** Description changed:
-
- SRU Justification
-
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
-
- upstream stable patchset 2019-07-09
- from git://git.kernel.org/
+ SRU Justification
+
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
+
+ upstream stable patchset 2019-07-09
+
+ Ported from the following upstream stable releases:
+ v4.14.68, v4.18.6,
+ v4.14.69, v4.18.7,
+ v4.14.70, v4.18.8
+
+ from git://git.kernel.org/
+
+ vti6: fix PMTU caching and reporting on xmit
+ xfrm: fix missing dst_release() after policy blocking lbcast and multicast
+ xfrm: free skb if nlsk pointer is NULL
+ esp6: fix memleak on error path in esp6_input
+ mac80211: add stations tied to AP_VLANs during hw reconfig
+ ext4: clear mmp sequence number when remounting read-only
+ nl80211: Add a missing break in parse_station_flags
+ drm/bridge: adv7511: Reset registers on hotplug
+ scsi: target: iscsi: cxgbit: fix max iso npdu calculation
+ scsi: libiscsi: fix possible NULL pointer dereference in case of TMF
+ drm/imx: imx-ldb: disable LDB on driver bind
+ drm/imx: imx-ldb: check if channel is enabled before printing warning
+ nbd: don't requeue the same request twice.
+ nbd: handle unexpected replies better
+ usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in
init_controller()
+ usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in
r8a66597_queue()
+ usb: gadget: f_uac2: fix error handling in afunc_bind (again)
+ usb: gadget: u_audio: fix pcm/card naming in g_audio_setup()
+ usb: gadget: u_audio: update hw_ptr in iso_complete after data copied
+ usb: gadget: u_audio: remove caching of stream buffer parameters
+ usb: gadget: u_audio: remove cached period bytes value
+ usb: gadget: u_audio: protect stream runtime fields with stream spinlock
+ usb/phy: fix PPC64 build errors in phy-fsl-usb.c
+ tools: usb: ffs-test: Fix build on big endian systems
+ usb: gadget: f_uac2: fix endianness of 'struct cntrl_*_lay3'
+ netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy()
+ bpf, ppc64: fix unexpected r0=0 exit path inside bpf_xadd
+ netfilter: nf_tables: fix memory leaks on chain rename
+ netfilter: nf_tables: don't allow to rename to already-pending name
+ KVM: vmx: use local variable for current_vmptr when emulating VMPTRST
+ tools/power turbostat: fix -S on UP systems
+ net: caif: Add a missing rcu_read_unlock() in caif_flow_cb
+ qed: Fix link flap issue due to mismatching EEE capabilities.
+ qed: Fix possible race for the link state value.
+ qed: Correct Multicast API to reflect existence of 256 approximate buckets.
+ atl1c: reserve min skb headroom
+ net: prevent ISA drivers from building on PPC32
+ can: mpc5xxx_can: check of_iomap return before use
+ can: m_can: Move accessing of message ram to after clocks are enabled
+ i2c: davinci: Avoid zero value of CLKH
+ perf/x86/amd/ibs: Don't access non-started event
+ media: staging: omap4iss: Include asm/cacheflush.h after generic includes
+ bnx2x: Fix invalid memory access in rss hash config path.
+ net: axienet: Fix double deregister of mdio
+ locking/rtmutex: Allow specifying a subclass for nested locking
+ i2c/mux, locking/core: Annotate the nested rt_mutex usage
+ sched/rt: Restore rt_runtime after disabling RT_RUNTIME_SHARE
+ x86/boot: Fix if_changed build flip/flop bug
+ selftests/ftrace: Add snapshot and tracing_on test case
+ ipc/sem.c: prevent queue.status tearing in semop
+ zswap: re-check zswap_is_full() after do zswap_shrink()
+ tools/power turbostat: Read extended processor family from CPUID
+ ARC: dma [non-IOC] setup SMP_CACHE_BYTES and cache_line_size
+ bpf: use GFP_ATOMIC instead of GFP_KERNEL in bpf_parse_prog()
+ nfp: flower: fix port metadata conversion bug
+ enic: handle mtu change for vf properly
+ ARC: [plat-eznps] Add missing struct nps_host_reg_aux_dpc
+ arc: [plat-eznps] fix data type errors in platform headers
+ arc: [plat-eznps] fix printk warning in arc/plat-eznps/mtm.c
+ arc: fix build errors in arc/include/asm/delay.h
+ arc: fix type warnings in arc/mm/cache.c
+ sparc/time: Add missing __init to init_tick_ops()
+ sparc: use asm-generic version of msi.h
+ enic: do not call enic_change_mtu in enic_probe
+ mm: delete historical BUG from zap_pmd_range()
+ drivers: net: lmc: fix case value for target abort error
+ memcg: remove memcg_cgroup::id from IDR on mem_cgroup_css_alloc() failure
+ gpiolib-acpi: make sure we trigger edge events at least once on boot
+ scsi: fcoe: fix use-after-free in fcoe_ctlr_els_send
+ scsi: fcoe: drop frames in ELS LOGO error path
+ scsi: vmw_pvscsi: Return DID_RESET for status SAM_STAT_COMMAND_TERMINATED
+ mm/memory.c: check return value of ioremap_prot
+ mei: don't update offset in write
+ cifs: add missing debug entries for kconfig options
+ cifs: check kmalloc before use
+ smb3: enumerating snapshots was leaving part of the data off end
+ smb3: Do not send SMB3 SET_INFO if nothing changed
+ smb3: don't request leases in symlink creation and query
+ smb3: fill in statfs fsid and correct namelen
+ btrfs: use correct compare function of dirty_metadata_bytes
+ btrfs: don't leak ret from do_chunk_alloc
+ Btrfs: fix btrfs_write_inode vs delayed iput deadlock
+ iommu/arm-smmu: Error out only if not enough context interrupts
+ printk: Split the code for storing a message into the log buffer
+ printk: Create helper function to queue deferred console handling
+ printk/nmi: Prevent deadlock when accessing the main log buffer in NMI
+ kprobes/arm64: Fix %p uses in error messages
+ arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid()
+ arm64: dts: rockchip: corrected uart1 clock-names for rk3328
+ KVM: arm/arm64: Skip updating PMD entry if no change
+ KVM: arm/arm64: Skip updating PTE entry if no change
+ stop_machine: Reflow cpu_stop_queue_two_works()
+ ext4: check for NUL characters in extended attribute's name
+ ext4: sysfs: print ext4_super_block fields as little-endian
+ ext4: reset error code in ext4_find_entry in fallback
+ platform/x86: ideapad-laptop: Apply no_hw_rfkill to Y20-15IKBM, too
+ x86/vdso: Fix vDSO build if a retpoline is emitted
+ x86/process: Re-export start_thread()
+ x86/kvm/vmx: Remove duplicate l1d flush definitions
+ fuse: Add missed unlock_page() to fuse_readpages_fill()
+ udl-kms: change down_interruptible to down
+ udl-kms: handle allocation failure
+ udl-kms: fix crash due to uninitialized memory
+ udl-kms: avoid division
+ b43legacy/leds: Ensure NUL-termination of LED name string
+ b43/leds: Ensure NUL-termination of LED name string
+ ASoC: dpcm: don't merge format from invalid codec dai
+ ASoC: zte: Fix incorrect PCM format bit usages
+ ASoC: sirf: Fix potential NULL pointer dereference
+ pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show()
+ x86/vdso: Fix lsl operand order
+ x86/irqflags: Mark native_restore_fl extern inline
+ x86/entry/64: Wipe KASAN stack shadow before rewind_stack_do_exit()
+ s390/mm: fix addressing exception after suspend/resume
+ s390/numa: move initial setup of node_to_cpumask_map
+ kprobes/arm: Fix %p uses in error messages
+ kprobes: Make list and blacklist root user read only
+ MIPS: Correct the 64-bit DSP accumulator register size
+ MIPS: Always use -march=<arch>, not -<arch> shortcuts
+ MIPS: Change definition of cpu_relax() for Loongson-3
+ MIPS: lib: Provide MIPS64r6 __multi3() for GCC < 7
+ tpm: Return the actual size when receiving an unsupported command
+ scsi: mpt3sas: Fix _transport_smp_handler() error path
+ scsi: sysfs: Introduce sysfs_{un,}break_active_protection()
+ scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock
+ clk: rockchip: fix clk_i2sout parent selection bits on rk3399
+ PM / clk: signedness bug in of_pm_clk_add_clks()
+ power: generic-adc-battery: fix out-of-bounds write when copying channel
properties
+ power: generic-adc-battery: check for duplicate properties copied from iio
channels
+ watchdog: Mark watchdog touch functions as notrace
+ gcc-plugins: Add include required by GCC release 8
+ gcc-plugins: Use dynamic initializers
+ Btrfs: fix send failure when root has deleted files still open
+ Btrfs: send, fix incorrect file layout after hole punching beyond eof
+ hwmon: (k10temp) 27C Offset needed for Threadripper2
+ KVM: arm/arm64: Fix potential loss of ptimer interrupts
+ KVM: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked
+ perf kvm: Fix subcommands on s390
+ ext4: use ext4_warning() for sb_getblk failure
+ platform/x86: wmi: Do not mix pages and kmalloc
+ KVM: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd
+ lib/vsprintf: Do not handle %pO[^F] as %px
+ soc: qcom: rmtfs-mem: fix memleak in probe error paths
+ kprobes: Show blacklist addresses as same as kallsyms does
+ kprobes: Replace %p with other pointer types
+ MIPS: memset.S: Fix byte_fixup for MIPSr6
+ mtd: rawnand: qcom: wait for desc completion in all BAM channels
+ net: 6lowpan: fix reserved space for single frames
+ net: mac802154: tx: expand tailroom if necessary
+ 9p/net: Fix zero-copy path in the 9p virtio transport
+ spi: davinci: fix a NULL pointer dereference
+ spi: pxa2xx: Add support for Intel Ice Lake
+ spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe
+ spi: cadence: Change usleep_range() to udelay(), for atomic context
+ mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS
+ readahead: stricter check for bdi io_pages
+ block: blk_init_allocated_queue() set q->fq as NULL in the fail case
+ block: really disable runtime-pm for blk-mq
+ drm/i915/userptr: reject zero user_size
+ libertas: fix suspend and resume for SDIO connected cards
+ media: Revert "[media] tvp5150: fix pad format frame height"
+ mailbox: xgene-slimpro: Fix potential NULL pointer dereference
+ Replace magic for trusting the secondary keyring with #define
+ powerpc/fadump: handle crash memory ranges array index overflow
+ powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
+ PCI: Add wrappers for dev_printk()
+ cxl: Fix wrong comparison in cxl_adapter_context_get()
+ ib_srpt: Fix a use-after-free in srpt_close_ch()
+ RDMA/rxe: Set wqe->status correctly if an unexpected response is received
+ 9p: fix multiple NULL-pointer-dereferences
+ fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
+ 9p/virtio: fix off-by-one error in sg list bounds check
+ net/9p/client.c: version pointer uninitialized
+ net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
+ dm integrity: change 'suspending' variable from bool to int
+ dm thin: stop no_space_timeout worker when switching to write-mode
+ dm cache metadata: save in-core policy_hint_size to on-disk superblock
+ dm cache metadata: set dirty on all cache blocks after a crash
+ dm crypt: don't decrease device limits
+ uart: fix race between uart_put_char() and uart_shutdown()
+ Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind()
+ iio: sca3000: Fix missing return in switch
+ iio: ad9523: Fix displayed phase
+ iio: ad9523: Fix return value for ad952x_store()
+ extcon: Release locking when sending the notification of connector state
+ vmw_balloon: fix inflation of 64-bit GFNs
+ vmw_balloon: do not use 2MB without batching
+ vmw_balloon: VMCI_DOORBELL_SET does not check status
+ vmw_balloon: fix VMCI use when balloon built into kernel
+ rtc: omap: fix potential crash on power off
+ tracing: Do not call start/stop() functions when tracing_on does not change
+ tracing/blktrace: Fix to allow setting same value
+ printk/tracing: Do not trace printk_nmi_enter()
+ livepatch: Validate module/old func name length
+ uprobes: Use synchronize_rcu() not synchronize_sched()
+ mfd: hi655x: Fix regmap area declared size for hi655x
+ ovl: fix wrong use of impure dir cache in ovl_iterate()
+ drivers/block/zram/zram_drv.c: fix bug storing backing_dev
+ cpufreq: governor: Avoid accessing invalid governor_data
+ PM / sleep: wakeup: Fix build error caused by missing SRCU support
+ KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages
+ xtensa: limit offsets in __loop_cache_{all,page}
+ xtensa: increase ranges in ___invalidate_{i,d}cache_all
+ block, bfq: return nbytes and not zero from struct cftype .write() method
+ pnfs/blocklayout: off by one in bl_map_stripe()
+ NFSv4 client live hangs after live data migration recovery
+ NFSv4: Fix locking in pnfs_generic_recover_commit_reqs
+ NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()
+ ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
+ iommu/vt-d: Add definitions for PFSID
+ iommu/vt-d: Fix dev iotlb pfsid use
+ sys: don't hold uts_sem while accessing userspace memory
+ userns: move user access out of the mutex
+ ubifs: Fix memory leak in lprobs self-check
+ ubifs: Check data node size before truncate
+ ubifs: Fix synced_i_size calculation for xattr inodes
+ pwm: tiehrpwm: Don't use emulation mode bits to control PWM output
+ pwm: tiehrpwm: Fix disabling of output of PWMs
+ fb: fix lost console when the user unplugs a USB adapter
+ udlfb: set optimal write delay
+ libnvdimm: fix ars_status output length calculation
+ bcache: release dc->writeback_lock properly in bch_writeback_thread()
+ perf auxtrace: Fix queue resize
+ crypto: caam - fix DMA mapping direction for RSA forms 2 & 3
+ crypto: caam/jr - fix descriptor DMA unmapping
+ crypto: caam/qi - fix error path in xts setkey
+ arm64: mm: always enable CONFIG_HOLES_IN_ZONE
+ mmc: renesas_sdhi_internal_dmac: mask DMAC interrupts
+ blkcg: Introduce blkg_root_lookup()
+ powerpc64/ftrace: Include ftrace.h needed for enable/disable calls
+ IB/mlx5: Fix leaking stack memory to userspace
+ rtc: omap: fix resource leak in registration error path
+ ACPICA: AML Parser: skip opcodes that open a scope upon parse failure
+ ALSA: ac97: fix device initialization in the compat layer
+ ALSA: ac97: fix check of pm_runtime_get_sync failure
+ ALSA: ac97: fix unbalanced pm_runtime_enable
+ nfsd: fix leaked file lock with nfs exported overlayfs
+ ubifs: Fix directory size calculation for symlinks
+ mm, dev_pagemap: Do not clear ->mapping on final put
+ act_ife: fix a potential use-after-free
+ ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT state
+ net: bcmgenet: use MAC link status for fixed phy
+ net: macb: do not disable MDIO bus at open/close time
+ qlge: Fix netdev features configuration.
+ r8169: add support for NCube 8168 network card
+ tcp: do not restart timewait timer on rst reception
+ vti6: remove !skb->ignore_df check from vti6_xmit()
+ net/sched: act_pedit: fix dump of extended layered op
+ tipc: fix a missing rhashtable_walk_exit()
+ nfp: wait for posted reconfigs when disabling the device
+ sctp: hold transport before accessing its asoc in sctp_transport_get_next
+ mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge
+ vhost: correctly check the iova range when waking virtqueue
+ hv_netvsc: ignore devices that are not PCI
+ act_ife: move tcfa_lock down to where necessary
+ act_ife: fix a potential deadlock
+ net: sched: action_ife: take reference to meta module
+ cifs: check if SMB2 PDU size has been padded and suppress the warning
+ hfsplus: don't return 0 when fill_super() failed
+ hfs: prevent crash on exit from failed search
+ sunrpc: Don't use stack buffer with scatterlist
+ fork: don't copy inconsistent signal handler state to child
+ reiserfs: change j_timestamp type to time64_t
+ hfsplus: fix NULL dereference in hfsplus_lookup()
+ fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries
+ fat: validate ->i_start before using
+ scripts: modpost: check memory allocation results
+ virtio: pci-legacy: Validate queue pfn
+ x86/mce: Add notifier_block forward declaration
+ IB/hfi1: Invalid NUMA node information can cause a divide by zero
+ pwm: meson: Fix mux clock names
+ mm/fadvise.c: fix signed overflow UBSAN complaint
+ fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot()
+ platform/x86: intel_punit_ipc: fix build errors
+ netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
+ s390/kdump: Fix memleak in nt_vmcoreinfo
+ ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
+ mfd: sm501: Set coherent_dma_mask when creating subdevices
+ platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360
+ netfilter: fix memory leaks on netlink_dump_start error
+ tcp, ulp: add alias for all ulp modules
+ RDMA/hns: Fix usage of bitmap allocation functions return values
+ net: hns3: Fix for command format parsing error in
hclge_is_all_function_id_zero
+ perf tools: Check for null when copying nsinfo.
+ irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP
+ net/9p/trans_fd.c: fix race by holding the lock
+ net/9p: fix error path of p9_virtio_probe
+ powerpc/uaccess: Enable get_user(u64, *p) on 32-bit
+ powerpc: Fix size calculation using resource_size()
+ perf probe powerpc: Fix trace event post-processing
+ block: bvec_nr_vecs() returns value for wrong slab
+ s390/dasd: fix hanging offline processing due to canceled worker
+ s390/dasd: fix panic for failed online processing
+ ACPI / scan: Initialize status to ACPI_STA_DEFAULT
+ scsi: aic94xx: fix an error code in aic94xx_init()
+ NFSv4: Fix error handling in nfs4_sp4_select_mode()
+ Input: do not use WARN() in input_alloc_absinfo()
+ xen/balloon: fix balloon initialization for PVH Dom0
+ PCI: mvebu: Fix I/O space end address calculation
+ dm kcopyd: avoid softlockup in run_complete_job
+ staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice
+ ASoC: rt5677: Fix initialization of rt5677_of_match.data
+ iommu/omap: Fix cache flushes on L2 table entries
+ selftests/powerpc: Kill child processes on SIGINT
+ RDS: IB: fix 'passing zero to ERR_PTR()' warning
+ cfq: Suppress compiler warnings about comparisons
+ smb3: fix reset of bytes read and written stats
+ SMB3: Number of requests sent should be displayed for SMB3 not just CIFS
+ powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning
+ powerpc/64s: Make rfi_flush_fallback a little more robust
+ powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX.
+ clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399
+ KVM: vmx: track host_state.loaded using a loaded_vmcs pointer
+ kvm: nVMX: Fix fault vector for VMX operation at CPL > 0
+ btrfs: Exit gracefully when chunk map cannot be inserted to the tree
+ btrfs: replace: Reset on-disk dev stats value after replace
+ btrfs: relocation: Only remove reloc rb_trees if reloc control has been
initialized
+ btrfs: Don't remove block group that still has pinned down bytes
+ arm64: rockchip: Force CONFIG_PM on Rockchip systems
+ ARM: rockchip: Force CONFIG_PM on Rockchip systems
+ drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks"
+ drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode
+ drm/amd/pp/Polaris12: Fix a chunk of registers missed to program
+ drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80
+ drm/amdgpu: update tmr mc address
+ drm/amdgpu:add tmr mc address into amdgpu_firmware_info
+ drm/amdgpu:add new firmware id for VCN
+ drm/amdgpu:add VCN support in PSP driver
+ drm/amdgpu:add VCN booting with firmware loaded by PSP
+ debugobjects: Make stack check warning more informative
+ mm: Fix devm_memremap_pages() collision handling
+ HID: add quirk for another PIXART OEM mouse used by HP
+ usb: dwc3: core: Fix ULPI PHYs and prevent phy_get/ulpi_init during
suspend/resume
+ x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear
+ x86/xen: don't write ptes directly in 32-bit PV guests
+ drm/i915: Increase LSPCON timeout
+ kbuild: make missing $DEPMOD a Warning instead of an Error
+ kvm: x86: Set highest physical address bits in non-present/reserved SPTEs
+ x86: kvm: avoid unused variable warning
+ arm64: cpu_errata: include required headers
+ ASoC: wm8994: Fix missing break in switch
+ arm64: Fix mismatched cache line size detection
+ arm64: Handle mismatched cache type
+ tipc: fix the big/little endian issue in tipc_dest
+ ip6_vti: fix a null pointer deference when destroy vti6 tunnel
+ workqueue: skip lockdep wq dependency in cancel_work_sync()
+ workqueue: re-add lockdep dependencies for flushing
+ apparmor: fix an error code in __aa_create_ns()
+ tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach
+ netfilter: x_tables: do not fail xt_alloc_table_info too easilly
+ ACPICA: ACPICA: add status check for acpi_hw_read before assigning return
value
+ PCI: Match Root Port's MPS to endpoint's MPSS as necessary
+ coccicheck: return proper error code on fail
+ RISC-V: Use KBUILD_CFLAGS instead of KCFLAGS when building the vDSO
+ blk-mq: count the hctx as active before allocating tag
+ selinux: cleanup dentry and inodes on error in selinuxfs
+ drm/amd/display: Read back max backlight value at boot
+ btrfs: check-integrity: Fix NULL pointer dereference for degraded mount
+ btrfs: lift uuid_mutex to callers of btrfs_open_devices
+ btrfs: Fix a C compliance issue
+ drm/i915: Nuke the LVDS lid notifier
+ drm/edid: Quirk Vive Pro VR headset non-desktop.
+ drm/amd/display: fix type of variable
+ drm/amd/display: Don't share clk source between DP and HDMI
+ drm/amd/display: update clk for various HDMI color depths
+ drm/amd/display: Use requested HDMI aspect ratio
+ drm/rockchip: lvds: add missing of_node_put
+ drm/amd/display: Pass connector id when executing VBIOS CT
+ drm/amd/display: Check if clock source in use before disabling
+ drm/amdgpu: fix incorrect use of fcheck
+ drm/amdgpu: fix incorrect use of drm_file->pid
+ drm/i915: set DP Main Stream Attribute for color range on DDI platforms
+ x86/tsc: Prevent result truncation on 32bit
** Changed in: linux (Ubuntu Bionic)
Status: New => In Progress
** Changed in: linux (Ubuntu Bionic)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1835972
Title:
Bionic update: upstream stable patchset 2019-07-09
Status in linux package in Ubuntu:
Confirmed
Status in linux source package in Bionic:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2019-07-09
Ported from the following upstream stable releases:
v4.14.68, v4.18.6,
v4.14.69, v4.18.7,
v4.14.70, v4.18.8
from git://git.kernel.org/
vti6: fix PMTU caching and reporting on xmit
xfrm: fix missing dst_release() after policy blocking lbcast and multicast
xfrm: free skb if nlsk pointer is NULL
esp6: fix memleak on error path in esp6_input
mac80211: add stations tied to AP_VLANs during hw reconfig
ext4: clear mmp sequence number when remounting read-only
nl80211: Add a missing break in parse_station_flags
drm/bridge: adv7511: Reset registers on hotplug
scsi: target: iscsi: cxgbit: fix max iso npdu calculation
scsi: libiscsi: fix possible NULL pointer dereference in case of TMF
drm/imx: imx-ldb: disable LDB on driver bind
drm/imx: imx-ldb: check if channel is enabled before printing warning
nbd: don't requeue the same request twice.
nbd: handle unexpected replies better
usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in
init_controller()
usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in
r8a66597_queue()
usb: gadget: f_uac2: fix error handling in afunc_bind (again)
usb: gadget: u_audio: fix pcm/card naming in g_audio_setup()
usb: gadget: u_audio: update hw_ptr in iso_complete after data copied
usb: gadget: u_audio: remove caching of stream buffer parameters
usb: gadget: u_audio: remove cached period bytes value
usb: gadget: u_audio: protect stream runtime fields with stream spinlock
usb/phy: fix PPC64 build errors in phy-fsl-usb.c
tools: usb: ffs-test: Fix build on big endian systems
usb: gadget: f_uac2: fix endianness of 'struct cntrl_*_lay3'
netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy()
bpf, ppc64: fix unexpected r0=0 exit path inside bpf_xadd
netfilter: nf_tables: fix memory leaks on chain rename
netfilter: nf_tables: don't allow to rename to already-pending name
KVM: vmx: use local variable for current_vmptr when emulating VMPTRST
tools/power turbostat: fix -S on UP systems
net: caif: Add a missing rcu_read_unlock() in caif_flow_cb
qed: Fix link flap issue due to mismatching EEE capabilities.
qed: Fix possible race for the link state value.
qed: Correct Multicast API to reflect existence of 256 approximate buckets.
atl1c: reserve min skb headroom
net: prevent ISA drivers from building on PPC32
can: mpc5xxx_can: check of_iomap return before use
can: m_can: Move accessing of message ram to after clocks are enabled
i2c: davinci: Avoid zero value of CLKH
perf/x86/amd/ibs: Don't access non-started event
media: staging: omap4iss: Include asm/cacheflush.h after generic includes
bnx2x: Fix invalid memory access in rss hash config path.
net: axienet: Fix double deregister of mdio
locking/rtmutex: Allow specifying a subclass for nested locking
i2c/mux, locking/core: Annotate the nested rt_mutex usage
sched/rt: Restore rt_runtime after disabling RT_RUNTIME_SHARE
x86/boot: Fix if_changed build flip/flop bug
selftests/ftrace: Add snapshot and tracing_on test case
ipc/sem.c: prevent queue.status tearing in semop
zswap: re-check zswap_is_full() after do zswap_shrink()
tools/power turbostat: Read extended processor family from CPUID
ARC: dma [non-IOC] setup SMP_CACHE_BYTES and cache_line_size
bpf: use GFP_ATOMIC instead of GFP_KERNEL in bpf_parse_prog()
nfp: flower: fix port metadata conversion bug
enic: handle mtu change for vf properly
ARC: [plat-eznps] Add missing struct nps_host_reg_aux_dpc
arc: [plat-eznps] fix data type errors in platform headers
arc: [plat-eznps] fix printk warning in arc/plat-eznps/mtm.c
arc: fix build errors in arc/include/asm/delay.h
arc: fix type warnings in arc/mm/cache.c
sparc/time: Add missing __init to init_tick_ops()
sparc: use asm-generic version of msi.h
enic: do not call enic_change_mtu in enic_probe
mm: delete historical BUG from zap_pmd_range()
drivers: net: lmc: fix case value for target abort error
memcg: remove memcg_cgroup::id from IDR on mem_cgroup_css_alloc() failure
gpiolib-acpi: make sure we trigger edge events at least once on boot
scsi: fcoe: fix use-after-free in fcoe_ctlr_els_send
scsi: fcoe: drop frames in ELS LOGO error path
scsi: vmw_pvscsi: Return DID_RESET for status SAM_STAT_COMMAND_TERMINATED
mm/memory.c: check return value of ioremap_prot
mei: don't update offset in write
cifs: add missing debug entries for kconfig options
cifs: check kmalloc before use
smb3: enumerating snapshots was leaving part of the data off end
smb3: Do not send SMB3 SET_INFO if nothing changed
smb3: don't request leases in symlink creation and query
smb3: fill in statfs fsid and correct namelen
btrfs: use correct compare function of dirty_metadata_bytes
btrfs: don't leak ret from do_chunk_alloc
Btrfs: fix btrfs_write_inode vs delayed iput deadlock
iommu/arm-smmu: Error out only if not enough context interrupts
printk: Split the code for storing a message into the log buffer
printk: Create helper function to queue deferred console handling
printk/nmi: Prevent deadlock when accessing the main log buffer in NMI
kprobes/arm64: Fix %p uses in error messages
arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid()
arm64: dts: rockchip: corrected uart1 clock-names for rk3328
KVM: arm/arm64: Skip updating PMD entry if no change
KVM: arm/arm64: Skip updating PTE entry if no change
stop_machine: Reflow cpu_stop_queue_two_works()
ext4: check for NUL characters in extended attribute's name
ext4: sysfs: print ext4_super_block fields as little-endian
ext4: reset error code in ext4_find_entry in fallback
platform/x86: ideapad-laptop: Apply no_hw_rfkill to Y20-15IKBM, too
x86/vdso: Fix vDSO build if a retpoline is emitted
x86/process: Re-export start_thread()
x86/kvm/vmx: Remove duplicate l1d flush definitions
fuse: Add missed unlock_page() to fuse_readpages_fill()
udl-kms: change down_interruptible to down
udl-kms: handle allocation failure
udl-kms: fix crash due to uninitialized memory
udl-kms: avoid division
b43legacy/leds: Ensure NUL-termination of LED name string
b43/leds: Ensure NUL-termination of LED name string
ASoC: dpcm: don't merge format from invalid codec dai
ASoC: zte: Fix incorrect PCM format bit usages
ASoC: sirf: Fix potential NULL pointer dereference
pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show()
x86/vdso: Fix lsl operand order
x86/irqflags: Mark native_restore_fl extern inline
x86/entry/64: Wipe KASAN stack shadow before rewind_stack_do_exit()
s390/mm: fix addressing exception after suspend/resume
s390/numa: move initial setup of node_to_cpumask_map
kprobes/arm: Fix %p uses in error messages
kprobes: Make list and blacklist root user read only
MIPS: Correct the 64-bit DSP accumulator register size
MIPS: Always use -march=<arch>, not -<arch> shortcuts
MIPS: Change definition of cpu_relax() for Loongson-3
MIPS: lib: Provide MIPS64r6 __multi3() for GCC < 7
tpm: Return the actual size when receiving an unsupported command
scsi: mpt3sas: Fix _transport_smp_handler() error path
scsi: sysfs: Introduce sysfs_{un,}break_active_protection()
scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock
clk: rockchip: fix clk_i2sout parent selection bits on rk3399
PM / clk: signedness bug in of_pm_clk_add_clks()
power: generic-adc-battery: fix out-of-bounds write when copying channel
properties
power: generic-adc-battery: check for duplicate properties copied from iio
channels
watchdog: Mark watchdog touch functions as notrace
gcc-plugins: Add include required by GCC release 8
gcc-plugins: Use dynamic initializers
Btrfs: fix send failure when root has deleted files still open
Btrfs: send, fix incorrect file layout after hole punching beyond eof
hwmon: (k10temp) 27C Offset needed for Threadripper2
KVM: arm/arm64: Fix potential loss of ptimer interrupts
KVM: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked
perf kvm: Fix subcommands on s390
ext4: use ext4_warning() for sb_getblk failure
platform/x86: wmi: Do not mix pages and kmalloc
KVM: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd
lib/vsprintf: Do not handle %pO[^F] as %px
soc: qcom: rmtfs-mem: fix memleak in probe error paths
kprobes: Show blacklist addresses as same as kallsyms does
kprobes: Replace %p with other pointer types
MIPS: memset.S: Fix byte_fixup for MIPSr6
mtd: rawnand: qcom: wait for desc completion in all BAM channels
net: 6lowpan: fix reserved space for single frames
net: mac802154: tx: expand tailroom if necessary
9p/net: Fix zero-copy path in the 9p virtio transport
spi: davinci: fix a NULL pointer dereference
spi: pxa2xx: Add support for Intel Ice Lake
spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe
spi: cadence: Change usleep_range() to udelay(), for atomic context
mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS
readahead: stricter check for bdi io_pages
block: blk_init_allocated_queue() set q->fq as NULL in the fail case
block: really disable runtime-pm for blk-mq
drm/i915/userptr: reject zero user_size
libertas: fix suspend and resume for SDIO connected cards
media: Revert "[media] tvp5150: fix pad format frame height"
mailbox: xgene-slimpro: Fix potential NULL pointer dereference
Replace magic for trusting the secondary keyring with #define
powerpc/fadump: handle crash memory ranges array index overflow
powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
PCI: Add wrappers for dev_printk()
cxl: Fix wrong comparison in cxl_adapter_context_get()
ib_srpt: Fix a use-after-free in srpt_close_ch()
RDMA/rxe: Set wqe->status correctly if an unexpected response is received
9p: fix multiple NULL-pointer-dereferences
fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
9p/virtio: fix off-by-one error in sg list bounds check
net/9p/client.c: version pointer uninitialized
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
dm integrity: change 'suspending' variable from bool to int
dm thin: stop no_space_timeout worker when switching to write-mode
dm cache metadata: save in-core policy_hint_size to on-disk superblock
dm cache metadata: set dirty on all cache blocks after a crash
dm crypt: don't decrease device limits
uart: fix race between uart_put_char() and uart_shutdown()
Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind()
iio: sca3000: Fix missing return in switch
iio: ad9523: Fix displayed phase
iio: ad9523: Fix return value for ad952x_store()
extcon: Release locking when sending the notification of connector state
vmw_balloon: fix inflation of 64-bit GFNs
vmw_balloon: do not use 2MB without batching
vmw_balloon: VMCI_DOORBELL_SET does not check status
vmw_balloon: fix VMCI use when balloon built into kernel
rtc: omap: fix potential crash on power off
tracing: Do not call start/stop() functions when tracing_on does not change
tracing/blktrace: Fix to allow setting same value
printk/tracing: Do not trace printk_nmi_enter()
livepatch: Validate module/old func name length
uprobes: Use synchronize_rcu() not synchronize_sched()
mfd: hi655x: Fix regmap area declared size for hi655x
ovl: fix wrong use of impure dir cache in ovl_iterate()
drivers/block/zram/zram_drv.c: fix bug storing backing_dev
cpufreq: governor: Avoid accessing invalid governor_data
PM / sleep: wakeup: Fix build error caused by missing SRCU support
KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages
xtensa: limit offsets in __loop_cache_{all,page}
xtensa: increase ranges in ___invalidate_{i,d}cache_all
block, bfq: return nbytes and not zero from struct cftype .write() method
pnfs/blocklayout: off by one in bl_map_stripe()
NFSv4 client live hangs after live data migration recovery
NFSv4: Fix locking in pnfs_generic_recover_commit_reqs
NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()
ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
iommu/vt-d: Add definitions for PFSID
iommu/vt-d: Fix dev iotlb pfsid use
sys: don't hold uts_sem while accessing userspace memory
userns: move user access out of the mutex
ubifs: Fix memory leak in lprobs self-check
ubifs: Check data node size before truncate
ubifs: Fix synced_i_size calculation for xattr inodes
pwm: tiehrpwm: Don't use emulation mode bits to control PWM output
pwm: tiehrpwm: Fix disabling of output of PWMs
fb: fix lost console when the user unplugs a USB adapter
udlfb: set optimal write delay
libnvdimm: fix ars_status output length calculation
bcache: release dc->writeback_lock properly in bch_writeback_thread()
perf auxtrace: Fix queue resize
crypto: caam - fix DMA mapping direction for RSA forms 2 & 3
crypto: caam/jr - fix descriptor DMA unmapping
crypto: caam/qi - fix error path in xts setkey
arm64: mm: always enable CONFIG_HOLES_IN_ZONE
mmc: renesas_sdhi_internal_dmac: mask DMAC interrupts
blkcg: Introduce blkg_root_lookup()
powerpc64/ftrace: Include ftrace.h needed for enable/disable calls
IB/mlx5: Fix leaking stack memory to userspace
rtc: omap: fix resource leak in registration error path
ACPICA: AML Parser: skip opcodes that open a scope upon parse failure
ALSA: ac97: fix device initialization in the compat layer
ALSA: ac97: fix check of pm_runtime_get_sync failure
ALSA: ac97: fix unbalanced pm_runtime_enable
nfsd: fix leaked file lock with nfs exported overlayfs
ubifs: Fix directory size calculation for symlinks
mm, dev_pagemap: Do not clear ->mapping on final put
act_ife: fix a potential use-after-free
ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT state
net: bcmgenet: use MAC link status for fixed phy
net: macb: do not disable MDIO bus at open/close time
qlge: Fix netdev features configuration.
r8169: add support for NCube 8168 network card
tcp: do not restart timewait timer on rst reception
vti6: remove !skb->ignore_df check from vti6_xmit()
net/sched: act_pedit: fix dump of extended layered op
tipc: fix a missing rhashtable_walk_exit()
nfp: wait for posted reconfigs when disabling the device
sctp: hold transport before accessing its asoc in sctp_transport_get_next
mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge
vhost: correctly check the iova range when waking virtqueue
hv_netvsc: ignore devices that are not PCI
act_ife: move tcfa_lock down to where necessary
act_ife: fix a potential deadlock
net: sched: action_ife: take reference to meta module
cifs: check if SMB2 PDU size has been padded and suppress the warning
hfsplus: don't return 0 when fill_super() failed
hfs: prevent crash on exit from failed search
sunrpc: Don't use stack buffer with scatterlist
fork: don't copy inconsistent signal handler state to child
reiserfs: change j_timestamp type to time64_t
hfsplus: fix NULL dereference in hfsplus_lookup()
fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries
fat: validate ->i_start before using
scripts: modpost: check memory allocation results
virtio: pci-legacy: Validate queue pfn
x86/mce: Add notifier_block forward declaration
IB/hfi1: Invalid NUMA node information can cause a divide by zero
pwm: meson: Fix mux clock names
mm/fadvise.c: fix signed overflow UBSAN complaint
fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot()
platform/x86: intel_punit_ipc: fix build errors
netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
s390/kdump: Fix memleak in nt_vmcoreinfo
ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
mfd: sm501: Set coherent_dma_mask when creating subdevices
platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360
netfilter: fix memory leaks on netlink_dump_start error
tcp, ulp: add alias for all ulp modules
RDMA/hns: Fix usage of bitmap allocation functions return values
net: hns3: Fix for command format parsing error in
hclge_is_all_function_id_zero
perf tools: Check for null when copying nsinfo.
irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP
net/9p/trans_fd.c: fix race by holding the lock
net/9p: fix error path of p9_virtio_probe
powerpc/uaccess: Enable get_user(u64, *p) on 32-bit
powerpc: Fix size calculation using resource_size()
perf probe powerpc: Fix trace event post-processing
block: bvec_nr_vecs() returns value for wrong slab
s390/dasd: fix hanging offline processing due to canceled worker
s390/dasd: fix panic for failed online processing
ACPI / scan: Initialize status to ACPI_STA_DEFAULT
scsi: aic94xx: fix an error code in aic94xx_init()
NFSv4: Fix error handling in nfs4_sp4_select_mode()
Input: do not use WARN() in input_alloc_absinfo()
xen/balloon: fix balloon initialization for PVH Dom0
PCI: mvebu: Fix I/O space end address calculation
dm kcopyd: avoid softlockup in run_complete_job
staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice
ASoC: rt5677: Fix initialization of rt5677_of_match.data
iommu/omap: Fix cache flushes on L2 table entries
selftests/powerpc: Kill child processes on SIGINT
RDS: IB: fix 'passing zero to ERR_PTR()' warning
cfq: Suppress compiler warnings about comparisons
smb3: fix reset of bytes read and written stats
SMB3: Number of requests sent should be displayed for SMB3 not just CIFS
powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning
powerpc/64s: Make rfi_flush_fallback a little more robust
powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX.
clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399
KVM: vmx: track host_state.loaded using a loaded_vmcs pointer
kvm: nVMX: Fix fault vector for VMX operation at CPL > 0
btrfs: Exit gracefully when chunk map cannot be inserted to the tree
btrfs: replace: Reset on-disk dev stats value after replace
btrfs: relocation: Only remove reloc rb_trees if reloc control has been
initialized
btrfs: Don't remove block group that still has pinned down bytes
arm64: rockchip: Force CONFIG_PM on Rockchip systems
ARM: rockchip: Force CONFIG_PM on Rockchip systems
drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks"
drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode
drm/amd/pp/Polaris12: Fix a chunk of registers missed to program
drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80
drm/amdgpu: update tmr mc address
drm/amdgpu:add tmr mc address into amdgpu_firmware_info
drm/amdgpu:add new firmware id for VCN
drm/amdgpu:add VCN support in PSP driver
drm/amdgpu:add VCN booting with firmware loaded by PSP
debugobjects: Make stack check warning more informative
mm: Fix devm_memremap_pages() collision handling
HID: add quirk for another PIXART OEM mouse used by HP
usb: dwc3: core: Fix ULPI PHYs and prevent phy_get/ulpi_init during
suspend/resume
x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear
x86/xen: don't write ptes directly in 32-bit PV guests
drm/i915: Increase LSPCON timeout
kbuild: make missing $DEPMOD a Warning instead of an Error
kvm: x86: Set highest physical address bits in non-present/reserved SPTEs
x86: kvm: avoid unused variable warning
arm64: cpu_errata: include required headers
ASoC: wm8994: Fix missing break in switch
arm64: Fix mismatched cache line size detection
arm64: Handle mismatched cache type
tipc: fix the big/little endian issue in tipc_dest
ip6_vti: fix a null pointer deference when destroy vti6 tunnel
workqueue: skip lockdep wq dependency in cancel_work_sync()
workqueue: re-add lockdep dependencies for flushing
apparmor: fix an error code in __aa_create_ns()
tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach
netfilter: x_tables: do not fail xt_alloc_table_info too easilly
ACPICA: ACPICA: add status check for acpi_hw_read before assigning return
value
PCI: Match Root Port's MPS to endpoint's MPSS as necessary
coccicheck: return proper error code on fail
RISC-V: Use KBUILD_CFLAGS instead of KCFLAGS when building the vDSO
blk-mq: count the hctx as active before allocating tag
selinux: cleanup dentry and inodes on error in selinuxfs
drm/amd/display: Read back max backlight value at boot
btrfs: check-integrity: Fix NULL pointer dereference for degraded mount
btrfs: lift uuid_mutex to callers of btrfs_open_devices
btrfs: Fix a C compliance issue
drm/i915: Nuke the LVDS lid notifier
drm/edid: Quirk Vive Pro VR headset non-desktop.
drm/amd/display: fix type of variable
drm/amd/display: Don't share clk source between DP and HDMI
drm/amd/display: update clk for various HDMI color depths
drm/amd/display: Use requested HDMI aspect ratio
drm/rockchip: lvds: add missing of_node_put
drm/amd/display: Pass connector id when executing VBIOS CT
drm/amd/display: Check if clock source in use before disabling
drm/amdgpu: fix incorrect use of fcheck
drm/amdgpu: fix incorrect use of drm_file->pid
drm/i915: set DP Main Stream Attribute for color range on DDI platforms
x86/tsc: Prevent result truncation on 32bit
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1835972/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
