** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2019-08-01 - Ported from the following upstream stable releases: - v4.14.123, v4.19.47, - v4.19.48, - v4.14.124, v4.19.49, - v4.14.125, v4.19.50 + Ported from the following upstream stable releases: + v4.14.123, v4.19.47, + v4.19.48, + v4.14.124, v4.19.49, + v4.14.125, v4.19.50 from git://git.kernel.org/ + + x86: Hide the int3_emulate_call/jmp functions from UML + ext4: do not delete unlinked inode from orphan list on failed truncate + f2fs: Fix use of number of devices + KVM: x86: fix return value for reserved EFER + bio: fix improper use of smp_mb__before_atomic() + sbitmap: fix improper use of smp_mb__before_atomic() + Revert "scsi: sd: Keep disk read-only when re-reading partition" + crypto: vmx - CTR: always increment IV as quadword + mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time problem + mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem + kvm: svm/avic: fix off-by-one in checking host APIC ID + libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead + arm64/iommu: handle non-remapped addresses in ->mmap and ->get_sgtable + gfs2: Fix sign extension bug in gfs2_update_stats + Btrfs: do not abort transaction at btrfs_update_root() after failure to COW path + Btrfs: avoid fallback to transaction commit during fsync of files with holes + Btrfs: fix race between ranged fsync and writeback of adjacent ranges + btrfs: sysfs: Fix error path kobject memory leak + btrfs: sysfs: don't leak memory when failing add fsid + fbdev: fix divide error in fb_var_to_videomode + btrfs: honor path->skip_locking in backref code + fbdev: fix WARNING in __alloc_pages_nodemask bug + media: cpia2: Fix use-after-free in cpia2_exit + media: serial_ir: Fix use-after-free in serial_ir_init_module + media: vivid: use vfree() instead of kfree() for dev->bitmap_cap + ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit + bpf: devmap: fix use-after-free Read in __dev_map_entry_free + batman-adv: mcast: fix multicast tt/tvlv worker locking + at76c50x-usb: Don't register led_trigger if usb_register_driver failed + net: erspan: fix use-after-free + gfs2: Fix lru_count going negative + cxgb4: Fix error path in cxgb4_init_module + NFS: make nfs_match_client killable + IB/hfi1: Fix WQ_MEM_RECLAIM warning + gfs2: Fix occasional glock use-after-free + mmc: core: Verify SD bus width + tools/bpf: fix perf build error with uClibc (seen on ARC) + dmaengine: tegra210-dma: free dma controller in remove() + net: ena: gcc 8: fix compilation warning + pinctrl: zte: fix leaked of_node references + ASoC: hdmi-codec: unlock the device on startup errors + powerpc/perf: Return accordingly on invalid chip-id in + powerpc/boot: Fix missing check of lseek() return value + ASoC: imx: fix fiq dependencies + spi: pxa2xx: fix SCR (divisor) calculation + brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() + ACPI / property: fix handling of data_nodes in acpi_get_next_subnode() + ARM: vdso: Remove dependency with the arch_timer driver internals + arm64: Fix compiler warning from pte_unmap() with -Wunused-but-set-variable + sched/cpufreq: Fix kobject memleak + scsi: qla2xxx: Fix a qla24xx_enable_msix() error path + scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() + scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() + Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve + btrfs: fix panic during relocation after ENOSPC before writeback happens + btrfs: Don't panic when we can't find a root key + iwlwifi: pcie: don't crash on invalid RX interrupt + rtc: 88pm860x: prevent use-after-free on device remove + scsi: qedi: Abort ep termination if offload not scheduled + w1: fix the resume command API + dmaengine: pl330: _stop: clear interrupt status + mac80211/cfg80211: update bss channel on channel switch + libbpf: fix samples/bpf build failure due to undefined UINT32_MAX + ASoC: fsl_sai: Update is_slave_mode with correct value + mwifiex: prevent an array overflow + net: cw1200: fix a NULL pointer dereference + crypto: sun4i-ss - Fix invalid calculation of hash end + bcache: return error immediately in bch_journal_replay() + bcache: fix failure in journal relplay + bcache: add failure check to run_cache_set() for journal replay + bcache: avoid clang -Wunintialized warning + vfio-ccw: Do not call flush_workqueue while holding the spinlock + vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev + smpboot: Place the __percpu annotation correctly + x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() + mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions + HID: logitech-hidpp: use RAP instead of FAP to get the protocol version + pinctrl: pistachio: fix leaked of_node references + pinctrl: samsung: fix leaked of_node references + clk: rockchip: undo several noc and special clocks as critical on rk3288 + dmaengine: at_xdmac: remove BUG_ON macro in tasklet + media: coda: clear error return value before picture run + media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper + media: au0828: stop video streaming only when last user stops + media: ov2659: make S_FMT succeed even if requested format doesn't match + audit: fix a memory leak bug + media: stm32-dcmi: fix crash when subdev do not expose any formats + media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() + media: pvrusb2: Prevent a buffer overflow + powerpc/64: Fix booting large kernels with STRICT_KERNEL_RWX + random: add a spinlock_t to struct batched_entropy + cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock + sched/core: Check quota and period overflow at usec to nsec conversion + sched/rt: Check integer overflow at usec to nsec conversion + sched/core: Handle overflow in cpu_shares_write_u64 + drm/msm: a5xx: fix possible object reference leak + USB: core: Don't unbind interfaces following device reset failure + x86/irq/64: Limit IST stack overflow check to #DB stack + phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode + i40e: Able to add up to 16 MAC filters on an untrusted VF + i40e: don't allow changes to HW VLAN stripping on active port VLANs + arm64: vdso: Fix clock_getres() for CLOCK_REALTIME + RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure + hwmon: (vt1211) Use request_muxed_region for Super-IO accesses + hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses + hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses + hwmon: (pc87427) Use request_muxed_region for Super-IO accesses + hwmon: (f71805f) Use request_muxed_region for Super-IO accesses + scsi: libsas: Do discovery on empty PHY to update PHY info + mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers + mmc_spi: add a status check for spi_sync_locked + mmc: sdhci-of-esdhc: add erratum eSDHC5 support + mmc: sdhci-of-esdhc: add erratum A-009204 support + mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support + drm/amdgpu: fix old fence check in amdgpu_fence_emit + PM / core: Propagate dev->power.wakeup_path when no callbacks + clk: rockchip: Fix video codec clocks on rk3288 + extcon: arizona: Disable mic detect if running when driver is removed + clk: rockchip: Make rkpwm a critical clock on rk3288 + s390: zcrypt: initialize variables before_use + x86/microcode: Fix the ancient deprecated microcode loading method + s390: cio: fix cio_irb declaration + cpufreq: ppc_cbe: fix possible object reference leak + cpufreq/pasemi: fix possible object reference leak + cpufreq: pmac32: fix possible object reference leak + cpufreq: kirkwood: fix possible object reference leak + block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR + x86/build: Keep local relocations with ld.lld + iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion + iio: hmc5843: fix potential NULL pointer dereferences + iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data + rtlwifi: fix a potential NULL pointer dereference + mwifiex: Fix mem leak in mwifiex_tm_cmd + brcmfmac: fix missing checks for kmemdup + b43: shut up clang -Wuninitialized variable warning + brcmfmac: convert dev_init_lock mutex to completion + brcmfmac: fix WARNING during USB disconnect in case of unempty psq + brcmfmac: fix race during disconnect when USB completion is in progress + brcmfmac: fix Oops when bringing up interface during USB disconnect + rtc: xgene: fix possible race condition + rtlwifi: fix potential NULL pointer dereference + scsi: ufs: Fix regulator load and icc-level configuration + scsi: ufs: Avoid configuring regulator with undefined voltage range + arm64: cpu_ops: fix a leaked reference by adding missing of_node_put + x86/uaccess, signal: Fix AC=1 bloat + x86/ia32: Fix ia32_restore_sigcontext() AC leak + chardev: add additional check for minor range overlap + RDMA/hns: Fix bad endianess of port_pd variable + HID: core: move Usage Page concatenation to Main item + ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put + ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put + cxgb3/l2t: Fix undefined behaviour + HID: logitech-hidpp: change low battery level threshold from 31 to 30 percent + spi: tegra114: reset controller on probe + kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice. + media: video-mux: fix null pointer dereferences + media: wl128x: prevent two potential buffer overflows + scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check + virtio_console: initialize vtermno value for ports + tty: ipwireless: fix missing checks for ioremap + x86/mce: Fix machine_check_poll() tests for error types + rcutorture: Fix cleanup path for invalid torture_type strings + rcuperf: Fix cleanup path for invalid perf_type strings + usb: core: Add PM runtime calls to usb_hcd_platform_shutdown + scsi: qla4xxx: avoid freeing unallocated dma memory + batman-adv: allow updating DAT entry timeouts on incoming ARP Replies + dmaengine: tegra210-adma: use devm_clk_*() helpers + hwrng: omap - Set default quality + thunderbolt: Fix to check for kmemdup failure + media: m88ds3103: serialize reset messages in m88ds3103_set_frontend + media: vimc: stream: fix thread state before sleep + media: go7007: avoid clang frame overflow warning with KASAN + media: vimc: zero the media_device on probe + scsi: lpfc: Fix FDMI manufacturer attribute value + scsi: lpfc: Fix fc4type information for FDMI + media: saa7146: avoid high stack usage with clang + scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices + spi : spi-topcliff-pch: Fix to handle empty DMA buffers + spi: rspi: Fix sequencer reset during initialization + spi: Fix zero length xfer bug + ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM + drm/drv: Hold ref on parent device during drm_device lifetime + drm: Wake up next in drm_read() chain if we are forced to putback the event + vfio-ccw: Prevent quiesce function going into an infinite loop + NFS: Fix a double unlock from nfs_match,get_client + ext4: wait for outstanding dio during truncate in nojournal mode + NFSv4.1 fix incorrect return value in copy_file_range + media: vb2: add waiting_in_dqbuf flag + acct_on(): don't mess with freeze protection + hv_netvsc: fix race that may miss tx queue wakeup + Bluetooth: Ignore CC events not matching the last HCI command + powerpc/perf: Fix loop exit condition in nest_imc_event_init + drm/nouveau/bar/nv50: ensure BAR is mapped + media: stm32-dcmi: return appropriate error codes during probe + powerpc/watchdog: Use hrtimers for per-CPU heartbeat + scsi: qla2xxx: Fix hardirq-unsafe locking + x86/modules: Avoid breaking W^X while loading modules + sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs + s390: qeth: address type mismatch warning + rsi: Fix NULL pointer dereference in kmalloc + nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE + bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set + RDMA/cma: Consider scope_id while binding to ipv6 ll address + block: fix use-after-free on gendisk + staging: vc04_services: handle kzalloc failure + irq_work: Do not raise an IPI when queueing work on the local CPU + thunderbolt: Take domain lock in switch sysfs attribute callbacks + drm: etnaviv: avoid DMA API warning when importing buffers + ACPI/IORT: Reject platform device creation on NUMA node mapping failure + perf/x86/msr: Add Icelake support + perf/x86/intel/rapl: Add Icelake support + perf/x86/intel/cstate: Add Icelake support + drm/panel: otm8009a: Add delay at the end of initialization + thunderbolt: property: Fix a missing check of kzalloc + thunderbolt: Fix to check the return value of kmemdup + x86/mce: Handle varying MCA bank counts + scsi: lpfc: avoid uninitialized variable warning + thunderbolt: Fix to check return value of ida_simple_get + drm/amd/display: fix releasing planes when exiting odm + thunderbolt: property: Fix a NULL pointer dereference + e1000e: Disable runtime PM on CNP+ + igb: Exclude device from suspend direct complete optimization + media: si2165: fix a missing check of return value + drm/amd/display: Fix Divide by 0 in memory calculations + spi: imx: stop buffer overflow in RX FIFO flush + bonding/802.3ad: fix slave link initialization transition states + cxgb4: offload VLAN flows regardless of VLAN ethtype + inet: switch IP ID generator to siphash + ipv4/igmp: fix another memory leak in igmpv3_del_delrec() + ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST + ipv6: Consider sk_bound_dev_if when binding a raw socket to an address + llc: fix skb leak in llc_build_and_send_ui_pkt() + net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT + net: fec: fix the clk mismatch in failed_reset path + net-gro: fix use-after-free read in napi_gro_frags() + net: mvneta: Fix err code path of probe + net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value + net: phy: marvell10g: report if the PHY fails to boot firmware + net: stmmac: fix reset gpio free missing + usbnet: fix kernel crash after disconnect + tipc: Avoid copying bytes beyond the supplied data + net/mlx5: Allocate root ns memory using kzalloc to match kfree + bnxt_en: Fix aggregation buffer leak under OOM condition. + crypto: vmx - ghash: do nosimd fallback manually + include/linux/compiler*.h: define asm_volatile_goto + compiler.h: give up __compiletime_assert_fallback() + xen/pciback: Don't disable PCI_COMMAND on PCI device reset. + tipc: fix modprobe tipc failed after switch order of device registration + sparc64: Fix regression in non-hypervisor TLB flush xcall + include/linux/bitops.h: sanitize rotate primitives + xhci: update bounce buffer with correct sg num + xhci: Use %zu for printing size_t type + xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() + usb: xhci: avoid null pointer deref when bos field is NULL + usbip: usbip_host: fix BUG: sleeping function called from invalid context + usbip: usbip_host: fix stub_dev lock context imbalance regression + USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor + USB: sisusbvga: fix oops in error path of sisusb_probe + USB: Add LPM quirk for Surface Dock GigE adapter + USB: rio500: refuse more than one device at a time + USB: rio500: fix memory leak in close after disconnect + media: usb: siano: Fix general protection fault in smsusb + media: usb: siano: Fix false-positive "uninitialized variable" warning + media: smsusb: better handle optional alignment + scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove + scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) + Btrfs: fix wrong ctime and mtime of a directory after log replay + Btrfs: fix race updating log root item during fsync + Btrfs: fix fsync not persisting changed attributes of a directory + Btrfs: incremental send, fix file corruption when no-holes feature is enabled + KVM: PPC: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts + powerpc/perf: Fix MMCRA corruption by bhrb_filter + ALSA: hda/realtek - Set default power save node to 0 + KVM: s390: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID + drm/nouveau/i2c: Disable i2c bus access after ->fini() + tty: serial: msm_serial: Fix XON/XOFF + tty: max310x: Fix external crystal register setup + memcg: make it work on sparse non-0-node systems + kernel/signal.c: trace_signal_deliver when signal_group_exit + docs: Fix conf.py for Sphinx 2.0 + doc: Cope with the deprecation of AutoReporter + doc: Cope with Sphinx logging deprecations + ima: show rules with IMA_INMASK correctly + serial: sh-sci: disable DMA for uart_console + staging: vc04_services: prevent integer overflow in create_pagelist() + staging: wlan-ng: fix adapter initialization failure + CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM + gcc-plugins: Fix build failures under Darwin host + drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set + drm/rockchip: shutdown drm subsystem on shutdown + Compiler Attributes: add support for __copy (gcc >= 9) + include/linux/module.h: copy __init/__exit attrs to init/cleanup_module + binder: fix race between munmap() and direct reclaim + media: uvcvideo: Fix uvc_alloc_entity() allocation alignment + brcmfmac: fix NULL pointer derefence during USB disconnect + iio: dac: ds4422/ds4424 fix chip verification + s390/crypto: fix possible sleep during spinlock aquired + ALSA: line6: Assure canceling delayed work at disconnection + vt/fbcon: deinitialize resources in visual_init() after failed memory allocation + cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case + x86/ftrace: Do not call function graph from dynamic trampolines + x86/ftrace: Set trampoline pages as executable + x86/kprobes: Set instruction page as executable + of: overlay: validate overlay properties #address-cells and #size-cells + of: overlay: set node fields from properties when add new overlay node + ethtool: fix potential userspace buffer overflow + Fix memory leak in sctp_process_init + neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit + net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query + net: rds: fix memory leak in rds_ib_flush_mr_pool + pktgen: do not sleep with the thread lock held. + ipv6: fix EFAULT on sendto with icmpv6 and hdrincl + ipv6: use READ_ONCE() for inet->hdrincl as in ipv4 + net: sfp: read eeprom in maximum 16 byte increments + ipv6: fix the check before getting the cookie in rt6_get_cookie + rcu: locking and unlocking need to always be at least barriers + parisc: Use implicit space register selection for loading the coherence index of I/O pdirs + fuse: fallocate: fix return with locked inode + pstore: Remove needless lock during console writes + pstore: Convert buf_lock to semaphore + pstore/ram: Run without kernel crash dump region + x86/power: Fix 'nosmt' vs hibernation triple fault during resume + i2c: xiic: Add max_read_len quirk + MIPS: Bounds check virt_addr_valid + MIPS: pistachio: Build uImage.gz by default + genwqe: Prevent an integer overflow in the ioctl + test_firmware: Use correct snprintf() limit + drm/gma500/cdv: Check vbt config bits when detecting lvds panels + drm/amdgpu/psp: move psp version specific function pointers to early_init + drm/i915: Fix I915_EXEC_RING_MASK + drm/i915/fbc: disable framebuffer compression on GeminiLake + TTY: serial_core, add ->install + qmi_wwan: Add quirk for Quectel dynamic config + ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled + ethtool: check the return value of get_regs_len + net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set + net: mvpp2: Use strscpy to handle stat strings + packet: unconditionally free po->rollover + NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter + NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled + s390/mm: fix address space detection in exception handling + drm/msm: fix fb references in async update + drm: add non-desktop quirk for Valve HMDs + drm: add non-desktop quirks to Sensics and OSVR headsets. + drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in + UBUNTU: upstream stable to v4.14.125, v4.19.50
-- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1838700 Title: Bionic update: upstream stable patchset 2019-08-01 Status in linux package in Ubuntu: Confirmed Status in linux source package in Bionic: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2019-08-01 Ported from the following upstream stable releases: v4.14.123, v4.19.47, v4.19.48, v4.14.124, v4.19.49, v4.14.125, v4.19.50 from git://git.kernel.org/ x86: Hide the int3_emulate_call/jmp functions from UML ext4: do not delete unlinked inode from orphan list on failed truncate f2fs: Fix use of number of devices KVM: x86: fix return value for reserved EFER bio: fix improper use of smp_mb__before_atomic() sbitmap: fix improper use of smp_mb__before_atomic() Revert "scsi: sd: Keep disk read-only when re-reading partition" crypto: vmx - CTR: always increment IV as quadword mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time problem mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem kvm: svm/avic: fix off-by-one in checking host APIC ID libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead arm64/iommu: handle non-remapped addresses in ->mmap and ->get_sgtable gfs2: Fix sign extension bug in gfs2_update_stats Btrfs: do not abort transaction at btrfs_update_root() after failure to COW path Btrfs: avoid fallback to transaction commit during fsync of files with holes Btrfs: fix race between ranged fsync and writeback of adjacent ranges btrfs: sysfs: Fix error path kobject memory leak btrfs: sysfs: don't leak memory when failing add fsid fbdev: fix divide error in fb_var_to_videomode btrfs: honor path->skip_locking in backref code fbdev: fix WARNING in __alloc_pages_nodemask bug media: cpia2: Fix use-after-free in cpia2_exit media: serial_ir: Fix use-after-free in serial_ir_init_module media: vivid: use vfree() instead of kfree() for dev->bitmap_cap ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit bpf: devmap: fix use-after-free Read in __dev_map_entry_free batman-adv: mcast: fix multicast tt/tvlv worker locking at76c50x-usb: Don't register led_trigger if usb_register_driver failed net: erspan: fix use-after-free gfs2: Fix lru_count going negative cxgb4: Fix error path in cxgb4_init_module NFS: make nfs_match_client killable IB/hfi1: Fix WQ_MEM_RECLAIM warning gfs2: Fix occasional glock use-after-free mmc: core: Verify SD bus width tools/bpf: fix perf build error with uClibc (seen on ARC) dmaengine: tegra210-dma: free dma controller in remove() net: ena: gcc 8: fix compilation warning pinctrl: zte: fix leaked of_node references ASoC: hdmi-codec: unlock the device on startup errors powerpc/perf: Return accordingly on invalid chip-id in powerpc/boot: Fix missing check of lseek() return value ASoC: imx: fix fiq dependencies spi: pxa2xx: fix SCR (divisor) calculation brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() ACPI / property: fix handling of data_nodes in acpi_get_next_subnode() ARM: vdso: Remove dependency with the arch_timer driver internals arm64: Fix compiler warning from pte_unmap() with -Wunused-but-set-variable sched/cpufreq: Fix kobject memleak scsi: qla2xxx: Fix a qla24xx_enable_msix() error path scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve btrfs: fix panic during relocation after ENOSPC before writeback happens btrfs: Don't panic when we can't find a root key iwlwifi: pcie: don't crash on invalid RX interrupt rtc: 88pm860x: prevent use-after-free on device remove scsi: qedi: Abort ep termination if offload not scheduled w1: fix the resume command API dmaengine: pl330: _stop: clear interrupt status mac80211/cfg80211: update bss channel on channel switch libbpf: fix samples/bpf build failure due to undefined UINT32_MAX ASoC: fsl_sai: Update is_slave_mode with correct value mwifiex: prevent an array overflow net: cw1200: fix a NULL pointer dereference crypto: sun4i-ss - Fix invalid calculation of hash end bcache: return error immediately in bch_journal_replay() bcache: fix failure in journal relplay bcache: add failure check to run_cache_set() for journal replay bcache: avoid clang -Wunintialized warning vfio-ccw: Do not call flush_workqueue while holding the spinlock vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev smpboot: Place the __percpu annotation correctly x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions HID: logitech-hidpp: use RAP instead of FAP to get the protocol version pinctrl: pistachio: fix leaked of_node references pinctrl: samsung: fix leaked of_node references clk: rockchip: undo several noc and special clocks as critical on rk3288 dmaengine: at_xdmac: remove BUG_ON macro in tasklet media: coda: clear error return value before picture run media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper media: au0828: stop video streaming only when last user stops media: ov2659: make S_FMT succeed even if requested format doesn't match audit: fix a memory leak bug media: stm32-dcmi: fix crash when subdev do not expose any formats media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() media: pvrusb2: Prevent a buffer overflow powerpc/64: Fix booting large kernels with STRICT_KERNEL_RWX random: add a spinlock_t to struct batched_entropy cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock sched/core: Check quota and period overflow at usec to nsec conversion sched/rt: Check integer overflow at usec to nsec conversion sched/core: Handle overflow in cpu_shares_write_u64 drm/msm: a5xx: fix possible object reference leak USB: core: Don't unbind interfaces following device reset failure x86/irq/64: Limit IST stack overflow check to #DB stack phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode i40e: Able to add up to 16 MAC filters on an untrusted VF i40e: don't allow changes to HW VLAN stripping on active port VLANs arm64: vdso: Fix clock_getres() for CLOCK_REALTIME RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure hwmon: (vt1211) Use request_muxed_region for Super-IO accesses hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses hwmon: (pc87427) Use request_muxed_region for Super-IO accesses hwmon: (f71805f) Use request_muxed_region for Super-IO accesses scsi: libsas: Do discovery on empty PHY to update PHY info mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers mmc_spi: add a status check for spi_sync_locked mmc: sdhci-of-esdhc: add erratum eSDHC5 support mmc: sdhci-of-esdhc: add erratum A-009204 support mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support drm/amdgpu: fix old fence check in amdgpu_fence_emit PM / core: Propagate dev->power.wakeup_path when no callbacks clk: rockchip: Fix video codec clocks on rk3288 extcon: arizona: Disable mic detect if running when driver is removed clk: rockchip: Make rkpwm a critical clock on rk3288 s390: zcrypt: initialize variables before_use x86/microcode: Fix the ancient deprecated microcode loading method s390: cio: fix cio_irb declaration cpufreq: ppc_cbe: fix possible object reference leak cpufreq/pasemi: fix possible object reference leak cpufreq: pmac32: fix possible object reference leak cpufreq: kirkwood: fix possible object reference leak block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR x86/build: Keep local relocations with ld.lld iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion iio: hmc5843: fix potential NULL pointer dereferences iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data rtlwifi: fix a potential NULL pointer dereference mwifiex: Fix mem leak in mwifiex_tm_cmd brcmfmac: fix missing checks for kmemdup b43: shut up clang -Wuninitialized variable warning brcmfmac: convert dev_init_lock mutex to completion brcmfmac: fix WARNING during USB disconnect in case of unempty psq brcmfmac: fix race during disconnect when USB completion is in progress brcmfmac: fix Oops when bringing up interface during USB disconnect rtc: xgene: fix possible race condition rtlwifi: fix potential NULL pointer dereference scsi: ufs: Fix regulator load and icc-level configuration scsi: ufs: Avoid configuring regulator with undefined voltage range arm64: cpu_ops: fix a leaked reference by adding missing of_node_put x86/uaccess, signal: Fix AC=1 bloat x86/ia32: Fix ia32_restore_sigcontext() AC leak chardev: add additional check for minor range overlap RDMA/hns: Fix bad endianess of port_pd variable HID: core: move Usage Page concatenation to Main item ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put cxgb3/l2t: Fix undefined behaviour HID: logitech-hidpp: change low battery level threshold from 31 to 30 percent spi: tegra114: reset controller on probe kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice. media: video-mux: fix null pointer dereferences media: wl128x: prevent two potential buffer overflows scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check virtio_console: initialize vtermno value for ports tty: ipwireless: fix missing checks for ioremap x86/mce: Fix machine_check_poll() tests for error types rcutorture: Fix cleanup path for invalid torture_type strings rcuperf: Fix cleanup path for invalid perf_type strings usb: core: Add PM runtime calls to usb_hcd_platform_shutdown scsi: qla4xxx: avoid freeing unallocated dma memory batman-adv: allow updating DAT entry timeouts on incoming ARP Replies dmaengine: tegra210-adma: use devm_clk_*() helpers hwrng: omap - Set default quality thunderbolt: Fix to check for kmemdup failure media: m88ds3103: serialize reset messages in m88ds3103_set_frontend media: vimc: stream: fix thread state before sleep media: go7007: avoid clang frame overflow warning with KASAN media: vimc: zero the media_device on probe scsi: lpfc: Fix FDMI manufacturer attribute value scsi: lpfc: Fix fc4type information for FDMI media: saa7146: avoid high stack usage with clang scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices spi : spi-topcliff-pch: Fix to handle empty DMA buffers spi: rspi: Fix sequencer reset during initialization spi: Fix zero length xfer bug ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM drm/drv: Hold ref on parent device during drm_device lifetime drm: Wake up next in drm_read() chain if we are forced to putback the event vfio-ccw: Prevent quiesce function going into an infinite loop NFS: Fix a double unlock from nfs_match,get_client ext4: wait for outstanding dio during truncate in nojournal mode NFSv4.1 fix incorrect return value in copy_file_range media: vb2: add waiting_in_dqbuf flag acct_on(): don't mess with freeze protection hv_netvsc: fix race that may miss tx queue wakeup Bluetooth: Ignore CC events not matching the last HCI command powerpc/perf: Fix loop exit condition in nest_imc_event_init drm/nouveau/bar/nv50: ensure BAR is mapped media: stm32-dcmi: return appropriate error codes during probe powerpc/watchdog: Use hrtimers for per-CPU heartbeat scsi: qla2xxx: Fix hardirq-unsafe locking x86/modules: Avoid breaking W^X while loading modules sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs s390: qeth: address type mismatch warning rsi: Fix NULL pointer dereference in kmalloc nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set RDMA/cma: Consider scope_id while binding to ipv6 ll address block: fix use-after-free on gendisk staging: vc04_services: handle kzalloc failure irq_work: Do not raise an IPI when queueing work on the local CPU thunderbolt: Take domain lock in switch sysfs attribute callbacks drm: etnaviv: avoid DMA API warning when importing buffers ACPI/IORT: Reject platform device creation on NUMA node mapping failure perf/x86/msr: Add Icelake support perf/x86/intel/rapl: Add Icelake support perf/x86/intel/cstate: Add Icelake support drm/panel: otm8009a: Add delay at the end of initialization thunderbolt: property: Fix a missing check of kzalloc thunderbolt: Fix to check the return value of kmemdup x86/mce: Handle varying MCA bank counts scsi: lpfc: avoid uninitialized variable warning thunderbolt: Fix to check return value of ida_simple_get drm/amd/display: fix releasing planes when exiting odm thunderbolt: property: Fix a NULL pointer dereference e1000e: Disable runtime PM on CNP+ igb: Exclude device from suspend direct complete optimization media: si2165: fix a missing check of return value drm/amd/display: Fix Divide by 0 in memory calculations spi: imx: stop buffer overflow in RX FIFO flush bonding/802.3ad: fix slave link initialization transition states cxgb4: offload VLAN flows regardless of VLAN ethtype inet: switch IP ID generator to siphash ipv4/igmp: fix another memory leak in igmpv3_del_delrec() ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST ipv6: Consider sk_bound_dev_if when binding a raw socket to an address llc: fix skb leak in llc_build_and_send_ui_pkt() net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT net: fec: fix the clk mismatch in failed_reset path net-gro: fix use-after-free read in napi_gro_frags() net: mvneta: Fix err code path of probe net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value net: phy: marvell10g: report if the PHY fails to boot firmware net: stmmac: fix reset gpio free missing usbnet: fix kernel crash after disconnect tipc: Avoid copying bytes beyond the supplied data net/mlx5: Allocate root ns memory using kzalloc to match kfree bnxt_en: Fix aggregation buffer leak under OOM condition. crypto: vmx - ghash: do nosimd fallback manually include/linux/compiler*.h: define asm_volatile_goto compiler.h: give up __compiletime_assert_fallback() xen/pciback: Don't disable PCI_COMMAND on PCI device reset. tipc: fix modprobe tipc failed after switch order of device registration sparc64: Fix regression in non-hypervisor TLB flush xcall include/linux/bitops.h: sanitize rotate primitives xhci: update bounce buffer with correct sg num xhci: Use %zu for printing size_t type xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() usb: xhci: avoid null pointer deref when bos field is NULL usbip: usbip_host: fix BUG: sleeping function called from invalid context usbip: usbip_host: fix stub_dev lock context imbalance regression USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor USB: sisusbvga: fix oops in error path of sisusb_probe USB: Add LPM quirk for Surface Dock GigE adapter USB: rio500: refuse more than one device at a time USB: rio500: fix memory leak in close after disconnect media: usb: siano: Fix general protection fault in smsusb media: usb: siano: Fix false-positive "uninitialized variable" warning media: smsusb: better handle optional alignment scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) Btrfs: fix wrong ctime and mtime of a directory after log replay Btrfs: fix race updating log root item during fsync Btrfs: fix fsync not persisting changed attributes of a directory Btrfs: incremental send, fix file corruption when no-holes feature is enabled KVM: PPC: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts powerpc/perf: Fix MMCRA corruption by bhrb_filter ALSA: hda/realtek - Set default power save node to 0 KVM: s390: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID drm/nouveau/i2c: Disable i2c bus access after ->fini() tty: serial: msm_serial: Fix XON/XOFF tty: max310x: Fix external crystal register setup memcg: make it work on sparse non-0-node systems kernel/signal.c: trace_signal_deliver when signal_group_exit docs: Fix conf.py for Sphinx 2.0 doc: Cope with the deprecation of AutoReporter doc: Cope with Sphinx logging deprecations ima: show rules with IMA_INMASK correctly serial: sh-sci: disable DMA for uart_console staging: vc04_services: prevent integer overflow in create_pagelist() staging: wlan-ng: fix adapter initialization failure CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM gcc-plugins: Fix build failures under Darwin host drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set drm/rockchip: shutdown drm subsystem on shutdown Compiler Attributes: add support for __copy (gcc >= 9) include/linux/module.h: copy __init/__exit attrs to init/cleanup_module binder: fix race between munmap() and direct reclaim media: uvcvideo: Fix uvc_alloc_entity() allocation alignment brcmfmac: fix NULL pointer derefence during USB disconnect iio: dac: ds4422/ds4424 fix chip verification s390/crypto: fix possible sleep during spinlock aquired ALSA: line6: Assure canceling delayed work at disconnection vt/fbcon: deinitialize resources in visual_init() after failed memory allocation cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case x86/ftrace: Do not call function graph from dynamic trampolines x86/ftrace: Set trampoline pages as executable x86/kprobes: Set instruction page as executable of: overlay: validate overlay properties #address-cells and #size-cells of: overlay: set node fields from properties when add new overlay node ethtool: fix potential userspace buffer overflow Fix memory leak in sctp_process_init neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query net: rds: fix memory leak in rds_ib_flush_mr_pool pktgen: do not sleep with the thread lock held. ipv6: fix EFAULT on sendto with icmpv6 and hdrincl ipv6: use READ_ONCE() for inet->hdrincl as in ipv4 net: sfp: read eeprom in maximum 16 byte increments ipv6: fix the check before getting the cookie in rt6_get_cookie rcu: locking and unlocking need to always be at least barriers parisc: Use implicit space register selection for loading the coherence index of I/O pdirs fuse: fallocate: fix return with locked inode pstore: Remove needless lock during console writes pstore: Convert buf_lock to semaphore pstore/ram: Run without kernel crash dump region x86/power: Fix 'nosmt' vs hibernation triple fault during resume i2c: xiic: Add max_read_len quirk MIPS: Bounds check virt_addr_valid MIPS: pistachio: Build uImage.gz by default genwqe: Prevent an integer overflow in the ioctl test_firmware: Use correct snprintf() limit drm/gma500/cdv: Check vbt config bits when detecting lvds panels drm/amdgpu/psp: move psp version specific function pointers to early_init drm/i915: Fix I915_EXEC_RING_MASK drm/i915/fbc: disable framebuffer compression on GeminiLake TTY: serial_core, add ->install qmi_wwan: Add quirk for Quectel dynamic config ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled ethtool: check the return value of get_regs_len net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set net: mvpp2: Use strscpy to handle stat strings packet: unconditionally free po->rollover NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled s390/mm: fix address space detection in exception handling drm/msm: fix fb references in async update drm: add non-desktop quirk for Valve HMDs drm: add non-desktop quirks to Sensics and OSVR headsets. drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in UBUNTU: upstream stable to v4.14.125, v4.19.50 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1838700/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp