
  drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode
  drm/amd/pp/Polaris12: Fix a chunk of registers missed to program
  drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80
  drm/amdgpu: update tmr mc address
  drm/amdgpu:add tmr mc address into amdgpu_firmware_info
  drm/amdgpu:add new firmware id for VCN
  drm/amdgpu:add VCN support in PSP driver
  drm/amdgpu:add VCN booting with firmware loaded by PSP
  debugobjects: Make stack check warning more informative
  mm: Fix devm_memremap_pages() collision handling
  HID: add quirk for another PIXART OEM mouse used by HP
  usb: dwc3: core: Fix ULPI PHYs and prevent phy_get/ulpi_init during 
suspend/resume
  x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear
  x86/xen: don't write ptes directly in 32-bit PV guests
  drm/i915: Increase LSPCON timeout
  kbuild: make missing $DEPMOD a Warning instead of an Error
  kvm: x86: Set highest physical address bits in non-present/reserved SPTEs
  x86: kvm: avoid unused variable warning
  arm64: cpu_errata: include required headers
  ASoC: wm8994: Fix missing break in switch
  arm64: Fix mismatched cache line size detection
  arm64: Handle mismatched cache type
  tipc: fix the big/little endian issue in tipc_dest
  ip6_vti: fix a null pointer deference when destroy vti6 tunnel
  workqueue: skip lockdep wq dependency in cancel_work_sync()
  workqueue: re-add lockdep dependencies for flushing
  apparmor: fix an error code in __aa_create_ns()
  tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach
  netfilter: x_tables: do not fail xt_alloc_table_info too easilly
  ACPICA: ACPICA: add status check for acpi_hw_read before assigning return 
value
  PCI: Match Root Port's MPS to endpoint's MPSS as necessary
  coccicheck: return proper error code on fail
  RISC-V: Use KBUILD_CFLAGS instead of KCFLAGS when building the vDSO
  blk-mq: count the hctx as active before allocating tag
  selinux: cleanup dentry and inodes on error in selinuxfs
  drm/amd/display: Read back max backlight value at boot
  btrfs: check-integrity: Fix NULL pointer dereference for degraded mount
  btrfs: lift uuid_mutex to callers of btrfs_open_devices
  btrfs: Fix a C compliance issue
  drm/i915: Nuke the LVDS lid notifier
  drm/edid: Quirk Vive Pro VR headset non-desktop.
  drm/amd/display: fix type of variable
  drm/amd/display: Don't share clk source between DP and HDMI
  drm/amd/display: update clk for various HDMI color depths
  drm/amd/display: Use requested HDMI aspect ratio
  drm/rockchip: lvds: add missing of_node_put
  drm/amd/display: Pass connector id when executing VBIOS CT
  drm/amd/display: Check if clock source in use before disabling
  drm/amdgpu: fix incorrect use of fcheck
  drm/amdgpu: fix incorrect use of drm_file->pid
  drm/i915: set DP Main Stream Attribute for color range on DDI platforms
  x86/tsc: Prevent result truncation on 32bit

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1835972/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to