Public bug reported: SRU Justification
Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2019-10-07 Ported from the following upstream stable releases: v4.14.147, v4.19.76 v4.19.77 from git://git.kernel.org/ Revert "Bluetooth: validate BLE connection interval updates" powerpc/xive: Fix bogus error code returned by OPAL IB/core: Add an unbound WQ type to the new CQ API HID: prodikeys: Fix general protection fault during probe HID: sony: Fix memory corruption issue on cleanup. HID: logitech: Fix general protection fault caused by Logitech driver HID: hidraw: Fix invalid read in hidraw_ioctl mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword() crypto: talitos - fix missing break in switch statement iwlwifi: mvm: send BCAST management frames to the right station media: tvp5150: fix switch exit in set control handler ASoC: fsl: Fix of-node refcount unbalance in fsl_ssi_probe_from_dt() arm64: kpti: Whitelist Cortex-A CPUs that don't implement the CSV3 field ALSA: hda - Add laptop imic fixup for ASUS M9V laptop ALSA: hda - Apply AMD controller workaround for Raven platform objtool: Clobber user CFLAGS variable pinctrl: sprd: Use define directive for sprd_pinconf_params values power: supply: sysfs: ratelimit property read error message irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices f2fs: check all the data segments against all node ones PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it blk-mq: move cancel of requeue_work to the front of blk_exit_queue Revert "f2fs: avoid out-of-range memory access" dm zoned: fix invalid memory access f2fs: fix to do sanity check on segment bitmap of LFS curseg drm: Flush output polling on shutdown net: don't warn in inet diag when IPV6 is disabled ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35 xfs: don't crash on null attr fork xfs_bmapi_read Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices f2fs: use generic EFSBADCRC/EFSCORRUPTED arcnet: provide a buffer big enough to actually receive packets cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize macsec: drop skb sk before calling gro_cells_receive net/phy: fix DP83865 10 Mbps HDX loopback disable function net: qrtr: Stop rx_worker before freeing node net/sched: act_sample: don't push mac header on ip6gre ingress net_sched: add max len check for TCA_KIND openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC ppp: Fix memory leak in ppp_write sch_netem: fix a divide by zero in tabledist() skge: fix checksum byte order usbnet: ignore endpoints with invalid wMaxPacketSize usbnet: sanity checking of packet sizes and device mtu net/mlx5: Add device ID of upcoming BlueField-2 mISDN: enforce CAP_NET_RAW for raw sockets appletalk: enforce CAP_NET_RAW for raw sockets ax25: enforce CAP_NET_RAW for raw sockets ieee802154: enforce CAP_NET_RAW for raw sockets nfc: enforce CAP_NET_RAW for raw sockets ALSA: hda: Flush interrupts on disabling regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg ASoC: sgtl5000: Fix charge pump source assignment dmaengine: bcm2835: Print error in case setting DMA mask fails leds: leds-lp5562 allow firmware files up to the maximum length media: dib0700: fix link error for dibx000_i2c_set_speed media: mtk-cir: lower de-glitch counter for rc-mm protocol media: exynos4-is: fix leaked of_node references media: hdpvr: Add device num check and handling media: i2c: ov5640: Check for devm_gpiod_get_optional() error sched/fair: Fix imbalance due to CPU affinity sched/core: Fix CPU controller for !RT_GROUP_SCHED x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI fails x86/apic: Soft disable APIC before initializing it ALSA: hda - Show the fatal CORB/RIRB error more clearly ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() EDAC/mc: Fix grain_bits calculation media: iguanair: add sanity checks base: soc: Export soc_device_register/unregister APIs ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid ia64:unwind: fix double free for mod->arch.init_unw_table EDAC/altera: Use the proper type for the IRQ status bits ASoC: rsnd: don't call clk_get_rate() under atomic context md/raid1: end bio when the device faulty md: don't call spare_active in md_reap_sync_thread if all member devices can't work md: don't set In_sync if array is frozen ACPI / processor: don't print errors for processorIDs == 0xff EDAC, pnd2: Fix ioremap() size in dnv_rd_reg() efi: cper: print AER info of PCIe fatal error sched/fair: Use rq_lock/unlock in online_fair_sched_group media: gspca: zero usb_buf on error perf test vfs_getname: Disable ~/.perfconfig to get default output media: mtk-mdp: fix reference count on old device tree media: fdp1: Reduce FCP not found message level to debug media: rc: imon: Allow iMON RC protocol for ffdc 7e device dmaengine: iop-adma: use correct printk format strings perf record: Support aarch64 random socket_id assignment media: i2c: ov5645: Fix power sequence media: omap3isp: Don't set streaming state on random subdevs media: imx: mipi csi-2: Don't fail if initial state times-out net: lpc-enet: fix printk format strings ARM: dts: imx7d: cl-som-imx7: make ethernet work again media: radio/si470x: kill urb on error media: hdpvr: add terminating 0 at end of string nbd: add missing config put media: dvb-core: fix a memory leak bug libperf: Fix alignment trap with xyarray contents in 'perf stat' EDAC/amd64: Recognize DRAM device type ECC capability EDAC/amd64: Decode syndrome before translating address PM / devfreq: passive: Use non-devm notifiers PM / devfreq: exynos-bus: Correct clock enable sequence media: cec-notifier: clear cec_adap in cec_notifier_unregister media: saa7146: add cleanup in hexium_attach() media: cpia2_usb: fix memory leaks media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() perf trace beauty ioctl: Fix off-by-one error in cmd->string table media: ov9650: add a sanity check ASoC: es8316: fix headphone mixer volume table ACPI / CPPC: do not require the _PSD method arm64: kpti: ensure patched kernel text is fetched from PoU nvmet: fix data units read and written counters in SMART log iommu/amd: Silence warnings under memory pressure iommu/iova: Avoid false sharing on fq_timer_on libtraceevent: Change users plugin directory ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks ACPI: custom_method: fix memory leaks ACPI / PCI: fix acpi_pci_irq_enable() memory leak hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' md/raid1: fail run raid1 array when active disk less than one dmaengine: ti: edma: Do not reset reserved paRAM slots kprobes: Prohibit probing on BUG() and WARN() address s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set raid5: don't set STRIPE_HANDLE to stripe which is in batch list mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD mmc: sdhci: Fix incorrect switch to HS mode raid5: don't increment read_errors on EILSEQ return libertas: Add missing sentinel at end of if_usb.c fw_table ALSA: hda - Drop unsol event handler for Intel HDMI codecs drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 btrfs: extent-tree: Make sure we only allocate extents from block groups with the same type media: omap3isp: Set device on omap3isp subdevs PM / devfreq: passive: fix compiler warning ALSA: firewire-tascam: handle error code when getting current source of clock ALSA: firewire-tascam: check intermediate state of clock status and retry scsi: scsi_dh_rdac: zero cdb in send_mode_select() printk: Do not lose last line in kmsg buffer dump IB/hfi1: Define variables as unsigned long to fix KASAN warning randstruct: Check member structs in is_pure_ops_struct() ALSA: hda/realtek - Fixup mute led on HP Spectre x360 fuse: fix missing unlock_page in fuse_writepage() parisc: Disable HP HSC-PCI Cards to prevent kernel crash x86/retpolines: Fix up backport of a9d57ef15cbe KVM: x86: always stop emulation on page fault KVM: x86: set ctxt->have_exception in x86_decode_insn() KVM: x86: Manually calculate reserved bits when loading PDPTRS media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table binfmt_elf: Do not move brk for INTERP-less ET_EXEC ASoC: Intel: NHLT: Fix debug print format ASoC: Intel: Skylake: Use correct function to access iomem space ASoC: Intel: Fix use of potentially uninitialized variable ARM: samsung: Fix system restart on S3C6410 ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328 alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP regulator: Defer init completion for a while after late_initcall gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps memcg, oom: don't require __GFP_FS when invoking memcg OOM killer memcg, kmem: do not fail __GFP_NOFAIL charges ovl: filter of trusted xattr results in audit Btrfs: fix use-after-free when using the tree modification log btrfs: Relinquish CPUs in btrfs_compare_trees btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space md/raid6: Set R5_ReadError when there is read failure on parity disk md: don't report active array_state until after revalidate_disk() completes. md: only call set_in_sync() when it is expected to succeed. cfg80211: Purge frame registrations on iftype change /dev/mem: Bail out upon SIGKILL. ext4: fix warning inside ext4_convert_unwritten_extents_endio ext4: fix punch hole for inline_data file systems quota: fix wrong condition in is_quota_modification() hwrng: core - don't wait on add_early_randomness() i2c: riic: Clear NACK in tend isr CIFS: fix max ea value size CIFS: Fix oplock handling for SMB 2.1+ protocols md/raid0: avoid RAID0 data corruption due to layout confusion. mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone btrfs: qgroup: Drop quota_root and fs_info parameters from update_qgroup_status_item Btrfs: fix race setting up and completing qgroup rescan workers net/ibmvnic: free reset work of removed device from queue HID: Add quirk for HP X500 PIXART OEM mouse net/mlx5e: Set ECN for received packets using CQE indication net/mlx5e: don't set CHECKSUM_COMPLETE on SCTP packets mlx5: fix get_ip_proto() net/mlx5e: Allow reporting of checksum unnecessary net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded net/mlx5e: Rx, Check ip headers sanity bcache: remove redundant LIST_HEAD(journal) from run_cache_set() initramfs: don't free a non-existent initrd blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs net/ibmvnic: Fix missing { in __ibmvnic_reset net_sched: check cops->tcf_block in tc_bind_tclass() loop: Add LOOP_SET_BLOCK_SIZE in compat ioctl loop: Add LOOP_SET_DIRECT_IO to compat ioctl perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK posix-cpu-timers: Sanitize bogus WARNONS x86/apic/vector: Warn when vector space exhaustion breaks affinity x86/mm/pti: Do not invoke PTI functions when PTI is disabled x86/mm/pti: Handle unaligned address gracefully in pti_clone_pagetable() libata/ahci: Drop PCS quirk for Denverton and beyond x86/cpu: Add Tiger Lake to Intel family platform/x86: intel_pmc_core: Do not ioremap RAM mmc: core: Add helper function to indicate if SDIO IRQs is enabled mmc: dw_mmc: Re-store SDIO IRQs mask at system resume iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36 Revert "ceph: use ceph_evict_inode to cleanup inode's resource" ceph: use ceph_evict_inode to cleanup inode's resource ALSA: hda/realtek - PCI quirk for Medion E4254 smb3: allow disabling requesting leases btrfs: fix allocation of free space cache v1 bitmap pages drm/amd/display: Restore backlight brightness after system resume UBUNTU: upstream stable to v4.14.147, v4.19.77 ** Affects: linux (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux (Ubuntu Bionic) Importance: Undecided Assignee: Kamal Mostafa (kamalmostafa) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Bionic) Importance: Undecided Status: New ** Changed in: linux (Ubuntu Bionic) Status: New => In Progress ** Changed in: linux (Ubuntu Bionic) Assignee: (unassigned) => Kamal Mostafa (kamalmostafa) ** Description changed: - - SRU Justification - - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: - - upstream stable patchset 2019-10-07 - from git://git.kernel.org/ + SRU Justification + + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: + + upstream stable patchset 2019-10-07 + + Ported from the following upstream stable releases: + v4.14.147, v4.19.76 + v4.19.77 + + from git://git.kernel.org/ + + Revert "Bluetooth: validate BLE connection interval updates" + powerpc/xive: Fix bogus error code returned by OPAL + IB/core: Add an unbound WQ type to the new CQ API + HID: prodikeys: Fix general protection fault during probe + HID: sony: Fix memory corruption issue on cleanup. + HID: logitech: Fix general protection fault caused by Logitech driver + HID: hidraw: Fix invalid read in hidraw_ioctl + mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword() + crypto: talitos - fix missing break in switch statement + iwlwifi: mvm: send BCAST management frames to the right station + media: tvp5150: fix switch exit in set control handler + ASoC: fsl: Fix of-node refcount unbalance in fsl_ssi_probe_from_dt() + arm64: kpti: Whitelist Cortex-A CPUs that don't implement the CSV3 field + ALSA: hda - Add laptop imic fixup for ASUS M9V laptop + ALSA: hda - Apply AMD controller workaround for Raven platform + objtool: Clobber user CFLAGS variable + pinctrl: sprd: Use define directive for sprd_pinconf_params values + power: supply: sysfs: ratelimit property read error message + irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices + f2fs: check all the data segments against all node ones + PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it + blk-mq: move cancel of requeue_work to the front of blk_exit_queue + Revert "f2fs: avoid out-of-range memory access" + dm zoned: fix invalid memory access + f2fs: fix to do sanity check on segment bitmap of LFS curseg + drm: Flush output polling on shutdown + net: don't warn in inet diag when IPV6 is disabled + ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35 + xfs: don't crash on null attr fork xfs_bmapi_read + Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices + f2fs: use generic EFSBADCRC/EFSCORRUPTED + arcnet: provide a buffer big enough to actually receive packets + cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize + macsec: drop skb sk before calling gro_cells_receive + net/phy: fix DP83865 10 Mbps HDX loopback disable function + net: qrtr: Stop rx_worker before freeing node + net/sched: act_sample: don't push mac header on ip6gre ingress + net_sched: add max len check for TCA_KIND + openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC + ppp: Fix memory leak in ppp_write + sch_netem: fix a divide by zero in tabledist() + skge: fix checksum byte order + usbnet: ignore endpoints with invalid wMaxPacketSize + usbnet: sanity checking of packet sizes and device mtu + net/mlx5: Add device ID of upcoming BlueField-2 + mISDN: enforce CAP_NET_RAW for raw sockets + appletalk: enforce CAP_NET_RAW for raw sockets + ax25: enforce CAP_NET_RAW for raw sockets + ieee802154: enforce CAP_NET_RAW for raw sockets + nfc: enforce CAP_NET_RAW for raw sockets + ALSA: hda: Flush interrupts on disabling + regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg + ASoC: sgtl5000: Fix charge pump source assignment + dmaengine: bcm2835: Print error in case setting DMA mask fails + leds: leds-lp5562 allow firmware files up to the maximum length + media: dib0700: fix link error for dibx000_i2c_set_speed + media: mtk-cir: lower de-glitch counter for rc-mm protocol + media: exynos4-is: fix leaked of_node references + media: hdpvr: Add device num check and handling + media: i2c: ov5640: Check for devm_gpiod_get_optional() error + sched/fair: Fix imbalance due to CPU affinity + sched/core: Fix CPU controller for !RT_GROUP_SCHED + x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI fails + x86/apic: Soft disable APIC before initializing it + ALSA: hda - Show the fatal CORB/RIRB error more clearly + ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() + EDAC/mc: Fix grain_bits calculation + media: iguanair: add sanity checks + base: soc: Export soc_device_register/unregister APIs + ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid + ia64:unwind: fix double free for mod->arch.init_unw_table + EDAC/altera: Use the proper type for the IRQ status bits + ASoC: rsnd: don't call clk_get_rate() under atomic context + md/raid1: end bio when the device faulty + md: don't call spare_active in md_reap_sync_thread if all member devices can't work + md: don't set In_sync if array is frozen + ACPI / processor: don't print errors for processorIDs == 0xff + EDAC, pnd2: Fix ioremap() size in dnv_rd_reg() + efi: cper: print AER info of PCIe fatal error + sched/fair: Use rq_lock/unlock in online_fair_sched_group + media: gspca: zero usb_buf on error + perf test vfs_getname: Disable ~/.perfconfig to get default output + media: mtk-mdp: fix reference count on old device tree + media: fdp1: Reduce FCP not found message level to debug + media: rc: imon: Allow iMON RC protocol for ffdc 7e device + dmaengine: iop-adma: use correct printk format strings + perf record: Support aarch64 random socket_id assignment + media: i2c: ov5645: Fix power sequence + media: omap3isp: Don't set streaming state on random subdevs + media: imx: mipi csi-2: Don't fail if initial state times-out + net: lpc-enet: fix printk format strings + ARM: dts: imx7d: cl-som-imx7: make ethernet work again + media: radio/si470x: kill urb on error + media: hdpvr: add terminating 0 at end of string + nbd: add missing config put + media: dvb-core: fix a memory leak bug + libperf: Fix alignment trap with xyarray contents in 'perf stat' + EDAC/amd64: Recognize DRAM device type ECC capability + EDAC/amd64: Decode syndrome before translating address + PM / devfreq: passive: Use non-devm notifiers + PM / devfreq: exynos-bus: Correct clock enable sequence + media: cec-notifier: clear cec_adap in cec_notifier_unregister + media: saa7146: add cleanup in hexium_attach() + media: cpia2_usb: fix memory leaks + media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() + perf trace beauty ioctl: Fix off-by-one error in cmd->string table + media: ov9650: add a sanity check + ASoC: es8316: fix headphone mixer volume table + ACPI / CPPC: do not require the _PSD method + arm64: kpti: ensure patched kernel text is fetched from PoU + nvmet: fix data units read and written counters in SMART log + iommu/amd: Silence warnings under memory pressure + iommu/iova: Avoid false sharing on fq_timer_on + libtraceevent: Change users plugin directory + ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks + ACPI: custom_method: fix memory leaks + ACPI / PCI: fix acpi_pci_irq_enable() memory leak + hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' + md/raid1: fail run raid1 array when active disk less than one + dmaengine: ti: edma: Do not reset reserved paRAM slots + kprobes: Prohibit probing on BUG() and WARN() address + s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding + ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set + raid5: don't set STRIPE_HANDLE to stripe which is in batch list + mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD + mmc: sdhci: Fix incorrect switch to HS mode + raid5: don't increment read_errors on EILSEQ return + libertas: Add missing sentinel at end of if_usb.c fw_table + ALSA: hda - Drop unsol event handler for Intel HDMI codecs + drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) + media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() + ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 + btrfs: extent-tree: Make sure we only allocate extents from block groups with the same type + media: omap3isp: Set device on omap3isp subdevs + PM / devfreq: passive: fix compiler warning + ALSA: firewire-tascam: handle error code when getting current source of clock + ALSA: firewire-tascam: check intermediate state of clock status and retry + scsi: scsi_dh_rdac: zero cdb in send_mode_select() + printk: Do not lose last line in kmsg buffer dump + IB/hfi1: Define variables as unsigned long to fix KASAN warning + randstruct: Check member structs in is_pure_ops_struct() + ALSA: hda/realtek - Fixup mute led on HP Spectre x360 + fuse: fix missing unlock_page in fuse_writepage() + parisc: Disable HP HSC-PCI Cards to prevent kernel crash + x86/retpolines: Fix up backport of a9d57ef15cbe + KVM: x86: always stop emulation on page fault + KVM: x86: set ctxt->have_exception in x86_decode_insn() + KVM: x86: Manually calculate reserved bits when loading PDPTRS + media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table + binfmt_elf: Do not move brk for INTERP-less ET_EXEC + ASoC: Intel: NHLT: Fix debug print format + ASoC: Intel: Skylake: Use correct function to access iomem space + ASoC: Intel: Fix use of potentially uninitialized variable + ARM: samsung: Fix system restart on S3C6410 + ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up + arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328 + alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP + regulator: Defer init completion for a while after late_initcall + gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps + memcg, oom: don't require __GFP_FS when invoking memcg OOM killer + memcg, kmem: do not fail __GFP_NOFAIL charges + ovl: filter of trusted xattr results in audit + Btrfs: fix use-after-free when using the tree modification log + btrfs: Relinquish CPUs in btrfs_compare_trees + btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space + md/raid6: Set R5_ReadError when there is read failure on parity disk + md: don't report active array_state until after revalidate_disk() completes. + md: only call set_in_sync() when it is expected to succeed. + cfg80211: Purge frame registrations on iftype change + /dev/mem: Bail out upon SIGKILL. + ext4: fix warning inside ext4_convert_unwritten_extents_endio + ext4: fix punch hole for inline_data file systems + quota: fix wrong condition in is_quota_modification() + hwrng: core - don't wait on add_early_randomness() + i2c: riic: Clear NACK in tend isr + CIFS: fix max ea value size + CIFS: Fix oplock handling for SMB 2.1+ protocols + md/raid0: avoid RAID0 data corruption due to layout confusion. + mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone + btrfs: qgroup: Drop quota_root and fs_info parameters from update_qgroup_status_item + Btrfs: fix race setting up and completing qgroup rescan workers + net/ibmvnic: free reset work of removed device from queue + HID: Add quirk for HP X500 PIXART OEM mouse + net/mlx5e: Set ECN for received packets using CQE indication + net/mlx5e: don't set CHECKSUM_COMPLETE on SCTP packets + mlx5: fix get_ip_proto() + net/mlx5e: Allow reporting of checksum unnecessary + net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded + net/mlx5e: Rx, Check ip headers sanity + bcache: remove redundant LIST_HEAD(journal) from run_cache_set() + initramfs: don't free a non-existent initrd + blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs + net/ibmvnic: Fix missing { in __ibmvnic_reset + net_sched: check cops->tcf_block in tc_bind_tclass() + loop: Add LOOP_SET_BLOCK_SIZE in compat ioctl + loop: Add LOOP_SET_DIRECT_IO to compat ioctl + perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig + ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK + posix-cpu-timers: Sanitize bogus WARNONS + x86/apic/vector: Warn when vector space exhaustion breaks affinity + x86/mm/pti: Do not invoke PTI functions when PTI is disabled + x86/mm/pti: Handle unaligned address gracefully in pti_clone_pagetable() + libata/ahci: Drop PCS quirk for Denverton and beyond + x86/cpu: Add Tiger Lake to Intel family + platform/x86: intel_pmc_core: Do not ioremap RAM + mmc: core: Add helper function to indicate if SDIO IRQs is enabled + mmc: dw_mmc: Re-store SDIO IRQs mask at system resume + iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36 + Revert "ceph: use ceph_evict_inode to cleanup inode's resource" + ceph: use ceph_evict_inode to cleanup inode's resource + ALSA: hda/realtek - PCI quirk for Medion E4254 + smb3: allow disabling requesting leases + btrfs: fix allocation of free space cache v1 bitmap pages + drm/amd/display: Restore backlight brightness after system resume + UBUNTU: upstream stable to v4.14.147, v4.19.77 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1847155 Title: Bionic update: upstream stable patchset 2019-10-07 Status in linux package in Ubuntu: Confirmed Status in linux source package in Bionic: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2019-10-07 Ported from the following upstream stable releases: v4.14.147, v4.19.76 v4.19.77 from git://git.kernel.org/ Revert "Bluetooth: validate BLE connection interval updates" powerpc/xive: Fix bogus error code returned by OPAL IB/core: Add an unbound WQ type to the new CQ API HID: prodikeys: Fix general protection fault during probe HID: sony: Fix memory corruption issue on cleanup. HID: logitech: Fix general protection fault caused by Logitech driver HID: hidraw: Fix invalid read in hidraw_ioctl mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword() crypto: talitos - fix missing break in switch statement iwlwifi: mvm: send BCAST management frames to the right station media: tvp5150: fix switch exit in set control handler ASoC: fsl: Fix of-node refcount unbalance in fsl_ssi_probe_from_dt() arm64: kpti: Whitelist Cortex-A CPUs that don't implement the CSV3 field ALSA: hda - Add laptop imic fixup for ASUS M9V laptop ALSA: hda - Apply AMD controller workaround for Raven platform objtool: Clobber user CFLAGS variable pinctrl: sprd: Use define directive for sprd_pinconf_params values power: supply: sysfs: ratelimit property read error message irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices f2fs: check all the data segments against all node ones PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it blk-mq: move cancel of requeue_work to the front of blk_exit_queue Revert "f2fs: avoid out-of-range memory access" dm zoned: fix invalid memory access f2fs: fix to do sanity check on segment bitmap of LFS curseg drm: Flush output polling on shutdown net: don't warn in inet diag when IPV6 is disabled ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35 xfs: don't crash on null attr fork xfs_bmapi_read Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices f2fs: use generic EFSBADCRC/EFSCORRUPTED arcnet: provide a buffer big enough to actually receive packets cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize macsec: drop skb sk before calling gro_cells_receive net/phy: fix DP83865 10 Mbps HDX loopback disable function net: qrtr: Stop rx_worker before freeing node net/sched: act_sample: don't push mac header on ip6gre ingress net_sched: add max len check for TCA_KIND openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC ppp: Fix memory leak in ppp_write sch_netem: fix a divide by zero in tabledist() skge: fix checksum byte order usbnet: ignore endpoints with invalid wMaxPacketSize usbnet: sanity checking of packet sizes and device mtu net/mlx5: Add device ID of upcoming BlueField-2 mISDN: enforce CAP_NET_RAW for raw sockets appletalk: enforce CAP_NET_RAW for raw sockets ax25: enforce CAP_NET_RAW for raw sockets ieee802154: enforce CAP_NET_RAW for raw sockets nfc: enforce CAP_NET_RAW for raw sockets ALSA: hda: Flush interrupts on disabling regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg ASoC: sgtl5000: Fix charge pump source assignment dmaengine: bcm2835: Print error in case setting DMA mask fails leds: leds-lp5562 allow firmware files up to the maximum length media: dib0700: fix link error for dibx000_i2c_set_speed media: mtk-cir: lower de-glitch counter for rc-mm protocol media: exynos4-is: fix leaked of_node references media: hdpvr: Add device num check and handling media: i2c: ov5640: Check for devm_gpiod_get_optional() error sched/fair: Fix imbalance due to CPU affinity sched/core: Fix CPU controller for !RT_GROUP_SCHED x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI fails x86/apic: Soft disable APIC before initializing it ALSA: hda - Show the fatal CORB/RIRB error more clearly ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() EDAC/mc: Fix grain_bits calculation media: iguanair: add sanity checks base: soc: Export soc_device_register/unregister APIs ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid ia64:unwind: fix double free for mod->arch.init_unw_table EDAC/altera: Use the proper type for the IRQ status bits ASoC: rsnd: don't call clk_get_rate() under atomic context md/raid1: end bio when the device faulty md: don't call spare_active in md_reap_sync_thread if all member devices can't work md: don't set In_sync if array is frozen ACPI / processor: don't print errors for processorIDs == 0xff EDAC, pnd2: Fix ioremap() size in dnv_rd_reg() efi: cper: print AER info of PCIe fatal error sched/fair: Use rq_lock/unlock in online_fair_sched_group media: gspca: zero usb_buf on error perf test vfs_getname: Disable ~/.perfconfig to get default output media: mtk-mdp: fix reference count on old device tree media: fdp1: Reduce FCP not found message level to debug media: rc: imon: Allow iMON RC protocol for ffdc 7e device dmaengine: iop-adma: use correct printk format strings perf record: Support aarch64 random socket_id assignment media: i2c: ov5645: Fix power sequence media: omap3isp: Don't set streaming state on random subdevs media: imx: mipi csi-2: Don't fail if initial state times-out net: lpc-enet: fix printk format strings ARM: dts: imx7d: cl-som-imx7: make ethernet work again media: radio/si470x: kill urb on error media: hdpvr: add terminating 0 at end of string nbd: add missing config put media: dvb-core: fix a memory leak bug libperf: Fix alignment trap with xyarray contents in 'perf stat' EDAC/amd64: Recognize DRAM device type ECC capability EDAC/amd64: Decode syndrome before translating address PM / devfreq: passive: Use non-devm notifiers PM / devfreq: exynos-bus: Correct clock enable sequence media: cec-notifier: clear cec_adap in cec_notifier_unregister media: saa7146: add cleanup in hexium_attach() media: cpia2_usb: fix memory leaks media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() perf trace beauty ioctl: Fix off-by-one error in cmd->string table media: ov9650: add a sanity check ASoC: es8316: fix headphone mixer volume table ACPI / CPPC: do not require the _PSD method arm64: kpti: ensure patched kernel text is fetched from PoU nvmet: fix data units read and written counters in SMART log iommu/amd: Silence warnings under memory pressure iommu/iova: Avoid false sharing on fq_timer_on libtraceevent: Change users plugin directory ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks ACPI: custom_method: fix memory leaks ACPI / PCI: fix acpi_pci_irq_enable() memory leak hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' md/raid1: fail run raid1 array when active disk less than one dmaengine: ti: edma: Do not reset reserved paRAM slots kprobes: Prohibit probing on BUG() and WARN() address s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set raid5: don't set STRIPE_HANDLE to stripe which is in batch list mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD mmc: sdhci: Fix incorrect switch to HS mode raid5: don't increment read_errors on EILSEQ return libertas: Add missing sentinel at end of if_usb.c fw_table ALSA: hda - Drop unsol event handler for Intel HDMI codecs drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 btrfs: extent-tree: Make sure we only allocate extents from block groups with the same type media: omap3isp: Set device on omap3isp subdevs PM / devfreq: passive: fix compiler warning ALSA: firewire-tascam: handle error code when getting current source of clock ALSA: firewire-tascam: check intermediate state of clock status and retry scsi: scsi_dh_rdac: zero cdb in send_mode_select() printk: Do not lose last line in kmsg buffer dump IB/hfi1: Define variables as unsigned long to fix KASAN warning randstruct: Check member structs in is_pure_ops_struct() ALSA: hda/realtek - Fixup mute led on HP Spectre x360 fuse: fix missing unlock_page in fuse_writepage() parisc: Disable HP HSC-PCI Cards to prevent kernel crash x86/retpolines: Fix up backport of a9d57ef15cbe KVM: x86: always stop emulation on page fault KVM: x86: set ctxt->have_exception in x86_decode_insn() KVM: x86: Manually calculate reserved bits when loading PDPTRS media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table binfmt_elf: Do not move brk for INTERP-less ET_EXEC ASoC: Intel: NHLT: Fix debug print format ASoC: Intel: Skylake: Use correct function to access iomem space ASoC: Intel: Fix use of potentially uninitialized variable ARM: samsung: Fix system restart on S3C6410 ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328 alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP regulator: Defer init completion for a while after late_initcall gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps memcg, oom: don't require __GFP_FS when invoking memcg OOM killer memcg, kmem: do not fail __GFP_NOFAIL charges ovl: filter of trusted xattr results in audit Btrfs: fix use-after-free when using the tree modification log btrfs: Relinquish CPUs in btrfs_compare_trees btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space md/raid6: Set R5_ReadError when there is read failure on parity disk md: don't report active array_state until after revalidate_disk() completes. md: only call set_in_sync() when it is expected to succeed. cfg80211: Purge frame registrations on iftype change /dev/mem: Bail out upon SIGKILL. ext4: fix warning inside ext4_convert_unwritten_extents_endio ext4: fix punch hole for inline_data file systems quota: fix wrong condition in is_quota_modification() hwrng: core - don't wait on add_early_randomness() i2c: riic: Clear NACK in tend isr CIFS: fix max ea value size CIFS: Fix oplock handling for SMB 2.1+ protocols md/raid0: avoid RAID0 data corruption due to layout confusion. mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone btrfs: qgroup: Drop quota_root and fs_info parameters from update_qgroup_status_item Btrfs: fix race setting up and completing qgroup rescan workers net/ibmvnic: free reset work of removed device from queue HID: Add quirk for HP X500 PIXART OEM mouse net/mlx5e: Set ECN for received packets using CQE indication net/mlx5e: don't set CHECKSUM_COMPLETE on SCTP packets mlx5: fix get_ip_proto() net/mlx5e: Allow reporting of checksum unnecessary net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded net/mlx5e: Rx, Check ip headers sanity bcache: remove redundant LIST_HEAD(journal) from run_cache_set() initramfs: don't free a non-existent initrd blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs net/ibmvnic: Fix missing { in __ibmvnic_reset net_sched: check cops->tcf_block in tc_bind_tclass() loop: Add LOOP_SET_BLOCK_SIZE in compat ioctl loop: Add LOOP_SET_DIRECT_IO to compat ioctl perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK posix-cpu-timers: Sanitize bogus WARNONS x86/apic/vector: Warn when vector space exhaustion breaks affinity x86/mm/pti: Do not invoke PTI functions when PTI is disabled x86/mm/pti: Handle unaligned address gracefully in pti_clone_pagetable() libata/ahci: Drop PCS quirk for Denverton and beyond x86/cpu: Add Tiger Lake to Intel family platform/x86: intel_pmc_core: Do not ioremap RAM mmc: core: Add helper function to indicate if SDIO IRQs is enabled mmc: dw_mmc: Re-store SDIO IRQs mask at system resume iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36 Revert "ceph: use ceph_evict_inode to cleanup inode's resource" ceph: use ceph_evict_inode to cleanup inode's resource ALSA: hda/realtek - PCI quirk for Medion E4254 smb3: allow disabling requesting leases btrfs: fix allocation of free space cache v1 bitmap pages drm/amd/display: Restore backlight brightness after system resume UBUNTU: upstream stable to v4.14.147, v4.19.77 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1847155/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp