This bug was fixed in the package linux-oem-osp1 - 5.0.0-1063.68
---------------
linux-oem-osp1 (5.0.0-1063.68) bionic; urgency=medium
* bionic/linux-oem-osp1: 5.0.0-1060.65 -proposed tracker (LP:
#1882719)
* bionic/linux-oem-osp1: 5.0.0-1063.68 -proposed tracker (LP:
#1884983)
* kernel NULL pointer dereference when plugging/unpluggin USB-c (power or hub)
(LP: #1878544)
- usb: typec: altmode: Fix typec_altmode_get_partner sometimes returning an
invalid pointer
* audio card disappeared after suspend device during audio playback Edit
(LP: #1882035)
- ASoC: SOF: topology: set trigger order for FE DAI link
* tpm: fix TIS locality timeout problems (LP: #1881710)
- SAUCE: tpm: fix TIS locality timeout problems
* Performing function level reset of AMD onboard USB and audio devices causes
system lockup (LP: #1865988)
- SAUCE: PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0
- SAUCE: PCI: Avoid FLR for AMD Starship USB 3.0
* Realtek 8723DE [10ec:d723] subsystem [10ec:d738] disconnects unsolicitedly
when Bluetooth is paired: Reason: 23=IEEE8021X_FAILED (LP: #1878147)
- SAUCE: Revert "UBUNTU: SAUCE: rtw88: Move driver IQK to set channel before
association for 11N chip"
- SAUCE: Revert "UBUNTU: SAUCE: rtw88: fix rate for a while after being
connected"
- SAUCE: Revert "UBUNTU: SAUCE: rtw88: No retry and report for auth and
assoc"
- SAUCE: Revert "UBUNTU: SAUCE: rtw88: 8723d: Add coex support"
- rtw88: add rtw_read8_mask and rtw_read16_mask
- rtw88: add a debugfs entry to dump coex's info
- rtw88: add a debugfs entry to enable/disable coex mechanism
- rtw88: configure TX queue EDCA parameters
- rtw88: 8723d: Add coex support
- SAUCE: rtw88: coex: 8723d: set antanna control owner
- SAUCE: rtw88: coex: 8723d: handle BT inquiry cases
- SAUCE: rtw88: fix EAPOL 4-way failure by finish IQK earlier
* Fix incorrect speed/duplex when I210 device is runtime suspended
(LP: #1880656)
- igb: Report speed and duplex as unknown when device is runtime suspended
[ Ubuntu: 5.0.0-56.60 ]
* disco/linux: 5.0.0-56.60 -proposed tracker (LP: #1884984)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* bpf_get_stack from test_verifier in ubuntu_bpf failed on Bionic 5.0
(LP: #1881263)
- Revert "bpf: fix buggy r0 retval refinement for tracing helpers"
* CVE-2020-0543
- UBUNTU/SAUCE: x86/speculation/srbds: do not try to turn mitigation off
when
not supported
* Disco update: upstream stable patchset 2020-06-04 (LP: #1882128)
- x86/uaccess, ubsan: Fix UBSAN vs. SMAP
- ubsan: build ubsan.c more conservatively
- i2c: dev: Fix the race between the release of i2c_dev and cdev
- KVM: SVM: Fix potential memory leak in svm_cpu_init()
- riscv: set max_pfn to the PFN of the last page
- ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash()
- evm: Check also if *tfm is an error pointer in init_desc()
- ima: Fix return value of ima_write_policy()
- mtd: spinand: Propagate ECC information to the MTD structure
- fix multiplication overflow in copy_fdtable()
- ubifs: remove broken lazytime support
- iommu/amd: Fix over-read of ACPI UID from IVRS table
- i2c: mux: demux-pinctrl: Fix an error handling path in
'i2c_demux_pinctrl_probe()'
- ubi: Fix seq_file usage in detailed_erase_block_info debugfs file
- gcc-common.h: Update for GCC 10
- HID: multitouch: add eGalaxTouch P80H84 support
- HID: alps: Add AUI1657 device ID
- HID: alps: ALPS_1657 is too specific; use U1_UNICORN_LEGACY instead
- scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV
- scsi: qla2xxx: Delete all sessions before unregister local nvme port
- configfs: fix config_item refcnt leak in configfs_rmdir()
- vhost/vsock: fix packet delivery order to monitoring devices
- aquantia: Fix the media type of AQC100 ethernet controller in the driver
- component: Silence bind error on -EPROBE_DEFER
- scsi: ibmvscsi: Fix WARN_ON during event pool release
- HID: i2c-hid: reset Synaptics SYNA2393 on resume
- x86/apic: Move TSC deadline timer debug printk
- gtp: set NLM_F_MULTI flag in gtp_genl_dump_pdp()
- HID: quirks: Add HID_QUIRK_NO_INIT_REPORTS quirk for Dell K12A
keyboard-dock
- ceph: fix double unlock in handle_cap_export()
- stmmac: fix pointer check after utilization in stmmac_interrupt
- USB: core: Fix misleading driver bug report
- platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA
- ARM: futex: Address build warning
- padata: Replace delayed timer with immediate workqueue in padata_reorder
- padata: initialize pd->cpu with effective cpumask
- padata: purge get_cpu and reorder_via_wq from padata_do_serial
- ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio
option
- ALSA: pcm: fix incorrect hw_base increase
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme
- ALSA: hda/realtek - Add more fixup entries for Clevo machines
- drm/etnaviv: fix perfmon domain interation
- apparmor: fix potential label refcnt leak in aa_change_profile
- apparmor: Fix aa_label refcnt leak in policy_update
- dmaengine: tegra210-adma: Fix an error handling path in
'tegra_adma_probe()'
- dmaengine: owl: Use correct lock in owl_dma_get_pchan()
- drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of
inheritance.
- powerpc: Remove STRICT_KERNEL_RWX incompatibility with RELOCATABLE
- powerpc/64s: Disable STRICT_KERNEL_RWX
- nfit: Add Hyper-V NVDIMM DSM command set to white list
- libnvdimm/btt: Remove unnecessary code in btt_freelist_init
- libnvdimm/btt: Fix LBA masking during 'free list' population
- staging: most: core: replace strcpy() by strscpy()
- thunderbolt: Drop duplicated get_switch_at_route()
- media: fdp1: Fix R-Car M3-N naming in debug message
- Revert "net/ibmvnic: Fix EOI when running in XIVE mode"
- Revert "gfs2: Don't demote a glock until its revokes are written"
- staging: iio: ad2s1210: Fix SPI reading
- staging: greybus: Fix uninitialized scalar variable
- iio: sca3000: Remove an erroneous 'get_device()'
- iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()'
- misc: rtsx: Add short delay after exit from ASPM
- mei: release me_cl object reference
- ipack: tpci200: fix error return code in tpci200_register()
- rapidio: fix an error in get_user_pages_fast() error handling
- rxrpc: Fix a memory leak in rxkad_verify_response()
- x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
- iio: adc: stm32-adc: Use dma_request_chan() instead
dma_request_slave_channel()
- iio: adc: stm32-adc: fix device used to request dma
- iio: adc: stm32-dfsdm: Use dma_request_chan() instead
dma_request_slave_channel()
- iio: adc: stm32-dfsdm: fix device used to request dma
- rxrpc: Trace discarded ACKs
- rxrpc: Fix ack discard
- ubifs: fix wrong use of crypto_shash_descsize()
- i2c: fix missing pm_runtime_put_sync in i2c_device_probe
- evm: Fix a small race in init_desc()
- afs: Don't unlock fetched data pages until the op completes successfully
- mtd: Fix mtd not registered due to nvmem name collision
- net/ena: Fix build warning in ena_xdp_set()
- x86/mm/cpa: Flush direct map alias during cpa
- ibmvnic: Skip fatal error reset after passive init
- iommu/amd: Call domain_flush_complete() in update_domain()
- drm/amd/display: Prevent dpcd reads with passive dongles
- KVM: selftests: Fix build for evmcs.h
- ALSA: hda - constify and cleanup static NodeID tables
- ALSA: hda: patch_realtek: fix empty macro usage in if block
- ALSA: hda/realtek - Add supported new mute Led for HP
- ALSA: hda/realtek - Add HP new mute led supported for ALC236
- ALSA: hda/realtek: Add quirk for Samsung Notebook
- ALSA: hda/realtek - Enable headset mic of ASUS GL503VM with ALC295
- ALSA: hda/realtek - Enable headset mic of ASUS UX550GE with ALC295
- ALSA: hda/realtek: Enable headset mic of ASUS UX581LV with ALC295
- scsi: target: Put lun_ref at end of tmr processing
- dmaengine: dmatest: Restore default for channel
- kasan: disable branch tracing for core runtime
* Disco update: upstream stable patchset 2020-05-29 (LP: #1881352)
- net: dsa: Do not make user port errors fatal
- shmem: fix possible deadlocks on shmlock_user_lock
- net/sonic: Fix a resource leak in an error handling path in
'jazz_sonic_probe()'
- net: moxa: Fix a potential double 'free_irq()'
- drop_monitor: work around gcc-10 stringop-overflow warning
- virtio-blk: handle block_device_operations callbacks after hot unplug
- scsi: sg: add sg_remove_request in sg_write
- mmc: sdhci-acpi: Add SDHCI_QUIRK2_BROKEN_64_BIT_DMA for AMDI0040
- net: fix a potential recursive NETDEV_FEAT_CHANGE
- net: phy: fix aneg restart in phy_ethtool_set_eee
- pppoe: only process PADT targeted at local interfaces
- Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu"
- tcp: fix error recovery in tcp_zerocopy_receive()
- virtio_net: fix lockdep warning on 32 bit
- hinic: fix a bug of ndo_stop
- net: dsa: loop: Add module soft dependency
- net: ipv4: really enforce backoff for redirects
- netprio_cgroup: Fix unlimited memory leak of v2 cgroups
- net: tcp: fix rx timestamp behavior for tcp_recvmsg
- tcp: fix SO_RCVLOWAT hangs with fat skbs
- riscv: fix vdso build with lld
- dmaengine: pch_dma.c: Avoid data race between probe and irq handler
- dmaengine: mmp_tdma: Reset channel error on release
- cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once
- ALSA: hda/hdmi: fix race in monitor detection during probe
- drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper()
- ipc/util.c: sysvipc_find_ipc() incorrectly updates position index
- gfs2: Another gfs2_walk_metadata fix
- pinctrl: baytrail: Enable pin configuration setting for GPIO chip
- pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler
- i40iw: Fix error handling in i40iw_manage_arp_cache()
- mmc: core: Check request type before completing the request
- mmc: block: Fix request completion in the CQE timeout path
- NFS: Fix fscache super_cookie index_key from changing after umount
- nfs: fscache: use timespec64 in inode auxdata
- NFSv4: Fix fscache cookie aux_data to ensure change_attr is included
- netfilter: conntrack: avoid gcc-10 zero-length-bounds warning
- arm64: fix the flush_icache_range arguments in machine_kexec
- netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start()
- IB/mlx4: Test return value of calls to ib_get_cached_pkey
- hwmon: (da9052) Synchronize access with mfd
- pnp: Use list_for_each_entry() instead of open coding
- gcc-10 warnings: fix low-hanging fruit
- kbuild: compute false-positive -Wmaybe-uninitialized cases in Kconfig
- Stop the ad-hoc games with -Wno-maybe-initialized
- gcc-10: disable 'zero-length-bounds' warning for now
- gcc-10: disable 'array-bounds' warning for now
- gcc-10: disable 'stringop-overflow' warning for now
- gcc-10: disable 'restrict' warning for now
- gcc-10: avoid shadowing standard library 'free()' in crypto
- ALSA: hda/realtek - Limit int mic boost for Thinkpad T530
- ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
- ALSA: usb-audio: Add control message quirk delay for Kingston HyperX
headset
- usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B
- usb: host: xhci-plat: keep runtime active when removing host
- usb: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg
list
- ARM: dts: dra7: Fix bus_dma_limit for PCIe
- ARM: dts: imx27-phytec-phycard-s-rdk: Fix the I2C1 pinctrl entries
- cifs: fix leaked reference on requeued write
- x86: Fix early boot crash on gcc-10, third try
- x86/unwind/orc: Fix error handling in __unwind_start()
- exec: Move would_dump into flush_old_exec
- clk: rockchip: fix incorrect configuration of rk3228 aclk_gpu* clocks
- dwc3: Remove check for HWO flag in dwc3_gadget_ep_reclaim_trb_sg()
- usb: gadget: net2272: Fix a memory leak in an error handling path in
'net2272_plat_probe()'
- usb: gadget: audio: Fix a missing error return value in audio_bind()
- usb: gadget: legacy: fix error return code in gncm_bind()
- usb: gadget: legacy: fix error return code in cdc_bind()
- clk: Unlink clock if failed to prepare or enable
- arm64: dts: rockchip: Replace RK805 PMIC node name with "pmic" on rk3328
boards
- arm64: dts: rockchip: Rename dwc3 device nodes on rk3399 to make dtc happy
- ARM: dts: r8a73a4: Add missing CMT1 interrupts
- arm64: dts: renesas: r8a77980: Fix IPMMU VIP[01] nodes
- ARM: dts: r8a7740: Add missing extal2 to CPG node
- KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce
- Makefile: disallow data races on gcc-10 as well
- KVM: arm: vgic: Synchronize the whole guest on GIC{D,R}_I{S,C}ACTIVER read
- ftrace/selftests: workaround cgroup RT scheduling issues
- net_sched: fix tcm_parent in tc filter dump
- dpaa2-eth: prevent array underflow in update_cls_rule()
- nfp: abm: fix error return code in nfp_abm_vnic_alloc()
- r8169: re-establish support for RTL8401 chip version
- umh: fix memory leak on execve failure
- dmaengine: mmp_tdma: Do not ignore slave config validation errors
- selftests/ftrace: Check the first record for kprobe_args_type.tc
- drm/amdgpu: simplify padding calculations (v2)
- IB/hfi1: Fix another case where pq is left on waitlist
- pinctrl: sunrisepoint: Fix PAD lock register offset for SPT-H
- pinctrl: qcom: fix wrong write in update_dual_edge
- bpf: Fix error return code in map_lookup_and_delete_elem()
- bpf, sockmap: msg_pop_data can incorrecty set an sge length
- bpf, sockmap: bpf_tcp_ingress needs to subtract bytes from sg.size
- mmc: alcor: Fix a resource leak in the error path for ->probe()
- mmc: core: Fix recursive locking issue in CQE recovery path
- nfs: fix NULL deference in nfs4_get_valid_delegation
- netfilter: nft_set_rbtree: Add missing expired checks
- s390/ism: fix error return code in ism_probe()
- NFSv3: fix rpc receive buffer size for MOUNT call
- net/rds: Use ERR_PTR for rds_message_alloc_sgs()
- usb: usbfs: correct kernel->user page attribute mismatch
- ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA
- Make the "Reducing compressed framebufer size" message be DRM_INFO_ONCE()
- fanotify: fix merging marks masks with FAN_ONDIR
- bpf: Fix sk_psock refcnt leak when receiving message
* upgrading to 4.15.0-99-generic breaks the sound and the trackpad
(LP: #1875916) // Disco update: upstream stable patchset 2020-05-29
(LP: #1881352)
- Revert "ALSA: hda/realtek: Fix pop noise on ALC225"
* Pop sound from build-in speaker during cold boot and resume from S3
(LP: #1866357) // Disco update: upstream stable patchset 2020-05-29
(LP: #1881352)
- ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse
* Disco update: upstream stable patchset 2020-05-22 (LP: #1880237)
- USB: serial: qcserial: Add DW5816e support
- tracing/kprobes: Fix a double initialization typo
- vt: fix unicode console freeing with a common interface
- dp83640: reverse arguments to list_add_tail
- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks
- net: macsec: preserve ingress frame ordering
- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc()
- net_sched: sch_skbprio: add message validation to skbprio_change()
- net: usb: qmi_wwan: add support for DW5816e
- sch_choke: avoid potential panic in choke_reset()
- sch_sfq: validate silly quantum values
- tipc: fix partial topology connection closure
- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features().
- net/mlx5: Fix forced completion access non initialized command entry
- net/mlx5: Fix command entry leak in Internal Error State
- bnxt_en: Improve AER slot reset.
- bnxt_en: Fix VF anti-spoof filter setup.
- net: stricter validation of untrusted gso packets
- HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices
- sctp: Fix bundling of SHUTDOWN with COOKIE-ACK
- HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
- USB: uas: add quirk for LaCie 2Big Quadra
- USB: serial: garmin_gps: add sanity checking for data length
- tracing: Add a vmalloc_sync_mappings() for safe measure
- KVM: arm: vgic: Fix limit condition when writing to GICD_I[CS]ACTIVER
- KVM: arm64: Fix 32bit PC wrap-around
- arm64: hugetlb: avoid potential NULL dereference
- mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous()
- staging: gasket: Check the return value of gasket_get_bar_index()
- coredump: fix crash when umh is disabled
- batman-adv: fix batadv_nc_random_weight_tq
- batman-adv: Fix refcnt leak in batadv_show_throughput_override
- batman-adv: Fix refcnt leak in batadv_store_throughput_override
- batman-adv: Fix refcnt leak in batadv_v_ogm_process
- x86/entry/64: Fix unwind hints in register clearing code
- x86/entry/64: Fix unwind hints in kernel exit path
- x86/entry/64: Fix unwind hints in rewind_stack_do_exit()
- x86/unwind/orc: Don't skip the first frame for inactive tasks
- x86/unwind/orc: Prevent unwinding before ORC initialization
- x86/unwind/orc: Fix error path for bad ORC entry type
- x86/unwind/orc: Fix premature unwind stoppage due to IRET frames
- netfilter: nat: never update the UDP checksum when it's 0
- netfilter: nf_osf: avoid passing pointer to local var
- objtool: Fix stack offset tracking for indirect CFAs
- scripts/decodecode: fix trapping instruction formatting
- ipc/mqueue.c: change __do_notify() to bypass check_kill_permission()
- drm/amdgpu: move kfd suspend after ip_suspend_phase1
- drm/amdgpu: drop redundant cg/pg ungate on runpm enter
- tty: xilinx_uartps: Fix missing id assignment to the console
- devlink: fix return value after hitting end in region read
- neigh: send protocol value in neighbor create notification
- net: tc35815: Fix phydev supported/advertising mask
- net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict()
- net/tls: Fix sk_psock refcnt leak when in tls_data_ready()
- nfp: abm: fix a memory leak bug
- tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040
- bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF.
- bnxt_en: Return error when allocating zero size context memory.
- HID: wacom: Report 2nd-gen Intuos Pro S center button status over BT
- crypto: arch/nhpoly1305 - process in explicit 4k chunks
- mm: limit boost_watermark on small zones
- KVM: x86: Fixes posted interrupt check for IRQs delivery modes
- mm, memcg: fix error return value of mem_cgroup_css_alloc()
* Disco update: upstream stable patchset 2020-05-20 (LP: #1879793)
- vhost: vsock: kick send_pkt worker once device is started
- powerpc/pci/of: Parse unassigned resources
- ASoC: topology: Check return value of pcm_new_ver
- selftests/ipc: Fix test failure seen after initial test run
- ASoC: sgtl5000: Fix VAG power-on handling
- usb: dwc3: gadget: Properly set maxpacket limit
- ASoC: rsnd: Fix parent SSI start/stop in multi-SSI mode
- ASoC: rsnd: Fix HDMI channel mapping for multi-SSI mode
- ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry
- drm/amdgpu: Correctly initialize thermal controller for GPUs with
Powerplay
table v0 (e.g Hawaii)
- wimax/i2400m: Fix potential urb refcnt leak
- net: stmmac: fix enabling socfpga's ptp_ref_clock
- net: stmmac: Fix sub-second increment
- ASoC: rsnd: Don't treat master SSI in multi SSI setup as parent
- ASoC: rsnd: Fix "status check failed" spam for multi-SSI
- cifs: protect updating server->dstaddr with a spinlock
- scripts/config: allow colons in option strings for sed
- lib/mpi: Fix building for powerpc with clang
- net: bcmgenet: suppress warnings on failed Rx SKB allocations
- net: systemport: suppress warnings on failed Rx SKB allocations
- sctp: Fix SHUTDOWN CTSN Ack in the peer restart case
- drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event
- hexagon: clean up ioremap
- hexagon: define ioremap_uc
- ALSA: hda: Match both PCI ID and SSID for driver blacklist
- platform/x86: GPD pocket fan: Fix error message when temp-limits are out
of
range
- mac80211: add ieee80211_is_any_nullfunc()
- cgroup, netclassid: remove double cond_resched
- ASoC: topology: Check return value of soc_tplg_create_tlv
- ASoC: topology: Check return value of soc_tplg_*_create
- ASoC: topology: Check return value of soc_tplg_dai_config
- cifs: do not share tcons with DFS
- udp: document udp_rcv_segment special case for looped packets
- PM / devfreq: Add missing locking while setting suspend_freq
* Disco update: upstream stable patchset 2020-05-18 (LP: #1879384)
- drm/edid: Fix off-by-one in DispID DTD pixel clock
- drm/qxl: qxl_release leak in qxl_draw_dirty_fb()
- drm/qxl: qxl_release leak in qxl_hw_surface_alloc()
- drm/qxl: qxl_release use after free
- btrfs: fix block group leak when removing fails
- ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter
- ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID
- ALSA: hda/hdmi: fix without unlocked before return
- ALSA: pcm: oss: Place the plugin buffer overflow checks correctly
- PM: ACPI: Output correct message on target power state
- PM: hibernate: Freeze kernel threads in software_resume()
- dm verity fec: fix hash block number in verity_fec_decode
- dm writecache: fix data corruption when reloading the target
- dm multipath: use updated MPATHF_QUEUE_IO on mapping for bio-based mpath
- scsi: qla2xxx: set UNLOADING before waiting for session deletion
- scsi: qla2xxx: check UNLOADING before posting async work
- RDMA/mlx5: Set GRH fields in query QP on RoCE
- RDMA/mlx4: Initialize ib_spec on the stack
- RDMA/core: Prevent mixed use of FDs between shared ufiles
- RDMA/core: Fix race between destroy and release FD object
- vfio: avoid possible overflow in vfio_iommu_type1_pin_pages
- vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn()
- iommu/qcom: Fix local_base status check
- scsi: target/iblock: fix WRITE SAME zeroing
- iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system
- ALSA: opti9xx: shut up gcc-10 range warning
- nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl
- dmaengine: dmatest: Fix iteration non-stop logic
- selinux: properly handle multiple messages in selinux_netlink_send()
- btrfs: fix partial loss of prealloc extent past i_size after fsync
- btrfs: transaction: Avoid deadlock due to bad initialization timing of
fs_info::journal_info
- mmc: cqhci: Avoid false "cqhci: CQE stuck on" by not open-coding timeout
loop
- mmc: sdhci-xenon: fix annoying 1.8V regulator warning
- mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers
- mmc: sdhci-msm: Enable host capabilities pertains to R1b response
- mmc: meson-mx-sdio: Set MMC_CAP_WAIT_WHILE_BUSY
- mmc: meson-mx-sdio: remove the broken ->card_busy() op
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION
- ALSA: line6: Fix POD HD500 audio playback
- i2c: amd-mp2-pci: Fix Oops in amd_mp2_pci_init() error handling
- dlmfs_file_write(): fix the bogosity in handling non-zero *ppos
- ARM: dts: imx6qdl-sr-som-ti: indicate powering off wifi is safe
- i2c: aspeed: Avoid i2c interrupt status clear race condition.
- nvme: prevent double free in nvme_alloc_ns() error handling
- dmaengine: dmatest: Fix process hang when reading 'wait' parameter
* Slow send speed with Intel I219-V on Ubuntu 18.04.1 (LP: #1802691)
- e1000e: Disable TSO for buffer overrun workaround
* CVE-2020-10711
- netlabel: cope with NULL catmap
* CVE-2020-13143
- USB: gadget: fix illegal array access in binding with UDC
-- Thadeu Lima de Souza Cascardo <casca...@canonical.com> Fri, 26 Jun
2020 15:23:59 -0300
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-oem-5.6 in Ubuntu.
https://bugs.launchpad.net/bugs/1865988
Title:
Performing function level reset of AMD onboard USB and audio devices
causes system lockup
Status in linux package in Ubuntu:
In Progress
Status in linux-oem-5.6 package in Ubuntu:
Invalid
Status in linux-oem-osp1 package in Ubuntu:
Invalid
Status in linux source package in Bionic:
Fix Released
Status in linux-oem-5.6 source package in Bionic:
Invalid
Status in linux-oem-osp1 source package in Bionic:
Fix Released
Status in linux source package in Eoan:
Fix Released
Status in linux-oem-5.6 source package in Eoan:
Invalid
Status in linux-oem-osp1 source package in Eoan:
Invalid
Status in linux source package in Focal:
Fix Released
Status in linux-oem-5.6 source package in Focal:
Fix Released
Status in linux-oem-osp1 source package in Focal:
Invalid
Status in linux source package in Groovy:
In Progress
Status in linux-oem-5.6 source package in Groovy:
Invalid
Status in linux-oem-osp1 source package in Groovy:
Invalid
Bug description:
[SRU Justifcation]
[Impact]
Devices affected:
* [1022:148c] USB controller [0c03]: Advanced Micro Devices, Inc. [AMD]
Starship
USB 3.0 Host Controller
* [1022:149c] USB controller [0c03]: Advanced Micro Devices, Inc. [AMD]
Matisse
USB 3.0 Host Controller
* [1022:1487] Audio device [0403]: Advanced Micro Devices, Inc. [AMD]
Starship/Matisse HD Audio Controller
Despite advertising FLReset device capabilities, performing a function level
reset of either of these devices causes the system to lock up. This is of
particular issue where these devices appear in their own IOMMU groups and are
well suited to VFIO passthrough.
Issue was introduced in AMD's "AGESA Combo-AM4 1.0.0.4 Patch B" microcode
update, and affects dozens of motherboard models across various vendors.
Additional discussion of this issue:
https://www.reddit.com/r/VFIO/comments/eba5mh/workaround_patch_for_passing_through_usb_and/
[Fix]
Two commits currently landed in linux-pci pci/virutualization:
* 0d14f06cd665 PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0
* 5727043c73fd PCI: Avoid FLR for AMD Starship USB 3.0
[Test Case]
Peform the test on an impacted system:
* B350, B450, X370, X470, X570 motherboards (practically anything with an AM4
socket);
* Ryzen 3000-series CPU (2000-series possibly also affected);
* BIOS/UEFI firmware that includes "AGESA Combo-AM4 1.0.0.4 Patch B" (check
vendor release notes)
In the above case where '0000:10:00.3' is the USB controller '1022:149c',
issue
a reset command:
$ echo 1 | sudo tee /sys/bus/pci/devices/0000\:10\:00.3/reset
Impacted systems will not return successfully and become unstable, requiring a
reboot. `/var/logs/syslog` will show something resembling the following:
xhci_hcd 0000:10:00.3: not ready 1023ms after FLR; waiting
xhci_hcd 0000:10:00.3: not ready 2047ms after FLR; waiting
xhci_hcd 0000:10:00.3: not ready 4095ms after FLR; waiting
xhci_hcd 0000:10:00.3: not ready 8191ms after FLR; waiting
xhci_hcd 0000:10:00.3: not ready 16383ms after FLR; waiting
xhci_hcd 0000:10:00.3: not ready 32767ms after FLR; waiting
xhci_hcd 0000:10:00.3: not ready 65535ms after FLR; giving up
clocksource: timekeeping watchdog on CPU14: Marking clocksource 'tsc' as
unstable because the skew is too large:
clocksource: 'hpet' wd_now: f63fcfe wd_last: d468894 mask: ffffffff
clocksource: 'tsc' cs_now: 60e67e17758 cs_last: 60d2a81ce24 mask:
ffffffffffffffff
tsc: Marking TSC unstable due to clocksource watchdog
TSC found unstable after boot, most likely due to broken BIOS. Use
'tsc=unstable'.
sched_clock: Marking unstable (1817664630139, 314261908)<-(1817981099530,
-2209419)
[Regression Risk]
Low. These two patches affect only systems with a device needs fix.
========== Original Bug Description ==========
$ lsb_release -rd
Description: Ubuntu 19.10
Release: 19.10
[Impact]
Devices affected:
* [1022:149c] USB controller [0c03]: Advanced Micro Devices, Inc. [AMD]
Matisse USB 3.0 Host Controller
* [1022:1487] Audio device [0403]: Advanced Micro Devices, Inc. [AMD]
Starship/Matisse HD Audio Controller
Despite advertising FLReset device capabilities, performing a function
level reset of either of these devices causes the system to lock up.
This is of particular issue where these devices appear in their own
IOMMU groups and are well suited to VFIO passthrough.
Issue was introduced in AMD's "AGESA Combo-AM4 1.0.0.4 Patch B"
microcode update, and affects dozens of motherboard models across
various vendors.
Additional discussion of this issue:
https://www.reddit.com/r/VFIO/comments/eba5mh/workaround_patch_for_passing_through_usb_and/
[Fix]
Add a quirk to disable FLR on these devices. Sample patch attached.
[Test Case]
Peform the test on an impacted system:
* B350, B450, X370, X470, X570 motherboards (practically anything with an AM4
socket);
* Ryzen 3000-series CPU (2000-series possibly also affected);
* BIOS/UEFI firmware that includes "AGESA Combo-AM4 1.0.0.4 Patch B" (check
vendor release notes)
In the above case where '0000:10:00.3' is the USB controller
'1022:149c', issue a reset command
$ echo 1 | sudo tee /sys/bus/pci/devices/0000\:10\:00.3/reset
Impacted systems will not return successfully and become unstable,
requiring a reboot. `/var/logs/syslog` will show something resembling
the following
Mar 4 14:51:26 bunty kernel: [ 1745.043914] xhci_hcd 0000:10:00.3: not
ready 1023ms after FLR; waiting
Mar 4 14:51:28 bunty kernel: [ 1747.091910] xhci_hcd 0000:10:00.3: not
ready 2047ms after FLR; waiting
Mar 4 14:51:32 bunty kernel: [ 1750.163972] xhci_hcd 0000:10:00.3: not
ready 4095ms after FLR; waiting
Mar 4 14:51:37 bunty kernel: [ 1755.283933] xhci_hcd 0000:10:00.3: not
ready 8191ms after FLR; waiting
Mar 4 14:51:46 bunty kernel: [ 1764.499943] xhci_hcd 0000:10:00.3: not
ready 16383ms after FLR; waiting
Mar 4 14:52:04 bunty kernel: [ 1782.164126] xhci_hcd 0000:10:00.3: not
ready 32767ms after FLR; waiting
Mar 4 14:52:39 bunty kernel: [ 1816.979432] xhci_hcd 0000:10:00.3: not
ready 65535ms after FLR; giving up
Mar 4 14:52:39 bunty kernel: [ 1817.978790] clocksource: timekeeping
watchdog on CPU14: Marking clocksource 'tsc' as unstable because the skew is
too large:
Mar 4 14:52:39 bunty kernel: [ 1817.978806] clocksource:
'hpet' wd_now: f63fcfe wd_last: d468894 mask: ffffffff
Mar 4 14:52:39 bunty kernel: [ 1817.978809] clocksource:
'tsc' cs_now: 60e67e17758 cs_last: 60d2a81ce24 mask: ffffffffffffffff
Mar 4 14:52:39 bunty kernel: [ 1817.978818] tsc: Marking TSC unstable due
to clocksource watchdog
Mar 4 14:52:40 bunty kernel: [ 1817.978892] TSC found unstable after boot,
most likely due to broken BIOS. Use 'tsc=unstable'.
Mar 4 14:52:40 bunty kernel: [ 1817.978894] sched_clock: Marking unstable
(1817664630139, 314261908)<-(1817981099530, -2209419)
[Regression Risk]
Unknown
---
ProblemType: Bug
ApportVersion: 2.20.11-0ubuntu8.2
Architecture: amd64
AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/controlC0',
'/dev/snd/hwC0D0', '/dev/snd/pcmC0D7p', '/dev/snd/pcmC0D3p',
'/dev/snd/by-path', '/dev/snd/controlC1', '/dev/snd/hwC1D0',
'/dev/snd/pcmC1D2c', '/dev/snd/pcmC1D1p', '/dev/snd/pcmC1D0c',
'/dev/snd/pcmC1D0p', '/dev/snd/seq', '/dev/snd/timer'] failed with exit code 1:
DistroRelease: Ubuntu 19.10
MachineType: To Be Filled By O.E.M. To Be Filled By O.E.M.
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair nvidia_modeset
nvidia
Package: linux (not installed)
ProcFB: 0 EFI VGA
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-5.3.0-40+amdnoflr-generic
root=UUID=f2f3748c-f017-47ae-aa38-943e5f5189e0 ro amd_iommu=on
ProcVersionSignature: Ubuntu 5.3.0-40.32+amdnoflr-generic 5.3.18
RelatedPackageVersions:
linux-restricted-modules-5.3.0-40+amdnoflr-generic N/A
linux-backports-modules-5.3.0-40+amdnoflr-generic N/A
linux-firmware 1.183.3
Tags: eoan
Uname: Linux 5.3.0-40+amdnoflr-generic x86_64
UnreportableReason: This report is about a package that is not installed.
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip libvirt lpadmin lxd plugdev sambashare sudo
_MarkForUpload: False
dmi.bios.date: 11/14/2019
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: L3.77
dmi.board.name: X470 Taichi
dmi.board.vendor: ASRock
dmi.chassis.asset.tag: To Be Filled By O.E.M.
dmi.chassis.type: 3
dmi.chassis.vendor: To Be Filled By O.E.M.
dmi.chassis.version: To Be Filled By O.E.M.
dmi.modalias:
dmi:bvnAmericanMegatrendsInc.:bvrL3.77:bd11/14/2019:svnToBeFilledByO.E.M.:pnToBeFilledByO.E.M.:pvrToBeFilledByO.E.M.:rvnASRock:rnX470Taichi:rvr:cvnToBeFilledByO.E.M.:ct3:cvrToBeFilledByO.E.M.:
dmi.product.family: To Be Filled By O.E.M.
dmi.product.name: To Be Filled By O.E.M.
dmi.product.sku: To Be Filled By O.E.M.
dmi.product.version: To Be Filled By O.E.M.
dmi.sys.vendor: To Be Filled By O.E.M.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1865988/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
