This bug was fixed in the package linux - 5.0.0-38.41
---------------
linux (5.0.0-38.41) disco; urgency=medium
* disco/linux: 5.0.0-38.41 -proposed tracker (LP: #1854788)
* [Regression] Failed to boot disco kernel built from master-next (kernel
kernel NULL pointer dereference) (LP: #1853981)
- SAUCE: blk-mq: Fix blk_mq_make_request for mq devices
* CVE-2019-14901
- SAUCE: mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()
* CVE-2019-14896 // CVE-2019-14897
- SAUCE: libertas: Fix two buffer overflows at parsing bss descriptor
* CVE-2019-14895
- SAUCE: mwifiex: fix possible heap overflow in mwifiex_process_country_ie()
* [CML] New device id's for CMP-H (LP: #1846335)
- mmc: sdhci-pci: Add another Id for Intel CML
- i2c: i801: Add support for Intel Comet Lake PCH-H
- mtd: spi-nor: intel-spi: Add support for Intel Comet Lake-H SPI serial
flash
- mfd: intel-lpss: Add Intel Comet Lake PCH-H PCI IDs
* Please add patch fixing RK818 ID detection (LP: #1853192)
- SAUCE: mfd: rk808: Fix RK818 ID template
* [SRU][B/OEM-B/OEM-OSP1/D] Enable new Elan touchpads which are not in current
whitelist (LP: #1853246)
- Input: elan_i2c - export the device id whitelist
- HID: quirks: Refactor ELAN 400 and 401 handling
* Lenovo dock MAC Address pass through doesn't work in Ubuntu (LP: #1827961)
- r8152: Add macpassthru support for ThinkPad Thunderbolt 3 Dock Gen 2
* [CML-S62] Need enable turbostat patch support for Comet lake- S 6+2
(LP: #1847451)
- SAUCE: tools/power turbostat: Add Cometlake support
* External microphone can't work on some dell machines with the codec alc256
or alc236 (LP: #1853791)
- SAUCE: ALSA: hda/realtek - Move some alc256 pintbls to fallback table
- SAUCE: ALSA: hda/realtek - Move some alc236 pintbls to fallback table
* Memory leak in net/xfrm/xfrm_state.c - 8 pages per ipsec connection
(LP: #1853197)
- xfrm: Fix memleak on xfrm state destroy
* CVE-2019-18660: patches for Ubuntu (LP: #1853142) // CVE-2019-18660
- powerpc/64s: support nospectre_v2 cmdline option
- powerpc/book3s64: Fix link stack flush on context switch
- KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel
* Raydium Touchscreen on ThinkPad L390 does not work (LP: #1849721)
- HID: i2c-hid: fix no irq after reset on raydium 3118
* Make Goodix I2C touchpads work (LP: #1853842)
- HID: i2c-hid: Remove runtime power management
- HID: i2c-hid: Send power-on command after reset
* Touchpad doesn't work on Dell Inspiron 7000 2-in-1 (LP: #1851901)
- Revert "UBUNTU: SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390
2-in-1"
- lib: devres: add a helper function for ioremap_uc
- mfd: intel-lpss: Use devm_ioremap_uc for MMIO
* CVE-2019-19055
- nl80211: fix memory leak in nl80211_get_ftm_responder_stats
* [CML-S62] Need enable intel_rapl patch support for Comet lake- S 6+2
(LP: #1847454)
- powercap/intel_rapl: add support for CometLake Mobile
- powercap/intel_rapl: add support for Cometlake desktop
* [CML-S62] Need enable intel_pmc_core driver patch for Comet lake- S 6+2
(LP: #1847450)
- SAUCE: platform/x86: intel_pmc_core: Add Comet Lake (CML) platform support
to intel_pmc_core driver
* update ENA driver for DIMLIB dynamic interrupt moderation (LP: #1853180)
- net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it
- net: ena: switch to dim algorithm for rx adaptive interrupt moderation
- net: ena: reimplement set/get_coalesce()
- net: ena: enable the interrupt_moderation in driver_supported_features
- net: ena: remove code duplication in
ena_com_update_nonadaptive_moderation_interval _*()
- net: ena: remove old adaptive interrupt moderation code from ena_netdev
- net: ena: remove ena_restore_ethtool_params() and relevant fields
- net: ena: remove all old adaptive rx interrupt moderation code from
ena_com
- net: ena: fix update of interrupt moderation register
- net: ena: fix retrieval of nonadaptive interrupt moderation intervals
- net: ena: fix incorrect update of intr_delay_resolution
- net: ena: Select DIMLIB for ENA_ETHERNET
- SAUCE: net: ena: fix issues in setting interrupt moderation params in
ethtool
- SAUCE: net: ena: fix too long default tx interrupt moderation interval
* CONFIG_ARCH_ROCKCHIP is not set in ubuntu 18.04 aarch64,arm64 (LP: #1825222)
- [Config] Enable ROCKCHIP support for arm64
* remount of multilower moved pivoted-root overlayfs root, results in I/O
errors on some modified files (LP: #1824407)
- SAUCE: ovl: fix lookup failure on multi lower squashfs
* backport DIMLIB (lib/dim/) to pre-5.2 kernels (LP: #1852637)
- linux/dim: Move logic to dim.h
- linux/dim: Remove "net" prefix from internal DIM members
- linux/dim: Rename externally exposed macros
- linux/dim: Rename net_dim_sample() to net_dim_update_sample()
- linux/dim: Rename externally used net_dim members
- [Config] updateconfigs for DIMLIB
- linux/dim: Move implementation to .c files
- linux/dim: Add completions count to dim_sample
- linux/dim: Implement RDMA adaptive moderation (DIM)
- linux/dim: Fix overflow in dim calculation
- lib/dim: Fix -Wunused-const-variable warnings
* The alsa hda driver is not loaded due to the missing of PCIID for Comet
Lake-S [8086:a3f0] (LP: #1852070)
- SAUCE: ALSA: hda: Add Cometlake-S PCI ID
* Can't adjust brightness on DELL UHD dGPU AIO (LP: #1813877)
- SAUCE: platform/x86: dell-uart-backlight: add missing status command
- SAUCE: platform/x86: dell-uart-backlight: load driver by scalar status
- SAUCE: platform/x86: dell-uart-backlight: add force parameter
- SAUCE: platform/x86: dell-uart-backlight: add quirk for old platforms
* Enable framebuffer fonts auto selection for HighDPI screen (LP: #1851623)
- fonts: Fix coding style
- fonts: Prefer a bigger font for high resolution screens
* Disable unreliable HPET on CFL-H system (LP: #1852216)
- SAUCE: x86/intel: Disable HPET on Intel Coffe Lake H platforms
* i40e: Setting VF MAC address causes General Protection Fault (LP: #1852432)
- i40e: Fix crash caused by stress setting of VF MAC addresses
* CVE-2019-19072
- tracing: Have error path in predicate_parse() free its allocated memory
* CVE-2019-2214
- binder: Set end of SG buffer area properly.
* Disco update: upstream stable patchset 2019-11-27 (LP: #1854229)
- i2c: mediatek: modify threshold passed to i2c_get_dma_safe_msg_buf()
- Revert "OPP: Protect dev_list with opp_table lock"
- net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size()
- mm/memory_hotplug: don't access uninitialized memmaps in
shrink_pgdat_span()
- mm/memory_hotplug: fix updating the node span
- arm64: uaccess: Ensure PAN is re-enabled after unhandled uaccess fault
- fbdev: Ditch fb_edid_add_monspecs
- bpf, x32: Fix bug for BPF_ALU64 | BPF_NEG
- bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_X shift by 0
- bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_K shift by 0
- bpf, x32: Fix bug for BPF_JMP | {BPF_JSGT, BPF_JSLE, BPF_JSLT, BPF_JSGE}
- bpf: btf: Fix a missing check bug
* Disco update: upstream stable patchset 2019-11-26 (LP: #1854094)
- KVM: x86: introduce is_pae_paging
- scsi: core: Handle drivers which set sg_tablesize to zero
- ax88172a: fix information leak on short answers
- ipmr: Fix skb headroom in ipmr_get_route().
- net: gemini: add missed free_netdev
- net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules
- slip: Fix memory leak in slip_open error path
- ALSA: usb-audio: Fix missing error check at mixer resolution test
- ALSA: usb-audio: not submit urb for stopped endpoint
- ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk()
- ALSA: usb-audio: Fix incorrect size check for processing/extension units
- Btrfs: fix log context list corruption after rename exchange operation
- Input: ff-memless - kill timer in destroy()
- Input: synaptics-rmi4 - fix video buffer size
- Input: synaptics-rmi4 - disable the relative position IRQ in the F12
driver
- Input: synaptics-rmi4 - do not consume more data than we have (F11, F12)
- Input: synaptics-rmi4 - clear IRQ enables for F54
- Input: synaptics-rmi4 - destroy F54 poller workqueue when removing
- IB/hfi1: Ensure full Gen3 speed in a Gen4 system
- IB/hfi1: Use a common pad buffer for 9B and 16B packets
- i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present
- ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable
- ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either
- net: ethernet: dwmac-sun8i: Use the correct function in exit path
- iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros
- mm: mempolicy: fix the wrong return value and potential pages leak of
mbind
- mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm()
- mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup()
- mmc: sdhci-of-at91: fix quirk2 overwrite
- dmaengine: at_xdmac: remove a stray bottom half unlock
- slcan: Fix memory leak in error path
- tcp: remove redundant new line from tcp_event_sk_skb
- dpaa2-eth: free already allocated channels on probe defer
- KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved
- drm/i915: update rawclk also on resume
- ntp/y2038: Remove incorrect time_t truncation
- mm/page_io.c: do not free shared swap slots
* Disco update: upstream stable patchset 2019-11-22 (LP: #1853659)
- bonding: fix state transition issue in link monitoring
- CDC-NCM: handle incomplete transfer of MTU
- ipv4: Fix table id reference in fib_sync_down_addr
- net: ethernet: octeon_mgmt: Account for second possible VLAN header
- net: fix data-race in neigh_event_send()
- net: qualcomm: rmnet: Fix potential UAF when unregistering
- net: usb: qmi_wwan: add support for DW5821e with eSIM support
- NFC: fdp: fix incorrect free object
- nfc: netlink: fix double device reference drop
- NFC: st21nfca: fix double free
- qede: fix NULL pointer deref in __qede_remove()
- net: mscc: ocelot: don't handle netdev events for other netdevs
- net: mscc: ocelot: fix NULL pointer on LAG slave removal
- ipv6: fixes rt6_probe() and fib6_nh->last_probe init
- net: hns: Fix the stray netpoll locks causing deadlock in NAPI path
- ALSA: timer: Fix incorrectly assigned timer instance
- ALSA: bebob: fix to detect configured source of sampling clock for
Focusrite
Saffire Pro i/o series
- ALSA: hda/ca0132 - Fix possible workqueue stall
- mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges
- mm, meminit: recalculate pcpu batch and high limits after init completes
- mm: thp: handle page cache THP correctly in PageTransCompoundMap
- mm, vmstat: hide /proc/pagetypeinfo from normal users
- dump_stack: avoid the livelock of the dump_lock
- tools: gpio: Use !building_out_of_srctree to determine srctree
- perf tools: Fix time sorting
- drm/radeon: fix si_enable_smc_cac() failed issue
- HID: wacom: generic: Treat serial number and related fields as unsigned
- soundwire: depend on ACPI
- soundwire: bus: set initial value to port_status
- arm64: Do not mask out PTE_RDONLY in pte_same()
- ceph: fix use-after-free in __ceph_remove_cap()
- ceph: add missing check in d_revalidate snapdir handling
- iio: adc: stm32-adc: fix stopping dma
- iio: imu: adis16480: make sure provided frequency is positive
- iio: srf04: fix wrong limitation in distance measuring
- ARM: sunxi: Fix CPU powerdown on A83T
- netfilter: nf_tables: Align nft_expr private data to 64-bit
- netfilter: ipset: Fix an error code in ip_set_sockfn_get()
- intel_th: pci: Add Comet Lake PCH support
- intel_th: pci: Add Jasper Lake PCH support
- x86/apic/32: Avoid bogus LDR warnings
- SMB3: Fix persistent handles reconnect
- can: usb_8dev: fix use-after-free on disconnect
- can: flexcan: disable completely the ECC mechanism
- can: c_can: c_can_poll(): only read status register after status IRQ
- can: peak_usb: fix a potential out-of-sync while decoding packets
- can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid
skb mem leak
- can: gs_usb: gs_can_open(): prevent memory leak
- can: dev: add missing of_node_put() after calling of_get_child_by_name()
- can: mcba_usb: fix use-after-free on disconnect
- can: peak_usb: fix slab info leak
- configfs: stash the data we need into configfs_buffer at open time
- configfs_register_group() shouldn't be (and isn't) called in rmdirable
parts
- configfs: new object reprsenting tree fragments
- configfs: provide exclusion between IO and removals
- configfs: fix a deadlock in configfs_symlink()
- ALSA: usb-audio: More validations of descriptor units
- ALSA: usb-audio: Simplify parse_audio_unit()
- ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects
- ALSA: usb-audio: Remove superfluous bLength checks
- ALSA: usb-audio: Clean up check_input_term()
- ALSA: usb-audio: Fix possible NULL dereference at
create_yamaha_midi_quirk()
- ALSA: usb-audio: remove some dead code
- ALSA: usb-audio: Fix copy&paste error in the validator
- usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path
- usbip: Implement SG support to vhci-hcd and stub driver
- PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30
- HID: google: add magnemite/masterball USB ids
- dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config
- dmaengine: sprd: Fix the possible memory leak issue
- HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring()
- RDMA/mlx5: Clear old rate limit when closing QP
- iw_cxgb4: fix ECN check on the passive accept
- RDMA/qedr: Fix reported firmware version
- net/mlx5e: TX, Fix consumer index of error cqe dump
- net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq
- scsi: qla2xxx: fixup incorrect usage of host_byte
- RDMA/uverbs: Prevent potential underflow
- net: openvswitch: free vport unless register_netdevice() succeeds
- scsi: lpfc: Honor module parameter lpfc_use_adisc
- scsi: qla2xxx: Initialized mailbox to prevent driver load failure
- netfilter: nf_flow_table: set timeout before insertion into hashes
- ipvs: don't ignore errors in case refcounting ip_vs module fails
- ipvs: move old_secure_tcp into struct netns_ipvs
- bonding: fix unexpected IFF_BONDING bit unset
- macsec: fix refcnt leak in module exit routine
- usb: fsl: Check memory resource before releasing it
- usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode.
- usb: gadget: composite: Fix possible double free memory bug
- usb: dwc3: pci: prevent memory leak in dwc3_pci_probe
- usb: gadget: configfs: fix concurrent issue between composite APIs
- usb: dwc3: remove the call trace of USBx_GFLADJ
- perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise
RIP validity
- perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family
(10h)
- perf/x86/uncore: Fix event group support
- USB: Skip endpoints with 0 maxpacket length
- USB: ldusb: use unsigned size format specifiers
- usbip: tools: Fix read_usb_vudc_device() error path handling
- RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case
- RDMA/hns: Prevent memory leaks of eq->buf_list
- scsi: qla2xxx: stop timer in shutdown path
- nvme-multipath: fix possible io hang after ctrl reconnect
- fjes: Handle workqueue allocation failure
- net: hisilicon: Fix "Trying to free already-free IRQ"
- net: mscc: ocelot: fix vlan_filtering when enslaving to bridge before link
is up
- net: mscc: ocelot: refuse to overwrite the port's native vlan
- iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41
- drm/amdgpu: If amdgpu_ib_schedule fails return back the error.
- drm/amd/display: Passive DP->HDMI dongle detection fix
- hv_netvsc: Fix error handling in netvsc_attach()
- usb: dwc3: gadget: fix race when disabling ep with cancelled xfers
- NFSv4: Don't allow a cached open with a revoked delegation
- net: ethernet: arc: add the missed clk_disable_unprepare
- igb: Fix constant media auto sense switching when no cable is connected
- e1000: fix memory leaks
- pinctrl: intel: Avoid potential glitches if pin is in GPIO mode
- ocfs2: protect extent tree in ocfs2_prepare_inode_for_write()
- pinctrl: cherryview: Fix irq_valid_mask calculation
- blkcg: make blkcg_print_stat() print stats only for online blkgs
- iio: imu: mpu6050: Add support for the ICM 20602 IMU
- iio: imu: inv_mpu6050: fix no data on MPU6050
- mm/filemap.c: don't initiate writeback if mapping has no dirty pages
- cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is
dead
- usbip: Fix free of unallocated memory in vhci tx
- netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets
- net: prevent load/store tearing on sk->sk_stamp
- iio: imu: mpu6050: Fix FIFO layout for ICM20602
- vsock/virtio: fix sock refcnt holding during the shutdown
- x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs
- x86/cpu: Add Tremont to the cpu vulnerability whitelist
- Documentation: Add ITLB_MULTIHIT documentation
- net/tls: fix sk_msg trim on fallback to copy mode
- net/tls: add a TX lock
- selftests/tls: add test for concurrent recv and send
- net/smc: fix ethernet interface refcounting
- perf map: Use zalloc for map_groups
- soundwire: depend on ACPI || OF
- ASoC: rsnd: dma: fix SSI9 4/5/6/7 busif dma address
- ceph: fix RCU case handling in ceph_d_revalidate()
- ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open
- ceph: don't allow copy_file_range when stripe_count != 1
- cpufreq: intel_pstate: Fix invalid EPB setting
- dmaengine: sprd: Fix the link-list pointer register configuration issue
- dmaengine: xilinx_dma: Fix 64-bit simple AXIDMA transfer
- net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow
- scsi: ufs-bsg: Wake the device before sending raw upiu commands
- bpf: Fix use after free in subprog's jited symbol removal
- bpf: Fix use after free in bpf_get_prog_name
- xsk: Fix registration of Rx-only sockets
- net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag
- virt_wifi: fix refcnt leak in module exit routine
- hwmon: (ina3221) Fix read timeout issue
- sched/topology: Don't try to build empty sched domains
- sched/topology: Allow sched_asym_cpucapacity to be disabled
- mt76: dma: fix buffer unmap with non-linear skbs
- drm/amd/display: do not synchronize "drr" displays
- SUNRPC: The RDMA back channel mustn't disappear while requests are
outstanding
- efi: libstub/arm: Account for firmware reserved memory at the base of RAM
- x86, efi: Never relocate kernel below lowest acceptable address
- arm64: cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo
- arm64: apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core
- arm64: Brahma-B53 is SSB and spectre v2 safe
- arm64: apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core
- arm64: errata: Update stale comment
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run
* Disco update: upstream stable patchset 2019-11-20 (LP: #1853382)
- regulator: of: fix suspend-min/max-voltage parsing
- ASoC: wm8994: Do not register inapplicable controls for WM1811
- arm64: dts: allwinner: a64: pine64-plus: Add PHY regulator delay
- arm64: dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay
- arm64: dts: Fix gpio to pinmux mapping
- regulator: ti-abb: Fix timeout in
ti_abb_wait_txdone/ti_abb_clear_all_txdone
- ASoC: rt5682: add NULL handler to set_jack function
- regulator: pfuze100-regulator: Variable "val" in
pfuze100_regulator_probe()
could be uninitialized
- ASoC: wm_adsp: Don't generate kcontrols without READ flags
- ASoc: rockchip: i2s: Fix RPM imbalance
- ARM: dts: logicpd-torpedo-som: Remove twl_keypad
- pinctrl: ns2: Fix off by one bugs in ns2_pinmux_enable()
- ARM: mm: fix alignment handler faults under memory pressure
- scsi: qla2xxx: fix a potential NULL pointer dereference
- scsi: scsi_dh_alua: handle RTPG sense code correctly during state
transitions
- scsi: sni_53c710: fix compilation error
- scsi: fix kconfig dependency warning related to 53C700_LE_ON_BE
- ARM: dts: imx7s: Correct GPT's ipg clock source
- perf c2c: Fix memory leak in build_cl_output()
- 8250-men-mcb: fix error checking when get_num_ports returns -ENODEV
- perf kmem: Fix memory leak in compact_gfp_flags()
- ARM: davinci: dm365: Fix McBSP dma_slave_map entry
- drm/amdgpu: fix potential VM faults
- scsi: target: core: Do not overwrite CDB byte 1
- tracing: Fix "gfp_t" format for synthetic events
- ARM: 8926/1: v7m: remove register save to stack before svc
- of: unittest: fix memory leak in unittest_data_add
- MIPS: bmips: mark exception vectors as char arrays
- irqchip/gic-v3-its: Use the exact ITSList for VMOVP
- i2c: stm32f7: fix first byte to send in slave mode
- i2c: stm32f7: fix a race in slave mode with arbitration loss irq
- i2c: stm32f7: remove warning when compiling with W=1
- cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs
- nbd: protect cmd->status with cmd->lock
- nbd: handle racing with error'ed out commands
- cxgb4: fix panic when attaching to ULD fail
- dccp: do not leak jiffies on the wire
- erspan: fix the tun_info options_len check for erspan
- inet: stop leaking jiffies on the wire
- net: annotate accesses to sk->sk_incoming_cpu
- net: annotate lockless accesses to sk->sk_napi_id
- net: dsa: bcm_sf2: Fix IMP setup for port different than 8
- net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum
- net: fix sk_page_frag() recursion from memory reclaim
- net: hisilicon: Fix ping latency when deal with high throughput
- net/mlx4_core: Dynamically set guaranteed amount of counters per VF
- netns: fix GFP flags in rtnl_net_notifyid()
- net: usb: lan78xx: Disable interrupts before calling generic_handle_irq()
- selftests: net: reuseport_dualstack: fix uninitalized parameter
- udp: fix data-race in udp_set_dev_scratch()
- vxlan: check tun_info options_len properly
- net: add skb_queue_empty_lockless()
- udp: use skb_queue_empty_lockless()
- net: use skb_queue_empty_lockless() in poll() handlers
- net: use skb_queue_empty_lockless() in busy poll contexts
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
- ipv4: fix route update on metric change.
- selftests: fib_tests: add more tests for metric update
- net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget
- r8169: fix wrong PHY ID issue with RTL8168dp
- net/mlx5e: Fix ethtool self test: link speed
- net: dsa: b53: Do not clear existing mirrored port mask
- net: bcmgenet: don't set phydev->link from MAC
- net: phy: bcm7xxx: define soft_reset for 40nm EPHY
- net: bcmgenet: reset 40nm EPHY on energy detect
- net: usb: lan78xx: Connect PHY before registering MAC
- net: dsa: fix switch tree list
- r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2
- net/flow_dissector: switch to siphash
- wireless: Skip directory when generating certificates
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI
table
- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9
- selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue
- selftests/powerpc: Fix compile error on tlbie_test due to newer gcc
- ASoC: pcm3168a: The codec does not support S32_LE
- arm64: dts: ti: k3-am65-main: Fix gic-its node unit-address
- usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending
driver fails
- regulator: da9062: fix suspend_enable/disable preparation
- ASoC: topology: Fix a signedness bug in soc_tplg_dapm_widget_create()
- pinctrl: intel: Allocate IRQ chip dynamic
- arm64: dts: rockchip: fix Rockpro64 RK808 interrupt line
- arm64: dts: rockchip: fix RockPro64 vdd-log regulator settings
- arm64: dts: rockchip: fix RockPro64 sdhci settings
- ARM: 8908/1: add __always_inline to functions called from
__get_user_check()
- arm64: dts: rockchip: fix RockPro64 sdmmc settings
- ARM: dts: vf610-zii-scu4-aib: Specify 'i2c-mux-idle-disconnect'
- arm64: dts: imx8mq: Use correct clock for usdhc's ipg clk
- drm/amdgpu: fix error handling in amdgpu_bo_list_create
- ARM: dts: bcm2837-rpi-cm3: Avoid leds-gpio probing issue
- ALSA: hda: Add Elkhart Lake PCI ID
- ALSA: hda: Add Tigerlake/Jasperlake PCI ID
- irqchip/sifive-plic: Skip contexts except supervisor in plic_init()
- net: rtnetlink: fix a typo fbd -> fdb
- net/mlx5: Fix flow counter list auto bits struct
- net: hns3: fix mis-counting IRQ vector numbers issue
- net: reorder 'struct net' fields to avoid false sharing
- net: netem: correct the parent's backlog when corrupted packet was dropped
- CIFS: Fix retry mid list corruption on reconnects
* Disco update: upstream stable patchset 2019-11-18 (LP: #1853067)
- dm snapshot: introduce account_start_copy() and account_end_copy()
- dm snapshot: rework COW throttling to fix deadlock
- Btrfs: fix inode cache block reserve leak on failure to allocate data
space
- btrfs: qgroup: Always free PREALLOC META reserve in
btrfs_delalloc_release_extents()
- f2fs: flush quota blocks after turnning it off
- drm/msm/dpu: handle failures while initializing displays
- bcache: fix input overflow to writeback_rate_minimum
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
- staging: mt7621-pinctrl: use pinconf-generic for 'dt_node_to_map' and
'dt_free_map'
- HID: Add ASUS T100CHI keyboard dock battery quirks
- HID: steam: fix boot loop with bluetooth firmware
- HID: steam: fix deadlock with input devices.
- usb: dwc3: gadget: early giveback if End Transfer already completed
- usb: dwc3: gadget: clear DWC3_EP_TRANSFER_STARTED on cmd complete
- ALSA: usb-audio: Cleanup DSD whitelist
- usb: handle warm-reset port requests on hub resume
- rtc: pcf8523: set xtal load capacitance from DT
- arm64: Add MIDR encoding for HiSilicon Taishan CPUs
- arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs
- mlxsw: spectrum: Set LAG port collector only when active
- scsi: lpfc: Correct localport timeout duration error
- CIFS: Respect SMB2 hdr preamble size in read responses
- cifs: add credits from unmatched responses/messages
- ALSA: hda/realtek - Apply ALC294 hp init also for S4 resume
- media: vimc: Remove unused but set variables
- ext4: disallow files with EXT4_JOURNAL_DATA_FL from EXT4_IOC_SWAP_BOOT
- net: dsa: mv88e6xxx: Release lock while requesting IRQ
- PCI/PME: Fix possible use-after-free on remove
- drm/amd/display: fix odm combine pipe reset
- power: supply: max14656: fix potential use-after-free
- iio: adc: meson_saradc: Fix memory allocation order
- iio: fix center temperature of bmc150-accel-core
- libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature
- perf tests: Avoid raising SEGV using an obvious NULL dereference
- perf map: Fix overlapped map handling
- perf script brstackinsn: Fix recovery from LBR/binary mismatch
- perf jevents: Fix period for Intel fixed counters
- perf tools: Propagate get_cpuid() error
- perf annotate: Propagate perf_env__arch() error
- perf annotate: Fix the signedness of failure returns
- perf annotate: Propagate the symbol__annotate() error return
- perf annotate: Return appropriate error code for allocation failures
- staging: rtl8188eu: fix null dereference when kzalloc fails
- RDMA/hfi1: Prevent memory leak in sdma_init
- RDMA/iwcm: Fix a lock inversion issue
- HID: hyperv: Use in-place iterator API in the channel callback
- nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request
- arm64: ftrace: Ensure synchronisation in PLT setup for Neoverse-N1
#1542419
- tty: serial: owl: Fix the link time qualifier of 'owl_uart_exit()'
- tty: n_hdlc: fix build on SPARC
- gpio: max77620: Use correct unit for debounce times
- fs: cifs: mute -Wunused-const-variable message
- serial: mctrl_gpio: Check for NULL pointer
- efi/cper: Fix endianness of PCIe class code
- efi/x86: Do not clean dummy variable in kexec path
- MIPS: include: Mark __cmpxchg as __always_inline
- x86/xen: Return from panic notifier
- ocfs2: clear zero in unaligned direct IO
- fs: ocfs2: fix possible null-pointer dereferences in
ocfs2_xa_prepare_entry()
- fs: ocfs2: fix a possible null-pointer dereference in
ocfs2_write_end_nolock()
- fs: ocfs2: fix a possible null-pointer dereference in
ocfs2_info_scan_inode_alloc()
- arm64: armv8_deprecated: Checking return value for memory allocation
- sched/vtime: Fix guest/system mis-accounting on task switch
- perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp
- drm/amdgpu: fix memory leak
- iio: imu: adis16400: release allocated memory on failure
- MIPS: include: Mark __xchg as __always_inline
- MIPS: fw: sni: Fix out of bounds init of o32 stack
- virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr
- nbd: fix possible sysfs duplicate warning
- NFSv4: Fix leak of clp->cl_acceptor string
- s390/uaccess: avoid (false positive) compiler warnings
- tracing: Initialize iter->seq after zeroing in tracing_read_pipe()
- ARM: 8914/1: NOMMU: Fix exc_ret for XIP
- nbd: verify socket is supported during setup
- USB: legousbtower: fix a signedness bug in tower_probe()
- thunderbolt: Use 32-bit writes when writing ring producer/consumer
- fuse: flush dirty data/metadata before non-truncate setattr
- fuse: truncate pending writes on O_TRUNC
- ALSA: bebob: Fix prototype of helper function to return negative value
- UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather
segments")
- USB: gadget: Reject endpoints with 0 maxpacket value
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
virt_boundary_mask to avoid SG overflows")
- USB: ldusb: fix ring-buffer locking
- USB: ldusb: fix control-message timeout
- usb: xhci: fix __le32/__le64 accessors in debugfs code
- USB: serial: whiteheat: fix potential slab corruption
- USB: serial: whiteheat: fix line-speed endianness
- scsi: target: cxgbit: Fix cxgbit_fw4_ack()
- HID: i2c-hid: add Trekstor Primebook C11B to descriptor override
- HID: Fix assumption that devices have inputs
- HID: fix error message in hid_open_report()
- nl80211: fix validation of mesh path nexthop
- s390/cmm: fix information leak in cmm_timeout_handler()
- s390/idle: fix cpu idle time calculation
- arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default
- dmaengine: qcom: bam_dma: Fix resource leak
- dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle
- drm/amdgpu/powerplay/vega10: allow undervolting in p7
- NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid()
- batman-adv: Avoid free/alloc race when handling OGM buffer
- llc: fix sk_buff leak in llc_sap_state_process()
- llc: fix sk_buff leak in llc_conn_service()
- rxrpc: Fix call ref leak
- rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
- rxrpc: Fix trace-after-put looking at the put peer record
- NFC: pn533: fix use-after-free and memleaks
- bonding: fix potential NULL deref in bond_update_slave_arr
- net: usb: sr9800: fix uninitialized local variable
- sch_netem: fix rcu splat in netem_enqueue()
- ALSA: timer: Simplify error path in snd_timer_open()
- ALSA: timer: Fix mutex deadlock at releasing card
- ALSA: usb-audio: DSD auto-detection for Playback Designs
- ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel
- ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface
- powerpc/powernv: Fix CPU idle to be called with IRQs disabled
- Revert "ALSA: hda: Flush interrupts on disabling"
- perf annotate: Fix arch specific ->init() failure errors
- kselftest: exclude failed TARGETS from runlist
- tty: serial: rda: Fix the link time qualifier of 'rda_uart_exit()'
- RDMA/cm: Fix memory leak in cm_add/remove_one
- sched/fair: Scale bandwidth quota and period without losing quota/period
ratio precision
- perf/core: Rework memory accounting in perf_mmap()
- perf/core: Fix corner case in perf_rotate_context()
- iio: imu: st_lsm6dsx: fix waitime for st_lsm6dsx i2c controller
- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
- um-ubd: Entrust re-queue to the upper layers
- ARC: perf: Accommodate big-endian CPU
- arm64: cpufeature: Enable Qualcomm Falkor/Kryo errata 1003
- virtio_ring: fix stalls for packed rings
- rtlwifi: rtl_pci: Fix problem of too small skb->len
- dmaengine: imx-sdma: fix size check for sdma script_number
- sched/fair: Fix low cpu usage with high throttling by removing expiration
of
cpu-local slices
- sched/fair: Fix -Wunused-but-set-variable warnings
* Dell XPS 13 9350/9360 headphone audio hiss (LP: #1654448) // [XPS 13 9360,
Realtek ALC3246, Black Headphone Out, Front] High noise floor
(LP: #1845810) // Disco update: upstream stable patchset 2019-11-18
(LP: #1853067)
- ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360
* Disco update: upstream stable patchset 2019-11-13 (LP: #1852459)
- nvme-pci: Fix a race in controller removal
- scsi: ufs: skip shutdown if hba is not powered
- scsi: megaraid: disable device when probe failed after enabled device
- scsi: qla2xxx: Fix unbound sleep in fcport delete path.
- ARM: OMAP2+: Fix missing reset done flag for am3 and am43
- ARM: OMAP2+: Fix warnings with broken omap2_set_init_voltage()
- ieee802154: ca8210: prevent memory leak
- ARM: dts: am4372: Set memory bandwidth limit for DISPC
- net: dsa: qca8k: Use up to 7 ports for all operations
- MIPS: dts: ar9331: fix interrupt-controller size
- xen/efi: Set nonblocking callbacks
- nl80211: fix null pointer dereference
- mac80211: fix txq null pointer dereference
- netfilter: nft_connlimit: disable bh on garbage collection
- net: dsa: rtl8366rb: add missing of_node_put after calling
of_get_child_by_name
- mips: Loongson: Fix the link time qualifier of 'serial_exit()'
- net: hisilicon: Fix usage of uninitialized variable in function
mdio_sc_cfg_reg_write()
- lib: textsearch: fix escapes in example code
- namespace: fix namespace.pl script to support relative paths
- libata/ahci: Fix PCS quirk application
- Revert "drm/radeon: Fix EEH during kexec"
- ocfs2: fix panic due to ocfs2_wq is null
- ipv4: fix race condition between route lookup and invalidation
- ipv4: Return -ENETUNREACH if we can't create route but saddr is valid
- net: avoid potential infinite loop in tc_ctl_action()
- net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3
- net: bcmgenet: Set phydev->dev_flags only for internal PHYs
- net: i82596: fix dma_alloc_attr for sni_82596
- net/ibmvnic: Fix EOI when running in XIVE mode.
- net: ipv6: fix listify ip6_rcv_finish in case of forwarding
- net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow
- sctp: change sctp_prot .no_autobind with true
- USB: legousbtower: fix memleak on disconnect
- ALSA: hda/realtek - Add support for ALC711
- ALSA: hda/realtek - Enable headset mic on Asus MJ401TA
- ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers
- ALSA: hda - Force runtime PM on Nvidia HDMI codecs
- usb: udc: lpc32xx: fix bad bit shift operation
- USB: serial: ti_usb_3410_5052: fix port-close races
- USB: ldusb: fix memleak on disconnect
- USB: usblp: fix use-after-free on disconnect
- USB: ldusb: fix read info leaks
- MIPS: tlbex: Fix build_restore_pagemask KScratch restore
- staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS
- scsi: zfcp: fix reaction on bit error threshold notification
- scsi: sd: Ignore a failure to sync cache due to lack of authorization
- scsi: core: save/restore command resid for error handling
- scsi: core: try to get module before removing device
- scsi: ch: Make it possible to open a ch device multiple times again
- Input: da9063 - fix capability and drop KEY_SLEEP
- Input: synaptics-rmi4 - avoid processing unknown IRQs
- ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting
- ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit()
- cfg80211: wext: avoid copying malformed SSIDs
- mac80211: Reject malformed SSID elements
- drm/ttm: Restore ttm prefaulting
- drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1
- drivers/base/memory.c: don't access uninitialized memmaps in
soft_offline_page_store()
- fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c
- mmc: cqhci: Commit descriptors before setting the doorbell
- mm/memory-failure.c: don't access uninitialized memmaps in
memory_failure()
- mm/slub: fix a deadlock in show_slab_objects()
- mm/page_owner: don't access uninitialized memmaps when reading
/proc/pagetypeinfo
- hugetlbfs: don't access uninitialized memmaps in
pfn_range_valid_gigantic()
- mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if
mmaped
more than once
- xtensa: drop EXPORT_SYMBOL for outs*/ins*
- parisc: Fix vmap memory leak in ioremap()/iounmap()
- EDAC/ghes: Fix Use after free in ghes_edac remove path
- arm64: Enable workaround for Cavium TX2 erratum 219 when running SMT
- CIFS: avoid using MID 0xFFFF
- CIFS: Fix use after free of file info structures
- perf/aux: Fix AUX output stopping
- tracing: Fix race in perf_trace_buf initialization
- dm cache: fix bugs when a GFP_NOWAIT allocation fails
- x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area
- x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu
- pinctrl: cherryview: restore Strago DMI workaround for all versions
- pinctrl: armada-37xx: fix control of pins 32 and up
- pinctrl: armada-37xx: swap polarity on LED group
- btrfs: block-group: Fix a memory leak due to missing
btrfs_put_block_group()
- Btrfs: add missing extents release on file extent cluster relocation error
- Btrfs: check for the full sync flag while holding the inode lock during
fsync
- btrfs: tracepoints: Fix bad entry members of qgroup events
- memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
- cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown
- xen/netback: fix error path of xenvif_connect_data()
- PCI: PM: Fix pci_power_up()
- blk-rq-qos: fix first node deletion of rq_qos_del()
- RDMA/cxgb4: Do not dma memory off of the stack
- drm: Clear the fence pointer when writeback job signaled
- clk: ti: dra7: Fix mcasp8 clock bits
- ARM: dts: Fix wrong clocks for dra7 mcasp
- scsi: qla2xxx: Fix N2N link reset
- scsi: qla2xxx: Fix N2N link up fail
- ARM: dts: Fix gpio0 flags for am335x-icev2
- ARM: OMAP2+: Add missing LCDC midlemode for am335x
- nvme-tcp: fix wrong stop condition in io_work
- nvme-pci: Save PCI state before putting drive into deepest state
- nvme: fix an error code in nvme_init_subsystem()
- nvme-rdma: Fix max_hw_sectors calculation
- Added QUIRKs for ADATA XPG SX8200 Pro 512GB
- nvme-rdma: fix possible use-after-free in connect timeout
- blk-mq: honor IO scheduler for multiqueue devices
- loop: change queue block size to match when using DIO
- drm/amdgpu: fix multiple memory leaks in acp_hw_init
- drm/amd/display: memory leak
- s390/mm: fix -Wunused-but-set-variable warnings
- net: phy: fix write to mii-ctrl1000 register
- Convert filldir[64]() from __put_user() to unsafe_put_user()
- elf: don't use MAP_FIXED_NOREPLACE for elf executable mappings
- Make filldir[64]() verify the directory entry filename is valid
- uaccess: implement a proper unsafe_copy_to_user() and switch filldir over
to
it
- filldir[64]: remove WARN_ON_ONCE() for bad directory entries
- rxrpc: Fix possible NULL pointer access in ICMP handling
- sched: etf: Fix ordering of packets with same txtime
- net: aquantia: correctly handle macvlan and multicast coexistence
- net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs
- net: phy: micrel: Update KSZ87xx PHY name
- netdevsim: Fix error handling in nsim_fib_init and nsim_fib_exit
- rxrpc: use rcu protection while reading sk->sk_user_data
- binder: Don't modify VMA bounds in ->mmap handler
- drm/amdgpu/vce: fix allocation size in enc ring test
- drm/amdgpu/vcn: fix allocation size in enc ring test
- drm/amdgpu/uvd6: fix allocation size in enc ring test (v2)
- drm/amdgpu/uvd7: fix allocation size in enc ring test (v2)
- mmc: mxs: fix flags passed to dmaengine_prep_slave_sg
- mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C
- mm/memunmap: don't access uninitialized memmap in memunmap_pages()
- zram: fix race between backing_dev_show and backing_dev_store
- s390/zcrypt: fix memleak at release
- fs/dax: Fix pmd vs pte conflict detection
- x86/hyperv: Make vapic support x2apic mode
- btrfs: tracepoints: Fix wrong parameter order for qgroup events
- ceph: just skip unrecognized info in ceph_reply_info_extra
- opp: of: drop incorrect lockdep_assert_held()
* Colour banding in Lenovo G50-80 laptop display (i915) (LP: #1819968) //
Disco update: upstream stable patchset 2019-11-13 (LP: #1852459)
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
-- Khalid Elmously <khalid.elmou...@canonical.com> Mon, 02 Dec 2019
14:25:23 -0500
** Changed in: linux (Ubuntu Disco)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-2214
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1852432
Title:
i40e: Setting VF MAC address causes General Protection Fault
Status in linux package in Ubuntu:
Confirmed
Status in linux source package in Bionic:
Fix Released
Status in linux source package in Disco:
Fix Released
Status in linux source package in Eoan:
Fix Released
Status in linux source package in Focal:
Confirmed
Bug description:
[Impact]
* Creating SR-IOV enabled VMs in Openstack can sometimes trigger the GPF and
leave system unusable
[Test Case]
* Continuously spin up VFs and set MAC address with e.g. ifconfig
[Fix]
* The fix updates the VSI pointer passed down to i40e_set_vf_mac function()
if the adapter is still in reset, preventing the GPF.
[Regression Potential]
* Regression potential should be low, as we're now updating the VSI using
the ID stored in the VF pointer
* Regressions could arise from issues in VF creation or reset, as that would
corrupt the new VSI pointer
* Patch was validated and tested in a production environment
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1852432/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
