** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2019-07-31
- Ported from the following upstream stable releases:
- v4.14.120, v4.19.44,
- v4.14.121, v4.19.45,
- v4.14.122, v4.19.46
+ Ported from the following upstream stable releases:
+ v4.14.120, v4.19.44,
+ v4.14.121, v4.19.45,
+ v4.14.122, v4.19.46
from git://git.kernel.org/
+
+ netfilter: compat: initialize all fields in xt_init
+ platform/x86: sony-laptop: Fix unintentional fall-through
+ platform/x86: thinkpad_acpi: Disable Bluetooth for some machines
+ hwmon: (pwm-fan) Disable PWM if fetching cooling data fails
+ kernfs: fix barrier usage in __kernfs_new_node()
+ USB: serial: fix unthrottle races
+ iio: adc: xilinx: fix potential use-after-free on remove
+ libnvdimm/namespace: Fix a potential NULL pointer dereference
+ HID: input: add mapping for Expose/Overview key
+ HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
+ HID: input: add mapping for "Toggle Display" key
+ libnvdimm/btt: Fix a kmemdup failure check
+ s390/dasd: Fix capacity calculation for large volumes
+ mac80211: fix unaligned access in mesh table hash function
+ mac80211: Increase MAX_MSG_LEN
+ mac80211: fix memory accounting with A-MSDU aggregation
+ nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands
+ s390/3270: fix lockdep false positive on view->lock
+ clocksource/drivers/oxnas: Fix OX820 compatible
+ mISDN: Check address length before reading address family
+ s390/pkey: add one more argument space for debug feature entry
+ x86/reboot, efi: Use EFI reboot for Acer TravelMate X514-51T
+ KVM: fix spectrev1 gadgets
+ KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in tracing
+ tools lib traceevent: Fix missing equality check for strcmp
+ mm: fix inactive list balancing between NUMA nodes and cgroups
+ init: initialize jump labels before command line option parsing
+ selftests: netfilter: check icmp pkttoobig errors are set as related
+ ipvs: do not schedule icmp errors from tunnels
+ netfilter: ctnetlink: don't use conntrack/expect object addresses as id
+ s390: ctcm: fix ctcm_new_device error return code
+ drm/sun4i: Set device driver data at bind time for use in unbind
+ gpu: ipu-v3: dp: fix CSC handling
+ drm/imx: don't skip DP channel disable for background plane
+ spi: Micrel eth switch: declare missing of table
+ spi: ST ST95HF NFC: declare missing of table
+ Input: synaptics-rmi4 - fix possible double free
+ MIPS: VDSO: Reduce VDSO_RANDOMIZE_SIZE to 64MB for 64bit
+ ima: open a new file instance if no read permissions
+ drm/i915: Disable LP3 watermarks on all SNB machines
+ net: stmmac: Move debugfs init/exit to ->probe()/->remove()
+ x86/vdso: Pass --eh-frame-hdr to the linker
+ mm/memory.c: fix modifying of page protection by insert_pfn()
+ net: fec: manage ahb clock in runtime pm
+ mlxsw: spectrum_switchdev: Add MDB entries in prepare phase
+ mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue
+ mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue
+ mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue
+ NFC: nci: Add some bounds checking in nci_hci_cmd_received()
+ nfc: nci: Potential off by one in ->pipes[] array
+ x86/kprobes: Avoid kretprobe recursion bug
+ cw1200: fix missing unlock on error in cw1200_hw_scan()
+ mwl8k: Fix rate_idx underflow
+ rtlwifi: rtl8723ae: Fix missing break in switch statement
+ bonding: fix arp_validate toggling in active-backup mode
+ bridge: Fix error path for kobject_init_and_add()
+ dpaa_eth: fix SG frame cleanup
+ ipv4: Fix raw socket lookup for local traffic
+ net: dsa: Fix error cleanup path in dsa_init_module
+ net: ethernet: stmmac: dwmac-sun8i: enable support of unicast filtering
+ net: seeq: fix crash caused by not set dev.parent
+ net: ucc_geth - fix Oops when changing number of buffers in the ring
+ packet: Fix error path in packet_init
+ vlan: disable SIOCSHWTSTAMP in container
+ vrf: sit mtu should not be updated when vrf netdev is the link
+ tipc: fix hanging clients using poll with EPOLLOUT flag
+ drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl
+ drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
+ powerpc/powernv/idle: Restore IAMR after idle
+ powerpc/booke64: set RI in default MSR
+ platform/x86: dell-laptop: fix rfkill functionality
+ iio: adc: xilinx: fix potential use-after-free on probe
+ iio: adc: xilinx: prevent touching unclocked h/w on remove
+ acpi/nfit: Always dump _DSM output payload
+ libnvdimm/pmem: fix a possible OOB access when read and write pmem
+ vxge: fix return of a free'd memblock on a failed dma mapping
+ qede: fix write to free'd pointer error and double free of ptp
+ afs: Unlock pages for __pagevec_release()
+ ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash
+ scsi: aic7xxx: fix EISA support
+ drm/sun4i: Fix component unbinding and component master deletion
+ netfilter: fix nf_l4proto_log_invalid to log invalid packets
+ drm/sun4i: Unbind components before releasing DRM and memory
+ usb: typec: Fix unchecked return value
+ netfilter: nf_tables: use-after-free in dynamic operations
+ um: Don't hardcode path as it is architecture dependent
+ powerpc/book3s/64: check for NULL pointer in pgd_alloc()
+ PCI: hv: Add hv_pci_remove_slots() when we unload the driver
+ PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary
+ net: core: another layer of lists, around PF_MEMALLOC skb handling
+ locking/rwsem: Prevent decrement of reader count before increment
+ PCI: hv: Fix a memory leak in hv_eject_device_work()
+ x86/speculation/mds: Revert CPU buffer clear on double fault exit
+ x86/speculation/mds: Improve CPU buffer clear documentation
+ objtool: Fix function fallthrough detection
+ ARM: dts: exynos: Fix interrupt for shared EINTs on Exynos5260
+ ARM: dts: exynos: Fix audio (microphone) routing on Odroid XU3
+ ARM: exynos: Fix a leaked reference by adding missing of_node_put
+ power: supply: axp288_charger: Fix unchecked return value
+ arm64: compat: Reduce address limit
+ arm64: Clear OSDLR_EL1 on CPU boot
+ arm64: Save and restore OSDLR_EL1 across suspend/resume
+ sched/x86: Save [ER]FLAGS on context switch
+ crypto: chacha20poly1305 - set cra_name correctly
+ crypto: vmx - fix copy-paste error in CTR mode
+ crypto: skcipher - don't WARN on unprocessed data after slow walk step
+ crypto: crct10dif-generic - fix use via crypto_shash_digest()
+ crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
+ crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
+ crypto: rockchip - update IV buffer to contain the next IV
+ crypto: arm/aes-neonbs - don't access already-freed walk.iv
+ ALSA: usb-audio: Fix a memory leak bug
+ ALSA: hda/realtek - EAPD turn on later
+ ASoC: max98090: Fix restore of DAPM Muxes
+ ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
+ bpf, arm64: remove prefetch insn in xadd mapping
+ mm/mincore.c: make mincore() more conservative
+ ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
+ userfaultfd: use RCU to free the task struct when fork fails
+ mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L
+ mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values
+ mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write
+ tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0
+ tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
+ jbd2: check superblock mapped prior to committing
+ ext4: make sanity check in mballoc more strict
+ ext4: ignore e_value_offs for xattrs with value-in-ea-inode
+ ext4: avoid drop reference to iloc.bh twice
+ Btrfs: do not start a transaction during fiemap
+ Btrfs: do not start a transaction at iterate_extent_inodes()
+ bcache: fix a race between cache register and cacheset unregister
+ bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
+ ext4: fix use-after-free race with debug_want_extra_isize
+ ext4: actually request zeroing of inode table after grow
+ ext4: fix ext4_show_options for file systems w/o journal
+ ipmi:ssif: compare block number correctly for multi-part return messages
+ crypto: arm64/aes-neonbs - don't access already-freed walk.iv
+ crypto: salsa20 - don't access already-freed walk.iv
+ crypto: ccm - fix incompatibility between "ccm" and "ccm_base"
+ fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into
workqueue when umount
+ ext4: fix data corruption caused by overlapping unaligned and aligned IO
+ ext4: fix use-after-free in dx_release()
+ ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug
+ KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes
+ iov_iter: optimize page_copy_sane()
+ ext4: fix compile error when using BUFFER_TRACE
+ arm64: dts: rockchip: Disable DCMDs on RK3399's eMMC controller.
+ arm64: mmap: Ensure file offset is treated as unsigned
+ arm64: arch_timer: Ensure counter register reads occur with seqlock held
+ crypto: crypto4xx - fix ctr-aes missing output IV
+ crypto: crypto4xx - fix cfb and ofb "overran dst buffer" issues
+ ALSA: line6: toneport: Fix broken usage of timer for delayed execution
+ ASoC: fsl_esai: Fix missing break in switch statement
+ mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned
addresses
+ hugetlb: use same fault hash key for shared and private mappings
+ ACPI: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle
+ btrfs: Correctly free extent buffer in case btree_read_extent_buffer_pages
fails
+ ext4: avoid panic during forced reboot due to aborted journal
+ libnvdimm/namespace: Fix label tracking error
+ ext4: don't update s_rev_level if not required
+ net: avoid weird emergency message
+ net/mlx4_core: Change the error print to info print
+ net: test nouarg before dereferencing zerocopy pointers
+ net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions
+ ppp: deflate: Fix possible crash in deflate_init
+ tipc: switch order of device registration to fix a crash
+ vsock/virtio: free packets during the socket release
+ vsock/virtio: Initialize core virtio vsock before registering the driver
+ net: Always descend into dsa/
+ parisc: Export running_on_qemu symbol for modules
+ parisc: Skip registering LED when running in QEMU
+ parisc: Use PA_ASM_LEVEL in boot code
+ parisc: Rename LEVEL to PA_ASM_LEVEL to avoid name clash with DRBD code
+ stm class: Fix channel free in stm output free path
+ md: add mddev->pers to avoid potential NULL pointer dereference
+ intel_th: msu: Fix single mode with IOMMU
+ p54: drop device reference count if fails to enable device
+ of: fix clang -Wunsequenced for be32_to_cpu()
+ media: ov6650: Fix sensor possibly not detected on probe
+ NFS4: Fix v4.0 client state corruption when mount
+ PNFS fallback to MDS if no deviceid found
+ clk: hi3660: Mark clk_gate_ufs_subsys as critical
+ clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider
+ clk: rockchip: fix wrong clock definitions for rk3328
+ fuse: fix writepages on 32bit
+ fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
+ iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
+ ceph: flush dirty inodes before proceeding with remount
+ x86_64: Add gap to int3 to allow for call emulation
+ x86_64: Allow breakpoints to emulate call instructions
+ ftrace/x86_64: Emulate call function while updating in breakpoint handler
+ tracing: Fix partial reading of trace event's id file
+ memory: tegra: Fix integer overflow on tick value calculation
+ perf intel-pt: Fix instructions sampling rate
+ perf intel-pt: Fix improved sample timestamp
+ perf intel-pt: Fix sample timestamp wrt non-taken branches
+ objtool: Allow AR to be overridden with HOSTAR
+ fbdev: sm712fb: fix brightness control on reboot, don't set SR30
+ fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75
+ fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F
+ fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA
+ fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping
VRAM
+ fbdev: sm712fb: fix support for 1024x768-16 mode
+ fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
+ fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting
+ PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken
+ PCI: Mark Atheros AR9462 to avoid bus reset
+ PCI: Factor out pcie_retrain_link() function
+ PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum
+ dm cache metadata: Fix loading discard bitset
+ dm zoned: Fix zone report handling
+ dm delay: fix a crash when invalid device is specified
+ xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
+ xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
+ vti4: ipip tunnel deregistration fixes.
+ esp4: add length check for UDP encapsulation
+ xfrm4: Fix uninitialized memory read in _decode_session4
+ power: supply: cpcap-battery: Fix division by zero
+ securityfs: fix use-after-free on symlink traversal
+ apparmorfs: fix use-after-free on symlink traversal
+ mac80211: Fix kernel panic due to use of txq after free
+ KVM: arm/arm64: Ensure vcpu target is unset on reset failure
+ power: supply: sysfs: prevent endless uevent loop with
CONFIG_POWER_SUPPLY_DEBUG
+ iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb()
+ sched/cpufreq: Fix kobject memleak
+ x86/mm/mem_encrypt: Disable all instrumentation for early SME setup
+ ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
+ perf bench numa: Add define for RUSAGE_THREAD if not present
+ md/raid: raid5 preserve the writeback action after the parity check
+ driver core: Postpone DMA tear-down until after devres release for probe
failure
+ bpf: add map_lookup_elem_sys_only for lookups from syscall side
+ bpf, lru: avoid messing with eviction heuristics upon syscall lookup
+ fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough
+ nfp: flower: add rcu locks when accessing netdev for tunnels
+ rtnetlink: always put IFLA_LINK for links with a link-netnsid
+ brd: re-enable __GFP_HIGHMEM in brd_insert_page()
+ proc: prevent changes to overridden credentials
+ md: batch flush requests.
+ phy: ti-pipe3: fix missing bit-wise or operator when assigning val
+ clk: mediatek: Disable tuner_en before change PLL rate
+ PCI: rcar: Add the initialization of PCIe link in resume_noirq()
+ fuse: Add FOPEN_STREAM to use stream_open()
+ qmi_wwan: new Wistron, ZTE and D-Link devices
+ bpf: relax inode permission check for retrieving bpf program
+ UBUNTU: upstream stable to v4.14.122, v4.19.46
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1838576
Title:
Bionic update: upstream stable patchset 2019-07-31
Status in linux package in Ubuntu:
Confirmed
Status in linux source package in Bionic:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2019-07-31
Ported from the following upstream stable releases:
v4.14.120, v4.19.44,
v4.14.121, v4.19.45,
v4.14.122, v4.19.46
from git://git.kernel.org/
netfilter: compat: initialize all fields in xt_init
platform/x86: sony-laptop: Fix unintentional fall-through
platform/x86: thinkpad_acpi: Disable Bluetooth for some machines
hwmon: (pwm-fan) Disable PWM if fetching cooling data fails
kernfs: fix barrier usage in __kernfs_new_node()
USB: serial: fix unthrottle races
iio: adc: xilinx: fix potential use-after-free on remove
libnvdimm/namespace: Fix a potential NULL pointer dereference
HID: input: add mapping for Expose/Overview key
HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
HID: input: add mapping for "Toggle Display" key
libnvdimm/btt: Fix a kmemdup failure check
s390/dasd: Fix capacity calculation for large volumes
mac80211: fix unaligned access in mesh table hash function
mac80211: Increase MAX_MSG_LEN
mac80211: fix memory accounting with A-MSDU aggregation
nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands
s390/3270: fix lockdep false positive on view->lock
clocksource/drivers/oxnas: Fix OX820 compatible
mISDN: Check address length before reading address family
s390/pkey: add one more argument space for debug feature entry
x86/reboot, efi: Use EFI reboot for Acer TravelMate X514-51T
KVM: fix spectrev1 gadgets
KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in tracing
tools lib traceevent: Fix missing equality check for strcmp
mm: fix inactive list balancing between NUMA nodes and cgroups
init: initialize jump labels before command line option parsing
selftests: netfilter: check icmp pkttoobig errors are set as related
ipvs: do not schedule icmp errors from tunnels
netfilter: ctnetlink: don't use conntrack/expect object addresses as id
s390: ctcm: fix ctcm_new_device error return code
drm/sun4i: Set device driver data at bind time for use in unbind
gpu: ipu-v3: dp: fix CSC handling
drm/imx: don't skip DP channel disable for background plane
spi: Micrel eth switch: declare missing of table
spi: ST ST95HF NFC: declare missing of table
Input: synaptics-rmi4 - fix possible double free
MIPS: VDSO: Reduce VDSO_RANDOMIZE_SIZE to 64MB for 64bit
ima: open a new file instance if no read permissions
drm/i915: Disable LP3 watermarks on all SNB machines
net: stmmac: Move debugfs init/exit to ->probe()/->remove()
x86/vdso: Pass --eh-frame-hdr to the linker
mm/memory.c: fix modifying of page protection by insert_pfn()
net: fec: manage ahb clock in runtime pm
mlxsw: spectrum_switchdev: Add MDB entries in prepare phase
mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue
mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue
mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue
NFC: nci: Add some bounds checking in nci_hci_cmd_received()
nfc: nci: Potential off by one in ->pipes[] array
x86/kprobes: Avoid kretprobe recursion bug
cw1200: fix missing unlock on error in cw1200_hw_scan()
mwl8k: Fix rate_idx underflow
rtlwifi: rtl8723ae: Fix missing break in switch statement
bonding: fix arp_validate toggling in active-backup mode
bridge: Fix error path for kobject_init_and_add()
dpaa_eth: fix SG frame cleanup
ipv4: Fix raw socket lookup for local traffic
net: dsa: Fix error cleanup path in dsa_init_module
net: ethernet: stmmac: dwmac-sun8i: enable support of unicast filtering
net: seeq: fix crash caused by not set dev.parent
net: ucc_geth - fix Oops when changing number of buffers in the ring
packet: Fix error path in packet_init
vlan: disable SIOCSHWTSTAMP in container
vrf: sit mtu should not be updated when vrf netdev is the link
tipc: fix hanging clients using poll with EPOLLOUT flag
drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl
drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
powerpc/powernv/idle: Restore IAMR after idle
powerpc/booke64: set RI in default MSR
platform/x86: dell-laptop: fix rfkill functionality
iio: adc: xilinx: fix potential use-after-free on probe
iio: adc: xilinx: prevent touching unclocked h/w on remove
acpi/nfit: Always dump _DSM output payload
libnvdimm/pmem: fix a possible OOB access when read and write pmem
vxge: fix return of a free'd memblock on a failed dma mapping
qede: fix write to free'd pointer error and double free of ptp
afs: Unlock pages for __pagevec_release()
ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash
scsi: aic7xxx: fix EISA support
drm/sun4i: Fix component unbinding and component master deletion
netfilter: fix nf_l4proto_log_invalid to log invalid packets
drm/sun4i: Unbind components before releasing DRM and memory
usb: typec: Fix unchecked return value
netfilter: nf_tables: use-after-free in dynamic operations
um: Don't hardcode path as it is architecture dependent
powerpc/book3s/64: check for NULL pointer in pgd_alloc()
PCI: hv: Add hv_pci_remove_slots() when we unload the driver
PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary
net: core: another layer of lists, around PF_MEMALLOC skb handling
locking/rwsem: Prevent decrement of reader count before increment
PCI: hv: Fix a memory leak in hv_eject_device_work()
x86/speculation/mds: Revert CPU buffer clear on double fault exit
x86/speculation/mds: Improve CPU buffer clear documentation
objtool: Fix function fallthrough detection
ARM: dts: exynos: Fix interrupt for shared EINTs on Exynos5260
ARM: dts: exynos: Fix audio (microphone) routing on Odroid XU3
ARM: exynos: Fix a leaked reference by adding missing of_node_put
power: supply: axp288_charger: Fix unchecked return value
arm64: compat: Reduce address limit
arm64: Clear OSDLR_EL1 on CPU boot
arm64: Save and restore OSDLR_EL1 across suspend/resume
sched/x86: Save [ER]FLAGS on context switch
crypto: chacha20poly1305 - set cra_name correctly
crypto: vmx - fix copy-paste error in CTR mode
crypto: skcipher - don't WARN on unprocessed data after slow walk step
crypto: crct10dif-generic - fix use via crypto_shash_digest()
crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
crypto: rockchip - update IV buffer to contain the next IV
crypto: arm/aes-neonbs - don't access already-freed walk.iv
ALSA: usb-audio: Fix a memory leak bug
ALSA: hda/realtek - EAPD turn on later
ASoC: max98090: Fix restore of DAPM Muxes
ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
bpf, arm64: remove prefetch insn in xadd mapping
mm/mincore.c: make mincore() more conservative
ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
userfaultfd: use RCU to free the task struct when fork fails
mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L
mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values
mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write
tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0
tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
jbd2: check superblock mapped prior to committing
ext4: make sanity check in mballoc more strict
ext4: ignore e_value_offs for xattrs with value-in-ea-inode
ext4: avoid drop reference to iloc.bh twice
Btrfs: do not start a transaction during fiemap
Btrfs: do not start a transaction at iterate_extent_inodes()
bcache: fix a race between cache register and cacheset unregister
bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
ext4: fix use-after-free race with debug_want_extra_isize
ext4: actually request zeroing of inode table after grow
ext4: fix ext4_show_options for file systems w/o journal
ipmi:ssif: compare block number correctly for multi-part return messages
crypto: arm64/aes-neonbs - don't access already-freed walk.iv
crypto: salsa20 - don't access already-freed walk.iv
crypto: ccm - fix incompatibility between "ccm" and "ccm_base"
fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into
workqueue when umount
ext4: fix data corruption caused by overlapping unaligned and aligned IO
ext4: fix use-after-free in dx_release()
ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug
KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes
iov_iter: optimize page_copy_sane()
ext4: fix compile error when using BUFFER_TRACE
arm64: dts: rockchip: Disable DCMDs on RK3399's eMMC controller.
arm64: mmap: Ensure file offset is treated as unsigned
arm64: arch_timer: Ensure counter register reads occur with seqlock held
crypto: crypto4xx - fix ctr-aes missing output IV
crypto: crypto4xx - fix cfb and ofb "overran dst buffer" issues
ALSA: line6: toneport: Fix broken usage of timer for delayed execution
ASoC: fsl_esai: Fix missing break in switch statement
mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned
addresses
hugetlb: use same fault hash key for shared and private mappings
ACPI: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle
btrfs: Correctly free extent buffer in case btree_read_extent_buffer_pages
fails
ext4: avoid panic during forced reboot due to aborted journal
libnvdimm/namespace: Fix label tracking error
ext4: don't update s_rev_level if not required
net: avoid weird emergency message
net/mlx4_core: Change the error print to info print
net: test nouarg before dereferencing zerocopy pointers
net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions
ppp: deflate: Fix possible crash in deflate_init
tipc: switch order of device registration to fix a crash
vsock/virtio: free packets during the socket release
vsock/virtio: Initialize core virtio vsock before registering the driver
net: Always descend into dsa/
parisc: Export running_on_qemu symbol for modules
parisc: Skip registering LED when running in QEMU
parisc: Use PA_ASM_LEVEL in boot code
parisc: Rename LEVEL to PA_ASM_LEVEL to avoid name clash with DRBD code
stm class: Fix channel free in stm output free path
md: add mddev->pers to avoid potential NULL pointer dereference
intel_th: msu: Fix single mode with IOMMU
p54: drop device reference count if fails to enable device
of: fix clang -Wunsequenced for be32_to_cpu()
media: ov6650: Fix sensor possibly not detected on probe
NFS4: Fix v4.0 client state corruption when mount
PNFS fallback to MDS if no deviceid found
clk: hi3660: Mark clk_gate_ufs_subsys as critical
clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider
clk: rockchip: fix wrong clock definitions for rk3328
fuse: fix writepages on 32bit
fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
ceph: flush dirty inodes before proceeding with remount
x86_64: Add gap to int3 to allow for call emulation
x86_64: Allow breakpoints to emulate call instructions
ftrace/x86_64: Emulate call function while updating in breakpoint handler
tracing: Fix partial reading of trace event's id file
memory: tegra: Fix integer overflow on tick value calculation
perf intel-pt: Fix instructions sampling rate
perf intel-pt: Fix improved sample timestamp
perf intel-pt: Fix sample timestamp wrt non-taken branches
objtool: Allow AR to be overridden with HOSTAR
fbdev: sm712fb: fix brightness control on reboot, don't set SR30
fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75
fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F
fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA
fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping
VRAM
fbdev: sm712fb: fix support for 1024x768-16 mode
fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting
PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken
PCI: Mark Atheros AR9462 to avoid bus reset
PCI: Factor out pcie_retrain_link() function
PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum
dm cache metadata: Fix loading discard bitset
dm zoned: Fix zone report handling
dm delay: fix a crash when invalid device is specified
xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
vti4: ipip tunnel deregistration fixes.
esp4: add length check for UDP encapsulation
xfrm4: Fix uninitialized memory read in _decode_session4
power: supply: cpcap-battery: Fix division by zero
securityfs: fix use-after-free on symlink traversal
apparmorfs: fix use-after-free on symlink traversal
mac80211: Fix kernel panic due to use of txq after free
KVM: arm/arm64: Ensure vcpu target is unset on reset failure
power: supply: sysfs: prevent endless uevent loop with
CONFIG_POWER_SUPPLY_DEBUG
iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb()
sched/cpufreq: Fix kobject memleak
x86/mm/mem_encrypt: Disable all instrumentation for early SME setup
ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
perf bench numa: Add define for RUSAGE_THREAD if not present
md/raid: raid5 preserve the writeback action after the parity check
driver core: Postpone DMA tear-down until after devres release for probe
failure
bpf: add map_lookup_elem_sys_only for lookups from syscall side
bpf, lru: avoid messing with eviction heuristics upon syscall lookup
fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough
nfp: flower: add rcu locks when accessing netdev for tunnels
rtnetlink: always put IFLA_LINK for links with a link-netnsid
brd: re-enable __GFP_HIGHMEM in brd_insert_page()
proc: prevent changes to overridden credentials
md: batch flush requests.
phy: ti-pipe3: fix missing bit-wise or operator when assigning val
clk: mediatek: Disable tuner_en before change PLL rate
PCI: rcar: Add the initialization of PCIe link in resume_noirq()
fuse: Add FOPEN_STREAM to use stream_open()
qmi_wwan: new Wistron, ZTE and D-Link devices
bpf: relax inode permission check for retrieving bpf program
UBUNTU: upstream stable to v4.14.122, v4.19.46
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1838576/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
